last executing test programs: 4.157916455s ago: executing program 1 (id=543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}], 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0xc, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xae9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r9}) sendto$packet(r8, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r9, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 4.028152625s ago: executing program 1 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) 3.385621267s ago: executing program 0 (id=557): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c1", 0x20}], 0x1}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008"], 0xe0}}, 0x0) 3.238526979s ago: executing program 0 (id=558): set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0xc33, 0x1}, {0xfffffff9, 0xbea}]}, 0x14, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x28) write$qrtrtun(r4, &(0x7f0000000900)="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", 0x233) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) 2.867077299s ago: executing program 0 (id=559): set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0xc33, 0x1}, {0xfffffff9, 0xbea}]}, 0x14, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x28) write$qrtrtun(r4, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf40", 0x233) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) 2.866373599s ago: executing program 1 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c0001400000000000000004140000001100010000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) 2.716548241s ago: executing program 1 (id=564): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d6"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x1832b, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.907903436s ago: executing program 2 (id=567): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r4, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102387, 0x19033}], 0x1, 0x3fd, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11], 0x40}}, 0x44) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000680)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e23, 0x2, 0x4e21, 0x80, 0xa, 0x20, 0x0, 0x0, r11, r12}, {0x1, 0x5, 0x0, 0xb, 0x9, 0x10001, 0x7, 0x3}, {0x5, 0x0, 0xe6c9, 0x6}, 0xcbb5, 0x6e6bb0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6=@empty, 0x3501, 0x4, 0x3, 0x7, 0x2, 0x6, 0xff}}, 0xe8) 1.848821651s ago: executing program 0 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r7, 0x11b, 0x9, 0x0, 0x0) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.822493233s ago: executing program 1 (id=569): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r4, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x120, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9}, {0xc}, {0x0, 0x5}, {0x2, 0x4}, {0x10, 0x3}, {0xc, 0x5}, {0x81, 0x4}, {0xf, 0x4}, {0x3, 0x7}, {0x9e, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x2}, {0x0, 0x1}, {0x6, 0x6}], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x5}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.770922947s ago: executing program 4 (id=570): set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0xc33, 0x1}, {0xfffffff9, 0xbea}]}, 0x14, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x28) write$qrtrtun(r4, &(0x7f0000000900)="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", 0x233) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) 1.691751184s ago: executing program 0 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) 1.620711619s ago: executing program 4 (id=572): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800060000000000181200"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x80200) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) truncate(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x5ada41) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000000000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc3b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b01040300050601000209058103ff030604050904010000020d00000904010102020d0000090582020004f10209090503022000260d07"], 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, r10, 0x400}}, 0x48) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r12 = syz_open_pts(r11, 0x0) ioctl$TCFLSH(r12, 0x80045440, 0x2) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r13, 0xffffffffffffffff, 0x100000000000000) 1.593725391s ago: executing program 2 (id=573): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1.396028977s ago: executing program 3 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x3, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x5, 0x3, 0x8000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x12000000, 0x0, 0x0) 1.174193845s ago: executing program 2 (id=576): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x791200, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000200)=0xf4240) 1.044088786s ago: executing program 2 (id=577): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r8, r7, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) 957.491303ms ago: executing program 1 (id=578): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r4, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x124, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9}, {0xc}, {0x0, 0x5}, {0x2, 0x4}, {0x10, 0x3}, {0xc, 0x5}, {0x81, 0x4}, {0xf, 0x4}, {0x3, 0x7}, {0x9e, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x2}, {0x0, 0x1}, {0x6, 0x6}], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x5}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9}, 0x0) 668.573616ms ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r4, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r5, 0xffffffffffffffff, 0x1e, 0x14, r6, @void, @value, @void, @void, r7}, 0x20) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r8, 0x0, 0x0, 0x1001f0) fallocate(r8, 0x3, 0xf00, 0x10000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304000000000000d89596000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b000300000005002c"], 0x44}, 0x1, 0xffffffea}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r8, r1, 0x34, 0x2a, r1, @void, @void, @void, @value=r10, r7}, 0x20) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xa0f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r11, 0x3}, &(0x7f0000000200)=0x8) clock_adjtime(0x0, &(0x7f0000000600)={0x19b1, 0xc1bdf10000000003, 0xffffffff, 0x2, 0x0, 0x2, 0x80000001, 0x204, 0x7, 0xfffffffffffffff7, 0x80, 0x0, 0x0, 0x2, 0x0, 0x393, 0x0, 0xffffffffffffffff, 0x800000000000009, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xff}) 627.979819ms ago: executing program 4 (id=580): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) shutdown(r1, 0x0) close(0x3) r2 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@local, @in=@remote, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x200000002, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x200000000000000, 0x6}, 0x4, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x2, @in=@empty, 0x3500, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x53f}}, 0xe8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='fsi_master_gpio_cmd_abs_addr\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r3, 0x5bc79000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x1d6}, 0x18) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000000)=0x84) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80), 0x2c, 0x52c, &(0x7f0000000640)="$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") creat(0x0, 0x9c) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r9, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000400)={r8, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x2, 0x9}, &(0x7f00000000c0)=0x90) 500.634469ms ago: executing program 3 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 493.36747ms ago: executing program 3 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000039c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) 404.229627ms ago: executing program 3 (id=583): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 345.676042ms ago: executing program 4 (id=584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {0x0}], 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0xc, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xae9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r9}) sendto$packet(r8, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r9, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 334.479643ms ago: executing program 3 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='stack\x00') pread64(r3, 0x0, 0x0, 0x41e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r6}) sendto$packet(r5, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r6, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 246.85726ms ago: executing program 3 (id=586): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b180000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xe}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) eventfd(0x0) 93.148432ms ago: executing program 2 (id=587): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c0001400000000000000004140000001100010000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) 70.421824ms ago: executing program 2 (id=588): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 53.276505ms ago: executing program 4 (id=589): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 0s ago: executing program 4 (id=590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r0, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 25.725050][ T29] audit: type=1400 audit(1756244352.094:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.725874][ T3292] cgroup: Unknown subsys name 'net' [ 25.747759][ T29] audit: type=1400 audit(1756244352.094:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.775221][ T29] audit: type=1400 audit(1756244352.124:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.952146][ T3292] cgroup: Unknown subsys name 'cpuset' [ 25.958266][ T3292] cgroup: Unknown subsys name 'rlimit' [ 26.067690][ T29] audit: type=1400 audit(1756244352.434:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.093234][ T29] audit: type=1400 audit(1756244352.434:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.099118][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.113749][ T29] audit: type=1400 audit(1756244352.434:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.142719][ T29] audit: type=1400 audit(1756244352.434:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.162956][ T29] audit: type=1400 audit(1756244352.444:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.187756][ T29] audit: type=1400 audit(1756244352.444:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.211278][ T29] audit: type=1400 audit(1756244352.494:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.240586][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.324065][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.351253][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.407388][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.427648][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.451223][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.458379][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.465717][ T3302] bridge_slave_0: entered allmulticast mode [ 28.472378][ T3302] bridge_slave_0: entered promiscuous mode [ 28.483402][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.499563][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.506751][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.513967][ T3302] bridge_slave_1: entered allmulticast mode [ 28.520334][ T3302] bridge_slave_1: entered promiscuous mode [ 28.565730][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.575023][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.582109][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.589308][ T3306] bridge_slave_0: entered allmulticast mode [ 28.596008][ T3306] bridge_slave_0: entered promiscuous mode [ 28.611245][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.624642][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.631880][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.639483][ T3306] bridge_slave_1: entered allmulticast mode [ 28.646215][ T3306] bridge_slave_1: entered promiscuous mode [ 28.676014][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.683166][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.690402][ T3304] bridge_slave_0: entered allmulticast mode [ 28.696786][ T3304] bridge_slave_0: entered promiscuous mode [ 28.708323][ T3302] team0: Port device team_slave_0 added [ 28.715204][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.725049][ T3302] team0: Port device team_slave_1 added [ 28.735302][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.742397][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.749471][ T3304] bridge_slave_1: entered allmulticast mode [ 28.755717][ T3304] bridge_slave_1: entered promiscuous mode [ 28.771835][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.794207][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.801273][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.808694][ T3301] bridge_slave_0: entered allmulticast mode [ 28.815005][ T3301] bridge_slave_0: entered promiscuous mode [ 28.826168][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.833189][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.859103][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.874901][ T3306] team0: Port device team_slave_0 added [ 28.880749][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.887838][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.895104][ T3309] bridge_slave_0: entered allmulticast mode [ 28.901369][ T3309] bridge_slave_0: entered promiscuous mode [ 28.913359][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.922483][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.929589][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.936766][ T3301] bridge_slave_1: entered allmulticast mode [ 28.943223][ T3301] bridge_slave_1: entered promiscuous mode [ 28.949382][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.956366][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.982250][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.996157][ T3306] team0: Port device team_slave_1 added [ 29.001994][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.009229][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.016449][ T3309] bridge_slave_1: entered allmulticast mode [ 29.022869][ T3309] bridge_slave_1: entered promiscuous mode [ 29.029970][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.073369][ T3304] team0: Port device team_slave_0 added [ 29.080078][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.089949][ T3304] team0: Port device team_slave_1 added [ 29.096481][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.103476][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.129510][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.141455][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.150857][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.157881][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.183789][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.195429][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.219109][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.246081][ T3302] hsr_slave_0: entered promiscuous mode [ 29.252256][ T3302] hsr_slave_1: entered promiscuous mode [ 29.264208][ T3301] team0: Port device team_slave_0 added [ 29.270152][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.277171][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.303207][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.321236][ T3309] team0: Port device team_slave_0 added [ 29.327521][ T3301] team0: Port device team_slave_1 added [ 29.334415][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.341393][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.367334][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.386729][ T3309] team0: Port device team_slave_1 added [ 29.426284][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.433265][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.459192][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.470656][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.477643][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.503597][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.516323][ T3306] hsr_slave_0: entered promiscuous mode [ 29.522345][ T3306] hsr_slave_1: entered promiscuous mode [ 29.528078][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 29.533839][ T3306] Cannot create hsr debugfs directory [ 29.547426][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.554423][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.580364][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.591846][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.598868][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.624763][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.665561][ T3304] hsr_slave_0: entered promiscuous mode [ 29.671466][ T3304] hsr_slave_1: entered promiscuous mode [ 29.677369][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 29.683144][ T3304] Cannot create hsr debugfs directory [ 29.719967][ T3301] hsr_slave_0: entered promiscuous mode [ 29.725963][ T3301] hsr_slave_1: entered promiscuous mode [ 29.732011][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 29.737819][ T3301] Cannot create hsr debugfs directory [ 29.756175][ T3309] hsr_slave_0: entered promiscuous mode [ 29.762238][ T3309] hsr_slave_1: entered promiscuous mode [ 29.768036][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 29.773799][ T3309] Cannot create hsr debugfs directory [ 29.911354][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.919637][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.928030][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.936587][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.956719][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.967619][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.976879][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.986836][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.015512][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.026827][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.035451][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.048325][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.079941][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.109597][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.116723][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.125579][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.136397][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.149146][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.157268][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.164384][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.173035][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.180076][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.189526][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.198071][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.216784][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.223925][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.252363][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.259418][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.274091][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.288749][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.301481][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.323555][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.339093][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.353752][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.371230][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.398035][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.405173][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.417749][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.446963][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.454062][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.472062][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.498919][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.514723][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.531682][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.576416][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.604357][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.611432][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.621594][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.632870][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.640057][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.655059][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.662188][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.671072][ T3306] veth0_vlan: entered promiscuous mode [ 30.682567][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689640][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.707999][ T3302] veth0_vlan: entered promiscuous mode [ 30.718227][ T3306] veth1_vlan: entered promiscuous mode [ 30.728515][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.755644][ T3302] veth1_vlan: entered promiscuous mode [ 30.787549][ T3302] veth0_macvtap: entered promiscuous mode [ 30.804573][ T3306] veth0_macvtap: entered promiscuous mode [ 30.816063][ T3302] veth1_macvtap: entered promiscuous mode [ 30.833647][ T3306] veth1_macvtap: entered promiscuous mode [ 30.853180][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.875810][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.884535][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.899053][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.907338][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.915627][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.930384][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.939762][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.956991][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.966114][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.975282][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.991459][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.991472][ T29] audit: type=1400 audit(1756244357.354:81): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.Udc9Zr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.001877][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.032018][ T29] audit: type=1400 audit(1756244357.364:82): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.032261][ T3309] veth0_vlan: entered promiscuous mode [ 31.054025][ T29] audit: type=1400 audit(1756244357.364:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.Udc9Zr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.064559][ T3309] veth1_vlan: entered promiscuous mode [ 31.084744][ T29] audit: type=1400 audit(1756244357.364:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.097204][ T3309] veth0_macvtap: entered promiscuous mode [ 31.112056][ T29] audit: type=1400 audit(1756244357.364:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.Udc9Zr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.122067][ T3309] veth1_macvtap: entered promiscuous mode [ 31.144601][ T29] audit: type=1400 audit(1756244357.364:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.Udc9Zr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.177542][ T29] audit: type=1400 audit(1756244357.364:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.199109][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.205849][ T29] audit: type=1400 audit(1756244357.424:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.217873][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.236533][ T29] audit: type=1400 audit(1756244357.424:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.275474][ T29] audit: type=1400 audit(1756244357.644:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.291254][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.307130][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.339140][ T3301] veth0_vlan: entered promiscuous mode [ 31.348661][ T3301] veth1_vlan: entered promiscuous mode [ 31.357697][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.385973][ T3474] loop4: detected capacity change from 0 to 512 [ 31.395330][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.410598][ T3301] veth0_macvtap: entered promiscuous mode [ 31.420481][ T3301] veth1_macvtap: entered promiscuous mode [ 31.432501][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.442645][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.554584][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.669969][ T3304] veth0_vlan: entered promiscuous mode [ 31.750607][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.762375][ T3304] veth1_vlan: entered promiscuous mode [ 31.786002][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.802076][ T3304] veth0_macvtap: entered promiscuous mode [ 31.820082][ T3304] veth1_macvtap: entered promiscuous mode [ 31.842976][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.852043][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.926726][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936051][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.952900][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.968336][ T3489] 9pnet_fd: Insufficient options for proto=fd [ 31.977364][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.302394][ T3496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.335068][ T3496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.363873][ T3499] loop0: detected capacity change from 0 to 128 [ 32.438057][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.462682][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471462][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.564096][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648225][ T3502] syz.0.11 (3502) used greatest stack depth: 10960 bytes left [ 32.846229][ T3510] loop1: detected capacity change from 0 to 8192 [ 32.856980][ T3510] ======================================================= [ 32.856980][ T3510] WARNING: The mand mount option has been deprecated and [ 32.856980][ T3510] and is ignored by this kernel. Remove the mand [ 32.856980][ T3510] option from the mount to silence this warning. [ 32.856980][ T3510] ======================================================= [ 33.140008][ T3536] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 33.240251][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 33.292112][ T3537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3537 comm=syz.1.12 [ 33.307684][ T3540] loop3: detected capacity change from 0 to 1024 [ 33.322154][ T3540] EXT4-fs: Ignoring removed bh option [ 33.358074][ T3540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.531284][ T3563] loop2: detected capacity change from 0 to 1024 [ 33.553236][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.560533][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.582507][ T3563] EXT4-fs: inline encryption not supported [ 33.588517][ T3563] EXT4-fs: Ignoring removed bh option [ 33.627242][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.651157][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.700420][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.722313][ T3571] loop0: detected capacity change from 0 to 1024 [ 33.730297][ T3571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.757760][ T3572] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 33.772619][ T3572] EXT4-fs (loop2): Remounting filesystem read-only [ 33.783969][ T3571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.820020][ T125] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.822394][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.839934][ T125] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.846796][ T3540] syz.3.21 (3540) used greatest stack depth: 10752 bytes left [ 33.849002][ T125] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.905568][ T125] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.930452][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.975452][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.004546][ T3587] netlink: 128 bytes leftover after parsing attributes in process `syz.0.35'. [ 34.084040][ T3581] loop1: detected capacity change from 0 to 8192 [ 34.203041][ T3605] Illegal XDP return value 2279184369 on prog (id 7) dev syz_tun, expect packet loss! [ 34.302285][ T3611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3611 comm=syz.1.30 [ 34.330806][ T3609] loop2: detected capacity change from 0 to 8192 [ 34.456196][ T3619] new mount options do not match the existing superblock, will be ignored [ 34.466568][ T3619] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 34.519504][ T3622] loop4: detected capacity change from 0 to 512 [ 34.579090][ T3623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3623 comm=syz.2.41 [ 34.604120][ T3622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.618958][ T3622] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.641379][ T3622] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.44: bg 0: block 145: padding at end of block bitmap is not set [ 34.656007][ T3622] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 34.695380][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.895899][ T3636] loop0: detected capacity change from 0 to 1024 [ 34.922284][ T3636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.963573][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.997116][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.013341][ T3637] loop3: detected capacity change from 0 to 8192 [ 35.260367][ T3658] loop0: detected capacity change from 0 to 1024 [ 35.286195][ T3658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.359164][ T3671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3671 comm=syz.3.46 [ 35.375106][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.621219][ T3634] syz.4.45 (3634) used greatest stack depth: 10456 bytes left [ 35.932845][ T3695] loop4: detected capacity change from 0 to 512 [ 35.956108][ T3695] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.63: bg 0: block 248: padding at end of block bitmap is not set [ 35.971006][ T3701] loop3: detected capacity change from 0 to 128 [ 35.988584][ T3695] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.63: Failed to acquire dquot type 1 [ 36.004438][ T3703] loop2: detected capacity change from 0 to 1024 [ 36.011494][ T3703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.019522][ T3695] EXT4-fs (loop4): 1 truncate cleaned up [ 36.025893][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.042089][ T3695] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.060519][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 36.060532][ T29] audit: type=1400 audit(1756244362.424:209): avc: denied { create } for pid=3692 comm="syz.4.63" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.101816][ T3706] new mount options do not match the existing superblock, will be ignored [ 36.111110][ T3695] syz.4.63 (3695) used greatest stack depth: 9200 bytes left [ 36.111313][ T3703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.130436][ T3706] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 36.138819][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.152437][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 36.161588][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 36.283412][ T3714] loop0: detected capacity change from 0 to 1024 [ 36.291185][ T3714] EXT4-fs: inline encryption not supported [ 36.297754][ T3714] EXT4-fs: Ignoring removed bh option [ 36.311100][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.348360][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.527291][ T3721] Zero length message leads to an empty skb [ 36.538724][ T3721] loop4: detected capacity change from 0 to 1024 [ 36.547652][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.563053][ T3721] EXT4-fs: inline encryption not supported [ 36.596985][ T3721] EXT4-fs: Ignoring removed bh option [ 36.634645][ T3721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.653287][ T3735] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 36.670043][ T3721] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 36.686341][ T3721] EXT4-fs (loop4): Remounting filesystem read-only [ 36.687307][ T3735] team0: Port device netdevsim1 added [ 36.735806][ T3741] loop1: detected capacity change from 0 to 128 [ 36.746977][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.767078][ T29] audit: type=1326 audit(1756244363.134:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.790406][ T29] audit: type=1326 audit(1756244363.134:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.846401][ T29] audit: type=1326 audit(1756244363.134:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.869800][ T29] audit: type=1326 audit(1756244363.134:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.893519][ T29] audit: type=1326 audit(1756244363.134:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.916730][ T29] audit: type=1326 audit(1756244363.134:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.939975][ T29] audit: type=1326 audit(1756244363.134:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 36.963526][ T29] audit: type=1326 audit(1756244363.134:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 37.006984][ T3753] loop3: detected capacity change from 0 to 512 [ 37.026854][ T3751] loop0: detected capacity change from 0 to 1024 [ 37.034403][ T3751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.049084][ T3753] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.83: casefold flag without casefold feature [ 37.083591][ T3753] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.83: couldn't read orphan inode 15 (err -117) [ 37.124059][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.138253][ T3751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.185462][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.199690][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.220027][ T3762] loop3: detected capacity change from 0 to 1024 [ 37.227372][ T3762] EXT4-fs: inline encryption not supported [ 37.236634][ T3762] EXT4-fs: Ignoring removed bh option [ 37.266146][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.321902][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.374533][ T3776] netlink: 48 bytes leftover after parsing attributes in process `syz.3.89'. [ 37.507978][ T3784] loop3: detected capacity change from 0 to 1024 [ 37.517667][ T3784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.752196][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.943511][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.955856][ T3802] loop1: detected capacity change from 0 to 8192 [ 38.212672][ T3813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3813 comm=syz.1.95 [ 38.978856][ T3834] new mount options do not match the existing superblock, will be ignored [ 39.011418][ T3834] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 39.069389][ T3846] loop2: detected capacity change from 0 to 1024 [ 39.077607][ T3846] EXT4-fs: inline encryption not supported [ 39.183573][ T3846] EXT4-fs: Ignoring removed bh option [ 39.453515][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.476893][ T3846] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 39.494757][ T3846] EXT4-fs (loop2): Remounting filesystem read-only [ 39.651441][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.889137][ T3866] loop2: detected capacity change from 0 to 1024 [ 39.896067][ T3866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.938215][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.981259][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.024045][ T3872] loop3: detected capacity change from 0 to 8192 [ 40.257512][ T3885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3885 comm=syz.3.122 [ 40.323657][ T3890] loop1: detected capacity change from 0 to 1024 [ 40.341964][ T3890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.424633][ T3890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.484583][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.523091][ T3900] netlink: 128 bytes leftover after parsing attributes in process `syz.0.132'. [ 41.237582][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 41.237595][ T29] audit: type=1400 audit(1756244367.604:385): avc: denied { bind } for pid=3933 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.430880][ T3944] netlink: 128 bytes leftover after parsing attributes in process `syz.2.149'. [ 41.455648][ T3946] loop1: detected capacity change from 0 to 1024 [ 41.462616][ T3946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.478648][ T3948] loop2: detected capacity change from 0 to 1024 [ 41.485629][ T3948] EXT4-fs: inline encryption not supported [ 41.491849][ T3948] EXT4-fs: Ignoring removed bh option [ 41.498804][ T3946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.514095][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.536322][ T3948] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 41.537102][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.551543][ T3948] EXT4-fs (loop2): Remounting filesystem read-only [ 41.584906][ T29] audit: type=1400 audit(1756244367.954:386): avc: denied { create } for pid=3954 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.606219][ T29] audit: type=1400 audit(1756244367.954:387): avc: denied { write } for pid=3954 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.626301][ T29] audit: type=1400 audit(1756244367.954:388): avc: denied { nlmsg_write } for pid=3954 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.710776][ T3965] new mount options do not match the existing superblock, will be ignored [ 41.773361][ T29] audit: type=1400 audit(1756244368.134:389): avc: denied { remount } for pid=3964 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.800677][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.854058][ T3970] loop0: detected capacity change from 0 to 1024 [ 41.871330][ T3970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.916520][ T3970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.953986][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.128439][ T29] audit: type=1400 audit(1756244368.494:390): avc: denied { create } for pid=3977 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.147915][ T29] audit: type=1400 audit(1756244368.494:391): avc: denied { name_bind } for pid=3977 comm="syz.1.163" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.327350][ T3997] loop0: detected capacity change from 0 to 1024 [ 42.337040][ T3997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.359681][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.383115][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.674333][ T4006] loop4: detected capacity change from 0 to 1024 [ 42.681391][ T4006] EXT4-fs: Ignoring removed bh option [ 42.693905][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.728719][ T4010] loop3: detected capacity change from 0 to 1024 [ 42.735562][ T4010] EXT4-fs: inline encryption not supported [ 42.742936][ T4010] EXT4-fs: Ignoring removed bh option [ 42.753384][ T4010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.768490][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.775663][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.784479][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.827868][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.837704][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.881553][ T125] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.892686][ T125] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.898195][ T4021] loop2: detected capacity change from 0 to 128 [ 42.902319][ T125] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.917487][ T125] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.926964][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.962585][ T4026] netlink: 64 bytes leftover after parsing attributes in process `syz.4.177'. [ 42.965052][ T4028] netlink: 64 bytes leftover after parsing attributes in process `syz.2.178'. [ 43.099384][ T4046] loop4: detected capacity change from 0 to 1024 [ 43.106709][ T4046] EXT4-fs: Ignoring removed bh option [ 43.133555][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.166852][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.281028][ T4054] loop0: detected capacity change from 0 to 512 [ 43.294210][ T4054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.311305][ T4054] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.351976][ T29] audit: type=1400 audit(1756244369.724:392): avc: denied { load_policy } for pid=4053 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.381189][ T4054] SELinux: failed to load policy [ 43.401715][ T4054] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.189: iget: bad i_size value: 2533274857506816 [ 43.417713][ T4063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.191'. [ 43.440760][ T4058] loop4: detected capacity change from 0 to 8192 [ 43.473986][ T29] audit: type=1326 audit(1756244369.844:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 43.518125][ T29] audit: type=1326 audit(1756244369.874:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 43.564466][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.698099][ T4088] loop3: detected capacity change from 0 to 512 [ 43.718947][ T4088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.732828][ T4088] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.750539][ T4088] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.200: bg 0: block 145: padding at end of block bitmap is not set [ 43.765325][ T4088] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 43.858162][ T4088] SELinux: failed to load policy [ 43.872987][ T4088] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.200: iget: bad i_size value: 2533274857506816 [ 43.924968][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.028431][ T4102] loop3: detected capacity change from 0 to 1024 [ 44.045952][ T4102] EXT4-fs: Ignoring removed bh option [ 44.065173][ T4102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.162471][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.645419][ T4121] loop0: detected capacity change from 0 to 8192 [ 44.852292][ T4126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4126 comm=syz.0.210 [ 45.094685][ T4133] loop3: detected capacity change from 0 to 1024 [ 45.113857][ T4133] EXT4-fs: inline encryption not supported [ 45.135338][ T4133] EXT4-fs: Ignoring removed bh option [ 45.142896][ T4130] loop1: detected capacity change from 0 to 8192 [ 45.174701][ T4133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.249710][ T4133] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 45.265097][ T4133] EXT4-fs (loop3): Remounting filesystem read-only [ 45.314115][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.497492][ T4158] loop3: detected capacity change from 0 to 512 [ 45.515729][ T4158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.218: bg 0: block 248: padding at end of block bitmap is not set [ 45.541944][ T4158] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.218: Failed to acquire dquot type 1 [ 45.554845][ T4158] EXT4-fs (loop3): 1 truncate cleaned up [ 45.560898][ T4158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.573521][ T4158] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.597926][ T4155] loop4: detected capacity change from 0 to 8192 [ 45.618456][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.631703][ T2283] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 45.650525][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 45.687229][ T4164] loop0: detected capacity change from 0 to 1024 [ 45.727868][ T4166] loop3: detected capacity change from 0 to 1024 [ 45.744903][ T4166] EXT4-fs: Ignoring removed bh option [ 45.744922][ T4164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.785456][ T4166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.824629][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.838401][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.852660][ T4173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4173 comm=syz.4.217 [ 45.929970][ T4181] loop3: detected capacity change from 0 to 1024 [ 45.937977][ T4181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.960688][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.156654][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.187789][ T4190] new mount options do not match the existing superblock, will be ignored [ 46.196704][ T4190] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 46.314824][ T4197] loop2: detected capacity change from 0 to 512 [ 46.332569][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 46.332584][ T29] audit: type=1400 audit(1756244372.704:417): avc: denied { write } for pid=4191 comm="syz.3.227" name="mcfilter" dev="proc" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.414337][ T4200] loop1: detected capacity change from 0 to 1024 [ 46.445999][ T4200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.597517][ T4200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.611168][ T4197] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.230: bg 0: block 248: padding at end of block bitmap is not set [ 46.640698][ T4197] Quota error (device loop2): write_blk: dquota write failed [ 46.648153][ T4197] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 46.659539][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669084][ T4197] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.230: Failed to acquire dquot type 1 [ 46.690737][ T4215] loop1: detected capacity change from 0 to 1024 [ 46.697546][ T4197] EXT4-fs (loop2): 1 truncate cleaned up [ 46.706982][ T4215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.713952][ T4197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.727173][ T4197] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.743077][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.766445][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.776704][ T125] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 46.785859][ T125] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 46.799330][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.866248][ T4221] loop2: detected capacity change from 0 to 1024 [ 46.876612][ T4221] EXT4-fs: Ignoring removed bh option [ 46.903217][ T4221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.943683][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.951036][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.987886][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.997809][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.029655][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.041666][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.059896][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.075698][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.076121][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.544976][ T4247] loop4: detected capacity change from 0 to 1024 [ 47.559895][ T4242] loop3: detected capacity change from 0 to 8192 [ 47.566882][ T4236] loop2: detected capacity change from 0 to 8192 [ 47.568015][ T4247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.594981][ T4249] loop0: detected capacity change from 0 to 512 [ 47.604537][ T4247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.628469][ T4249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.656348][ T4249] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.729493][ T4249] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.248: bg 0: block 145: padding at end of block bitmap is not set [ 47.747516][ T4256] loop4: detected capacity change from 0 to 1024 [ 47.753567][ T4249] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 47.755677][ T4256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.762729][ T29] audit: type=1326 audit(1756244374.124:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07fcc2ebe9 code=0x0 [ 47.795188][ T29] audit: type=1326 audit(1756244374.164:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d4b8ebe9 code=0x0 [ 47.819690][ T4259] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 47.830329][ T4259] SELinux: failed to load policy [ 47.840677][ T4259] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.248: iget: bad i_size value: 2533274857506816 [ 47.953575][ T4269] loop4: detected capacity change from 0 to 1024 [ 47.997204][ T4269] EXT4-fs: Ignoring removed bh option [ 48.228936][ T4278] loop0: detected capacity change from 0 to 8192 [ 48.238997][ T4273] loop1: detected capacity change from 0 to 8192 [ 48.327576][ T4289] loop3: detected capacity change from 0 to 1024 [ 48.339283][ T4289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.417578][ T29] audit: type=1326 audit(1756244374.754:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4af293ebe9 code=0x0 [ 48.487819][ T29] audit: type=1326 audit(1756244374.834:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.1.252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e9219ebe9 code=0x0 [ 48.586009][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4304 comm=syz.1.252 [ 48.669324][ T29] audit: type=1326 audit(1756244375.014:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 48.692678][ T29] audit: type=1326 audit(1756244375.014:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3acdebe9 code=0x7ffc0000 [ 48.749370][ T4313] new mount options do not match the existing superblock, will be ignored [ 48.758664][ T4313] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 48.921199][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 48.952470][ T4322] loop1: detected capacity change from 0 to 1024 [ 48.959501][ T4322] EXT4-fs: Ignoring removed bh option [ 49.005938][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.013147][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.052782][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.062678][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.095063][ T41] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.105212][ T41] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.117400][ T41] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.134689][ T41] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.192486][ T4329] process 'syz.0.265' launched '/dev/fd/6' with NULL argv: empty string added [ 49.246350][ T4343] program syz.1.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.288079][ T4348] loop1: detected capacity change from 0 to 1024 [ 49.294954][ T4348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.497420][ T4364] random: crng reseeded on system resumption [ 49.619576][ T4364] syz_tun: entered promiscuous mode [ 49.625488][ T4364] batadv_slave_0: entered promiscuous mode [ 49.632311][ T4364] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 49.642352][ T4364] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.654195][ T4364] hsr1: entered allmulticast mode [ 49.659236][ T4364] syz_tun: entered allmulticast mode [ 49.664559][ T4364] batadv_slave_0: entered allmulticast mode [ 50.135568][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 50.168042][ T4387] netlink: 168 bytes leftover after parsing attributes in process `syz.0.287'. [ 50.184970][ T4382] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 50.193287][ T4382] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 50.227897][ T4389] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.239952][ T4380] loop2: detected capacity change from 0 to 8192 [ 50.263253][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 50.263411][ T4393] random: crng reseeded on system resumption [ 50.273319][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.305815][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.512779][ T4400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4400 comm=syz.2.284 [ 50.552658][ T4405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 50.561587][ T4405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 50.584455][ T4405] FAULT_INJECTION: forcing a failure. [ 50.584455][ T4405] name failslab, interval 1, probability 0, space 0, times 1 [ 50.597196][ T4405] CPU: 0 UID: 0 PID: 4405 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.597293][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.597303][ T4405] Call Trace: [ 50.597309][ T4405] [ 50.597316][ T4405] __dump_stack+0x1d/0x30 [ 50.597336][ T4405] dump_stack_lvl+0xe8/0x140 [ 50.597395][ T4405] dump_stack+0x15/0x1b [ 50.597408][ T4405] should_fail_ex+0x265/0x280 [ 50.597425][ T4405] should_failslab+0x8c/0xb0 [ 50.597445][ T4405] __kmalloc_noprof+0xa5/0x3e0 [ 50.597539][ T4405] ? tcf_idr_create+0x41/0x4a0 [ 50.597562][ T4405] tcf_idr_create+0x41/0x4a0 [ 50.597588][ T4405] tcf_ife_init+0x441/0x880 [ 50.597672][ T4405] tcf_action_init_1+0x36a/0x4a0 [ 50.597704][ T4405] tcf_action_init+0x267/0x6d0 [ 50.597750][ T4405] tc_ctl_action+0x291/0x830 [ 50.597797][ T4405] ? __pfx_tc_ctl_action+0x10/0x10 [ 50.597885][ T4405] rtnetlink_rcv_msg+0x65a/0x6d0 [ 50.597907][ T4405] ? avc_has_perm_noaudit+0x1b1/0x200 [ 50.597929][ T4405] netlink_rcv_skb+0x120/0x220 [ 50.597949][ T4405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.598023][ T4405] rtnetlink_rcv+0x1c/0x30 [ 50.598047][ T4405] netlink_unicast+0x5c0/0x690 [ 50.598079][ T4405] netlink_sendmsg+0x58b/0x6b0 [ 50.598145][ T4405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.598163][ T4405] __sock_sendmsg+0x142/0x180 [ 50.598189][ T4405] ____sys_sendmsg+0x31e/0x4e0 [ 50.598213][ T4405] ___sys_sendmsg+0x17b/0x1d0 [ 50.598295][ T4405] __x64_sys_sendmsg+0xd4/0x160 [ 50.598321][ T4405] x64_sys_call+0x191e/0x2ff0 [ 50.598338][ T4405] do_syscall_64+0xd2/0x200 [ 50.598361][ T4405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.598419][ T4405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.598475][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.598560][ T4405] RIP: 0033:0x7f5c3acdebe9 [ 50.598575][ T4405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.598622][ T4405] RSP: 002b:00007f5c3973f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.598642][ T4405] RAX: ffffffffffffffda RBX: 00007f5c3af05fa0 RCX: 00007f5c3acdebe9 [ 50.598655][ T4405] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 50.598667][ T4405] RBP: 00007f5c3973f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.598679][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.598736][ T4405] R13: 00007f5c3af06038 R14: 00007f5c3af05fa0 R15: 00007ffee6573de8 [ 50.598754][ T4405] [ 50.871997][ T4409] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.294'. [ 50.881142][ T4409] FAULT_INJECTION: forcing a failure. [ 50.881142][ T4409] name failslab, interval 1, probability 0, space 0, times 0 [ 50.893962][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz.4.294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.893990][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.894002][ T4409] Call Trace: [ 50.894008][ T4409] [ 50.894014][ T4409] __dump_stack+0x1d/0x30 [ 50.894035][ T4409] dump_stack_lvl+0xe8/0x140 [ 50.894064][ T4409] dump_stack+0x15/0x1b [ 50.894081][ T4409] should_fail_ex+0x265/0x280 [ 50.894102][ T4409] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 50.894123][ T4409] should_failslab+0x8c/0xb0 [ 50.894227][ T4409] __kmalloc_cache_noprof+0x4c/0x320 [ 50.894250][ T4409] ? trace_clock_local+0x3f/0x60 [ 50.894278][ T4409] nsim_fib_event_nb+0x1a0/0xcb0 [ 50.894337][ T4409] ? fib_nh_match+0x7d1/0xa20 [ 50.894437][ T4409] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 50.894459][ T4409] atomic_notifier_call_chain+0x76/0x1c0 [ 50.894489][ T4409] call_fib_notifiers+0x65/0xa0 [ 50.894554][ T4409] call_fib4_notifiers+0x93/0xe0 [ 50.894583][ T4409] fib_table_delete+0x745/0x830 [ 50.894615][ T4409] fib_magic+0x1ba/0x1f0 [ 50.894683][ T4409] fib_del_ifaddr+0x1cf/0xa90 [ 50.894700][ T4409] ? netlink_unicast+0x2a2/0x690 [ 50.894733][ T4409] ? nlmsg_notify+0x122/0x170 [ 50.894774][ T4409] fib_inetaddr_event+0x79/0x1f0 [ 50.894834][ T4409] ? inetaddr_event+0x71/0xa0 [ 50.894906][ T4409] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 50.894949][ T4409] blocking_notifier_call_chain+0x98/0x1f0 [ 50.895044][ T4409] __inet_del_ifa+0x4e5/0x7f0 [ 50.895088][ T4409] inet_rtm_deladdr+0x3e2/0x420 [ 50.895110][ T4409] ? __pfx_inet_rtm_deladdr+0x10/0x10 [ 50.895187][ T4409] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 50.895209][ T4409] ? avc_has_perm_noaudit+0x1b1/0x200 [ 50.895265][ T4409] netlink_rcv_skb+0x120/0x220 [ 50.895284][ T4409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.895384][ T4409] rtnetlink_rcv+0x1c/0x30 [ 50.895407][ T4409] netlink_unicast+0x5c0/0x690 [ 50.895440][ T4409] netlink_sendmsg+0x58b/0x6b0 [ 50.895534][ T4409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.895619][ T4409] __sock_sendmsg+0x142/0x180 [ 50.895640][ T4409] __sys_sendto+0x268/0x330 [ 50.895663][ T4409] __x64_sys_sendto+0x76/0x90 [ 50.895682][ T4409] x64_sys_call+0x2d05/0x2ff0 [ 50.895703][ T4409] do_syscall_64+0xd2/0x200 [ 50.895751][ T4409] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.895769][ T4409] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.895789][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.895812][ T4409] RIP: 0033:0x7f5c3acdebe9 [ 50.895824][ T4409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.895900][ T4409] RSP: 002b:00007f5c3973f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 50.895919][ T4409] RAX: ffffffffffffffda RBX: 00007f5c3af05fa0 RCX: 00007f5c3acdebe9 [ 50.895932][ T4409] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000008 [ 50.895943][ T4409] RBP: 00007f5c3973f090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 50.895954][ T4409] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 50.895971][ T4409] R13: 00007f5c3af06038 R14: 00007f5c3af05fa0 R15: 00007ffee6573de8 [ 50.895986][ T4409] [ 51.233534][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 51.248832][ T4411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4411 comm=syz.1.295 [ 51.294183][ T4420] netlink: 168 bytes leftover after parsing attributes in process `syz.3.298'. [ 51.495089][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 52.122317][ T4448] loop4: detected capacity change from 0 to 1024 [ 52.133239][ T4448] EXT4-fs: Ignoring removed bh option [ 52.250758][ T4455] loop4: detected capacity change from 0 to 128 [ 52.272363][ T4455] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 52.318337][ T4455] FAT-fs (loop4): FAT read failed (blocknr 32) [ 52.432508][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 52.432522][ T29] audit: type=1326 audit(1756244378.804:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.465387][ T29] audit: type=1326 audit(1756244378.824:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.488694][ T29] audit: type=1326 audit(1756244378.824:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.512060][ T29] audit: type=1326 audit(1756244378.824:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.535321][ T29] audit: type=1326 audit(1756244378.824:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.558871][ T29] audit: type=1326 audit(1756244378.824:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.582659][ T29] audit: type=1326 audit(1756244378.824:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.595840][ T4470] loop4: detected capacity change from 0 to 1024 [ 52.605983][ T29] audit: type=1326 audit(1756244378.824:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.635600][ T29] audit: type=1326 audit(1756244378.824:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07fcc2d550 code=0x7ffc0000 [ 52.640002][ T4468] netlink: 128 bytes leftover after parsing attributes in process `syz.0.313'. [ 52.658959][ T29] audit: type=1326 audit(1756244378.824:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fcc2ebe9 code=0x7ffc0000 [ 52.834992][ T4496] new mount options do not match the existing superblock, will be ignored [ 52.854073][ T4496] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 52.912999][ T4502] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 52.945790][ T4509] loop3: detected capacity change from 0 to 1024 [ 53.083645][ T4526] random: crng reseeded on system resumption [ 53.151248][ T4529] loop1: detected capacity change from 0 to 512 [ 53.175771][ T4529] EXT4-fs: Ignoring removed oldalloc option [ 53.208426][ T4529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.221542][ T4529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.254122][ T4529] EXT4-fs (loop1): 1 truncate cleaned up [ 53.323724][ T4534] new mount options do not match the existing superblock, will be ignored [ 53.332773][ T4534] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 53.410741][ T4526] syz_tun: entered promiscuous mode [ 53.418815][ T4526] batadv_slave_0: entered promiscuous mode [ 53.426441][ T4526] debugfs: 'hsr1' already exists in 'hsr' [ 53.432310][ T4526] Cannot create hsr debugfs directory [ 53.434052][ T4537] loop2: detected capacity change from 0 to 1024 [ 53.451729][ T4526] hsr1: entered allmulticast mode [ 53.456844][ T4526] syz_tun: entered allmulticast mode [ 53.462259][ T4526] batadv_slave_0: entered allmulticast mode [ 53.520730][ T4541] loop1: detected capacity change from 0 to 8192 [ 53.525868][ C0] hrtimer: interrupt took 36726 ns [ 53.624478][ T4550] netlink: 96 bytes leftover after parsing attributes in process `syz.2.344'. [ 53.633540][ T4550] FAULT_INJECTION: forcing a failure. [ 53.633540][ T4550] name failslab, interval 1, probability 0, space 0, times 0 [ 53.646346][ T4550] CPU: 1 UID: 0 PID: 4550 Comm: syz.2.344 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.646373][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.646385][ T4550] Call Trace: [ 53.646391][ T4550] [ 53.646397][ T4550] __dump_stack+0x1d/0x30 [ 53.646415][ T4550] dump_stack_lvl+0xe8/0x140 [ 53.646430][ T4550] dump_stack+0x15/0x1b [ 53.646481][ T4550] should_fail_ex+0x265/0x280 [ 53.646500][ T4550] should_failslab+0x8c/0xb0 [ 53.646523][ T4550] __kmalloc_noprof+0xa5/0x3e0 [ 53.646592][ T4550] ? ___neigh_create+0x4c9/0x1290 [ 53.646617][ T4550] ___neigh_create+0x4c9/0x1290 [ 53.646640][ T4550] ? __rcu_read_unlock+0x4f/0x70 [ 53.646661][ T4550] ? __rcu_read_unlock+0x4f/0x70 [ 53.646711][ T4550] ? neigh_lookup+0x1a0/0x1d0 [ 53.646792][ T4550] neigh_add+0x990/0xa70 [ 53.646833][ T4550] ? __pfx_neigh_add+0x10/0x10 [ 53.646933][ T4550] rtnetlink_rcv_msg+0x65a/0x6d0 [ 53.646967][ T4550] ? avc_has_perm_noaudit+0x1b1/0x200 [ 53.647046][ T4550] netlink_rcv_skb+0x120/0x220 [ 53.647065][ T4550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.647089][ T4550] rtnetlink_rcv+0x1c/0x30 [ 53.647178][ T4550] netlink_unicast+0x5c0/0x690 [ 53.647203][ T4550] netlink_sendmsg+0x58b/0x6b0 [ 53.647221][ T4550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.647260][ T4550] __sock_sendmsg+0x142/0x180 [ 53.647294][ T4550] __sys_sendto+0x268/0x330 [ 53.647320][ T4550] __x64_sys_sendto+0x76/0x90 [ 53.647340][ T4550] x64_sys_call+0x2d05/0x2ff0 [ 53.647425][ T4550] do_syscall_64+0xd2/0x200 [ 53.647452][ T4550] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.647471][ T4550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.647490][ T4550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.647571][ T4550] RIP: 0033:0x7f07fcc2ebe9 [ 53.647615][ T4550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.647629][ T4550] RSP: 002b:00007f07fb68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 53.647649][ T4550] RAX: ffffffffffffffda RBX: 00007f07fce55fa0 RCX: 00007f07fcc2ebe9 [ 53.647662][ T4550] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 53.647674][ T4550] RBP: 00007f07fb68f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.647687][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.647698][ T4550] R13: 00007f07fce56038 R14: 00007f07fce55fa0 R15: 00007ffdbd8c69d8 [ 53.647717][ T4550] [ 53.925007][ T4559] syzkaller1: entered promiscuous mode [ 53.930516][ T4559] syzkaller1: entered allmulticast mode [ 54.028678][ T4559] netlink: 256 bytes leftover after parsing attributes in process `syz.0.345'. [ 54.037776][ T4559] netlink: 72 bytes leftover after parsing attributes in process `syz.0.345'. [ 54.052602][ T4566] netlink: 128 bytes leftover after parsing attributes in process `syz.2.349'. [ 54.217038][ T4572] loop2: detected capacity change from 0 to 8192 [ 54.239815][ T4585] loop4: detected capacity change from 0 to 512 [ 54.277056][ T4591] loop3: detected capacity change from 0 to 512 [ 54.292166][ T4585] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.345913][ T4591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.360: bg 0: block 248: padding at end of block bitmap is not set [ 54.383308][ T4591] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.360: Failed to acquire dquot type 1 [ 54.413228][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 54.434362][ T4591] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.445322][ T4585] SELinux: failed to load policy [ 54.467439][ T4585] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.358: iget: bad i_size value: 2533274857506816 [ 54.557570][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 54.595650][ T4600] netlink: 'syz.1.362': attribute type 4 has an invalid length. [ 54.615346][ T4602] FAULT_INJECTION: forcing a failure. [ 54.615346][ T4602] name failslab, interval 1, probability 0, space 0, times 0 [ 54.628021][ T4602] CPU: 1 UID: 0 PID: 4602 Comm: syz.4.364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.628103][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.628115][ T4602] Call Trace: [ 54.628122][ T4602] [ 54.628131][ T4602] __dump_stack+0x1d/0x30 [ 54.628152][ T4602] dump_stack_lvl+0xe8/0x140 [ 54.628171][ T4602] dump_stack+0x15/0x1b [ 54.628188][ T4602] should_fail_ex+0x265/0x280 [ 54.628206][ T4602] should_failslab+0x8c/0xb0 [ 54.628267][ T4602] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 54.628291][ T4602] ? sidtab_sid2str_get+0xa0/0x130 [ 54.628357][ T4602] kmemdup_noprof+0x2b/0x70 [ 54.628430][ T4602] sidtab_sid2str_get+0xa0/0x130 [ 54.628454][ T4602] security_sid_to_context_core+0x1eb/0x2e0 [ 54.628472][ T4602] security_sid_to_context+0x27/0x40 [ 54.628489][ T4602] selinux_lsmprop_to_secctx+0x67/0xf0 [ 54.628536][ T4602] security_lsmprop_to_secctx+0x43/0x80 [ 54.628562][ T4602] audit_log_task_context+0x77/0x190 [ 54.628593][ T4602] audit_log_task+0xf4/0x250 [ 54.628641][ T4602] audit_seccomp+0x61/0x100 [ 54.628664][ T4602] ? __seccomp_filter+0x68c/0x10d0 [ 54.628683][ T4602] __seccomp_filter+0x69d/0x10d0 [ 54.628700][ T4602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.628781][ T4602] ? vfs_write+0x7e8/0x960 [ 54.628801][ T4602] __secure_computing+0x82/0x150 [ 54.628818][ T4602] syscall_trace_enter+0xcf/0x1e0 [ 54.628919][ T4602] do_syscall_64+0xac/0x200 [ 54.628940][ T4602] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.628967][ T4602] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.628992][ T4602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.629010][ T4602] RIP: 0033:0x7f5c3acdebe9 [ 54.629023][ T4602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.629036][ T4602] RSP: 002b:00007f5c3973f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 54.629051][ T4602] RAX: ffffffffffffffda RBX: 00007f5c3af05fa0 RCX: 00007f5c3acdebe9 [ 54.629063][ T4602] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 54.629152][ T4602] RBP: 00007f5c3973f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.629163][ T4602] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.629240][ T4602] R13: 00007f5c3af06038 R14: 00007f5c3af05fa0 R15: 00007ffee6573de8 [ 54.629258][ T4602] [ 54.868700][ T4604] loop3: detected capacity change from 0 to 1024 [ 54.885743][ T4604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.932089][ T4608] loop0: detected capacity change from 0 to 512 [ 54.960548][ T4610] loop4: detected capacity change from 0 to 1024 [ 54.968796][ T4608] EXT4-fs: Ignoring removed oldalloc option [ 54.988665][ T4608] EXT4-fs (loop0): 1 truncate cleaned up [ 55.077733][ T4619] loop2: detected capacity change from 0 to 1024 [ 55.095365][ T4621] loop1: detected capacity change from 0 to 8192 [ 55.179591][ T4634] loop2: detected capacity change from 0 to 512 [ 55.206716][ T4636] loop3: detected capacity change from 0 to 1024 [ 55.214832][ T4634] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.374: bg 0: block 248: padding at end of block bitmap is not set [ 55.217886][ T4636] EXT4-fs: Ignoring removed orlov option [ 55.234793][ T4636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.241489][ T4628] loop4: detected capacity change from 0 to 8192 [ 55.248551][ T4634] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.374: Failed to acquire dquot type 1 [ 55.266807][ T4634] EXT4-fs (loop2): 1 truncate cleaned up [ 55.273358][ T4634] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.325389][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 55.399905][ T4644] delete_channel: no stack [ 55.437619][ T4646] loop2: detected capacity change from 0 to 1024 [ 55.470360][ T4646] EXT4-fs: Ignoring removed orlov option [ 55.655386][ T4670] netlink: 128 bytes leftover after parsing attributes in process `syz.3.384'. [ 55.886993][ T4688] loop1: detected capacity change from 0 to 1024 [ 55.897960][ T4688] EXT4-fs: inline encryption not supported [ 55.904741][ T4688] EXT4-fs: Ignoring removed bh option [ 55.978460][ T4688] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 56.018827][ T4688] EXT4-fs (loop1): Remounting filesystem read-only [ 56.124301][ T4707] __nla_validate_parse: 1 callbacks suppressed [ 56.124315][ T4707] netlink: 64 bytes leftover after parsing attributes in process `syz.1.396'. [ 56.169167][ T4713] loop4: detected capacity change from 0 to 1024 [ 56.180214][ T4713] EXT4-fs: Ignoring removed orlov option [ 56.186117][ T4713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.200029][ T4715] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 56.237877][ T4719] netlink: 64 bytes leftover after parsing attributes in process `syz.4.401'. [ 56.308280][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 56.317760][ T4723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.585944][ T4736] loop3: detected capacity change from 0 to 1024 [ 56.592904][ T4736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.668809][ T4742] loop3: detected capacity change from 0 to 8192 [ 56.760286][ T4698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.817122][ T4748] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 56.832146][ T4748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.839351][ T4746] loop1: detected capacity change from 0 to 8192 [ 56.843010][ T4748] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 57.247530][ T4759] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.259852][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 57.273277][ T4759] FAULT_INJECTION: forcing a failure. [ 57.273277][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 57.285963][ T4759] CPU: 0 UID: 0 PID: 4759 Comm: syz.3.415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.285991][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.286003][ T4759] Call Trace: [ 57.286010][ T4759] [ 57.286018][ T4759] __dump_stack+0x1d/0x30 [ 57.286056][ T4759] dump_stack_lvl+0xe8/0x140 [ 57.286076][ T4759] dump_stack+0x15/0x1b [ 57.286101][ T4759] should_fail_ex+0x265/0x280 [ 57.286123][ T4759] should_failslab+0x8c/0xb0 [ 57.286144][ T4759] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.286171][ T4759] ? __alloc_skb+0x101/0x320 [ 57.286191][ T4759] __alloc_skb+0x101/0x320 [ 57.286244][ T4759] rtmsg_ifa+0xac/0x170 [ 57.286269][ T4759] __inet_del_ifa+0x4d1/0x7f0 [ 57.286318][ T4759] ? ip_mc_destroy_dev+0x275/0x2d0 [ 57.286344][ T4759] inetdev_event+0x658/0xc10 [ 57.286360][ T4759] ? __pfx_ib_netdevice_event+0x10/0x10 [ 57.286383][ T4759] ? ib_netdevice_event+0x186/0x5f0 [ 57.286403][ T4759] ? __pfx_inetdev_event+0x10/0x10 [ 57.286454][ T4759] raw_notifier_call_chain+0x6c/0x1b0 [ 57.286475][ T4759] ? call_netdevice_notifiers_info+0x9c/0x100 [ 57.286501][ T4759] call_netdevice_notifiers_info+0xae/0x100 [ 57.286572][ T4759] unregister_netdevice_many_notify+0xda9/0x15d0 [ 57.286602][ T4759] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 57.286625][ T4759] rtnl_dellink+0x3cb/0x550 [ 57.286740][ T4759] ? selinux_capable+0x31/0x40 [ 57.286762][ T4759] ? security_capable+0x83/0x90 [ 57.286841][ T4759] ? ns_capable+0x7d/0xb0 [ 57.286862][ T4759] ? __pfx_rtnl_dellink+0x10/0x10 [ 57.286887][ T4759] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 57.286913][ T4759] ? avc_has_perm_noaudit+0x1b1/0x200 [ 57.286947][ T4759] netlink_rcv_skb+0x120/0x220 [ 57.286964][ T4759] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 57.286995][ T4759] rtnetlink_rcv+0x1c/0x30 [ 57.287019][ T4759] netlink_unicast+0x5c0/0x690 [ 57.287127][ T4759] netlink_sendmsg+0x58b/0x6b0 [ 57.287155][ T4759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.287177][ T4759] __sock_sendmsg+0x142/0x180 [ 57.287204][ T4759] ____sys_sendmsg+0x31e/0x4e0 [ 57.287344][ T4759] ___sys_sendmsg+0x17b/0x1d0 [ 57.287423][ T4759] __x64_sys_sendmsg+0xd4/0x160 [ 57.287508][ T4759] x64_sys_call+0x191e/0x2ff0 [ 57.287530][ T4759] do_syscall_64+0xd2/0x200 [ 57.287557][ T4759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.287605][ T4759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.287626][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.287645][ T4759] RIP: 0033:0x7f92d4b8ebe9 [ 57.287675][ T4759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.287691][ T4759] RSP: 002b:00007f92d35ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.287759][ T4759] RAX: ffffffffffffffda RBX: 00007f92d4db6180 RCX: 00007f92d4b8ebe9 [ 57.287770][ T4759] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000b [ 57.287781][ T4759] RBP: 00007f92d35ad090 R08: 0000000000000000 R09: 0000000000000000 [ 57.287792][ T4759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.287802][ T4759] R13: 00007f92d4db6218 R14: 00007f92d4db6180 R15: 00007ffd4f5df008 [ 57.287819][ T4759] [ 57.725572][ T4762] loop2: detected capacity change from 0 to 512 [ 57.776020][ T4762] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.807992][ T4762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.418: bg 0: block 145: padding at end of block bitmap is not set [ 57.813745][ T4770] netlink: 'syz.3.420': attribute type 5 has an invalid length. [ 57.829959][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 57.829972][ T29] audit: type=1400 audit(1756244384.184:797): avc: denied { ioctl } for pid=4769 comm="syz.3.420" path="socket:[8566]" dev="sockfs" ino=8566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.830027][ T4771] netlink: 128 bytes leftover after parsing attributes in process `syz.1.422'. [ 57.869824][ T4770] loop3: detected capacity change from 0 to 1024 [ 57.874384][ T4762] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 57.892182][ T4770] EXT4-fs: Ignoring removed orlov option [ 57.895710][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 57.898041][ T4770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.913647][ T4777] loop0: detected capacity change from 0 to 1024 [ 57.920327][ T4777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.926153][ T4762] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.418: iget: bad i_size value: 2533274857506816 [ 57.958683][ T4782] hub 6-0:1.0: USB hub found [ 57.963588][ T4782] hub 6-0:1.0: 8 ports detected [ 57.990050][ T4786] random: crng reseeded on system resumption [ 58.000437][ T29] audit: type=1400 audit(1756244384.364:798): avc: denied { map } for pid=4769 comm="syz.3.420" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.024840][ T4789] loop1: detected capacity change from 0 to 512 [ 58.060626][ T4789] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.426: bg 0: block 248: padding at end of block bitmap is not set [ 58.089761][ T29] audit: type=1326 audit(1756244384.454:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af293ebe9 code=0x7ffc0000 [ 58.104022][ T4789] Quota error (device loop1): write_blk: dquota write failed [ 58.113061][ T29] audit: type=1326 audit(1756244384.454:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af293ebe9 code=0x7ffc0000 [ 58.120404][ T4789] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 58.157225][ T4789] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.426: Failed to acquire dquot type 1 [ 58.169374][ T4789] EXT4-fs (loop1): 1 truncate cleaned up [ 58.176249][ T4789] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.186976][ T29] audit: type=1326 audit(1756244384.514:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f4af293ebe9 code=0x7ffc0000 [ 58.210284][ T29] audit: type=1326 audit(1756244384.514:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af293ebe9 code=0x7ffc0000 [ 58.233496][ T29] audit: type=1326 audit(1756244384.514:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af293ebe9 code=0x7ffc0000 [ 58.256778][ T29] audit: type=1326 audit(1756244384.524:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4af293ebe9 code=0x7ffc0000 [ 58.281361][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 58.298086][ T4796] loop3: detected capacity change from 0 to 8192 [ 58.417346][ T4802] loop1: detected capacity change from 0 to 1024 [ 58.449744][ T4786] syz_tun: entered promiscuous mode [ 58.456741][ T4786] batadv_slave_0: entered promiscuous mode [ 58.464524][ T4786] debugfs: 'hsr1' already exists in 'hsr' [ 58.470283][ T4786] Cannot create hsr debugfs directory [ 58.475902][ T4786] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 58.486003][ T4786] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.496759][ T4786] hsr1: entered allmulticast mode [ 58.501815][ T4786] syz_tun: entered allmulticast mode [ 58.507091][ T4786] batadv_slave_0: entered allmulticast mode [ 58.822953][ T4820] loop2: detected capacity change from 0 to 512 [ 58.854565][ T4820] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.885403][ T4820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.436: bg 0: block 145: padding at end of block bitmap is not set [ 58.921907][ T4820] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 58.959096][ T4827] SELinux: failed to load policy [ 58.959734][ T4829] netlink: 128 bytes leftover after parsing attributes in process `syz.0.435'. [ 58.965061][ T4827] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.436: iget: bad i_size value: 2533274857506816 [ 59.011747][ T4829] netlink: 'syz.0.435': attribute type 3 has an invalid length. [ 59.115214][ T4835] random: crng reseeded on system resumption [ 59.455107][ T4851] loop2: detected capacity change from 0 to 512 [ 59.503373][ T4851] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.445: bg 0: block 248: padding at end of block bitmap is not set [ 59.518265][ T4851] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.445: Failed to acquire dquot type 1 [ 59.530707][ T4851] EXT4-fs (loop2): 1 truncate cleaned up [ 59.537639][ T4851] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.581552][ T4857] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 59.589746][ T4857] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 59.598562][ T312] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 1 [ 59.610978][ T4859] loop1: detected capacity change from 0 to 512 [ 59.625250][ T4859] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.659869][ T4859] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.448: bg 0: block 145: padding at end of block bitmap is not set [ 59.662208][ T4865] new mount options do not match the existing superblock, will be ignored [ 59.676362][ T4864] netlink: 128 bytes leftover after parsing attributes in process `syz.4.449'. [ 59.687581][ T4865] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 59.692854][ T4859] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 59.708140][ T4864] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 59.737171][ T4859] SELinux: failed to load policy [ 59.742842][ T4859] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.448: iget: bad i_size value: 2533274857506816 [ 59.787586][ T4869] loop2: detected capacity change from 0 to 1024 [ 59.883813][ T4879] loop1: detected capacity change from 0 to 1024 [ 59.923513][ T4885] netlink: 'syz.4.456': attribute type 13 has an invalid length. [ 59.931358][ T4885] netlink: 172 bytes leftover after parsing attributes in process `syz.4.456'. [ 59.941904][ T4885] erspan0: refused to change device tx_queue_len [ 59.953777][ T4885] pim6reg0: tun_chr_ioctl cmd 35111 [ 59.989970][ T3397] hid-generic 0000:10000:14000.0001: unknown main item tag 0x0 [ 60.027986][ T4885] loop4: detected capacity change from 0 to 512 [ 60.042603][ T3397] hid-generic 0000:10000:14000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.127261][ T4885] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.449537][ T4908] new mount options do not match the existing superblock, will be ignored [ 60.458789][ T4908] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 60.601531][ T4917] loop4: detected capacity change from 0 to 512 [ 60.643531][ T4917] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.680535][ T4917] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.464: bg 0: block 145: padding at end of block bitmap is not set [ 60.722396][ T4917] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 60.739223][ T4925] loop0: detected capacity change from 0 to 1024 [ 60.777856][ T4927] SELinux: failed to load policy [ 60.795357][ T4917] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.464: iget: bad i_size value: 2533274857506816 [ 60.811074][ T4932] loop0: detected capacity change from 0 to 1024 [ 60.818394][ T4926] loop3: detected capacity change from 0 to 8192 [ 60.825189][ T4932] EXT4-fs: Ignoring removed bh option [ 60.872403][ T4936] loop4: detected capacity change from 0 to 1024 [ 60.909854][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.917274][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.952426][ T4942] netlink: 128 bytes leftover after parsing attributes in process `syz.4.471'. [ 60.962752][ T4942] netlink: 'syz.4.471': attribute type 3 has an invalid length. [ 60.970067][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.011750][ T4944] loop4: detected capacity change from 0 to 1024 [ 61.026325][ T4944] EXT4-fs: Ignoring removed bh option [ 61.035711][ T4932] hsr1: left allmulticast mode [ 61.040516][ T4932] syz_tun: left allmulticast mode [ 61.045782][ T4932] batadv_slave_0: left allmulticast mode [ 61.054330][ T125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.063875][ T125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.073839][ T125] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.091557][ T125] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.160827][ T4956] binfmt_misc: register: failed to install interpreter file ./file2 [ 61.201761][ T4962] loop4: detected capacity change from 0 to 1024 [ 61.215388][ T4962] EXT4-fs: inline encryption not supported [ 61.221644][ T4962] EXT4-fs: Ignoring removed bh option [ 61.251704][ T4967] netlink: 128 bytes leftover after parsing attributes in process `syz.1.479'. [ 61.260752][ T4967] netlink: 'syz.1.479': attribute type 3 has an invalid length. [ 61.462457][ T4972] loop1: detected capacity change from 0 to 8192 [ 61.523201][ T3497] loop1: p1 p2[DM] p4 [ 61.527585][ T3497] loop1: p1 size 196608 extends beyond EOD, truncated [ 61.542729][ T3497] loop1: p2 start 4292936063 is beyond EOD, truncated [ 61.549557][ T3497] loop1: p4 size 50331648 extends beyond EOD, truncated [ 61.582165][ T4972] loop1: p1 p2[DM] p4 [ 61.586296][ T4972] loop1: p1 size 196608 extends beyond EOD, truncated [ 61.612200][ T4972] loop1: p2 start 4292936063 is beyond EOD, truncated [ 61.619005][ T4972] loop1: p4 size 50331648 extends beyond EOD, truncated [ 61.648097][ T4978] random: crng reseeded on system resumption [ 61.764425][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.775882][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 61.809619][ T4985] loop1: detected capacity change from 0 to 128 [ 61.821004][ T4985] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 61.876554][ T4978] syz_tun: entered promiscuous mode [ 61.882579][ T4978] batadv_slave_0: entered promiscuous mode [ 61.889003][ T4978] debugfs: 'hsr1' already exists in 'hsr' [ 61.894781][ T4978] Cannot create hsr debugfs directory [ 61.900487][ T4978] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 61.910526][ T4978] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.921396][ T4978] hsr1: entered allmulticast mode [ 61.926744][ T4978] syz_tun: entered allmulticast mode [ 61.932059][ T4978] batadv_slave_0: entered allmulticast mode [ 62.190249][ T5002] netlink: 128 bytes leftover after parsing attributes in process `syz.2.492'. [ 62.209009][ T5002] netlink: 'syz.2.492': attribute type 3 has an invalid length. [ 62.594545][ T5022] loop0: detected capacity change from 0 to 1024 [ 62.603148][ T5022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.697306][ T5028] loop3: detected capacity change from 0 to 1024 [ 62.709757][ T5036] loop0: detected capacity change from 0 to 512 [ 62.732169][ T5028] EXT4-fs: test_dummy_encryption option not supported [ 62.756912][ T5036] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.506: bg 0: block 248: padding at end of block bitmap is not set [ 62.809577][ T5036] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.506: Failed to acquire dquot type 1 [ 62.822675][ T5032] loop2: detected capacity change from 0 to 128 [ 62.852739][ T5036] EXT4-fs (loop0): 1 truncate cleaned up [ 62.858531][ T5045] loop3: detected capacity change from 0 to 512 [ 62.863289][ T5036] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.902018][ T12] __quota_error: 429 callbacks suppressed [ 62.902079][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 62.916938][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 62.939333][ T5045] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.966795][ T5045] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.509: bg 0: block 145: padding at end of block bitmap is not set [ 62.989453][ T5045] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.002775][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 63.014055][ T5057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.049778][ T5045] SELinux: failed to load policy [ 63.068337][ T5045] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.509: iget: bad i_size value: 2533274857506816 [ 63.414676][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 63.676360][ T5098] loop4: detected capacity change from 0 to 1024 [ 63.695436][ T5098] EXT4-fs: Ignoring removed bh option [ 63.727717][ T5098] hsr1: left allmulticast mode [ 63.732589][ T5098] syz_tun: left allmulticast mode [ 63.737710][ T5098] batadv_slave_0: left allmulticast mode [ 63.815793][ T29] audit: type=1400 audit(1756244390.184:1228): avc: denied { create } for pid=5102 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.839019][ T5103] serio: Serial port ptm0 [ 64.032613][ T29] audit: type=1400 audit(1756244390.394:1229): avc: denied { append } for pid=5108 comm="syz.3.533" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.067220][ T29] audit: type=1400 audit(1756244390.434:1230): avc: denied { write } for pid=5108 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.101730][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 64.165020][ T5117] FAULT_INJECTION: forcing a failure. [ 64.165020][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 64.177732][ T5117] CPU: 0 UID: 0 PID: 5117 Comm: syz.1.536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.177769][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.177779][ T5117] Call Trace: [ 64.177785][ T5117] [ 64.177790][ T5117] __dump_stack+0x1d/0x30 [ 64.177808][ T5117] dump_stack_lvl+0xe8/0x140 [ 64.177823][ T5117] dump_stack+0x15/0x1b [ 64.177836][ T5117] should_fail_ex+0x265/0x280 [ 64.177930][ T5117] should_failslab+0x8c/0xb0 [ 64.177953][ T5117] kmem_cache_alloc_noprof+0x50/0x310 [ 64.177977][ T5117] ? getname_flags+0x80/0x3b0 [ 64.178002][ T5117] getname_flags+0x80/0x3b0 [ 64.178074][ T5117] user_path_at+0x28/0x130 [ 64.178105][ T5117] __se_sys_fspick+0xaa/0x240 [ 64.178131][ T5117] __x64_sys_fspick+0x43/0x50 [ 64.178154][ T5117] x64_sys_call+0x44c/0x2ff0 [ 64.178179][ T5117] do_syscall_64+0xd2/0x200 [ 64.178253][ T5117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.178274][ T5117] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.178360][ T5117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.178377][ T5117] RIP: 0033:0x7f1e9219ebe9 [ 64.178389][ T5117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.178435][ T5117] RSP: 002b:00007f1e90bff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 64.178451][ T5117] RAX: ffffffffffffffda RBX: 00007f1e923c5fa0 RCX: 00007f1e9219ebe9 [ 64.178461][ T5117] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffffffffffffff [ 64.178550][ T5117] RBP: 00007f1e90bff090 R08: 0000000000000000 R09: 0000000000000000 [ 64.178560][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.178570][ T5117] R13: 00007f1e923c6038 R14: 00007f1e923c5fa0 R15: 00007fff865063f8 [ 64.178585][ T5117] [ 64.383270][ T5124] loop2: detected capacity change from 0 to 1024 [ 64.387542][ T29] audit: type=1326 audit(1756244390.744:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 64.390392][ T5124] EXT4-fs: inline encryption not supported [ 64.413057][ T29] audit: type=1326 audit(1756244390.744:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 64.419066][ T5124] EXT4-fs: Ignoring removed bh option [ 64.444417][ T29] audit: type=1326 audit(1756244390.754:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 64.470898][ T29] audit: type=1326 audit(1756244390.754:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 64.494733][ T29] audit: type=1326 audit(1756244390.754:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 64.527685][ T29] audit: type=1326 audit(1756244390.814:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 64.577382][ T5124] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 64.592398][ T5124] EXT4-fs (loop2): Remounting filesystem read-only [ 64.614620][ T5137] new mount options do not match the existing superblock, will be ignored [ 64.623864][ T5137] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 65.481142][ T5175] loop0: detected capacity change from 0 to 512 [ 65.493666][ T5175] EXT4-fs mount: 90 callbacks suppressed [ 65.493681][ T5175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.512215][ T5175] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.528620][ T5175] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.558: bg 0: block 145: padding at end of block bitmap is not set [ 65.547138][ T5175] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 65.583014][ T5178] loop2: detected capacity change from 0 to 512 [ 65.617502][ T5178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.630122][ T5178] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.718351][ T5175] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.558: iget: bad i_size value: 2533274857506816 [ 65.861179][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.990179][ T5185] bridge_slave_0: left allmulticast mode [ 65.995926][ T5185] bridge_slave_0: left promiscuous mode [ 66.001664][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.127160][ T5189] loop4: detected capacity change from 0 to 1024 [ 66.138737][ T5192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.561'. [ 66.165672][ T5189] EXT4-fs: Ignoring removed bh option [ 66.185234][ T5185] bridge_slave_1: left allmulticast mode [ 66.191050][ T5185] bridge_slave_1: left promiscuous mode [ 66.196798][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.243401][ T5189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.260255][ T5185] bond0: (slave bond_slave_0): Releasing backup interface [ 66.271224][ T5185] bond0: (slave bond_slave_1): Releasing backup interface [ 66.280452][ T5185] team0: Port device team_slave_0 removed [ 66.287277][ T5185] team0: Port device team_slave_1 removed [ 66.294182][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.302069][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.473550][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.719607][ T5204] loop0: detected capacity change from 0 to 512 [ 66.737441][ T5204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.750093][ T5204] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.785778][ T5204] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.559: bg 0: block 145: padding at end of block bitmap is not set [ 66.806525][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.817185][ T5204] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 66.837920][ T5208] random: crng reseeded on system resumption [ 66.913976][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.002921][ T5218] loop4: detected capacity change from 0 to 512 [ 67.019817][ T5212] loop1: detected capacity change from 0 to 8192 [ 67.034072][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.048565][ T5218] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.111716][ T5218] SELinux: failed to load policy [ 67.117673][ T5218] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.570: iget: bad i_size value: 2533274857506816 [ 67.139543][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.213336][ T5230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5230 comm=syz.1.569 [ 67.935903][ T5250] loop1: detected capacity change from 0 to 8192 [ 68.062275][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 68.062288][ T29] audit: type=1326 audit(1756244394.434:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.1.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e9219ebe9 code=0x0 [ 68.149098][ T29] audit: type=1400 audit(1756244394.514:1390): avc: denied { shutdown } for pid=5257 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.174018][ T29] audit: type=1400 audit(1756244394.544:1391): avc: denied { name_bind } for pid=5255 comm="syz.0.579" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 68.232969][ T5258] loop4: detected capacity change from 0 to 512 [ 68.249555][ T5258] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.258682][ T5258] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 68.269711][ T29] audit: type=1400 audit(1756244394.594:1392): avc: denied { connect } for pid=5257 comm="syz.4.580" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.290948][ T5256] sctp: [Deprecated]: syz.0.579 (pid 5256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.290948][ T5256] Use struct sctp_sack_info instead [ 68.291583][ T5258] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 68.318135][ T5258] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 68.326295][ T5258] System zones: 0-2, 18-18, 34-35 [ 68.333309][ T5258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.383981][ T5258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.580'. [ 68.413981][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.459268][ T5274] new mount options do not match the existing superblock, will be ignored [ 68.468495][ T5274] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 68.483946][ T29] audit: type=1326 audit(1756244385.856:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 68.487854][ T5277] loop3: detected capacity change from 0 to 512 [ 68.507346][ T29] audit: type=1326 audit(1756244385.856:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 68.537211][ T29] audit: type=1326 audit(1756244385.856:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 68.537922][ T5277] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.560632][ T29] audit: type=1326 audit(1756244385.856:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 68.560658][ T29] audit: type=1326 audit(1756244385.856:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 68.561603][ T29] audit: type=1326 audit(1756244385.856:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4b8ebe9 code=0x7ffc0000 [ 68.732954][ T5281] loop2: detected capacity change from 0 to 1024 [ 68.741139][ T5281] EXT4-fs: inline encryption not supported [ 68.751641][ T5281] EXT4-fs: Ignoring removed bh option [ 68.769306][ T3497] ================================================================== [ 68.775358][ T3397] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.777484][ T3497] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 68.785413][ T3397] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.791725][ T3497] [ 68.791732][ T3497] write to 0xffff8881046743dc of 4 bytes by task 3295 on cpu 0: [ 68.791746][ T3497] shmem_mknod+0x137/0x180 [ 68.815574][ T3497] shmem_create+0x34/0x50 [ 68.819900][ T3497] path_openat+0x1105/0x2170 [ 68.824488][ T3497] do_filp_open+0x109/0x230 [ 68.828970][ T3497] do_sys_openat2+0xa6/0x110 [ 68.833550][ T3497] __x64_sys_openat+0xf2/0x120 [ 68.838316][ T3497] x64_sys_call+0x2e9c/0x2ff0 [ 68.843439][ T3497] do_syscall_64+0xd2/0x200 [ 68.847939][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.853827][ T3497] [ 68.856138][ T3497] read to 0xffff8881046743dc of 4 bytes by task 3497 on cpu 1: [ 68.863665][ T3497] fill_mg_cmtime+0x5b/0x260 [ 68.868244][ T3497] generic_fillattr+0x24a/0x340 [ 68.873116][ T3497] shmem_getattr+0x181/0x200 [ 68.877690][ T3497] vfs_getattr_nosec+0x143/0x1e0 [ 68.882616][ T3497] vfs_statx+0x113/0x390 [ 68.886855][ T3497] vfs_fstatat+0x115/0x170 [ 68.891257][ T3497] __se_sys_newfstatat+0x55/0x260 [ 68.896269][ T3497] __x64_sys_newfstatat+0x55/0x70 [ 68.901282][ T3497] x64_sys_call+0x135a/0x2ff0 [ 68.905942][ T3497] do_syscall_64+0xd2/0x200 [ 68.910432][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.916395][ T3497] [ 68.918700][ T3497] value changed: 0x08c234c3 -> 0x08c8aa68 [ 68.924393][ T3497] [ 68.926695][ T3497] Reported by Kernel Concurrency Sanitizer on: [ 68.932823][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.942094][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.952219][ T3497] ================================================================== [ 68.987907][ T5286] fido_id[5286]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.002192][ T5281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.028220][ T5281] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 69.042974][ T5281] EXT4-fs (loop2): Remounting filesystem read-only [ 69.089800][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.