last executing test programs: 4.219331975s ago: executing program 3 (id=5781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0x2, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x318, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x1e0, 0x1, [@m_mpls={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x2}, @TCA_MPLS_TTL={0x0, 0x7, 0xab}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xfffffffe, 0x4, 0x4, 0x2, 0x80000001}, 0x1}}, @TCA_MPLS_PROTO={0x0, 0x4, 0x2}, @TCA_MPLS_TC={0x0, 0x6, 0x6}]}, {0x0, 0x6, "e9384c935b3f876d7e2424e3a0a12529960277fa33d190ae7ddeca19756c70a6ea0020c5d52303d7fd0b406f7852b755a846ed98430ae8cb2562bee011849aa9029c0092f37501ff6c4cfe0fb6199c7bde15d3098a842584844e701b0499dd9723cf72e3ac1135ad3cd54cf3e6d3912911624695b17d837cbff271d52126950c357c21611dd91b544c0129e9ca7dcc90409e3f94fad8aee4c5d1c21bf2307e73b2232730566974"}, {0x0, 0x7, {0x1336853272712a6d, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xc4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x7d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb22193"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x7c, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "e058ba14c615f8da254ffec478a6899aa08777c1d0c3e466b18a24b00d979762011c1e58f44be1e125aeae9a747d43afc8a85838cf3e5e3e61c3c09ff984058a15c730872cf33913b8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x124, 0x1, [@m_nat={0x120, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0xfffffffffffffe88, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x55, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f82"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) 4.06752584s ago: executing program 3 (id=5787): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x4000000000000004}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0) 3.979187808s ago: executing program 3 (id=5790): pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYRES32], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x20004800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = creat(0x0, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$qrtrtun(r3, &(0x7f0000000900)="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", 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, 0x0, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000080000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="7472616e733d5b802c7366646e6f3d6d201334e15c83ad1f5f32e03a80c71089f4dee38a9e2d203d505fc28862e4eae205fddfe10600000000000000801ff888c62e5093e82236d7be6c17ba853697dec7251b0e7016d0d3ad8283eeed52c22cc9aedc31ac2c920bcdc5bf5c698c6d08aae4edf4ee75219e514cc2df3e52454d353623f337eceb19f93aee73036f73f466cb535d82f54eb75ac06cba3652e29bb2e924114976ad94c1e43ac4075a6272f37a7ffe43f33a98a7da8ebe0c12f21ae8aa39ab3485e8b4c5a15e828b05ac534d10aec5ba424a274421629267ce982b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) 3.906759365s ago: executing program 3 (id=5794): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 3.851392941s ago: executing program 3 (id=5798): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ac000000000000000002000018010000786c6c25ff000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xb9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r4 = socket(0x8000000010, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r4, &(0x7f00000002c0)="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", 0xfc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x2, 0x3}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x97}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x400c0d0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r6}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) 2.912350793s ago: executing program 3 (id=5802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r1, &(0x7f0000000380)={&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1}, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4004550c, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES64=r0], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r12) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x58, r13, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x58}}, 0x8094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r11}, 0x18) 2.598195454s ago: executing program 4 (id=5808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4ee}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r10, @ANYBLOB="010326bd7000fcb9d8f56f54414b87c3d63c9a8edc5994a79c4e258aff9a12a7dbdf25260000001800018014000900"], 0x2c}}, 0x0) r11 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2.522871732s ago: executing program 1 (id=5810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000002000000000010010400000000000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) 2.476055836s ago: executing program 4 (id=5811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) 2.374920127s ago: executing program 4 (id=5812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000009500000000fdff7dcb23c864250095007f4dab5c48ac181751af84ef79aa43b98c3144598e1e72e447a975ccff1be137746a42b5475abb7dee3453c0c2400fe7b24559126de0803622f9f94807f7"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x8041, 0x32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5, 0x0, 0x8000000002}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) request_key(&(0x7f0000002cc0)='user\x00', &(0x7f0000002d00)={'syz', 0x2}, &(0x7f0000002d40)='user.incfs.metadata\x00', 0xfffffffffffffffe) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000080)=0x207, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x10003, 0x0) write$binfmt_elf64(r8, &(0x7f00000001c0)=ANY=[], 0x10034) 1.658056867s ago: executing program 0 (id=5816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="54cc72de4365e857751848a45fc9fc659e9455345c9f041118694dd401c61fcf9a0b5c5ef59aea9e03650ce84838a51bafd0d6ab8072c9062d0a33c9c378d96f634b0c54ad4d89a4769f7d684dcbb7fb0820a5a7ac1fc415325d0be22b8e96028cf6aa3753d1932f3eda22a28c76", @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES64=r5, @ANYRESOCT, @ANYRES16=r1, @ANYRES8=r1, @ANYRES64=r0, @ANYRESHEX=r4, @ANYRES64=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) r7 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.606011462s ago: executing program 1 (id=5817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000009500000000fdff7dcb23c864250095007f4dab5c48ac181751af84ef79aa43b98c3144598e1e72e447a975ccff1be137746a42b5475abb7dee3453c0c2400fe7b24559126de0803622f9f94807f7"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x8041, 0x32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5, 0x0, 0x8000000002}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) request_key(&(0x7f0000002cc0)='user\x00', &(0x7f0000002d00)={'syz', 0x2}, &(0x7f0000002d40)='user.incfs.metadata\x00', 0xfffffffffffffffe) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000080)=0x207, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x10003, 0x0) write$binfmt_elf64(r8, &(0x7f00000001c0)=ANY=[], 0x10034) 1.552170027s ago: executing program 0 (id=5818): openat(0xffffffffffffff9c, 0x0, 0x0, 0x26) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x950009ba) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000600)='./file0\x00', 0x2144840, 0x0, 0x3, 0x0, &(0x7f0000000100)) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) mount_setattr(r1, &(0x7f0000000040)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001e00)={r5, "a09ab80396301e32070954794f7d6952"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(0x0, 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.504321802s ago: executing program 4 (id=5819): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYRES8], 0x1, 0x207, &(0x7f00000026c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x214, &(0x7f0000002900)="$eJzs3c1qE1EUAOAzbZofEexOEIQRF7oq6hNUpIIYECpZ6K5gV51Vs5l0Yx/DV/C9fADpqhsZaWemiTFpY3ASLd+3ycmcc2buzWQm2eSmiNK3+1+i201iYzd24zyJ7diI2mkAALfJeVHE96L0592tJoYEADRsgc//HyseEgDQsPcfPr592e/v7adpN+LsNB/kg/KxzL9+0997ll7arlpanYn+i/zzdPq7w1meD7biTpV/UfanV+l2RAza8fRxmb/IvXrXT3/t78SnJicOAAAAAAAAAAAAAAAAAAAAAABr9DDS2vZ461meDzYvo52d6XyvypfPJtYHmlq/pxUP6uWBx8sDFZ9XMSkAAAAAAAAAAAAAAAAAAAD4zwxHJ0cHWXZ4PA46ETG5pTWjZn6QVDteqHj9wUZUQbsa94Ltvap8iYMm1UvU7AR7s0/uIkG0/pWzs8zgk4gs/Ts7bF9dJjNqepHMb9+87iqol8WY296+8X34ZH/ZeZ0XRZF9fXQ8HEVxbfH4HtFp+B4EAAAAAAAAAAAAAAAAAACUJn44/Zvu5jpGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACrNxyd1P/yf3J0kGWHx8PRgsG9y667cWNxfayt6K5rmgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxyPwMAAP//qDAPGg==") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xa00}]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210082, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@oldalloc}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000002040000000000000a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000c2943c6700000000850000006083000000bf0900000000000055090100000000009500000000000000184b00000200000000000000000000008500000028000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x6, &(0x7f00000007c0)=""/6, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x4, 0x6, 0x4}, {0x3, 0x2, 0xb, 0x4}, {0x2, 0x5, 0x5, 0xc}], 0x10, 0xa265}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="46b05a67187c8b1537eaf8ea8e4b760396", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$packet(0x11, 0xa, 0x300) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3fffff) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 1.480377844s ago: executing program 0 (id=5820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0x2, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000580)) write$sndseq(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x318, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x1e0, 0x1, [@m_mpls={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x2}, @TCA_MPLS_TTL={0x0, 0x7, 0xab}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xfffffffe, 0x4, 0x4, 0x2, 0x80000001}, 0x1}}, @TCA_MPLS_PROTO={0x0, 0x4, 0x2}, @TCA_MPLS_TC={0x0, 0x6, 0x6}]}, {0x0, 0x6, "e9384c935b3f876d7e2424e3a0a12529960277fa33d190ae7ddeca19756c70a6ea0020c5d52303d7fd0b406f7852b755a846ed98430ae8cb2562bee011849aa9029c0092f37501ff6c4cfe0fb6199c7bde15d3098a842584844e701b0499dd9723cf72e3ac1135ad3cd54cf3e6d3912911624695b17d837cbff271d52126950c357c21611dd91b544c0129e9ca7dcc90409e3f94fad8aee4c5d1c21bf2307e73b2232730566974"}, {0x0, 0x7, {0x1336853272712a6d, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xc4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x7d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb22193"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x7c, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "e058ba14c615f8da254ffec478a6899aa08777c1d0c3e466b18a24b00d979762011c1e58f44be1e125aeae9a747d43afc8a85838cf3e5e3e61c3c09ff984058a15c730872cf33913b8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x124, 0x1, [@m_nat={0x120, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0xfffffffffffffe88, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x55, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f82"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) 1.293168363s ago: executing program 0 (id=5821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4ee}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r10, @ANYBLOB="010326bd7000fcb9d8f56f54414b87c3d63c9a8edc5994a79c4e258aff9a12a7dbdf25260000001800018014000900"], 0x2c}}, 0x0) r11 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 1.244419068s ago: executing program 1 (id=5822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) socket(0x9, 0x1, 0x6) pidfd_send_signal(r2, 0x39, &(0x7f0000000340)={0x32, 0xd, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e79bb088a02186b4b644f942f14ef09f53da2", 0xb4}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "dd7da625128742a9", "98d5cf4b9c42168cf06b183bd84ef02c", "fe6f083a", "6f7b93cfe857dd75"}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x74a6dcb0e3d36dd6}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1bc, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8084}, 0x8011) 1.163176205s ago: executing program 0 (id=5824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 943.646787ms ago: executing program 1 (id=5825): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 906.143181ms ago: executing program 1 (id=5826): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 847.125047ms ago: executing program 1 (id=5828): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r1, &(0x7f0000001500)=ANY=[@ANYBLOB="8b6645930c808daa67d35cb1aacc930e115828599bef2b79149fe350e5a8b87630b548e69e2783429f52d4d117c72196009c396c4f48261836700982e03283232f67d73b756ea1979acab7c7c09366032cfeafd850cb343e9e8b4f1e208bcd86a41ebcb082e725f3c5ada39beb2b935000dcb6fb276b63ef"], 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x214, &(0x7f0000002900)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x0, 0xa00}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x2b}, r7}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2, &(0x7f00000026c0)=ANY=[@ANYBLOB="185000000800a7357404820000000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x33, &(0x7f0000000240)=""/51, 0x40f00, 0x2bd91184346f001d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xb, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=[{0x5, 0x5, 0x2, 0xa}, {0x1, 0x5, 0x9, 0x1}], 0x10, 0x1000, @value=r3}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r8, &(0x7f0000000280)=ANY=[], 0xff2e) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r11 = syz_open_pts(r8, 0x20800) dup3(r11, r8, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210082, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@oldalloc}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[], 0x20) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dd"], &(0x7f0000000100)='GPL\x00'}, 0x94) 750.171386ms ago: executing program 0 (id=5830): syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x1, 0x646, &(0x7f0000000740)="$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") syz_open_dev$sg(&(0x7f00000000c0), 0x40000003, 0x840) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000720000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0xb13c, 0x4, 0x5, 0x12088, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @value=r3}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xffff, 0x1000}], 0x1) semop(0x0, 0x0, 0x0) flock(r4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 700.733071ms ago: executing program 4 (id=5832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x3}}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xdf}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '!\',\x8f\x00'}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '*[(]{#(\'\x9a\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000800) 498.507691ms ago: executing program 2 (id=5833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4ee}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r10, @ANYBLOB="010326bd7000fcb9d8f56f54414b87c3d63c9a8edc5994a79c4e258aff9a12a7dbdf25260000001800018014000900"], 0x2c}}, 0x0) r11 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 475.075223ms ago: executing program 2 (id=5834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x82}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fstatfs(r1, 0x0) r2 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00009cf000/0x3000)=nil, 0x3000, 0x300000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd29, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 162.140984ms ago: executing program 2 (id=5835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_set_self_attr(0x0, 0x0, 0x65, 0x0) 154.547515ms ago: executing program 4 (id=5836): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usbip_server_init(0x4) writev(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 74.849663ms ago: executing program 2 (id=5837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000db210000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000005c0abd0c0602bf672a2960fd6294124cb38dd629ffab0c856377014d2ceea4278cc01d1c9c11177958a594952cf75838ccc1610b771658ea41892cf7ffbb6bc60f16af1d2cdde5b2fa3dd1da9cb6154af28c69af6665d1b3121cd61ed47bf1f1"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000004000000000000000000000000e500040000000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x194, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xdc103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000533000/0x4000)=nil, 0x4000, 0x3000006, 0x10, r3, 0x43e1c000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 33.734517ms ago: executing program 2 (id=5838): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=5839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0x2, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000580)) write$sndseq(r1, &(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x318, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x1e0, 0x1, [@m_mpls={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x2}, @TCA_MPLS_TTL={0x0, 0x7, 0xab}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xfffffffe, 0x4, 0x4, 0x2, 0x80000001}, 0x1}}, @TCA_MPLS_PROTO={0x0, 0x4, 0x2}, @TCA_MPLS_TC={0x0, 0x6, 0x6}]}, {0x0, 0x6, "e9384c935b3f876d7e2424e3a0a12529960277fa33d190ae7ddeca19756c70a6ea0020c5d52303d7fd0b406f7852b755a846ed98430ae8cb2562bee011849aa9029c0092f37501ff6c4cfe0fb6199c7bde15d3098a842584844e701b0499dd9723cf72e3ac1135ad3cd54cf3e6d3912911624695b17d837cbff271d52126950c357c21611dd91b544c0129e9ca7dcc90409e3f94fad8aee4c5d1c21bf2307e73b2232730566974"}, {0x0, 0x7, {0x1336853272712a6d, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xc4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x7d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb22193"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x7c, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "e058ba14c615f8da254ffec478a6899aa08777c1d0c3e466b18a24b00d979762011c1e58f44be1e125aeae9a747d43afc8a85838cf3e5e3e61c3c09ff984058a15c730872cf33913b8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x124, 0x1, [@m_nat={0x120, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0xfffffffffffffe88, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x55, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f82"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) kernel console output (not intermixed with test programs): 3.719:25092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19746 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f51927906f7 code=0x7ffc0000 [ 388.596591][ T29] audit: type=1326 audit(1760301123.719:25093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19746 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 388.620164][ T29] audit: type=1326 audit(1760301123.719:25094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19746 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f51927906f7 code=0x7ffc0000 [ 388.643785][ T29] audit: type=1326 audit(1760301123.719:25095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19746 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f519278db2a code=0x7ffc0000 [ 388.652336][T19760] SET target dimension over the limit! [ 388.800335][T19771] rdma_rxe: rxe_newlink: failed to add lo [ 388.853170][T19779] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.907376][T19781] loop4: detected capacity change from 0 to 2048 [ 388.916974][T19779] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.925733][T19781] ext4: Unknown parameter 'hash' [ 388.974411][T19779] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.090370][T19779] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.114738][T19789] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 389.201010][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.236920][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.337224][ T3467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.350713][ T3467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.530840][T19797] loop4: detected capacity change from 0 to 764 [ 389.543685][T19797] iso9660: Unknown parameter 'ÿ' [ 389.681726][T19801] SET target dimension over the limit! [ 389.799751][T19821] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.835799][T19827] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.846421][T19830] loop4: detected capacity change from 0 to 764 [ 389.854263][T19830] iso9660: Unknown parameter 'ÿ' [ 389.871765][T19821] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.912980][T19827] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.950229][T19821] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.010942][T19827] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.017606][T19839] 9pnet: Could not find request transport: [€ [ 390.032621][T19821] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.060038][T19827] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.109877][T19843] SET target dimension over the limit! [ 390.144523][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.180122][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.198110][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.225888][T19858] loop4: detected capacity change from 0 to 764 [ 390.226148][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.242700][T19858] iso9660: Unknown parameter 'ÿ' [ 390.272646][T19863] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 390.294548][T19866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4916'. [ 390.303593][T19866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4916'. [ 390.406651][T19876] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 390.413288][T19876] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 390.420817][T19876] vhci_hcd vhci_hcd.0: Device attached [ 390.450302][T19883] loop4: detected capacity change from 0 to 256 [ 390.471478][T19877] vhci_hcd: connection closed [ 390.472006][ T368] vhci_hcd: stop threads [ 390.481165][ T368] vhci_hcd: release socket [ 390.485620][ T368] vhci_hcd: disconnect device [ 390.493576][T19883] msdos: Unknown parameter 'ÿ' [ 390.521265][T19883] loop4: detected capacity change from 0 to 256 [ 390.556890][T19885] SET target dimension over the limit! [ 390.622466][T19891] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.637475][T19889] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 390.645128][T19889] FAT-fs (loop4): Filesystem has been set read-only [ 390.657795][T19891] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.708826][T19891] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.748454][T19891] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.063740][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4928'. [ 391.341778][T19917] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 391.348320][T19917] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 391.355779][T19917] vhci_hcd vhci_hcd.0: Device attached [ 391.379746][T19918] vhci_hcd: connection closed [ 391.379955][ T2909] vhci_hcd: stop threads [ 391.388967][ T2909] vhci_hcd: release socket [ 391.393503][ T2909] vhci_hcd: disconnect device [ 391.427463][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4936'. [ 391.455631][T19927] loop4: detected capacity change from 0 to 512 [ 391.470491][T19927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.483341][T19927] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.506879][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.529068][T19932] loop4: detected capacity change from 0 to 764 [ 391.535723][T19932] iso9660: Unknown parameter 'ÿ' [ 391.546273][T19932] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 391.601618][ T3467] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.612349][ T3467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.623798][ T3467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.635453][ T3467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.661524][T19937] rdma_rxe: rxe_newlink: failed to add lo [ 391.929500][T19962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4951'. [ 391.929528][T19966] rdma_rxe: rxe_newlink: failed to add lo [ 392.108017][T19980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4959'. [ 392.120747][T19975] SET target dimension over the limit! [ 392.144020][T19979] xt_hashlimit: max too large, truncated to 1048576 [ 392.193653][T19988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 392.200274][T19988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 392.207768][T19988] vhci_hcd vhci_hcd.0: Device attached [ 392.234250][T19989] vhci_hcd: connection closed [ 392.234541][ T31] vhci_hcd: stop threads [ 392.243558][ T31] vhci_hcd: release socket [ 392.248069][ T31] vhci_hcd: disconnect device [ 392.335634][T19997] rdma_rxe: rxe_newlink: failed to add lo [ 392.423937][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4967'. [ 392.438251][T20008] loop4: detected capacity change from 0 to 128 [ 392.451400][T20008] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.467053][T20008] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.523855][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.547058][T20015] FAULT_INJECTION: forcing a failure. [ 392.547058][T20015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.560231][T20015] CPU: 1 UID: 0 PID: 20015 Comm: syz.4.4970 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 392.560269][T20015] Tainted: [W]=WARN [ 392.560276][T20015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.560289][T20015] Call Trace: [ 392.560297][T20015] [ 392.560306][T20015] __dump_stack+0x1d/0x30 [ 392.560333][T20015] dump_stack_lvl+0xe8/0x140 [ 392.560358][T20015] dump_stack+0x15/0x1b [ 392.560397][T20015] should_fail_ex+0x265/0x280 [ 392.560443][T20015] should_fail+0xb/0x20 [ 392.560514][T20015] should_fail_usercopy+0x1a/0x20 [ 392.560541][T20015] _copy_from_user+0x1c/0xb0 [ 392.560651][T20015] ___sys_sendmsg+0xc1/0x1d0 [ 392.560712][T20015] __x64_sys_sendmsg+0xd4/0x160 [ 392.560758][T20015] x64_sys_call+0x191e/0x3000 [ 392.560800][T20015] do_syscall_64+0xd2/0x200 [ 392.560843][T20016] netlink: 'syz.0.4969': attribute type 10 has an invalid length. [ 392.560888][T20015] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 392.560915][T20015] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 392.560960][T20015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.560993][T20015] RIP: 0033:0x7f519278eec9 [ 392.561016][T20015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.561044][T20015] RSP: 002b:00007f51911f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.561072][T20015] RAX: ffffffffffffffda RBX: 00007f51929e5fa0 RCX: 00007f519278eec9 [ 392.561090][T20015] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000007 [ 392.561108][T20015] RBP: 00007f51911f7090 R08: 0000000000000000 R09: 0000000000000000 [ 392.561181][T20015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.561198][T20015] R13: 00007f51929e6038 R14: 00007f51929e5fa0 R15: 00007ffcd94f4c98 [ 392.561224][T20015] [ 392.609938][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 392.609961][ T29] audit: type=1326 audit(1760301127.869:25789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.736886][T20021] SET target dimension over the limit! [ 392.741993][ T29] audit: type=1326 audit(1760301127.869:25790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.805331][ T29] audit: type=1326 audit(1760301127.889:25791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.829033][ T29] audit: type=1326 audit(1760301127.889:25792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.852691][ T29] audit: type=1326 audit(1760301127.889:25793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.876423][ T29] audit: type=1326 audit(1760301127.889:25794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.900039][ T29] audit: type=1326 audit(1760301127.889:25795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.923820][ T29] audit: type=1326 audit(1760301127.889:25796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.947580][ T29] audit: type=1326 audit(1760301127.889:25797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 392.971245][ T29] audit: type=1326 audit(1760301127.889:25798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20017 comm="syz.4.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519278eec9 code=0x7ffc0000 [ 393.032647][T20031] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4977'. [ 393.108032][T20037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.117498][T20037] bond0: (slave bond1): Enslaving as an active interface with an up link [ 393.159753][T20041] loop4: detected capacity change from 0 to 128 [ 393.178304][T20041] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.190731][T20041] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 393.249808][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.271183][T20047] rdma_rxe: rxe_newlink: failed to add lo [ 393.323395][T20051] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 393.330120][T20051] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 393.337800][T20051] vhci_hcd vhci_hcd.0: Device attached [ 393.364415][T20054] vhci_hcd: connection closed [ 393.364605][ T31] vhci_hcd: stop threads [ 393.373632][ T31] vhci_hcd: release socket [ 393.378101][ T31] vhci_hcd: disconnect device [ 393.431563][ T3467] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.444029][ T3467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.459463][ T3467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.468246][ T3467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.992650][T20082] rdma_rxe: rxe_newlink: failed to add lo [ 394.186048][T20089] FAULT_INJECTION: forcing a failure. [ 394.186048][T20089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.199240][T20089] CPU: 0 UID: 0 PID: 20089 Comm: syz.0.4997 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.199280][T20089] Tainted: [W]=WARN [ 394.199289][T20089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.199352][T20089] Call Trace: [ 394.199360][T20089] [ 394.199370][T20089] __dump_stack+0x1d/0x30 [ 394.199398][T20089] dump_stack_lvl+0xe8/0x140 [ 394.199461][T20089] dump_stack+0x15/0x1b [ 394.199484][T20089] should_fail_ex+0x265/0x280 [ 394.199524][T20089] should_fail+0xb/0x20 [ 394.199575][T20089] should_fail_usercopy+0x1a/0x20 [ 394.199620][T20089] strncpy_from_user+0x25/0x230 [ 394.199690][T20089] ? kmem_cache_alloc_noprof+0x242/0x480 [ 394.199721][T20089] ? getname_flags+0x80/0x3b0 [ 394.199793][T20089] getname_flags+0xae/0x3b0 [ 394.199826][T20089] user_path_at+0x28/0x130 [ 394.199859][T20089] __se_sys_mount+0x25b/0x2e0 [ 394.199928][T20089] __x64_sys_mount+0x67/0x80 [ 394.199955][T20089] x64_sys_call+0x2b51/0x3000 [ 394.199977][T20089] do_syscall_64+0xd2/0x200 [ 394.200035][T20089] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 394.200101][T20089] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 394.200125][T20089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.200155][T20089] RIP: 0033:0x7f3982ad066a [ 394.200216][T20089] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.200235][T20089] RSP: 002b:00007f3981536e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.200254][T20089] RAX: ffffffffffffffda RBX: 00007f3981536ef0 RCX: 00007f3982ad066a [ 394.200267][T20089] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 394.200281][T20089] RBP: 0000200000000180 R08: 00007f3981536ef0 R09: 00000000000000e1 [ 394.200298][T20089] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000200000000100 [ 394.200314][T20089] R13: 00007f3981536eb0 R14: 0000000000000000 R15: 00002000000001c0 [ 394.200399][T20089] [ 394.215779][T20091] loop4: detected capacity change from 0 to 512 [ 394.437292][T20096] FAULT_INJECTION: forcing a failure. [ 394.437292][T20096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.450506][T20096] CPU: 1 UID: 0 PID: 20096 Comm: syz.0.5001 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.450541][T20096] Tainted: [W]=WARN [ 394.450586][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.450603][T20096] Call Trace: [ 394.450612][T20096] [ 394.450622][T20096] __dump_stack+0x1d/0x30 [ 394.450651][T20096] dump_stack_lvl+0xe8/0x140 [ 394.450678][T20096] dump_stack+0x15/0x1b [ 394.450697][T20096] should_fail_ex+0x265/0x280 [ 394.450810][T20096] should_fail+0xb/0x20 [ 394.450848][T20096] should_fail_usercopy+0x1a/0x20 [ 394.450876][T20096] _copy_to_iter+0x387/0xe70 [ 394.450934][T20096] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 394.450980][T20096] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 394.451064][T20096] __skb_datagram_iter+0xc6/0x690 [ 394.451095][T20096] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 394.451162][T20096] skb_copy_datagram_iter+0x3d/0x110 [ 394.451253][T20096] netlink_recvmsg+0x1a8/0x550 [ 394.451296][T20096] ? __pfx_netlink_recvmsg+0x10/0x10 [ 394.451336][T20096] sock_recvmsg+0x139/0x170 [ 394.451403][T20096] ____sys_recvmsg+0xf5/0x280 [ 394.451502][T20096] ___sys_recvmsg+0x11f/0x370 [ 394.451547][T20096] do_recvmmsg+0x1ef/0x540 [ 394.451589][T20096] ? get_timespec64+0xc9/0x100 [ 394.451620][T20096] __x64_sys_recvmmsg+0xfb/0x170 [ 394.451684][T20096] x64_sys_call+0x27aa/0x3000 [ 394.451707][T20096] do_syscall_64+0xd2/0x200 [ 394.451738][T20096] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 394.451804][T20096] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 394.451865][T20096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.451893][T20096] RIP: 0033:0x7f3982aceec9 [ 394.452053][T20096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.452070][T20096] RSP: 002b:00007f3981537038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 394.452087][T20096] RAX: ffffffffffffffda RBX: 00007f3982d25fa0 RCX: 00007f3982aceec9 [ 394.452100][T20096] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 394.452116][T20096] RBP: 00007f3981537090 R08: 0000200000003700 R09: 0000000000000000 [ 394.452132][T20096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.452147][T20096] R13: 00007f3982d26038 R14: 00007f3982d25fa0 R15: 00007ffc5f3989e8 [ 394.452166][T20096] [ 394.688706][T20098] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 394.720643][T20091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.746039][T20091] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.782954][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.821935][T20118] FAULT_INJECTION: forcing a failure. [ 394.821935][T20118] name failslab, interval 1, probability 0, space 0, times 0 [ 394.834696][T20118] CPU: 1 UID: 0 PID: 20118 Comm: syz.0.5008 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.834734][T20118] Tainted: [W]=WARN [ 394.834742][T20118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.834757][T20118] Call Trace: [ 394.834764][T20118] [ 394.834779][T20118] __dump_stack+0x1d/0x30 [ 394.834804][T20118] dump_stack_lvl+0xe8/0x140 [ 394.834847][T20118] dump_stack+0x15/0x1b [ 394.834867][T20118] should_fail_ex+0x265/0x280 [ 394.834909][T20118] should_failslab+0x8c/0xb0 [ 394.834940][T20118] kmem_cache_alloc_noprof+0x50/0x480 [ 394.834972][T20118] ? audit_log_start+0x342/0x720 [ 394.835027][T20118] audit_log_start+0x342/0x720 [ 394.835051][T20118] ? kstrtouint+0x76/0xc0 [ 394.835086][T20118] audit_seccomp+0x48/0x100 [ 394.835152][T20118] ? __seccomp_filter+0x82d/0x1250 [ 394.835187][T20118] __seccomp_filter+0x83e/0x1250 [ 394.835223][T20118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.835264][T20118] ? vfs_write+0x7e8/0x960 [ 394.835371][T20118] __secure_computing+0x82/0x150 [ 394.835405][T20118] syscall_trace_enter+0xcf/0x1e0 [ 394.835449][T20118] do_syscall_64+0xac/0x200 [ 394.835551][T20118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 394.835582][T20118] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 394.835648][T20118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.835677][T20118] RIP: 0033:0x7f3982aceec9 [ 394.835697][T20118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.835720][T20118] RSP: 002b:00007f3981537038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 394.835754][T20118] RAX: ffffffffffffffda RBX: 00007f3982d25fa0 RCX: 00007f3982aceec9 [ 394.835781][T20118] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000000000 [ 394.835797][T20118] RBP: 00007f3981537090 R08: 0000000000000000 R09: 0000000000000000 [ 394.835812][T20118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.835837][T20118] R13: 00007f3982d26038 R14: 00007f3982d25fa0 R15: 00007ffc5f3989e8 [ 394.835856][T20118] [ 394.836828][T20115] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 395.123040][T20137] loop4: detected capacity change from 0 to 764 [ 395.135417][T20137] iso9660: Unknown parameter 'ÿ' [ 395.257497][T20155] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 395.326755][T20166] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 395.508900][T20158] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5019'. [ 395.552532][T20188] loop4: detected capacity change from 0 to 2048 [ 395.553871][T20190] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 395.578859][T20188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.595594][T20188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5037'. [ 395.757553][T20216] netlink: 'syz.1.5048': attribute type 32 has an invalid length. [ 395.793300][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.876993][T20230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5050'. [ 395.901213][T20230] loop4: detected capacity change from 0 to 1024 [ 395.923355][T20230] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.946859][T20230] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 395.969742][T20230] EXT4-fs (loop4): orphan cleanup on readonly fs [ 395.991459][T20230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5050: Invalid inode table block 0 in block_group 0 [ 396.018313][T20230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 396.128937][T20230] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.5050: mark_inode_dirty error [ 396.146299][T20230] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5050: Failed to acquire dquot type 0 [ 396.168343][T20230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5050: Invalid inode table block 0 in block_group 0 [ 396.182655][T20230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 396.335554][T20250] FAULT_INJECTION: forcing a failure. [ 396.335554][T20250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.351186][T20250] CPU: 0 UID: 0 PID: 20250 Comm: syz.0.5061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 396.351263][T20250] Tainted: [W]=WARN [ 396.351338][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.351354][T20250] Call Trace: [ 396.351360][T20250] [ 396.351374][T20250] __dump_stack+0x1d/0x30 [ 396.351395][T20250] dump_stack_lvl+0xe8/0x140 [ 396.351417][T20250] dump_stack+0x15/0x1b [ 396.351439][T20250] should_fail_ex+0x265/0x280 [ 396.351561][T20250] should_fail+0xb/0x20 [ 396.351600][T20250] should_fail_usercopy+0x1a/0x20 [ 396.351626][T20250] _copy_from_iter+0xd2/0xe80 [ 396.351655][T20250] ? __build_skb_around+0x1ab/0x200 [ 396.351748][T20250] ? __alloc_skb+0x223/0x320 [ 396.351782][T20250] netlink_sendmsg+0x471/0x6b0 [ 396.351814][T20250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.351906][T20250] __sock_sendmsg+0x145/0x180 [ 396.351933][T20250] ____sys_sendmsg+0x31e/0x4e0 [ 396.351966][T20250] ___sys_sendmsg+0x17b/0x1d0 [ 396.352085][T20250] __x64_sys_sendmsg+0xd4/0x160 [ 396.352194][T20250] x64_sys_call+0x191e/0x3000 [ 396.352215][T20250] do_syscall_64+0xd2/0x200 [ 396.352239][T20250] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 396.352273][T20250] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 396.352340][T20250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.352361][T20250] RIP: 0033:0x7f3982aceec9 [ 396.352382][T20250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.352426][T20250] RSP: 002b:00007f3981537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.352445][T20250] RAX: ffffffffffffffda RBX: 00007f3982d25fa0 RCX: 00007f3982aceec9 [ 396.352458][T20250] RDX: 00000000240000c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 396.352470][T20250] RBP: 00007f3981537090 R08: 0000000000000000 R09: 0000000000000000 [ 396.352482][T20250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.352513][T20250] R13: 00007f3982d26038 R14: 00007f3982d25fa0 R15: 00007ffc5f3989e8 [ 396.352537][T20250] [ 396.598559][T20230] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.5050: mark_inode_dirty error [ 396.626125][T20230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5050: Invalid inode table block 0 in block_group 0 [ 396.639150][T20230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 396.652456][T20230] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 396.661636][T20230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5050: Invalid inode table block 0 in block_group 0 [ 396.674733][T20230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 396.684369][T20230] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.5050: mark_inode_dirty error [ 396.713960][T20230] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 396.723256][T20230] EXT4-fs (loop4): 1 truncate cleaned up [ 396.730396][T20230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.752042][T20222] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5050: Invalid inode table block 0 in block_group 0 [ 396.803392][T20230] xt_hashlimit: max too large, truncated to 1048576 [ 396.811373][T20230] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.5050: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 396.846416][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.006589][T20273] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 397.017942][T20275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5070'. [ 397.036360][T20275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5070'. [ 397.229876][T20291] lo speed is unknown, defaulting to 1000 [ 397.637183][T20298] lo speed is unknown, defaulting to 1000 [ 397.679907][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 397.679925][ T29] audit: type=1400 audit(1760301132.939:26384): avc: denied { map_create } for pid=20299 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 397.705891][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119843200: rx timeout, send abort [ 397.714117][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119842c00: rx timeout, send abort [ 397.722423][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119843200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 397.736751][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119842c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 397.758889][ T29] audit: type=1400 audit(1760301133.009:26385): avc: denied { create } for pid=20299 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.778739][ T29] audit: type=1400 audit(1760301133.009:26386): avc: denied { read } for pid=20299 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.798428][ T29] audit: type=1400 audit(1760301133.019:26387): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 397.820547][ T29] audit: type=1400 audit(1760301133.019:26388): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.842360][ T29] audit: type=1400 audit(1760301133.019:26389): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.864750][ T29] audit: type=1400 audit(1760301133.019:26390): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.887482][ T29] audit: type=1400 audit(1760301133.019:26391): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.960994][ T29] audit: type=1400 audit(1760301133.179:26392): avc: denied { map_read map_write } for pid=20304 comm="syz.0.5081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 397.981128][ T29] audit: type=1400 audit(1760301133.189:26393): avc: denied { mounton } for pid=20301 comm="syz.3.5080" path="/497/file0" dev="tmpfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 398.118068][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 398.167359][T20312] 9pnet: Could not find request transport: [€ [ 398.175493][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 398.190436][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 398.239812][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 398.289526][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 398.336694][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 398.759646][T20367] loop4: detected capacity change from 0 to 512 [ 398.801920][T20367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.814828][T20367] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.841766][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5104'. [ 398.936969][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.979130][T20392] loop4: detected capacity change from 0 to 512 [ 399.006232][T20392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.021399][T20392] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.062714][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.290251][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5116'. [ 399.331916][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5118'. [ 399.344388][T20424] lo speed is unknown, defaulting to 1000 [ 399.350823][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5116'. [ 399.498905][T20446] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 399.505477][T20446] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 399.513130][T20446] vhci_hcd vhci_hcd.0: Device attached [ 399.574218][T20423] SET target dimension over the limit! [ 399.614642][T20447] vhci_hcd: connection closed [ 399.614862][ T12] vhci_hcd: stop threads [ 399.623883][ T12] vhci_hcd: release socket [ 399.628339][ T12] vhci_hcd: disconnect device [ 399.761538][T20457] 9pnet: Could not find request transport: [€ [ 399.796596][T20455] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 399.847449][T20464] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 400.501527][T20482] loop4: detected capacity change from 0 to 256 [ 400.539026][T20482] msdos: Unknown parameter 'ÿ' [ 400.590696][T20482] loop4: detected capacity change from 0 to 256 [ 400.844668][T20488] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 400.852315][T20488] FAT-fs (loop4): Filesystem has been set read-only [ 400.922803][T20490] 9pnet: Could not find request transport: [€ [ 400.993961][T20493] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 401.197194][T20498] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.266007][T20500] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 401.272599][T20500] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 401.280113][T20500] vhci_hcd vhci_hcd.0: Device attached [ 401.293337][T20498] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.354206][T20501] vhci_hcd: connection closed [ 401.354376][ T52] vhci_hcd: stop threads [ 401.363418][ T52] vhci_hcd: release socket [ 401.367861][ T52] vhci_hcd: disconnect device [ 401.389093][T20498] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.507983][T20498] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.811965][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.867431][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.921576][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.973599][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.178415][T20524] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.364315][T20528] loop4: detected capacity change from 0 to 256 [ 402.401945][T20528] msdos: Unknown parameter 'ÿ' [ 402.629415][T20533] loop4: detected capacity change from 0 to 512 [ 402.671422][T20527] lo speed is unknown, defaulting to 1000 [ 402.684009][T20533] EXT4-fs: Ignoring removed oldalloc option [ 402.700973][T20524] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.757954][T20533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.802197][T20529] lo speed is unknown, defaulting to 1000 [ 402.817510][T20524] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.841885][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 402.841953][ T29] audit: type=1400 audit(1760301138.099:26858): avc: denied { mount } for pid=20526 comm="syz.4.5148" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 402.842336][T20533] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.967086][T20524] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.042689][ T29] audit: type=1400 audit(1760301138.299:26859): avc: denied { read } for pid=20542 comm="syz.1.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 403.106900][ T29] audit: type=1400 audit(1760301138.369:26860): avc: denied { prog_load } for pid=20544 comm="syz.1.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 403.126329][ T29] audit: type=1400 audit(1760301138.369:26861): avc: denied { bpf } for pid=20544 comm="syz.1.5152" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.147083][ T29] audit: type=1400 audit(1760301138.369:26862): avc: denied { perfmon } for pid=20544 comm="syz.1.5152" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.155953][ T3467] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.169144][ T29] audit: type=1400 audit(1760301138.369:26863): avc: denied { create } for pid=20526 comm="syz.4.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.177467][T20528] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.5148: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.196311][ T29] audit: type=1400 audit(1760301138.389:26864): avc: denied { prog_run } for pid=20526 comm="syz.4.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 403.225879][ T3467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.243332][T20528] EXT4-fs (loop4): Remounting filesystem read-only [ 403.272325][ T29] audit: type=1400 audit(1760301138.529:26865): avc: denied { map_create } for pid=20547 comm="syz.1.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 403.291875][ T29] audit: type=1400 audit(1760301138.529:26866): avc: denied { map_read map_write } for pid=20547 comm="syz.1.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 403.312117][ T29] audit: type=1400 audit(1760301138.529:26867): avc: denied { module_request } for pid=20546 comm="syz.3.5153" kmod="netdev-vlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 403.337119][ T3467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.346145][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.348784][ T3467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.388368][T20553] loop4: detected capacity change from 0 to 764 [ 403.396045][T20553] iso9660: Unknown parameter 'ÿ' [ 403.421557][T20553] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 403.486736][T20557] rdma_rxe: rxe_newlink: failed to add lo [ 403.551587][T20560] loop4: detected capacity change from 0 to 764 [ 403.568230][T20560] iso9660: Unknown parameter 'ÿ' [ 403.608006][T20560] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 403.636644][T20555] SET target dimension over the limit! [ 403.860876][T20573] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.944702][T20582] __nla_validate_parse: 9 callbacks suppressed [ 403.944729][T20582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5165'. [ 404.007881][T20573] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.357491][T20573] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.374442][T20576] xt_hashlimit: max too large, truncated to 1048576 [ 404.417888][T20573] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.528654][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.542901][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.558267][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5176'. [ 404.572833][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.587339][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.605944][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5176'. [ 404.636458][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5176'. [ 404.817540][T20613] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 404.824097][T20613] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.831594][T20613] vhci_hcd vhci_hcd.0: Device attached [ 404.854913][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5180'. [ 404.903340][T20616] vhci_hcd: connection closed [ 404.903724][ T12] vhci_hcd: stop threads [ 404.912850][ T12] vhci_hcd: release socket [ 404.917382][ T12] vhci_hcd: disconnect device [ 405.013777][T20612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.028806][T20612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.038743][T20612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5178'. [ 405.733521][T20652] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 405.795733][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5194'. [ 405.812670][T20656] netlink: 'syz.2.5194': attribute type 12 has an invalid length. [ 405.824037][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5194'. [ 405.833034][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'. [ 405.842066][T20656] netlink: 'syz.2.5194': attribute type 14 has an invalid length. [ 405.850042][T20656] netlink: 'syz.2.5194': attribute type 11 has an invalid length. [ 405.926675][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'. [ 406.363520][T20678] loop4: detected capacity change from 0 to 764 [ 406.378055][T20678] iso9660: Unknown parameter 'ÿ' [ 406.400347][T20682] veth0: entered promiscuous mode [ 406.407625][T20678] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 406.429178][T20681] veth0: left promiscuous mode [ 406.534006][T20675] SET target dimension over the limit! [ 406.625781][T20684] SET target dimension over the limit! [ 406.731986][T20695] lo speed is unknown, defaulting to 1000 [ 406.990835][T20699] rdma_rxe: rxe_newlink: failed to add lo [ 407.219303][T20704] xt_hashlimit: max too large, truncated to 1048576 [ 407.327521][T20708] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.393475][T20708] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.464635][T20708] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.534638][T20718] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.559242][T20708] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.589122][T20718] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.626316][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.646942][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.655195][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.667727][T20718] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.688017][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.718947][T20718] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.883683][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 407.883709][ T29] audit: type=1400 audit(1760301143.139:27307): avc: denied { write } for pid=20726 comm="syz.3.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 407.954988][ T29] audit: type=1326 audit(1760301143.209:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 407.979048][ T29] audit: type=1326 audit(1760301143.209:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.003310][ T29] audit: type=1326 audit(1760301143.209:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.027111][ T29] audit: type=1326 audit(1760301143.209:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.050820][ T29] audit: type=1326 audit(1760301143.209:27312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.074494][ T29] audit: type=1326 audit(1760301143.209:27313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.098339][ T29] audit: type=1326 audit(1760301143.209:27314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.122052][ T29] audit: type=1326 audit(1760301143.209:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.145783][ T29] audit: type=1326 audit(1760301143.209:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 408.344140][T20759] netlink: 'syz.1.5236': attribute type 4 has an invalid length. [ 408.365188][T20759] netlink: 'syz.1.5236': attribute type 4 has an invalid length. [ 408.381927][T20762] netlink: 'syz.1.5236': attribute type 4 has an invalid length. [ 408.471806][T20775] 9pnet: Could not find request transport: [€ [ 408.579908][T20785] FAULT_INJECTION: forcing a failure. [ 408.579908][T20785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.593151][T20785] CPU: 1 UID: 0 PID: 20785 Comm: syz.1.5246 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 408.593186][T20785] Tainted: [W]=WARN [ 408.593192][T20785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.593288][T20785] Call Trace: [ 408.593294][T20785] [ 408.593332][T20785] __dump_stack+0x1d/0x30 [ 408.593358][T20785] dump_stack_lvl+0xe8/0x140 [ 408.593384][T20785] dump_stack+0x15/0x1b [ 408.593438][T20785] should_fail_ex+0x265/0x280 [ 408.593620][T20785] should_fail+0xb/0x20 [ 408.593660][T20785] should_fail_usercopy+0x1a/0x20 [ 408.593720][T20785] copy_folio_from_iter_atomic+0x278/0x11b0 [ 408.593750][T20785] ? shmem_write_begin+0xa8/0x190 [ 408.593785][T20785] ? shmem_write_begin+0xe1/0x190 [ 408.593873][T20785] generic_perform_write+0x2c2/0x490 [ 408.593918][T20785] shmem_file_write_iter+0xc5/0xf0 [ 408.593941][T20785] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 408.594014][T20785] vfs_write+0x52a/0x960 [ 408.594104][T20785] __x64_sys_pwrite64+0xfd/0x150 [ 408.594137][T20785] x64_sys_call+0xc4d/0x3000 [ 408.594158][T20785] do_syscall_64+0xd2/0x200 [ 408.594226][T20785] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 408.594254][T20785] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 408.594284][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.594310][T20785] RIP: 0033:0x7f1106bfeec9 [ 408.594405][T20785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.594426][T20785] RSP: 002b:00007f110565f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 408.594452][T20785] RAX: ffffffffffffffda RBX: 00007f1106e55fa0 RCX: 00007f1106bfeec9 [ 408.594473][T20785] RDX: 00000000ffffff07 RSI: 0000200000000140 RDI: 0000000000000003 [ 408.594490][T20785] RBP: 00007f110565f090 R08: 0000000000000000 R09: 0000000000000000 [ 408.594506][T20785] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001 [ 408.594557][T20785] R13: 00007f1106e56038 R14: 00007f1106e55fa0 R15: 00007ffd6e4ed698 [ 408.594575][T20785] [ 408.813725][ T6418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.834431][ T6418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.844858][ T6418] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.865951][ T6418] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.941137][T20795] loop4: detected capacity change from 0 to 128 [ 408.961469][T20795] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.983310][T20802] 9pnet: Could not find request transport: [€ [ 408.985917][T20795] ext4 filesystem being mounted at /407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.060739][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.104642][T20815] loop4: detected capacity change from 0 to 512 [ 409.129520][T20815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.142712][T20815] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.190666][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.219707][T20829] __nla_validate_parse: 1 callbacks suppressed [ 409.219729][T20829] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5264'. [ 409.244566][T20829] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5264'. [ 409.284667][T20836] 9pnet: Could not find request transport: [€ [ 409.311954][T20841] loop4: detected capacity change from 0 to 512 [ 409.327387][T20841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.341609][T20841] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.367460][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.448302][T20853] FAULT_INJECTION: forcing a failure. [ 409.448302][T20853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.461618][T20853] CPU: 0 UID: 0 PID: 20853 Comm: syz.4.5272 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.461650][T20853] Tainted: [W]=WARN [ 409.461660][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.461676][T20853] Call Trace: [ 409.461685][T20853] [ 409.461696][T20853] __dump_stack+0x1d/0x30 [ 409.461722][T20853] dump_stack_lvl+0xe8/0x140 [ 409.461816][T20853] dump_stack+0x15/0x1b [ 409.461838][T20853] should_fail_ex+0x265/0x280 [ 409.461890][T20853] should_fail+0xb/0x20 [ 409.461931][T20853] should_fail_usercopy+0x1a/0x20 [ 409.462028][T20853] _copy_to_user+0x20/0xa0 [ 409.462061][T20853] simple_read_from_buffer+0xb5/0x130 [ 409.462086][T20853] proc_fail_nth_read+0x10e/0x150 [ 409.462138][T20853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.462193][T20853] vfs_read+0x1a8/0x770 [ 409.462222][T20853] ? __rcu_read_unlock+0x4f/0x70 [ 409.462261][T20853] ? __fget_files+0x184/0x1c0 [ 409.462341][T20853] ksys_read+0xda/0x1a0 [ 409.462374][T20853] __x64_sys_read+0x40/0x50 [ 409.462404][T20853] x64_sys_call+0x27c0/0x3000 [ 409.462474][T20853] do_syscall_64+0xd2/0x200 [ 409.462548][T20853] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 409.462584][T20853] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 409.462614][T20853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.462639][T20853] RIP: 0033:0x7f519278d8dc [ 409.462655][T20853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 409.462704][T20853] RSP: 002b:00007f51911f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.462724][T20853] RAX: ffffffffffffffda RBX: 00007f51929e5fa0 RCX: 00007f519278d8dc [ 409.462737][T20853] RDX: 000000000000000f RSI: 00007f51911f70a0 RDI: 0000000000000003 [ 409.462749][T20853] RBP: 00007f51911f7090 R08: 0000000000000000 R09: 0000000000000000 [ 409.462761][T20853] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 409.462775][T20853] R13: 00007f51929e6038 R14: 00007f51929e5fa0 R15: 00007ffcd94f4c98 [ 409.462801][T20853] [ 410.093442][T20877] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 410.738133][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5298'. [ 410.769283][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5296'. [ 410.773995][T20920] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 410.806672][T20917] lo speed is unknown, defaulting to 1000 [ 410.816216][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5298'. [ 410.865423][T20927] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 410.896821][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5298'. [ 410.942151][T20933] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 411.018608][T20940] lo speed is unknown, defaulting to 1000 [ 411.069216][T20943] lo speed is unknown, defaulting to 1000 [ 411.088289][T20947] loop4: detected capacity change from 0 to 512 [ 411.118475][T20947] EXT4-fs (loop4): too many log groups per flexible block group [ 411.145954][T20947] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 411.152794][T20947] EXT4-fs (loop4): mount failed [ 411.223641][T20958] 9pnet: Could not find request transport: [€ [ 411.301905][T20964] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 411.414201][T20975] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.449314][T20975] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.492489][T20979] netlink: 'syz.2.5321': attribute type 29 has an invalid length. [ 411.502020][T20975] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.552154][T20975] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.581460][T20985] loop4: detected capacity change from 0 to 256 [ 411.588419][T20985] msdos: Unknown parameter 'ÿ' [ 411.656630][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.656790][T20991] 9pnet: Could not find request transport: [€ [ 411.675232][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.700694][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.702953][T20993] loop4: detected capacity change from 0 to 512 [ 411.720345][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.759017][T20993] EXT4-fs: Ignoring removed oldalloc option [ 411.799937][T20999] rdma_rxe: rxe_newlink: failed to add lo [ 411.877869][T20993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.929447][T20993] ext4 filesystem being mounted at /433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 412.031612][T21016] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm GP: lblock 23 mapped to illegal pblock 18 (length 1) [ 412.046539][T21015] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.073335][T21016] EXT4-fs (loop4): Remounting filesystem read-only [ 412.109481][T21015] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.162011][T21015] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.213888][T21027] 9pnet: Could not find request transport: [€ [ 412.222134][T21015] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.241322][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.356091][T21026] SET target dimension over the limit! [ 412.462107][T21043] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 412.470255][T21047] vhci_hcd: invalid port number 96 [ 412.475409][T21047] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 412.572079][T21055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5349'. [ 412.600124][T21055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5349'. [ 412.619577][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5353'. [ 412.770802][T21076] loop4: detected capacity change from 0 to 512 [ 413.138590][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 413.138609][ T29] audit: type=1400 audit(1760301148.039:27656): avc: denied { mounton } for pid=21075 comm="" path="/438/file1" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 413.166810][ T29] audit: type=1400 audit(1760301148.059:27657): avc: denied { write } for pid=21077 comm="syz.0.5358" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 413.190322][ T29] audit: type=1400 audit(1760301148.219:27658): avc: denied { firmware_load } for pid=21056 comm="syz.2.5351" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 413.199798][T21076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.215513][ T29] audit: type=1400 audit(1760301148.249:27659): avc: denied { kexec_image_load } for pid=21056 comm="syz.2.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 413.248162][ T29] audit: type=1400 audit(1760301148.289:27660): avc: denied { create } for pid=21056 comm="syz.2.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 413.248487][T21076] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.365067][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.401036][ T29] audit: type=1400 audit(1760301148.509:27661): avc: denied { mount } for pid=21075 comm="" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 413.422178][ T29] audit: type=1400 audit(1760301148.549:27662): avc: denied { setopt } for pid=21082 comm="syz.1.5359" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.442850][ T29] audit: type=1400 audit(1760301148.549:27663): avc: denied { create } for pid=21082 comm="syz.1.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.462455][ T29] audit: type=1400 audit(1760301148.549:27664): avc: denied { name_bind } for pid=21082 comm="syz.1.5359" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 413.484388][ T29] audit: type=1400 audit(1760301148.549:27665): avc: denied { node_bind } for pid=21082 comm="syz.1.5359" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 413.688344][T21100] lo speed is unknown, defaulting to 1000 [ 413.917313][T21115] xt_hashlimit: max too large, truncated to 1048576 [ 414.170733][T21125] SET target dimension over the limit! [ 414.237733][T21141] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 414.258662][T21143] FAULT_INJECTION: forcing a failure. [ 414.258662][T21143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.271975][T21143] CPU: 0 UID: 0 PID: 21143 Comm: syz.1.5382 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 414.272064][T21143] Tainted: [W]=WARN [ 414.272072][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 414.272090][T21143] Call Trace: [ 414.272098][T21143] [ 414.272109][T21143] __dump_stack+0x1d/0x30 [ 414.272132][T21143] dump_stack_lvl+0xe8/0x140 [ 414.272156][T21143] dump_stack+0x15/0x1b [ 414.272173][T21143] should_fail_ex+0x265/0x280 [ 414.272219][T21143] should_fail+0xb/0x20 [ 414.272295][T21143] should_fail_usercopy+0x1a/0x20 [ 414.272324][T21143] _copy_from_user+0x1c/0xb0 [ 414.272350][T21143] ___sys_sendmsg+0xc1/0x1d0 [ 414.272396][T21143] __x64_sys_sendmsg+0xd4/0x160 [ 414.272432][T21143] x64_sys_call+0x191e/0x3000 [ 414.272480][T21143] do_syscall_64+0xd2/0x200 [ 414.272509][T21143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 414.272586][T21143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 414.272682][T21143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.272705][T21143] RIP: 0033:0x7f1106bfeec9 [ 414.272725][T21143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.272751][T21143] RSP: 002b:00007f110565f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.272788][T21143] RAX: ffffffffffffffda RBX: 00007f1106e55fa0 RCX: 00007f1106bfeec9 [ 414.272825][T21143] RDX: 0000000020000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 414.272841][T21143] RBP: 00007f110565f090 R08: 0000000000000000 R09: 0000000000000000 [ 414.272856][T21143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.272870][T21143] R13: 00007f1106e56038 R14: 00007f1106e55fa0 R15: 00007ffd6e4ed698 [ 414.272888][T21143] [ 414.693017][T21160] __nla_validate_parse: 10 callbacks suppressed [ 414.693033][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5390'. [ 414.714237][T21162] loop4: detected capacity change from 0 to 764 [ 414.736624][T21162] iso9660: Unknown parameter 'ÿ' [ 414.746613][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'. [ 414.774873][T21162] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 414.942261][T21177] SET target dimension over the limit! [ 415.409871][T21185] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 415.446969][T21189] rdma_rxe: rxe_newlink: failed to add lo [ 415.525079][T21195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5404'. [ 415.761450][T21224] FAULT_INJECTION: forcing a failure. [ 415.761450][T21224] name failslab, interval 1, probability 0, space 0, times 0 [ 415.774361][T21224] CPU: 0 UID: 0 PID: 21224 Comm: syz.2.5406 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 415.774398][T21224] Tainted: [W]=WARN [ 415.774405][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.774418][T21224] Call Trace: [ 415.774425][T21224] [ 415.774435][T21224] __dump_stack+0x1d/0x30 [ 415.774532][T21224] dump_stack_lvl+0xe8/0x140 [ 415.774558][T21224] dump_stack+0x15/0x1b [ 415.774580][T21224] should_fail_ex+0x265/0x280 [ 415.774694][T21224] should_failslab+0x8c/0xb0 [ 415.774721][T21224] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 415.774758][T21224] ? __d_alloc+0x3d/0x340 [ 415.774823][T21224] __d_alloc+0x3d/0x340 [ 415.774853][T21224] ? mpol_shared_policy_init+0xbd/0x4c0 [ 415.774882][T21224] d_alloc_pseudo+0x1e/0x80 [ 415.774957][T21224] alloc_file_pseudo+0x71/0x160 [ 415.774994][T21224] __shmem_file_setup+0x1de/0x210 [ 415.775091][T21224] shmem_file_setup+0x3b/0x50 [ 415.775122][T21224] __se_sys_memfd_create+0x2c3/0x590 [ 415.775153][T21224] __x64_sys_memfd_create+0x31/0x40 [ 415.775203][T21224] x64_sys_call+0x2ac2/0x3000 [ 415.775228][T21224] do_syscall_64+0xd2/0x200 [ 415.775256][T21224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 415.775285][T21224] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 415.775325][T21224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.775354][T21224] RIP: 0033:0x7f5da2f5eec9 [ 415.775370][T21224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.775392][T21224] RSP: 002b:00007f5da19bee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 415.775417][T21224] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f5da2f5eec9 [ 415.775433][T21224] RDX: 00007f5da19beef0 RSI: 0000000000000000 RDI: 00007f5da2fe2960 [ 415.775517][T21224] RBP: 00002000000005c0 R08: 00007f5da19bebb7 R09: 00007f5da19bee40 [ 415.775534][T21224] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 415.775551][T21224] R13: 00007f5da19beef0 R14: 00007f5da19beeb0 R15: 0000200000000000 [ 415.775577][T21224] [ 416.036568][T21235] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 416.060151][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 416.082539][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 416.115787][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 416.136075][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 416.154514][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 416.182250][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 416.309033][T21257] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 416.318913][T21258] rdma_rxe: rxe_newlink: failed to add lo [ 416.324776][ T6418] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.337485][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.362182][ T6418] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.386643][ T6418] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.526796][T21264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5417'. [ 416.748372][T21277] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5420' sets config #1 [ 416.884385][T21264] xt_hashlimit: max too large, truncated to 1048576 [ 416.971656][T21282] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 417.202593][T21290] rdma_rxe: rxe_newlink: failed to add lo [ 417.345224][T21304] loop4: detected capacity change from 0 to 512 [ 417.362685][T21304] EXT4-fs: Ignoring removed orlov option [ 417.374170][T21304] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5433: casefold flag without casefold feature [ 417.388494][T21304] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5433: couldn't read orphan inode 15 (err -117) [ 417.401543][T21304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.477276][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.499276][T21323] rdma_rxe: rxe_newlink: failed to add lo [ 417.590007][T21314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.603082][T21314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.176876][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 418.176900][ T29] audit: type=1326 audit(1760301153.439:28009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.208189][ T29] audit: type=1326 audit(1760301153.469:28010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.231866][ T29] audit: type=1326 audit(1760301153.469:28011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.255506][ T29] audit: type=1326 audit(1760301153.469:28012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.279144][ T29] audit: type=1326 audit(1760301153.469:28013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.302733][ T29] audit: type=1326 audit(1760301153.469:28014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.326406][ T29] audit: type=1326 audit(1760301153.469:28015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.350000][ T29] audit: type=1326 audit(1760301153.469:28016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21354 comm="syz.2.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 418.383153][T21356] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 418.393382][ T29] audit: type=1400 audit(1760301153.639:28017): avc: denied { append } for pid=21354 comm="syz.2.5451" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 418.423434][ T29] audit: type=1400 audit(1760301153.679:28018): avc: denied { map } for pid=21357 comm="syz.3.5452" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 418.561618][T21360] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.607706][T21360] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.656305][T21367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 418.662885][T21367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.670475][T21367] vhci_hcd vhci_hcd.0: Device attached [ 418.688422][T21360] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.735574][T21368] vhci_hcd: connection closed [ 418.736593][ T12] vhci_hcd: stop threads [ 418.745570][ T12] vhci_hcd: release socket [ 418.750125][ T12] vhci_hcd: disconnect device [ 418.756084][T21360] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.028040][T21383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 419.034720][T21383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 419.042304][T21383] vhci_hcd vhci_hcd.0: Device attached [ 419.085045][T21384] vhci_hcd: connection closed [ 419.085095][ T6418] vhci_hcd: stop threads [ 419.094124][ T6418] vhci_hcd: release socket [ 419.098606][ T6418] vhci_hcd: disconnect device [ 419.269561][T21391] lo speed is unknown, defaulting to 1000 [ 419.669231][T21397] loop4: detected capacity change from 0 to 256 [ 419.677564][T21397] msdos: Unknown parameter 'ÿ' [ 419.690424][T21398] xt_hashlimit: max too large, truncated to 1048576 [ 419.719617][T21397] loop4: detected capacity change from 0 to 256 [ 419.831620][T21406] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 419.839340][T21406] FAT-fs (loop4): Filesystem has been set read-only [ 419.846322][T21410] __nla_validate_parse: 8 callbacks suppressed [ 419.846343][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5468'. [ 420.018977][T21421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5471'. [ 420.090352][T21418] xt_hashlimit: max too large, truncated to 1048576 [ 420.807052][T21441] loop4: detected capacity change from 0 to 512 [ 420.818891][T21441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.831788][T21441] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.857748][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.881574][T21447] loop4: detected capacity change from 0 to 512 [ 420.897881][T21447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.910768][T21447] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.940594][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.954637][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5481'. [ 420.978061][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5481'. [ 421.007814][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5481'. [ 421.010713][T21457] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 421.024003][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5481'. [ 421.042559][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5481'. [ 421.082921][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.115989][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.133479][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5481'. [ 421.147621][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.156949][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.472083][T21493] lo speed is unknown, defaulting to 1000 [ 421.865950][T21497] 9pnet: Could not find request transport: [€ [ 422.274101][T21516] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.335788][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5501'. [ 422.383034][T21520] netlink: 'syz.1.5501': attribute type 12 has an invalid length. [ 422.415287][T21516] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.454491][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5501'. [ 422.463453][T21520] netlink: 'syz.1.5501': attribute type 14 has an invalid length. [ 422.471315][T21520] netlink: 'syz.1.5501': attribute type 11 has an invalid length. [ 422.528229][T21516] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.617067][T21516] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.873034][T21539] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 422.988601][ T6418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.084228][ T6418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.165837][ T6418] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.174579][ T6418] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.186061][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 423.186076][ T29] audit: type=1326 audit(1760301158.439:28206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21548 comm="syz.0.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 423.216342][ T29] audit: type=1326 audit(1760301158.479:28207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21548 comm="syz.0.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 423.240068][ T29] audit: type=1326 audit(1760301158.479:28208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21548 comm="syz.0.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 423.319676][ T29] audit: type=1326 audit(1760301158.479:28209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21548 comm="syz.0.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 423.343448][ T29] audit: type=1400 audit(1760301158.479:28210): avc: denied { associate } for pid=21549 comm="syz.1.5514" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 423.370677][ T29] audit: type=1400 audit(1760301158.529:28211): avc: denied { append } for pid=21549 comm="syz.1.5514" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 423.394585][ T29] audit: type=1400 audit(1760301158.529:28212): avc: denied { open } for pid=21549 comm="syz.1.5514" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 423.418741][ T29] audit: type=1400 audit(1760301158.529:28213): avc: denied { ioctl } for pid=21549 comm="syz.1.5514" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 423.431117][T21563] loop4: detected capacity change from 0 to 512 [ 423.444562][ T29] audit: type=1326 audit(1760301158.539:28214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21548 comm="syz.0.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 423.474498][ T29] audit: type=1326 audit(1760301158.539:28215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21548 comm="syz.0.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 423.508712][T21554] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.538423][T21563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.568178][T21564] SET target dimension over the limit! [ 423.587875][T21563] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.620559][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.632516][T21554] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.707956][T21554] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.792390][T21597] 9pnet: Could not find request transport: [€ [ 423.800264][T21554] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.878081][T21612] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 423.884682][T21612] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.892136][T21612] vhci_hcd vhci_hcd.0: Device attached [ 423.952357][T21613] vhci_hcd: connection closed [ 423.952577][ T368] vhci_hcd: stop threads [ 423.961589][ T368] vhci_hcd: release socket [ 423.966042][ T368] vhci_hcd: disconnect device [ 424.005762][T21618] SET target dimension over the limit! [ 424.162848][T21635] 9pnet: Could not find request transport: [€ [ 424.455980][T21653] xt_hashlimit: max too large, truncated to 1048576 [ 424.906044][T21670] 9pnet: Could not find request transport: [€ [ 425.180373][T21671] lo speed is unknown, defaulting to 1000 [ 425.557780][T21689] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 425.602248][T21691] loop4: detected capacity change from 0 to 128 [ 425.625315][T21691] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.667880][T21691] ext4 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 425.756608][T21696] __nla_validate_parse: 14 callbacks suppressed [ 425.756627][T21696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5559'. [ 425.777775][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.859372][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5561'. [ 425.864319][T21694] xt_hashlimit: max too large, truncated to 1048576 [ 425.869339][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5562'. [ 425.893171][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5562'. [ 425.901703][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5561'. [ 425.931264][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5562'. [ 425.938958][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5561'. [ 425.950495][T21713] 9pnet: Could not find request transport: [€ [ 426.242815][T21743] 9pnet: Could not find request transport: [€ [ 426.301170][T21749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'. [ 426.373568][T21749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'. [ 426.456151][T21749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'. [ 426.631214][T21762] syz2: rxe_newlink: already configured on lo [ 426.645111][T21764] loop4: detected capacity change from 0 to 764 [ 426.678366][T21764] iso9660: Unknown parameter 'ÿ' [ 426.724794][T21764] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 426.782930][T21772] loop4: detected capacity change from 0 to 128 [ 426.836099][T21772] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.854183][T21772] ext4 filesystem being mounted at /498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 426.966601][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.102005][T21721] Set syz1 is full, maxelem 65536 reached [ 427.137958][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.154248][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.164700][T21785] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.196281][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.211740][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.237177][T21785] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.312213][T21806] rdma_rxe: rxe_newlink: failed to add lo [ 427.389802][T21813] loop4: detected capacity change from 0 to 764 [ 427.396830][T21813] iso9660: Unknown parameter 'ÿ' [ 427.405995][T21785] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.420027][T21813] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 427.945144][T21785] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.998331][T21832] 9p: Unknown access argument ¿: -22 [ 428.008352][ T6418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.022072][ T6418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.033117][ T6418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.041641][ T6418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.242783][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 428.242797][ T29] audit: type=1326 audit(1760301163.499:28492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.272638][ T29] audit: type=1326 audit(1760301163.499:28493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.725447][T21847] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 428.735586][ T29] audit: type=1400 audit(1760301163.969:28494): avc: denied { kexec_image_load } for pid=21837 comm="syz.2.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 428.755753][ T29] audit: type=1326 audit(1760301163.979:28495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.779279][ T29] audit: type=1326 audit(1760301163.979:28496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.803073][ T29] audit: type=1326 audit(1760301163.979:28497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.826718][ T29] audit: type=1326 audit(1760301163.979:28498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.850210][ T29] audit: type=1326 audit(1760301163.979:28499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.873824][ T29] audit: type=1326 audit(1760301163.979:28500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 428.897451][ T29] audit: type=1326 audit(1760301163.979:28501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21846 comm="syz.1.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f1106bfeec9 code=0x7ffc0000 [ 429.068011][T21858] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.092650][T21859] rdma_rxe: rxe_newlink: failed to add lo [ 429.156764][T21871] vhci_hcd: invalid port number 96 [ 429.157877][T21858] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.161923][T21871] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 429.175267][T21876] loop4: detected capacity change from 0 to 128 [ 429.202733][T21876] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 429.227055][T21876] ext4 filesystem being mounted at /507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.227384][T21858] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.317327][T21893] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 429.317955][T21858] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.338180][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.384756][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.395916][T21899] netlink: 'syz.3.5631': attribute type 12 has an invalid length. [ 429.404885][T21899] netlink: 'syz.3.5631': attribute type 14 has an invalid length. [ 429.412884][T21899] netlink: 'syz.3.5631': attribute type 11 has an invalid length. [ 429.421034][ T368] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.460583][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.469522][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.506667][T21907] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 429.678660][T21920] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 430.026290][T21923] loop4: detected capacity change from 0 to 1024 [ 430.063307][T21923] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 430.177674][T21923] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 430.222140][T21923] EXT4-fs (loop4): orphan cleanup on readonly fs [ 430.266415][T21923] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5640: Invalid inode table block 0 in block_group 0 [ 430.426263][T21923] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 430.478683][T21923] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.5640: mark_inode_dirty error [ 430.490273][T21923] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5640: Failed to acquire dquot type 0 [ 430.501915][T21923] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5640: Invalid inode table block 0 in block_group 0 [ 430.516032][T21923] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 430.545542][T21923] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.5640: mark_inode_dirty error [ 430.567529][T21923] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5640: Invalid inode table block 0 in block_group 0 [ 430.594937][T21923] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 430.605646][T21939] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.618469][T21923] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 430.627717][T21923] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5640: Invalid inode table block 0 in block_group 0 [ 430.641151][T21923] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 430.650855][T21923] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.5640: mark_inode_dirty error [ 430.663123][T21923] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 430.672762][T21923] EXT4-fs (loop4): 1 truncate cleaned up [ 430.673927][T21939] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.679337][T21923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.712461][T21941] xt_hashlimit: max too large, truncated to 1048576 [ 430.720599][T21919] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5640: Invalid inode table block 0 in block_group 0 [ 430.733918][T21919] xt_hashlimit: max too large, truncated to 1048576 [ 430.742399][T21939] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.753198][T21919] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.5640: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 430.786884][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.807713][T21939] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.851791][T21952] loop4: detected capacity change from 0 to 128 [ 430.894044][ T6418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.909279][T21952] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.921904][ T6418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.930436][T21952] ext4 filesystem being mounted at /515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 430.962611][ T6418] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.973759][ T6418] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.019275][T14309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.136282][T21971] __nla_validate_parse: 17 callbacks suppressed [ 431.136304][T21971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5657'. [ 431.164464][T21972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5658'. [ 431.203628][T21972] loop4: detected capacity change from 0 to 1024 [ 431.216211][T21973] lo speed is unknown, defaulting to 1000 [ 431.218676][T21971] xt_hashlimit: max too large, truncated to 1048576 [ 431.238482][T21972] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 431.278503][T21972] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 431.298506][T21972] EXT4-fs (loop4): orphan cleanup on readonly fs [ 431.305758][T21972] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5658: Invalid inode table block 0 in block_group 0 [ 431.325851][T21972] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 431.343339][T21972] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.5658: mark_inode_dirty error [ 431.367937][T21972] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5658: Failed to acquire dquot type 0 [ 431.386308][T21972] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5658: Invalid inode table block 0 in block_group 0 [ 431.406075][T21972] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 431.421022][T21972] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.5658: mark_inode_dirty error [ 431.442548][T21972] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5658: Invalid inode table block 0 in block_group 0 [ 431.460143][T21972] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 431.493295][T21972] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 431.524344][T21972] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5658: Invalid inode table block 0 in block_group 0 [ 431.542351][T21972] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 431.552409][T21972] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.5658: mark_inode_dirty error [ 431.571837][T21978] SET target dimension over the limit! [ 431.581697][T21972] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 431.593073][T21972] EXT4-fs (loop4): 1 truncate cleaned up [ 431.599430][T21972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.614479][T21985] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.653771][T21970] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.5658: Invalid inode table block 0 in block_group 0 [ 431.677347][T21985] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.724163][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.760250][T21985] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.837766][T21985] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.942064][T21996] 9pnet: Could not find request transport: [€ [ 431.994620][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5670'. [ 432.037082][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5670'. [ 432.077408][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5670'. [ 432.136362][T22001] SET target dimension over the limit! [ 432.293214][T22008] SET target dimension over the limit! [ 432.300264][T22015] SET target dimension over the limit! [ 432.623773][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5677'. [ 432.646575][T22022] netlink: 'syz.2.5677': attribute type 12 has an invalid length. [ 432.712525][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5677'. [ 432.721534][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5677'. [ 432.730441][T22022] netlink: 'syz.2.5677': attribute type 14 has an invalid length. [ 432.738327][T22022] netlink: 'syz.2.5677': attribute type 11 has an invalid length. [ 432.751772][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5677'. [ 433.167120][T22042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 433.193789][T22044] loop4: detected capacity change from 0 to 512 [ 433.201061][T22044] EXT4-fs: Ignoring removed orlov option [ 433.212153][T22044] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5682: casefold flag without casefold feature [ 433.234821][T22044] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5682: couldn't read orphan inode 15 (err -117) [ 433.247262][T22044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.262343][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 433.262357][ T29] audit: type=1400 audit(1760301168.529:28833): avc: denied { add_name } for pid=22043 comm="syz.4.5682" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.290627][ T29] audit: type=1400 audit(1760301168.529:28834): avc: denied { create } for pid=22043 comm="syz.4.5682" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 433.311255][ T29] audit: type=1400 audit(1760301168.529:28835): avc: denied { read write open } for pid=22043 comm="syz.4.5682" path="/527/file0/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 433.381630][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.424328][T22060] loop4: detected capacity change from 0 to 256 [ 433.433715][T22060] msdos: Unknown parameter 'ÿ' [ 433.456134][T22060] loop4: detected capacity change from 0 to 256 [ 433.496563][ T29] audit: type=1400 audit(1760301168.749:28836): avc: denied { mount } for pid=22059 comm="syz.4.5686" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 433.588562][T22071] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.627470][T22071] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.757677][T22071] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.021254][T22071] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.080270][ T29] audit: type=1400 audit(1760301169.339:28837): avc: denied { unmount } for pid=14309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 434.206319][T22079] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 434.223714][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.240305][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.251857][T22081] loop4: detected capacity change from 0 to 256 [ 434.256599][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.267012][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.267934][T22081] msdos: Unknown parameter 'ÿ' [ 434.361354][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5696'. [ 434.387347][T22095] loop4: detected capacity change from 0 to 512 [ 434.410272][T22095] EXT4-fs: Ignoring removed oldalloc option [ 434.450069][T22095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.475936][T22095] ext4 filesystem being mounted at /530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 434.558293][T22095] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm GP: lblock 23 mapped to illegal pblock 18 (length 1) [ 434.582123][T22095] EXT4-fs (loop4): Remounting filesystem read-only [ 434.610545][ T29] audit: type=1326 audit(1760301169.869:28838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.2.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 434.634243][ T29] audit: type=1326 audit(1760301169.869:28839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.2.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 434.658003][ T29] audit: type=1326 audit(1760301169.869:28840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.2.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 434.746725][ T29] audit: type=1326 audit(1760301169.869:28841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.2.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 434.770358][ T29] audit: type=1326 audit(1760301169.869:28842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.2.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 434.838131][T22115] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 434.865986][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.909580][T22127] netlink: 'syz.4.5707': attribute type 12 has an invalid length. [ 434.920065][T22127] netlink: 'syz.4.5707': attribute type 14 has an invalid length. [ 434.928047][T22127] netlink: 'syz.4.5707': attribute type 11 has an invalid length. [ 435.072149][ T368] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.096126][T22152] loop4: detected capacity change from 0 to 256 [ 435.104716][ T368] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.118194][T22152] msdos: Unknown parameter 'ÿ' [ 435.128801][ T368] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.139278][ T368] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.154311][T22155] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 435.161712][T22152] loop4: detected capacity change from 0 to 256 [ 435.292204][T22168] netlink: 'syz.2.5724': attribute type 12 has an invalid length. [ 435.305022][ T6418] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.319808][T22165] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 435.327616][T22165] FAT-fs (loop4): Filesystem has been set read-only [ 435.357318][T22168] netlink: 'syz.2.5724': attribute type 14 has an invalid length. [ 435.365281][T22168] netlink: 'syz.2.5724': attribute type 11 has an invalid length. [ 435.387914][ T6418] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.448270][ T6418] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.514751][T22185] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.529960][ T6418] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.559222][T22185] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.570170][T22171] lo speed is unknown, defaulting to 1000 [ 435.619936][T22185] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.681165][T22193] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.693245][T22185] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.706561][T22171] chnl_net:caif_netlink_parms(): no params data found [ 435.747046][T22193] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.758013][T22171] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.765142][T22171] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.772727][T22171] bridge_slave_0: entered allmulticast mode [ 435.779429][T22171] bridge_slave_0: entered promiscuous mode [ 435.786558][T22171] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.793618][T22171] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.800922][T22171] bridge_slave_1: entered allmulticast mode [ 435.807493][T22171] bridge_slave_1: entered promiscuous mode [ 435.829510][T22171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.844349][T22193] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.867369][T22171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.898561][T22193] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.910896][T22171] team0: Port device team_slave_0 added [ 435.918380][T22171] team0: Port device team_slave_1 added [ 435.937346][T22171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.944410][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.970464][T22171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.981713][T22171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.988705][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.014802][T22171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.057783][T22171] hsr_slave_0: entered promiscuous mode [ 436.064312][T22171] hsr_slave_1: entered promiscuous mode [ 436.085950][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.098442][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.123102][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.156099][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.375466][T22226] lo speed is unknown, defaulting to 1000 [ 437.212613][T22238] lo speed is unknown, defaulting to 1000 [ 437.666887][T22241] __nla_validate_parse: 20 callbacks suppressed [ 437.666908][T22241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5744'. [ 437.961629][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5752'. [ 438.074350][T22261] SET target dimension over the limit! [ 438.486086][T22282] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 438.672080][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 438.672098][ T29] audit: type=1400 audit(1760301173.929:29043): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 438.700352][ T29] audit: type=1400 audit(1760301173.939:29044): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.721989][ T29] audit: type=1400 audit(1760301173.939:29045): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.743742][ T29] audit: type=1400 audit(1760301173.939:29046): avc: denied { search } for pid=3040 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.765576][ T29] audit: type=1400 audit(1760301173.939:29047): avc: denied { read } for pid=3040 comm="dhcpcd" name="n49" dev="tmpfs" ino=30832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.787465][ T29] audit: type=1400 audit(1760301173.939:29048): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=30832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.810670][ T29] audit: type=1400 audit(1760301173.939:29049): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=30832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.834338][ T29] audit: type=1400 audit(1760301173.989:29050): avc: denied { read open } for pid=22285 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.860109][ T29] audit: type=1400 audit(1760301173.989:29051): avc: denied { getattr } for pid=22285 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.885648][ T29] audit: type=1400 audit(1760301174.049:29052): avc: denied { add_name } for pid=22284 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.915031][ T6418] bridge_slave_1: left allmulticast mode [ 438.920824][ T6418] bridge_slave_1: left promiscuous mode [ 438.926484][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.934554][ T6418] bridge_slave_0: left allmulticast mode [ 438.940268][ T6418] bridge_slave_0: left promiscuous mode [ 438.945979][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.118367][ T6418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.128254][ T6418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.137980][ T6418] bond0 (unregistering): Released all slaves [ 439.146864][ T6418] bond1 (unregistering): Released all slaves [ 439.699745][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.726920][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.753294][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.777886][ T6418] hsr_slave_0: left promiscuous mode [ 439.799674][ T6418] hsr_slave_1: left promiscuous mode [ 439.841926][ T6418] veth1_macvtap: left promiscuous mode [ 439.847723][ T6418] veth0_macvtap: left promiscuous mode [ 439.853320][ T6418] veth1_vlan: left promiscuous mode [ 439.859745][ T6418] veth0_vlan: left promiscuous mode [ 439.924294][T22333] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5768'. [ 439.934510][T22333] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5768'. [ 439.966483][ T6418] team0 (unregistering): Port device team_slave_1 removed [ 439.979395][ T6418] team0 (unregistering): Port device team_slave_0 removed [ 440.018724][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.136252][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'. [ 440.164963][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'. [ 440.192142][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5775'. [ 440.217435][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'. [ 440.553729][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'. [ 440.620643][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5775'. [ 440.660756][T22171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.673974][T22171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.717239][T22171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.737384][T22171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.834862][T22376] 9pnet: Could not find request transport: [€ [ 440.901833][T22366] SET target dimension over the limit! [ 440.934644][T22171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.971003][T22171] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.021355][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.028505][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.086275][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.093521][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.111618][T22416] loop4: detected capacity change from 0 to 764 [ 441.128689][T22416] iso9660: Unknown parameter 'ÿ' [ 441.169303][T22416] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 441.213120][T22426] 9pnet: Could not find request transport: [€ [ 441.298673][T22171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.497663][T22456] netlink: 'syz.3.5798': attribute type 12 has an invalid length. [ 441.566351][T22477] lo speed is unknown, defaulting to 1000 [ 441.855756][T22482] lo speed is unknown, defaulting to 1000 [ 441.923017][T22171] veth0_vlan: entered promiscuous mode [ 442.008938][T22171] veth1_vlan: entered promiscuous mode [ 442.123290][T22171] veth0_macvtap: entered promiscuous mode [ 442.240908][T22171] veth1_macvtap: entered promiscuous mode [ 442.327874][T22494] 9pnet: Could not find request transport: [€ [ 442.346269][T22495] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 442.388368][T22171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.399476][T22499] netlink: 'syz.4.5804': attribute type 12 has an invalid length. [ 442.424737][T22171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.472734][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.495014][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.513286][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.536529][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.826464][T22528] loop4: detected capacity change from 0 to 512 [ 442.835270][T22528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 442.986505][T22528] EXT4-fs (loop4): 1 truncate cleaned up [ 443.003462][T22528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.471977][ T52] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.487658][T22542] __nla_validate_parse: 11 callbacks suppressed [ 443.487677][T22542] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5815'. [ 443.566844][ T52] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.657472][ T52] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.681148][T14309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.695567][T22539] lo speed is unknown, defaulting to 1000 [ 443.732379][T22562] loop4: detected capacity change from 0 to 256 [ 443.749749][T22562] msdos: Unknown parameter 'ÿ' [ 443.758323][ T52] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.790522][T22562] loop4: detected capacity change from 0 to 256 [ 443.797801][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5820'. [ 443.868888][ T52] bridge_slave_1: left allmulticast mode [ 443.874761][ T52] bridge_slave_1: left promiscuous mode [ 443.880450][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.919710][ T52] bridge_slave_0: left allmulticast mode [ 443.925498][ T52] bridge_slave_0: left promiscuous mode [ 443.931332][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.972847][T22580] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 443.980482][T22580] FAT-fs (loop4): Filesystem has been set read-only [ 444.109870][T22596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5823'. [ 444.169358][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.211008][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.231675][ T52] bond0 (unregistering): Released all slaves [ 444.245776][ T52] bond1 (unregistering): Released all slaves [ 444.298912][T22608] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5826'. [ 444.396883][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 444.396902][ T29] audit: type=1400 audit(1760301179.659:29173): avc: denied { write } for pid=22612 comm="syz.1.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 444.460986][ T52] hsr_slave_0: left promiscuous mode [ 444.471750][ T29] audit: type=1326 audit(1760301179.729:29174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22630 comm="syz.0.5830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 444.493649][T22634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.496180][ T29] audit: type=1326 audit(1760301179.729:29175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22630 comm="syz.0.5830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f3982aceec9 code=0x7ffc0000 [ 444.503346][T22634] IPv6: NLM_F_CREATE should be set when creating new route [ 444.526826][ T52] hsr_slave_1: left promiscuous mode [ 444.533993][T22634] IPv6: NLM_F_CREATE should be set when creating new route [ 444.546500][T22634] IPv6: NLM_F_CREATE should be set when creating new route [ 444.560703][ T52] veth1_macvtap: left promiscuous mode [ 444.564813][T22635] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 444.566503][ T52] veth0_macvtap: left promiscuous mode [ 444.585288][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5831'. [ 444.603507][ T52] veth1_vlan: left promiscuous mode [ 444.609141][ T52] veth0_vlan: left promiscuous mode [ 444.632714][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5831'. [ 444.664682][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5831'. [ 444.712712][ T52] team0 (unregistering): Port device team_slave_1 removed [ 444.716564][ T29] audit: type=1326 audit(1760301179.979:29176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.743601][ T29] audit: type=1326 audit(1760301179.979:29177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.767591][ T29] audit: type=1326 audit(1760301179.979:29178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.767884][ T52] team0 (unregistering): Port device team_slave_0 removed [ 444.791414][ T29] audit: type=1326 audit(1760301179.979:29179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.822019][ T29] audit: type=1326 audit(1760301179.979:29180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.845720][ T29] audit: type=1326 audit(1760301179.979:29181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.869349][ T29] audit: type=1326 audit(1760301179.979:29182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.2.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da2f5eec9 code=0x7ffc0000 [ 444.886459][T22652] SET target dimension over the limit! [ 444.932543][T22539] chnl_net:caif_netlink_parms(): no params data found [ 445.030012][T22539] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.037289][T22539] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.049437][T22539] bridge_slave_0: entered allmulticast mode [ 445.057985][T22673] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 445.064562][T22673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 445.072153][T22673] vhci_hcd vhci_hcd.0: Device attached [ 445.080489][T22539] bridge_slave_0: entered promiscuous mode [ 445.095359][T22539] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.102630][T22539] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.110559][T22539] bridge_slave_1: entered allmulticast mode [ 445.117298][T22539] bridge_slave_1: entered promiscuous mode [ 445.141730][T22539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.151444][T22674] vhci_hcd: connection closed [ 445.152867][ T31] vhci_hcd: stop threads [ 445.155034][T22539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.157631][ T31] vhci_hcd: release socket [ 445.175389][ T31] vhci_hcd: disconnect device [ 445.198655][T22539] team0: Port device team_slave_0 added [ 445.207105][T22539] team0: Port device team_slave_1 added [ 445.224757][T22687] ================================================================== [ 445.232903][T22687] BUG: KCSAN: data-race in __percpu_counter_init_many / copy_mm SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 445.234529][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5839'. [ 445.240575][T22687] [ 445.240585][T22687] write to 0xffff88810005fcf0 of 8 bytes by task 22688 on cpu 0: [ 445.240607][T22687] __percpu_counter_init_many+0x292/0x310 [ 445.265200][T22687] mm_init+0x6ab/0x7f0 [ 445.269308][T22687] mm_alloc+0x81/0xa0 [ 445.273299][T22687] alloc_bprm+0x20e/0x350 [ 445.277644][T22687] kernel_execve+0x85/0x660 [ 445.282157][T22687] call_usermodehelper_exec_async+0x197/0x250 [ 445.288237][T22687] ret_from_fork+0x122/0x1b0 [ 445.292836][T22687] ret_from_fork_asm+0x1a/0x30 [ 445.297607][T22687] [ 445.299930][T22687] read to 0xffff88810005f8c0 of 1408 bytes by task 22687 on cpu 1: [ 445.307824][T22687] copy_mm+0xe2/0x370 [ 445.311814][T22687] copy_process+0xd08/0x2000 [ 445.316414][T22687] kernel_clone+0x16c/0x5c0 [ 445.320934][T22687] __x64_sys_clone+0xe6/0x120 [ 445.325625][T22687] x64_sys_call+0x119c/0x3000 [ 445.330308][T22687] do_syscall_64+0xd2/0x200 [ 445.334819][T22687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.340716][T22687] [ 445.343038][T22687] Reported by Kernel Concurrency Sanitizer on: [ 445.349195][T22687] CPU: 1 UID: 0 PID: 22687 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 445.361009][T22687] Tainted: [W]=WARN [ 445.364821][T22687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.374879][T22687] ================================================================== [ 445.387558][T22539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.394529][T22539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.420466][T22539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.652911][ T52] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.697523][ T52] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.757746][ T52] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.807450][ T52] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.864976][ T52] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.909871][ T52] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.958459][ T52] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.005457][ T52] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.096511][ T52] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.137774][ T52] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.188032][ T52] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.237651][ T52] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.298388][ T52] bridge_slave_1: left allmulticast mode [ 446.304155][ T52] bridge_slave_1: left promiscuous mode [ 446.310215][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.319009][ T52] bridge_slave_0: left allmulticast mode [ 446.324734][ T52] bridge_slave_0: left promiscuous mode [ 446.330426][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.498485][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.508341][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.518106][ T52] bond0 (unregistering): Released all slaves [ 446.544694][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.554909][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.564653][ T52] bond0 (unregistering): (slave bond1): Releasing backup interface [ 446.572925][ T52] bond0 (unregistering): Released all slaves [ 446.581483][ T52] bond1 (unregistering): Released all slaves [ 446.602085][ T52] dvmrp1 (unregistering): left allmulticast mode [ 446.612888][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.622932][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.632905][ T52] bond0 (unregistering): Released all slaves [ 446.641627][ T52] bond1 (unregistering): (slave bond2): Releasing backup interface [ 446.649628][ T52] bond2 (unregistering): left promiscuous mode [ 446.656145][ T52] bond1 (unregistering): Released all slaves [ 446.664749][ T52] bond2 (unregistering): Released all slaves [ 446.722540][ T52] tipc: Disabling bearer [ 446.727738][ T52] tipc: Left network mode [ 446.829668][ T52] hsr_slave_0: left promiscuous mode [ 446.835317][ T52] hsr_slave_1: left promiscuous mode [ 446.842646][ T52] hsr_slave_0: left promiscuous mode [ 446.848352][ T52] hsr_slave_1: left promiscuous mode [ 446.855546][ T52] hsr_slave_0: left promiscuous mode [ 446.861290][ T52] hsr_slave_1: left promiscuous mode [ 446.873676][ T52] veth1_macvtap: left promiscuous mode [ 446.879412][ T52] veth0_macvtap: left promiscuous mode [ 446.884996][ T52] veth1_vlan: left promiscuous mode [ 446.890482][ T52] veth0_vlan: left promiscuous mode [ 446.896491][ T52] veth1_macvtap: left promiscuous mode [ 446.902033][ T52] veth0_macvtap: left promiscuous mode [ 446.907615][ T52] veth1_vlan: left promiscuous mode [ 446.912833][ T52] veth0_vlan: left promiscuous mode [ 446.918587][ T52] veth1_macvtap: left promiscuous mode [ 446.924094][ T52] veth0_macvtap: left promiscuous mode [ 446.929686][ T52] veth1_vlan: left promiscuous mode [ 446.934988][ T52] veth0_vlan: left promiscuous mode [ 447.050787][ T52] team0 (unregistering): Port device team_slave_1 removed [ 447.125527][ T52] team0 (unregistering): Port device team_slave_1 removed [ 447.136727][ T52] team0 (unregistering): Port device team_slave_0 removed [ 447.197515][ T52] team0 (unregistering): Port device team_slave_1 removed [ 447.207149][ T52] team0 (unregistering): Port device team_slave_0 removed [ 447.236383][ T23] lo speed is unknown, defaulting to 1000 [ 447.242226][ T23] syz2: Port: 1 Link DOWN [ 447.719444][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.778649][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.829476][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.877443][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.946037][ T52] bridge_slave_1: left allmulticast mode [ 447.951741][ T52] bridge_slave_1: left promiscuous mode [ 447.957516][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.966875][ T52] bridge_slave_0: left allmulticast mode [ 447.972587][ T52] bridge_slave_0: left promiscuous mode [ 447.978310][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.987089][ T52] bridge_slave_1: left allmulticast mode [ 447.992747][ T52] bridge_slave_1: left promiscuous mode [ 447.998503][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.006282][ T52] bridge_slave_0: left allmulticast mode [ 448.011919][ T52] bridge_slave_0: left promiscuous mode [ 448.017622][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.127958][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.137969][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.147400][ T52] bond0 (unregistering): Released all slaves [ 448.217837][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.227273][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.236705][ T52] bond0 (unregistering): Released all slaves [ 448.288979][ T52] hsr_slave_0: left promiscuous mode [ 448.294754][ T52] hsr_slave_1: left promiscuous mode [ 448.300707][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.308164][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.315647][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.323230][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.331771][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.342172][ T52] veth1_macvtap: left promiscuous mode [ 448.347915][ T52] veth0_macvtap: left promiscuous mode [ 448.353505][ T52] veth1_vlan: left promiscuous mode [ 448.358967][ T52] veth0_vlan: left promiscuous mode [ 448.425424][ T52] team0 (unregistering): Port device team_slave_1 removed [ 448.435137][ T52] team0 (unregistering): Port device team_slave_0 removed [ 448.469134][ T52] team0 (unregistering): Port device team_slave_1 removed [ 448.479143][ T52] team0 (unregistering): Port device team_slave_0 removed