last executing test programs: 1.996035917s ago: executing program 4 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xfffffffd}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {0x401, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0xd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.80159236s ago: executing program 4 (id=347): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe40346132311"], 0x10b8}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010828bd7000fcdbdf2505000000080002000300000008000300f1"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delqdisc={0x64, 0x25, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4, 0x3}, {0x10, 0xe}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x48e}]}}, @TCA_RATE={0x6, 0x5, {0x9b, 0xd}}]}, 0x64}}, 0x0) utimes(&(0x7f0000008800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x40042) 1.526573682s ago: executing program 1 (id=351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x80ce, 0xffffffffffffffe8}) r3 = gettid() r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x7, @remote, 'bridge_slave_1\x00'}}) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x400, 0xffffffff}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) r9 = dup3(r8, r0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r9, r7}, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000840)={[{@orlov}, {@grpjquota}, {@errors_remount}]}, 0x1, 0x4af, &(0x7f00000012c0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)={0x104, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe1, 0xa9, @random="23e42d0e2eb1a1a0402f66bcbc0b3e408f6f608e7d8f1ece80503f53fe22078bfaf594bdfe197db37d307c0c4c7fc269f361808384f38bff35a0cfaf5d8c1d579925eec579dd8d6a71fd36ea253a711702af5053be3dd2d38a68b6f257be59f8fbec1ee22b9b17121034d8f3a45f6c1bbb7ae4b2c37d8e2214afd81901c3208c58a2fcd7968b4b31cb2b9029ccf930c10e91066a3b3abfe32a879ed517fb99f2ef9d7499834870fc70537f4839082e6f6478bdd9e75dcabd37584904c714c5cde7cf864a72b43c30e084fcb8f49d3da79a2618dfc75dc05a288145c485"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x101}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000014}, 0x8004) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.211524108s ago: executing program 2 (id=355): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000000000000000000000000000000000033599931dd4cfeada19f1b62c285e20e3ab7295dd1a00a5fc0086978b64c85edcd07eca1eed894795862f5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x14, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/\x00'], 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="62648b308e856e20921800cda191938b9d6e000000000002000002000000007400850000000e0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000100008881c0c91fdc44d038e8df40e9dbe2b4b28d895a12733ae7aceb39ee3d1ccce4fa13903059c8552fd183b6b1578eb6ac110a4922fc602d7ccb7620b8259a650816d996075ce704c585ca61aff1cbbea5eba423ff35d0a30cbe07b5aca304257639b6366b5856bcc069389ac007700539cf7765ac4040fe7971"], 0x48) pipe(&(0x7f0000001540)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r8, 0x26, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0}, 0x40) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.187720392s ago: executing program 0 (id=356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) 942.89057ms ago: executing program 4 (id=357): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_gettime(0x0, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00C\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="929943e0a1bb43236b6288b9d6a930d034b6af0e6bc0118410a0e0d980cc3db1cbd9f9616032a32b695fb8b1082dbc464a87ebf1dbd330c03398f6e439c76702cc868dcc190715e72d0659ff01f1f52630e0bb21944dd3a5a6115c586b9ec4b157e457b49d923532b12b70e9e4b4fb8de517fb70e7d51ac120934cfeccc3d51e42edac3b36e9000ee5ba9836f505fca49193d19535b5321d683ed0cb3f78e08bd0a2ad3c26a4f298dbe6fbbe2f26abb3c742d6914732a1287b2e64453879f99be588ff52c2d97fc0dcb7c9fd", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4873, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x2, &(0x7f00000006c0), 0x2, 0x24e, &(0x7f0000001140)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x3385c8a, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) 829.640823ms ago: executing program 4 (id=358): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bh}, {}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4c9, &(0x7f0000000c00)="$eJzs3c1rXFUbAPBnZvLRpHnffrwv0lawhQr1g2bygTRRN67URUEsuFGoMZnGmEkmZCa1CQVT3XXhQhQFceFS8B/QjV1ZBHGte+lCKlojqCCMzEfSycekg006mvv7we2ce87tPOdkeE7unLmZG0Binaj8k4roi4hvIuJAbXf9ASdqDyu3Lo9XtlSUy+d+SlWPq+yvHrr6//ZHxHJE7IuI55+OeCW1OW5xcWl6LJ/Pzdf3s6WZuWxxcen01MzYZG4yNzs4cmZ0dGRgeGh0x8Z69e3Xrp79/NmuT3976+b1d778otKtvnpb4zh2Um3onXGooa4jIp7cjWBtkKmPp6fdHeFvqbx+/4uIk9X8PxCZ6qsJJEG5XC7/We5u1rxcBvasdPUcOJXuj4haOZ3u76+dw/8/etP5QrH06IXCwuxE7Vz5YHSmL0zlcwP19woHozNV2R+slm/vD23YH46ongO/m+mp7vePF/IT93aqAzbYvyH/f83U8h9ICG/5IbnkPySX/Ifkkv+QXPIfkkv+Q3LJf0gu+Q/JJf8hueQ/JJf8h0R67uzZylZe/fv3iYuLC9OFi6cncsXp/pmF8f7xwnz0Txa6P2vt+fKFwtzgY7FwKVvKFUvZ4uLS+ZnCwmzp/NTM2GRX5Dp3eTxA6w4dv/ZdKiKWH++pbhVd9Ta5Cntb+Y3adwDcQVe0dBjwb5Jp9wQEtI2lP0gu7/GBLb6id519zRrm7irqncICuyjd7g4AbXPqqM//IKms/0NyWf+H5Fp/ju9sAJKoPev/QDtZ/4fk6mu4/0+q4f5f/2m4d9dARPw3Ir7NdHav3usL2AvSP6TquX/qwIN9G1u7Ur9XFwW6IuL1D8+9f2msVJofrNT/vFZf+qBW39WO7gMtq+bvUP3RL3IASLSVW5fHV7e1yoO7H/fHp2oXIWyO31Ffm9xX/YyydyW17lqF1A5du7B8JSKObBU/Vb/fee2Tj96VzKb4h+uPqdpTVPvbUb1v+t3Ev/FJq/GPNsR/oCH+sbv+qUAyXKvMPwNb5X+6mtOxln/r55++Hbo+uvn8l16b/zJN5r/jLcZ49aM3bzSNfyXiWEd0xxbzX0c9fmqL+JW+nWox/s2XXrivWVv549rzbDX/rqqUsqWZuWxxcen01MzYZG4yNzs4cmZ0dGRgeGg0W12jzq6uVG/2xJGvr283/t4m8bcbf6Xu4RbH/8f9X714Ypv4D53c+vU/vE38noh4pMX4vwx9/3Kztkr8iSbjT2+M37DAV6kbbjF+8b1nuls8FAC4B4qLS9Nj+XxuXkFhNwvd/4xuKLRaaPfMBOy220nf7p4AAAAAAAAAAAAArboXlxO3e4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHvBXwEAAP//1/TNPQ==") symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) fcntl$setstatus(r0, 0x4, 0x46100) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ptrace(0x649fb4ba97e07a03, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20103, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) 760.017821ms ago: executing program 3 (id=359): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000039000000000000000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f00000030c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @remote, @void, {@generic={0x6003}}}, 0x0) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r9, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000180)={@ipv4={""/10, ""/2, @empty}}, &(0x7f00000001c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000300)={@private2}, &(0x7f0000000340)=0x14) socket$inet(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x80, 0x6, @link_local}, 0x14) 738.465834ms ago: executing program 4 (id=360): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010828bd7000fcdbdf250500000008000200030000000800"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delqdisc={0x64, 0x25, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x4, 0x3}, {0x10, 0xe}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x48e}]}}, @TCA_RATE={0x6, 0x5, {0x9b, 0xd}}]}, 0x64}}, 0x0) utimes(&(0x7f0000008800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x40042) 629.153717ms ago: executing program 1 (id=361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 618.277008ms ago: executing program 3 (id=362): bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffbff}, [@generic={0x3, 0x9, 0x0, 0x1ff, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000a80)=""/137, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0xf, 0x4fb2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x4, 0x5, 0x2, 0x6}, {0x4, 0x5, 0x4, 0x2}, {0x0, 0x5, 0xf, 0x7}, {0x0, 0x2, 0xd, 0x5}, {0x2, 0x4, 0x4, 0x5}, {0x0, 0x1, 0x6, 0xb}, {0x0, 0x5, 0xf}], 0x10, 0x6, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000c40)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) 550.302956ms ago: executing program 1 (id=363): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) 523.675399ms ago: executing program 3 (id=364): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x564, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0xb3c, &(0x7f00000002c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x10008, &(0x7f0000001400), 0x1, 0x7dd, &(0x7f00000005c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, 0x0, 0x4000) r5 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 477.068234ms ago: executing program 1 (id=365): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_gettime(0x0, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00C\x00'/28], 0x48) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x3385c8a, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 476.308455ms ago: executing program 1 (id=366): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000006940)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES16], 0x1, 0x15e, &(0x7f00000003c0)="$eJzs27/K01AYB+C39q+6dBaHgItTUa9AkQpiQFE66KRQXVop2CU69VK8QUE6dTtSI62WOvSjacrX51nywo8czjskJyck7+9+noxn80+zV8voNRrRehxZrBrRjxvRjNIiAIDrZJVS/Ewppe4ibn6PlFLdMwIAqnbF9b9b+cQAgMrY/wPA5bH+A8DlefP23YsneT58nWW9iB+LYlSMymOZP3ueDx9kv/W3Zy2LYtTc5A/LPPs3b8etP/mjvXkn7t8r83X29GW+k9+OcfXtAwAAwEUYZBt79/eDwf/ysvrr/cDO/r0Vd1onawMAOMD867fJh+n04xfFEYt2HGnA9UNY/e2cqojjjBP9iHNo56CiE2cxjW1R950JqNrmok8+/QMAAAAAAAAAAAAAgHN1it+J6u4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdv0KAAD//zVIUEo=") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) times(&(0x7f0000000380)) 423.459421ms ago: executing program 1 (id=367): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = semget$private(0x0, 0x0, 0x1a2) semctl$GETPID(r3, 0x1, 0xb, &(0x7f0000000140)=""/88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200), 0x175d9003) 311.794484ms ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x300, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 311.412664ms ago: executing program 32 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x300, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 302.311275ms ago: executing program 0 (id=370): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 288.731357ms ago: executing program 3 (id=371): quotactl$Q_SETQUOTA(0xffffffff80000900, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) 263.567619ms ago: executing program 2 (id=372): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f00000003c0)=@v3={0x3000000, [{0x1, 0x6}, {0x1}]}, 0x18, 0x1) 263.29971ms ago: executing program 0 (id=373): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 220.852705ms ago: executing program 0 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = fcntl$getown(r0, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000380)={0xfff, 0x1, 0x2}, &(0x7f00000007c0)=[{}, {}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) clock_adjtime(0x1, &(0x7f00000005c0)={0x1ff, 0x6, 0x7, 0x401, 0x5, 0x401, 0x1, 0x9, 0xa5, 0x7, 0x8fbf, 0x3ff, 0xffff, 0x1, 0xfffffffffffffffe, 0x7, 0x0, 0x958, 0x8000, 0x0, 0x5, 0x200, 0x3, 0x4, 0x9, 0x86}) 185.514549ms ago: executing program 0 (id=375): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x564, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0xb3c, &(0x7f00000002c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x10008, &(0x7f0000001400), 0x1, 0x7dd, &(0x7f00000005c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, 0x0, 0x4000) r5 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) 185.196789ms ago: executing program 2 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0xea, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 125.058366ms ago: executing program 2 (id=377): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bh}, {}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4c9, &(0x7f0000000c00)="$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") symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) fcntl$setstatus(r0, 0x4, 0x46100) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ptrace(0x649fb4ba97e07a03, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20103, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) 124.652566ms ago: executing program 3 (id=378): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_gettime(0x0, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00C\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="929943e0a1bb43236b6288b9d6a930d034b6af0e6bc0118410a0e0d980cc3db1cbd9f9616032a32b695fb8b1082dbc464a87ebf1dbd330c03398f6e439c76702cc868dcc190715e72d0659ff01f1f52630e0bb21944dd3a5a6115c586b9ec4b157e457b49d923532b12b70e9e4b4fb8de517fb70e7d51ac120934cfeccc3d51e42edac3b36e9000ee5ba9836f505fca49193d19535b5321d683ed0cb3f78e08bd0a2ad3c26a4f298dbe6fbbe2f26abb3c742d6914732a1287b2e64453879f99be588ff52c2d97fc0dcb7c9fd", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4873, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x2, &(0x7f00000006c0), 0x2, 0x24e, &(0x7f0000001140)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x3385c8a, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) 38.657646ms ago: executing program 2 (id=379): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) times(&(0x7f0000000380)) 6.13534ms ago: executing program 2 (id=380): r0 = open(&(0x7f0000000900)='.\x00', 0x14040, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket(0x2a, 0x4, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800e9ffffffffffffff000200000060b15145000000fed94da95fa5c1c3f70075d7f90f90b83d30a72b3fc497c6"], &(0x7f0000000180)=""/220, 0x1a, 0xdc, 0x1, 0xfffffc01, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) 4.33537ms ago: executing program 3 (id=381): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000f5ffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 0s ago: executing program 0 (id=382): r0 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file1\x00', 0x111441, 0x15) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b116f00000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001900fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x13f, 0x3}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8010000100001000000000000000000fc020000000000000000000000000000e0000001"], 0x1b8}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x8}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}], 0xffc8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x2c, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x6, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32, @ANYBLOB="60c000000800000024001280110001006e72696467655f736c617665000000000c000580050028"], 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000005c0)=@keyring={'key_or_keyring:', r6}) kernel console output (not intermixed with test programs): dit(1730378452.129:81): avc: denied { read } for pid=2999 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 26.097560][ T29] audit: type=1400 audit(1730378457.019:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.098814][ T3304] cgroup: Unknown subsys name 'net' [ 26.120372][ T29] audit: type=1400 audit(1730378457.019:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.147808][ T29] audit: type=1400 audit(1730378457.059:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.282714][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.288879][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.457210][ T29] audit: type=1400 audit(1730378457.379:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.481790][ T29] audit: type=1400 audit(1730378457.379:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.491733][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.502273][ T29] audit: type=1400 audit(1730378457.379:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.531165][ T29] audit: type=1400 audit(1730378457.379:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.551533][ T29] audit: type=1400 audit(1730378457.379:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.553306][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.576350][ T29] audit: type=1400 audit(1730378457.379:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.608438][ T29] audit: type=1400 audit(1730378457.429:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.730062][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.774264][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 27.814237][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.821379][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.828645][ T3316] bridge_slave_0: entered allmulticast mode [ 27.835251][ T3316] bridge_slave_0: entered promiscuous mode [ 27.845938][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.853065][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.860253][ T3316] bridge_slave_1: entered allmulticast mode [ 27.866806][ T3316] bridge_slave_1: entered promiscuous mode [ 27.877875][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.917053][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.943678][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.952917][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.960033][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.967324][ T3323] bridge_slave_0: entered allmulticast mode [ 27.973746][ T3323] bridge_slave_0: entered promiscuous mode [ 27.988338][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.004674][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.011785][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.018936][ T3323] bridge_slave_1: entered allmulticast mode [ 28.025415][ T3323] bridge_slave_1: entered promiscuous mode [ 28.079134][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.086315][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.093523][ T3315] bridge_slave_0: entered allmulticast mode [ 28.100039][ T3315] bridge_slave_0: entered promiscuous mode [ 28.107112][ T3316] team0: Port device team_slave_0 added [ 28.113686][ T3316] team0: Port device team_slave_1 added [ 28.120417][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.131611][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.141862][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.149028][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.156390][ T3315] bridge_slave_1: entered allmulticast mode [ 28.162658][ T3315] bridge_slave_1: entered promiscuous mode [ 28.174873][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.220090][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.230209][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.239521][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.246542][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.272507][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.292755][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.299892][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.307163][ T3320] bridge_slave_0: entered allmulticast mode [ 28.313718][ T3320] bridge_slave_0: entered promiscuous mode [ 28.325206][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.332210][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.358244][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.369751][ T3323] team0: Port device team_slave_0 added [ 28.376443][ T3323] team0: Port device team_slave_1 added [ 28.386932][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.394035][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.401250][ T3320] bridge_slave_1: entered allmulticast mode [ 28.407628][ T3320] bridge_slave_1: entered promiscuous mode [ 28.432927][ T3315] team0: Port device team_slave_0 added [ 28.445717][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.464899][ T3315] team0: Port device team_slave_1 added [ 28.477602][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.486899][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.493908][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.519916][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.531169][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.538239][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.564165][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.580184][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.587315][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.594483][ T3321] bridge_slave_0: entered allmulticast mode [ 28.600956][ T3321] bridge_slave_0: entered promiscuous mode [ 28.633505][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.640670][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.648073][ T3321] bridge_slave_1: entered allmulticast mode [ 28.654465][ T3321] bridge_slave_1: entered promiscuous mode [ 28.663040][ T3316] hsr_slave_0: entered promiscuous mode [ 28.669114][ T3316] hsr_slave_1: entered promiscuous mode [ 28.682215][ T3320] team0: Port device team_slave_0 added [ 28.688163][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.695190][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.721112][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.747102][ T3320] team0: Port device team_slave_1 added [ 28.759599][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.766589][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.792567][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.811499][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.823024][ T3323] hsr_slave_0: entered promiscuous mode [ 28.829204][ T3323] hsr_slave_1: entered promiscuous mode [ 28.835162][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.842808][ T3323] Cannot create hsr debugfs directory [ 28.865434][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.874980][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.881981][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.907924][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.919711][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.926729][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.952700][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.985257][ T3315] hsr_slave_0: entered promiscuous mode [ 28.991266][ T3315] hsr_slave_1: entered promiscuous mode [ 28.997143][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.004758][ T3315] Cannot create hsr debugfs directory [ 29.029121][ T3321] team0: Port device team_slave_0 added [ 29.035674][ T3321] team0: Port device team_slave_1 added [ 29.062511][ T3320] hsr_slave_0: entered promiscuous mode [ 29.068670][ T3320] hsr_slave_1: entered promiscuous mode [ 29.074780][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.082428][ T3320] Cannot create hsr debugfs directory [ 29.099966][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.107065][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.133020][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.157075][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.164152][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.190090][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.248554][ T3321] hsr_slave_0: entered promiscuous mode [ 29.255175][ T3321] hsr_slave_1: entered promiscuous mode [ 29.261026][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.268632][ T3321] Cannot create hsr debugfs directory [ 29.358005][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.375451][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.386150][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.395490][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.437105][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.446981][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.455982][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.470009][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.487958][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.498193][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.515588][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.524322][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.545949][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.564172][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.573141][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.593685][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.602858][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.616206][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.625329][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.634317][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.680062][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.712925][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.732667][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.740628][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.747824][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.775473][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.784728][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.791815][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.803065][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.820156][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.829653][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.836743][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.856997][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.867542][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.874680][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.890826][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.897969][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.913114][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.920194][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.950410][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.965128][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.979069][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.998522][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.005630][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.017816][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.028244][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.060964][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.068080][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.096853][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.104036][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.118543][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.125659][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.146955][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.161157][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.176591][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.187038][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.214295][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.233664][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.337104][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.380461][ T3316] veth0_vlan: entered promiscuous mode [ 30.389616][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.408693][ T3316] veth1_vlan: entered promiscuous mode [ 30.417122][ T3315] veth0_vlan: entered promiscuous mode [ 30.437235][ T3315] veth1_vlan: entered promiscuous mode [ 30.444640][ T3323] veth0_vlan: entered promiscuous mode [ 30.456213][ T3323] veth1_vlan: entered promiscuous mode [ 30.465565][ T3316] veth0_macvtap: entered promiscuous mode [ 30.480836][ T3315] veth0_macvtap: entered promiscuous mode [ 30.493349][ T3316] veth1_macvtap: entered promiscuous mode [ 30.509042][ T3323] veth0_macvtap: entered promiscuous mode [ 30.518570][ T3315] veth1_macvtap: entered promiscuous mode [ 30.526521][ T3323] veth1_macvtap: entered promiscuous mode [ 30.545411][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.558421][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.569119][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.580171][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.590647][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.603875][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.614514][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.624480][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.635096][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.646302][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.654550][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.665147][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.675786][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.697780][ T3321] veth0_vlan: entered promiscuous mode [ 30.704344][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.714840][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.724729][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.735311][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.746179][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.757823][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.766614][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.775493][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.784372][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.799220][ T3320] veth0_vlan: entered promiscuous mode [ 30.806780][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.815761][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.824628][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.833388][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.845224][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.854038][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.862840][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.871550][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.890902][ T3320] veth1_vlan: entered promiscuous mode [ 30.897358][ T3321] veth1_vlan: entered promiscuous mode [ 30.944463][ T3321] veth0_macvtap: entered promiscuous mode [ 30.952893][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.969174][ T3321] veth1_macvtap: entered promiscuous mode [ 30.981128][ T3320] veth0_macvtap: entered promiscuous mode [ 31.019677][ T3320] veth1_macvtap: entered promiscuous mode [ 31.041409][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.052052][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.061908][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.072433][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.082379][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.092896][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.104040][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.115415][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.126014][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.135996][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.146646][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.156571][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.156601][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 31.156613][ T29] audit: type=1400 audit(1730378462.049:132): avc: denied { create } for pid=3460 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.156638][ T29] audit: type=1326 audit(1730378462.049:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.167130][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.173261][ T29] audit: type=1326 audit(1730378462.049:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.173294][ T29] audit: type=1326 audit(1730378462.049:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.192807][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.215811][ T29] audit: type=1326 audit(1730378462.049:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.215872][ T29] audit: type=1326 audit(1730378462.049:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.215902][ T29] audit: type=1326 audit(1730378462.049:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.215950][ T29] audit: type=1326 audit(1730378462.049:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.225801][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.229874][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.248963][ T29] audit: type=1326 audit(1730378462.049:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.284432][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.305601][ T29] audit: type=1326 audit(1730378462.049:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3462 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8840e719 code=0x7ffc0000 [ 31.328617][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.328632][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.469269][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.479130][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.489591][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.500552][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.512555][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.523028][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.533105][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.543604][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.553500][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.564128][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.574006][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.584488][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.596385][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.607835][ T3471] vlan2: entered allmulticast mode [ 31.617654][ T3468] loop1: detected capacity change from 0 to 512 [ 31.624479][ T3468] ======================================================= [ 31.624479][ T3468] WARNING: The mand mount option has been deprecated and [ 31.624479][ T3468] and is ignored by this kernel. Remove the mand [ 31.624479][ T3468] option from the mount to silence this warning. [ 31.624479][ T3468] ======================================================= [ 31.660215][ T3468] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.667404][ T3321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.676238][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.685096][ T3321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.693908][ T3321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.706173][ T3468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.730643][ T3320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.739648][ T3320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748500][ T3320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.757298][ T3320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.954060][ T3498] loop3: detected capacity change from 0 to 512 [ 31.966025][ T3498] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.994831][ T3498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.013229][ T3482] loop4: detected capacity change from 0 to 512 [ 32.036278][ T3482] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.047689][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.140109][ T3507] vlan2: entered allmulticast mode [ 32.180899][ T3508] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 32.210697][ T3510] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 32.300749][ T3512] loop0: detected capacity change from 0 to 128 [ 32.328206][ T3512] syz.0.14: attempt to access beyond end of device [ 32.328206][ T3512] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 32.439865][ T368] kworker/u8:5: attempt to access beyond end of device [ 32.439865][ T368] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 32.466469][ T3514] sd 0:0:1:0: device reset [ 32.484732][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.517880][ T3516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 32.555892][ T3521] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 32.625421][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.686605][ T3529] sd 0:0:1:0: device reset [ 32.748118][ T3534] loop0: detected capacity change from 0 to 512 [ 32.761614][ T3534] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.795147][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.827509][ T3508] syz.3.4 (3508) used greatest stack depth: 10872 bytes left [ 32.848488][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.885853][ T3540] sd 0:0:1:0: device reset [ 32.912251][ T3537] vlan2: entered allmulticast mode [ 32.950029][ T3545] loop2: detected capacity change from 0 to 512 [ 32.966694][ T3543] loop3: detected capacity change from 0 to 512 [ 32.974394][ T3545] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.026055][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.071286][ T3543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.086177][ T3543] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.099025][ T3543] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.26: Failed to acquire dquot type 0 [ 33.115498][ T3543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.128427][ T3552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.151491][ T3552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 33.171572][ T3545] netlink: 'syz.2.27': attribute type 4 has an invalid length. [ 33.229983][ T3552] syz.4.28 (3552) used greatest stack depth: 10368 bytes left [ 33.245418][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.274327][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.344927][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 33.359206][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 33.390927][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 33.457763][ T3584] loop2: detected capacity change from 0 to 128 [ 33.462535][ T3587] sd 0:0:1:0: device reset [ 33.471315][ T3585] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.488789][ T3585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 33.520702][ T3585] loop3: detected capacity change from 0 to 512 [ 33.537935][ T3591] loop4: detected capacity change from 0 to 512 [ 33.547554][ T3589] vlan2: entered allmulticast mode [ 33.552168][ T3585] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.36: corrupted xattr block 255: invalid header [ 33.584822][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.597499][ T3591] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.606762][ T3595] loop1: detected capacity change from 0 to 128 [ 33.611328][ T3585] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 33.630242][ T3597] netlink: '+}[@': attribute type 21 has an invalid length. [ 33.638259][ T3585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.656562][ T3595] syz.1.39: attempt to access beyond end of device [ 33.656562][ T3595] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 33.677602][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.694737][ T3585] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.36: corrupted xattr block 255: invalid header [ 33.708500][ T3585] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 33.717350][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.773141][ T3602] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 33.793103][ T1085] kworker/u8:6: attempt to access beyond end of device [ 33.793103][ T1085] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 33.831434][ T3605] loop3: detected capacity change from 0 to 128 [ 33.884039][ T3591] netlink: 'syz.4.38': attribute type 4 has an invalid length. [ 33.907807][ T3609] Illegal XDP return value 3818428192 on prog (id 52) dev syz_tun, expect packet loss! [ 33.940082][ T3609] loop3: detected capacity change from 0 to 128 [ 33.966473][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.008652][ T3613] netlink: '+}[@': attribute type 21 has an invalid length. [ 34.030260][ T3613] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 34.030820][ T3609] syz.3.44: attempt to access beyond end of device [ 34.030820][ T3609] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 34.060703][ T3619] loop4: detected capacity change from 0 to 512 [ 34.068249][ T3619] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.093282][ T3619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.103091][ T3629] netlink: '+}[@': attribute type 21 has an invalid length. [ 34.201409][ T3630] netlink: 'syz.4.49': attribute type 4 has an invalid length. [ 34.221847][ T368] kworker/u8:5: attempt to access beyond end of device [ 34.221847][ T368] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 34.239976][ T3629] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 34.296210][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.909966][ T3656] netlink: '+}[@': attribute type 21 has an invalid length. [ 34.940771][ T3656] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 34.960572][ T3659] vlan2: entered allmulticast mode [ 34.975332][ T3657] loop1: detected capacity change from 0 to 512 [ 34.994248][ T3657] EXT4-fs: Ignoring removed orlov option [ 35.014967][ T3657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.031921][ T3666] loop2: detected capacity change from 0 to 512 [ 35.034216][ T3670] loop0: detected capacity change from 0 to 512 [ 35.045253][ T3670] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.049650][ T3657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.077335][ T3670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.080468][ T3657] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.111044][ T3666] EXT4-fs: Ignoring removed orlov option [ 35.118166][ T3657] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.60: bg 0: block 255: padding at end of block bitmap is not set [ 35.125738][ T3666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.132768][ T3657] EXT4-fs (loop1): Remounting filesystem read-only [ 35.154714][ T3676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.166421][ T3676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 35.172671][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 35.186209][ T3657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 35.244591][ T3684] vlan2: entered allmulticast mode [ 35.272433][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.277343][ T3670] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 35.285773][ T3666] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.299040][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.315789][ T3666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.64: bg 0: block 255: padding at end of block bitmap is not set [ 35.333541][ T3666] EXT4-fs (loop2): Remounting filesystem read-only [ 35.364236][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.373282][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.383099][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.383452][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.393954][ T3692] loop4: detected capacity change from 0 to 512 [ 35.402151][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.410295][ T3692] EXT4-fs: Ignoring removed orlov option [ 35.423425][ T3692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.432041][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.441015][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.450481][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 35.459612][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 35.475834][ T3692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.494935][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.501992][ T3692] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.504046][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.523155][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.532028][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 35.540953][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.550189][ T3666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 35.562024][ T3692] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.73: bg 0: block 255: padding at end of block bitmap is not set [ 35.577884][ T3692] EXT4-fs (loop4): Remounting filesystem read-only [ 35.584866][ T3702] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 35.596036][ T3702] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 35.630260][ T3699] loop0: detected capacity change from 0 to 512 [ 35.638431][ T3699] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.662208][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.681279][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.692132][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.735160][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 35.760639][ T3711] netlink: '+}[@': attribute type 21 has an invalid length. [ 35.769876][ T3711] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 35.944371][ T3718] loop4: detected capacity change from 0 to 512 [ 35.951366][ T3718] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.962961][ T3718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.087116][ T3723] loop1: detected capacity change from 0 to 128 [ 36.118209][ T3723] syz.1.80: attempt to access beyond end of device [ 36.118209][ T3723] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 36.208673][ T3731] Zero length message leads to an empty skb [ 36.240220][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.251490][ T11] kworker/u8:0: attempt to access beyond end of device [ 36.251490][ T11] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 36.267401][ T29] kauditd_printk_skb: 1019 callbacks suppressed [ 36.267417][ T29] audit: type=1400 audit(1730378467.169:1153): avc: denied { create } for pid=3733 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.294122][ T29] audit: type=1400 audit(1730378467.179:1154): avc: denied { write } for pid=3733 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.314316][ T29] audit: type=1400 audit(1730378467.179:1155): avc: denied { nlmsg_write } for pid=3733 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.335284][ T29] audit: type=1400 audit(1730378467.199:1156): avc: denied { setopt } for pid=3733 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.395196][ T3741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 36.412577][ T29] audit: type=1326 audit(1730378467.339:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a548e719 code=0x7ffc0000 [ 36.490590][ T29] audit: type=1326 audit(1730378467.359:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0a548e719 code=0x7ffc0000 [ 36.513918][ T29] audit: type=1326 audit(1730378467.359:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a548e719 code=0x7ffc0000 [ 36.537249][ T29] audit: type=1326 audit(1730378467.359:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a548e719 code=0x7ffc0000 [ 36.560568][ T29] audit: type=1326 audit(1730378467.359:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0a548e719 code=0x7ffc0000 [ 36.583830][ T29] audit: type=1326 audit(1730378467.359:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a548e719 code=0x7ffc0000 [ 36.630333][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.631131][ T3748] loop1: detected capacity change from 0 to 2048 [ 36.657422][ T3752] Invalid ELF header magic: != ELF [ 36.701129][ T3760] loop0: detected capacity change from 0 to 512 [ 36.711425][ T3754] Invalid ELF header magic: != ELF [ 36.720494][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.765271][ T3766] Invalid ELF header magic: != ELF [ 36.767433][ T3758] loop4: detected capacity change from 0 to 512 [ 36.772771][ T3764] loop3: detected capacity change from 0 to 1024 [ 36.784494][ T3764] EXT4-fs: Ignoring removed i_version option [ 36.790674][ T3760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.793892][ T3758] EXT4-fs: Ignoring removed orlov option [ 36.804127][ T3760] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.814103][ T3758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.825913][ T3760] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.97: Failed to acquire dquot type 0 [ 36.839938][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.852399][ T3764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.871010][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.883067][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 36.886361][ T3758] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.928468][ T3758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.94: bg 0: block 255: padding at end of block bitmap is not set [ 36.935736][ T3777] loop1: detected capacity change from 0 to 512 [ 36.952188][ T3777] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.953017][ T3758] EXT4-fs (loop4): Remounting filesystem read-only [ 36.985005][ T3777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.999491][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.002883][ T3779] loop2: detected capacity change from 0 to 512 [ 37.011237][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.044779][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.047474][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 37.058656][ T3779] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.069539][ T3758] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 37.098056][ T3779] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.102: Failed to acquire dquot type 0 [ 37.123910][ T3785] Invalid ELF header magic: != ELF [ 37.189740][ T3777] netlink: 'syz.1.100': attribute type 4 has an invalid length. [ 37.208899][ T3787] loop3: detected capacity change from 0 to 512 [ 37.218307][ T3787] EXT4-fs: Ignoring removed orlov option [ 37.224782][ T3787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.239766][ T3791] loop0: detected capacity change from 0 to 512 [ 37.247199][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.248004][ T3791] EXT4-fs: Ignoring removed orlov option [ 37.262588][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.268877][ T3791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.280504][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.291131][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.302995][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.319009][ T3791] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.326502][ T3787] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.371302][ T3791] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.106: bg 0: block 255: padding at end of block bitmap is not set [ 37.391517][ T3791] EXT4-fs (loop0): Remounting filesystem read-only [ 37.399425][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.408659][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.418193][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.427198][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.436319][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.438043][ T3803] loop2: detected capacity change from 0 to 512 [ 37.453791][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.471310][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 37.480285][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 37.482783][ T3803] EXT4-fs: Ignoring removed orlov option [ 37.496237][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.505385][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.522079][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.531063][ T3803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.531120][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 37.557414][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.567326][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 37.578657][ T3791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 37.596998][ T3813] netlink: '+}[@': attribute type 21 has an invalid length. [ 37.605494][ T3803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.620315][ T3803] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.644637][ T3813] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 37.656889][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.735687][ T3816] loop3: detected capacity change from 0 to 2048 [ 37.756165][ T3816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.761813][ T3820] loop0: detected capacity change from 0 to 512 [ 37.790490][ T3820] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.807540][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.825309][ T3820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.901163][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.923989][ T3826] vlan2: entered allmulticast mode [ 38.037689][ T3834] netlink: 'syz.0.115': attribute type 4 has an invalid length. [ 38.112173][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.255673][ T3845] loop2: detected capacity change from 0 to 2048 [ 38.274392][ T3845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.302741][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.348249][ T3851] loop1: detected capacity change from 0 to 512 [ 38.366112][ T3856] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 38.387551][ T3851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.124: bg 0: block 5: invalid block bitmap [ 38.403108][ T3851] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 38.416536][ T3851] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.124: invalid indirect mapped block 3 (level 2) [ 38.458214][ T3851] EXT4-fs (loop1): 1 orphan inode deleted [ 38.464073][ T3851] EXT4-fs (loop1): 1 truncate cleaned up [ 38.470249][ T3851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.484144][ T3851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.497980][ T3863] FAULT_INJECTION: forcing a failure. [ 38.497980][ T3863] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.511197][ T3863] CPU: 0 UID: 0 PID: 3863 Comm: syz.4.129 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 38.521923][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.531999][ T3863] Call Trace: [ 38.535289][ T3863] [ 38.538338][ T3863] dump_stack_lvl+0xf2/0x150 [ 38.542971][ T3863] dump_stack+0x15/0x20 [ 38.547208][ T3863] should_fail_ex+0x223/0x230 [ 38.549265][ T3861] loop2: detected capacity change from 0 to 8192 [ 38.551946][ T3863] should_fail+0xb/0x10 [ 38.562505][ T3863] should_fail_usercopy+0x1a/0x20 [ 38.567556][ T3863] _copy_to_user+0x20/0xa0 [ 38.571994][ T3863] rng_dev_read+0x3ad/0x6c0 [ 38.576522][ T3863] vfs_readv+0x3e2/0x660 [ 38.580782][ T3863] ? __pfx_rng_dev_read+0x10/0x10 [ 38.585878][ T3863] __x64_sys_preadv+0x100/0x1c0 [ 38.590753][ T3863] x64_sys_call+0x1d5c/0x2d60 [ 38.595446][ T3863] do_syscall_64+0xc9/0x1c0 [ 38.599965][ T3863] ? clear_bhb_loop+0x55/0xb0 [ 38.604652][ T3863] ? clear_bhb_loop+0x55/0xb0 [ 38.609408][ T3863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.615352][ T3863] RIP: 0033:0x7f9870bee719 [ 38.619815][ T3863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.639536][ T3863] RSP: 002b:00007f986f867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 38.647973][ T3863] RAX: ffffffffffffffda RBX: 00007f9870da5f80 RCX: 00007f9870bee719 [ 38.655963][ T3863] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 38.664004][ T3863] RBP: 00007f986f867090 R08: 0000000000000000 R09: 0000000000000000 [ 38.671987][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.679967][ T3863] R13: 0000000000000000 R14: 00007f9870da5f80 R15: 00007fff3b8b0948 [ 38.687957][ T3863] [ 38.714681][ T3861] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.732908][ T3861] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 38.740787][ T3861] FAT-fs (loop2): Filesystem has been set read-only [ 38.760669][ T3873] loop4: detected capacity change from 0 to 512 [ 38.767443][ T3873] EXT4-fs: Ignoring removed bh option [ 38.798841][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.811558][ T3873] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.853886][ T3880] Invalid ELF header magic: != ELF [ 38.916568][ T3323] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 38.930714][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 38.941170][ T3323] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 38.955771][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 38.966419][ T3323] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 38.985439][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 38.998006][ T3889] 9pnet_fd: Insufficient options for proto=fd [ 39.033694][ T3323] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 39.140599][ T3323] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 39.305748][ T3323] EXT4-fs warning (device loop4): __ext4_unlink:3285: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 39.339437][ T3323] EXT4-fs warning (device loop4): __ext4_unlink:3285: inode #16: comm syz-executor: Deleting file 'file6' with no links [ 39.352309][ T3323] EXT4-fs warning (device loop4): __ext4_unlink:3285: inode #17: comm syz-executor: Deleting file 'bus' with no links [ 39.370086][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.497788][ T3904] loop1: detected capacity change from 0 to 512 [ 39.509369][ T3904] EXT4-fs: Ignoring removed orlov option [ 39.517371][ T3904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.543517][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.557301][ T3904] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.570712][ T3904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.140: bg 0: block 255: padding at end of block bitmap is not set [ 39.585499][ T3904] EXT4-fs (loop1): Remounting filesystem read-only [ 39.667105][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.761697][ T3908] loop2: detected capacity change from 0 to 512 [ 39.777171][ T3910] loop1: detected capacity change from 0 to 512 [ 39.782327][ T3908] EXT4-fs: Ignoring removed orlov option [ 39.797595][ T3908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.804658][ T3910] EXT4-fs: Ignoring removed orlov option [ 39.816732][ T3914] syz.4.144 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.827522][ T3910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.864166][ T3916] loop3: detected capacity change from 0 to 2048 [ 39.878698][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.892077][ T3910] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.904684][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.919239][ T3916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.936668][ T3908] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.958379][ T3910] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.141: bg 0: block 255: padding at end of block bitmap is not set [ 39.981326][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.993562][ T3910] EXT4-fs (loop1): Remounting filesystem read-only [ 40.009257][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.018374][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.025941][ T3908] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.142: bg 0: block 255: padding at end of block bitmap is not set [ 40.028514][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.043077][ T3908] EXT4-fs (loop2): Remounting filesystem read-only [ 40.063302][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.074241][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.083370][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.085187][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 40.101592][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 40.110804][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 40.119701][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.129436][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.132408][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 40.138844][ T3929] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 40.153846][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.168473][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 40.180779][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 40.190171][ T3910] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 40.201996][ T3932] loop4: detected capacity change from 0 to 128 [ 40.263934][ T3932] syz.4.148: attempt to access beyond end of device [ 40.263934][ T3932] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 40.294178][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.345361][ T36] kworker/u8:2: attempt to access beyond end of device [ 40.345361][ T36] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 40.409050][ T3958] loop2: detected capacity change from 0 to 512 [ 40.419635][ T3958] EXT4-fs: Ignoring removed orlov option [ 40.429306][ T3958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.454236][ T3958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.466868][ T3958] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.487946][ T3966] 9pnet_fd: Insufficient options for proto=fd [ 40.491938][ T3958] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.151: bg 0: block 255: padding at end of block bitmap is not set [ 40.509459][ T3958] EXT4-fs (loop2): Remounting filesystem read-only [ 40.558381][ T3977] netlink: '+}[@': attribute type 21 has an invalid length. [ 40.578873][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.589243][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.589684][ T3977] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 40.698699][ T3995] loop2: detected capacity change from 0 to 2048 [ 40.715470][ T3995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.746400][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.780679][ T4011] loop2: detected capacity change from 0 to 164 [ 40.790412][ T4011] Unable to read rock-ridge attributes [ 40.802460][ T4011] Unable to read rock-ridge attributes [ 41.163362][ T4061] loop2: detected capacity change from 0 to 128 [ 41.176511][ T4061] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.189598][ T4061] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.231909][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.327178][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 41.327193][ T29] audit: type=1326 audit(1730378472.249:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.359176][ T29] audit: type=1326 audit(1730378472.259:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.381837][ T4086] loop2: detected capacity change from 0 to 512 [ 41.382626][ T29] audit: type=1326 audit(1730378472.259:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.390936][ T4086] EXT4-fs: Ignoring removed orlov option [ 41.412176][ T29] audit: type=1326 audit(1730378472.259:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.412212][ T29] audit: type=1326 audit(1730378472.259:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.439072][ T4086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.441212][ T29] audit: type=1326 audit(1730378472.259:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.496377][ T29] audit: type=1326 audit(1730378472.259:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.519746][ T29] audit: type=1326 audit(1730378472.259:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.543185][ T29] audit: type=1326 audit(1730378472.259:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.549700][ T4086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.566646][ T29] audit: type=1326 audit(1730378472.289:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1f43e719 code=0x7ffc0000 [ 41.590033][ T4086] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.634102][ T4104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'. [ 41.634970][ T4086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.164: bg 0: block 255: padding at end of block bitmap is not set [ 41.661745][ T4086] EXT4-fs (loop2): Remounting filesystem read-only [ 41.716885][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.749258][ T4117] loop2: detected capacity change from 0 to 512 [ 41.755302][ T4113] loop1: detected capacity change from 0 to 2048 [ 41.767426][ T4117] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.793907][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.805080][ C0] hrtimer: interrupt took 31768 ns [ 41.817319][ T4113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.848692][ T4129] FAULT_INJECTION: forcing a failure. [ 41.848692][ T4129] name failslab, interval 1, probability 0, space 0, times 1 [ 41.861481][ T4129] CPU: 1 UID: 0 PID: 4129 Comm: syz.0.171 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 41.872101][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.882232][ T4129] Call Trace: [ 41.885532][ T4129] [ 41.888479][ T4129] dump_stack_lvl+0xf2/0x150 [ 41.893091][ T4129] dump_stack+0x15/0x20 [ 41.897267][ T4129] should_fail_ex+0x223/0x230 [ 41.901994][ T4129] ? sidtab_sid2str_get+0xb8/0x140 [ 41.907150][ T4129] should_failslab+0x8f/0xb0 [ 41.911756][ T4129] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 41.918108][ T4129] ? vsnprintf+0xdd8/0xe30 [ 41.922560][ T4129] kmemdup_noprof+0x2a/0x60 [ 41.927177][ T4129] sidtab_sid2str_get+0xb8/0x140 [ 41.932170][ T4129] security_sid_to_context_core+0x1eb/0x2f0 [ 41.938093][ T4129] security_sid_to_context+0x27/0x30 [ 41.943479][ T4129] selinux_secid_to_secctx+0x22/0x30 [ 41.948850][ T4129] security_secid_to_secctx+0x48/0x90 [ 41.954248][ T4129] audit_log_task_context+0x8c/0x1b0 [ 41.959574][ T4129] audit_log_task+0xfb/0x180 [ 41.964259][ T4129] audit_seccomp+0x68/0x130 [ 41.968863][ T4129] __seccomp_filter+0x6fa/0x1180 [ 41.973880][ T4129] ? __perf_event_task_sched_out+0x138/0x1010 [ 41.980043][ T4129] ? __dequeue_entity+0x22/0x310 [ 41.985013][ T4129] __secure_computing+0x9f/0x1c0 [ 41.989977][ T4129] syscall_trace_enter+0xd1/0x1f0 [ 41.995077][ T4129] do_syscall_64+0xaa/0x1c0 [ 41.999597][ T4129] ? clear_bhb_loop+0x55/0xb0 [ 42.004287][ T4129] ? clear_bhb_loop+0x55/0xb0 [ 42.009027][ T4129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.015019][ T4129] RIP: 0033:0x7fc0a548d15c [ 42.019459][ T4129] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 42.039102][ T4129] RSP: 002b:00007fc0a4107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.047533][ T4129] RAX: ffffffffffffffda RBX: 00007fc0a5645f80 RCX: 00007fc0a548d15c [ 42.055515][ T4129] RDX: 000000000000000f RSI: 00007fc0a41070a0 RDI: 0000000000000003 [ 42.063496][ T4129] RBP: 00007fc0a4107090 R08: 0000000000000000 R09: 0000000000000000 [ 42.071482][ T4129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.079481][ T4129] R13: 0000000000000000 R14: 00007fc0a5645f80 R15: 00007ffd083bbd88 [ 42.087473][ T4129] [ 42.148451][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.261552][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.289382][ T4161] netlink: '+}[@': attribute type 21 has an invalid length. [ 42.409505][ T4175] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 42.448120][ T4178] loop3: detected capacity change from 0 to 512 [ 42.460298][ T4178] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.485049][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.496675][ T4184] loop1: detected capacity change from 0 to 2048 [ 42.514517][ T4184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.530205][ T4178] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 42.543591][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.565603][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.583252][ T4188] vlan2: entered allmulticast mode [ 42.596559][ T4190] bridge0: port 3(hsr_slave_1) entered blocking state [ 42.603562][ T4190] bridge0: port 3(hsr_slave_1) entered disabled state [ 42.610835][ T4190] hsr_slave_1: entered allmulticast mode [ 42.618172][ T4190] hsr_slave_1: left allmulticast mode [ 42.635042][ T2980] hid-generic 0000:0005:FFFFFFFA.0001: ignoring exceeding usage max [ 42.648071][ T2980] hid-generic 0000:0005:FFFFFFFA.0001: item fetching failed at offset 32/170 [ 42.657242][ T2980] hid-generic 0000:0005:FFFFFFFA.0001: probe with driver hid-generic failed with error -22 [ 42.696377][ T4196] loop3: detected capacity change from 0 to 128 [ 42.697608][ T4194] loop4: detected capacity change from 0 to 128 [ 42.712621][ T4196] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.713574][ T4194] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.741078][ T4196] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.755019][ T4194] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.788639][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.789880][ T4202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 42.807798][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.887144][ T4210] loop1: detected capacity change from 0 to 2048 [ 42.905530][ T4212] loop3: detected capacity change from 0 to 512 [ 42.926651][ T4214] loop4: detected capacity change from 0 to 512 [ 42.927840][ T4212] EXT4-fs: Ignoring removed orlov option [ 42.933448][ T4214] EXT4-fs: Ignoring removed bh option [ 42.945689][ T4212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.946201][ T4210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.988251][ T4214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.000857][ T4214] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.002209][ T4212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.016511][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.023822][ T4212] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.054385][ T4212] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.193: bg 0: block 255: padding at end of block bitmap is not set [ 43.068884][ T4212] EXT4-fs (loop3): Remounting filesystem read-only [ 43.076507][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.085891][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.086721][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.095264][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.112877][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.121808][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.130662][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.148801][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 43.161872][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 43.174846][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.183942][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.187030][ T4232] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.192918][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.208968][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 43.218064][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.246659][ T4212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 43.259257][ T4236] netlink: 268 bytes leftover after parsing attributes in process `syz.1.200'. [ 43.268502][ T4236] unsupported nla_type 65024 [ 43.279751][ T4236] loop1: detected capacity change from 0 to 164 [ 43.282162][ T4238] loop2: detected capacity change from 0 to 128 [ 43.294040][ T4236] Unable to read rock-ridge attributes [ 43.303652][ T4236] Unable to read rock-ridge attributes [ 43.309505][ T4236] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 43.319896][ T4238] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.332421][ T4238] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.429760][ T4238] bond_slave_0: entered promiscuous mode [ 43.435506][ T4238] bond_slave_1: entered promiscuous mode [ 43.443471][ T4238] bond_slave_0: left promiscuous mode [ 43.448928][ T4238] bond_slave_1: left promiscuous mode [ 43.506821][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.538827][ T4253] loop2: detected capacity change from 0 to 512 [ 43.553155][ T4253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 43.561225][ T4253] System zones: 0-2, 18-18, 34-34 [ 43.567820][ T4253] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.206: bg 0: block 248: padding at end of block bitmap is not set [ 43.582612][ T4253] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.206: Failed to acquire dquot type 1 [ 43.594484][ T4253] EXT4-fs (loop2): 1 truncate cleaned up [ 43.600506][ T4253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.613111][ T4253] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.630967][ T4253] syz.2.206 (4253) used greatest stack depth: 9432 bytes left [ 43.639252][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.727702][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.751208][ T4262] netlink: 268 bytes leftover after parsing attributes in process `syz.3.209'. [ 43.767559][ T4262] loop3: detected capacity change from 0 to 164 [ 43.774950][ T4262] Unable to read rock-ridge attributes [ 43.781171][ T4262] Unable to read rock-ridge attributes [ 43.787461][ T4262] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 43.820184][ T4263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 43.829156][ T4263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 43.857817][ T4270] loop0: detected capacity change from 0 to 128 [ 43.881164][ T4270] syz.0.211: attempt to access beyond end of device [ 43.881164][ T4270] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 44.277941][ T4274] loop4: detected capacity change from 0 to 512 [ 44.285123][ T4274] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.303695][ T4274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.379578][ T4278] netlink: '+}[@': attribute type 21 has an invalid length. [ 44.388436][ T4279] netlink: 'syz.4.212': attribute type 4 has an invalid length. [ 44.399512][ T4278] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 44.451487][ T4283] FAULT_INJECTION: forcing a failure. [ 44.451487][ T4283] name failslab, interval 1, probability 0, space 0, times 0 [ 44.464292][ T4283] CPU: 1 UID: 0 PID: 4283 Comm: syz.1.215 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 44.474946][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.485158][ T4283] Call Trace: [ 44.488446][ T4283] [ 44.491386][ T4283] dump_stack_lvl+0xf2/0x150 [ 44.495982][ T4283] dump_stack+0x15/0x20 [ 44.500237][ T4283] should_fail_ex+0x223/0x230 [ 44.504985][ T4283] ? sidtab_sid2str_get+0xb8/0x140 [ 44.510117][ T4283] should_failslab+0x8f/0xb0 [ 44.514719][ T4283] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 44.521101][ T4283] ? vsnprintf+0xdd8/0xe30 [ 44.525539][ T4283] kmemdup_noprof+0x2a/0x60 [ 44.530057][ T4283] sidtab_sid2str_get+0xb8/0x140 [ 44.535016][ T4283] security_sid_to_context_core+0x1eb/0x2f0 [ 44.541029][ T4283] security_sid_to_context+0x27/0x30 [ 44.546365][ T4283] selinux_secid_to_secctx+0x22/0x30 [ 44.551703][ T4283] security_secid_to_secctx+0x48/0x90 [ 44.557134][ T4283] audit_log_task_context+0x8c/0x1b0 [ 44.562441][ T4283] audit_log_task+0xfb/0x180 [ 44.567085][ T4283] audit_seccomp+0x68/0x130 [ 44.571653][ T4283] __seccomp_filter+0x6fa/0x1180 [ 44.576747][ T4283] ? avc_has_perm_noaudit+0x1cc/0x210 [ 44.582142][ T4283] ? avc_has_perm+0xd4/0x160 [ 44.586825][ T4283] __secure_computing+0x9f/0x1c0 [ 44.591782][ T4283] syscall_trace_enter+0xd1/0x1f0 [ 44.596871][ T4283] ? fpregs_assert_state_consistent+0x83/0xa0 [ 44.603004][ T4283] do_syscall_64+0xaa/0x1c0 [ 44.607550][ T4283] ? clear_bhb_loop+0x55/0xb0 [ 44.612259][ T4283] ? clear_bhb_loop+0x55/0xb0 [ 44.616937][ T4283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.622883][ T4283] RIP: 0033:0x7f3b8840d15c [ 44.627312][ T4283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 44.646951][ T4283] RSP: 002b:00007f3b87087030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.655493][ T4283] RAX: ffffffffffffffda RBX: 00007f3b885c5f80 RCX: 00007f3b8840d15c [ 44.663512][ T4283] RDX: 000000000000000f RSI: 00007f3b870870a0 RDI: 0000000000000006 [ 44.671510][ T4283] RBP: 00007f3b87087090 R08: 0000000000000000 R09: 0000000000000000 [ 44.679497][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.687476][ T4283] R13: 0000000000000000 R14: 00007f3b885c5f80 R15: 00007ffeb2bb2f18 [ 44.695500][ T4283] [ 44.736822][ T4285] vlan2: entered allmulticast mode [ 44.771810][ T3431] kworker/u8:7: attempt to access beyond end of device [ 44.771810][ T3431] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 44.813533][ T4292] loop0: detected capacity change from 0 to 512 [ 44.820622][ T4292] EXT4-fs: Ignoring removed orlov option [ 44.826671][ T4292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.863598][ T4295] tunl0: entered promiscuous mode [ 44.870566][ T4295] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 44.878307][ T4295] netlink: 9 bytes leftover after parsing attributes in process `syz.3.220'. [ 44.919929][ T4292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.920727][ T4301] FAULT_INJECTION: forcing a failure. [ 44.920727][ T4301] name failslab, interval 1, probability 0, space 0, times 0 [ 44.945336][ T4301] CPU: 0 UID: 0 PID: 4301 Comm: syz.3.221 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 44.955954][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.966089][ T4301] Call Trace: [ 44.969377][ T4301] [ 44.972375][ T4301] dump_stack_lvl+0xf2/0x150 [ 44.977041][ T4301] dump_stack+0x15/0x20 [ 44.981214][ T4301] should_fail_ex+0x223/0x230 [ 44.985935][ T4301] ? __kvmalloc_node_noprof+0x72/0x170 [ 44.991438][ T4301] should_failslab+0x8f/0xb0 [ 44.996088][ T4301] __kmalloc_node_noprof+0xa8/0x380 [ 45.001348][ T4301] __kvmalloc_node_noprof+0x72/0x170 [ 45.006662][ T4301] alloc_netdev_mqs+0x6c1/0x8e0 [ 45.011592][ T4301] rtnl_create_link+0x233/0x680 [ 45.016498][ T4301] rtnl_newlink+0xe12/0x1690 [ 45.021131][ T4301] ? mod_objcg_state+0x2ea/0x4f0 [ 45.026138][ T4301] ? selinux_capable+0x1f2/0x260 [ 45.031104][ T4301] ? security_capable+0x81/0x90 [ 45.036042][ T4301] ? ns_capable+0x7d/0xb0 [ 45.040431][ T4301] ? __pfx_rtnl_newlink+0x10/0x10 [ 45.045521][ T4301] rtnetlink_rcv_msg+0x6aa/0x710 [ 45.050472][ T4301] ? ref_tracker_free+0x3a5/0x410 [ 45.055535][ T4301] ? __dev_queue_xmit+0x161/0x2040 [ 45.060709][ T4301] ? ref_tracker_alloc+0x1f5/0x2f0 [ 45.065902][ T4301] netlink_rcv_skb+0x12c/0x230 [ 45.070690][ T4301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 45.076207][ T4301] rtnetlink_rcv+0x1c/0x30 [ 45.080653][ T4301] netlink_unicast+0x599/0x670 [ 45.085471][ T4301] netlink_sendmsg+0x5cc/0x6e0 [ 45.090331][ T4301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.095625][ T4301] __sock_sendmsg+0x140/0x180 [ 45.100320][ T4301] ____sys_sendmsg+0x312/0x410 [ 45.105155][ T4301] __sys_sendmsg+0x1d9/0x270 [ 45.109781][ T4301] __x64_sys_sendmsg+0x46/0x50 [ 45.114571][ T4301] x64_sys_call+0x2689/0x2d60 [ 45.119315][ T4301] do_syscall_64+0xc9/0x1c0 [ 45.123863][ T4301] ? clear_bhb_loop+0x55/0xb0 [ 45.128548][ T4301] ? clear_bhb_loop+0x55/0xb0 [ 45.133271][ T4301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.139192][ T4301] RIP: 0033:0x7f628966e719 [ 45.143616][ T4301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.163281][ T4301] RSP: 002b:00007f62882e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.171716][ T4301] RAX: ffffffffffffffda RBX: 00007f6289825f80 RCX: 00007f628966e719 [ 45.179749][ T4301] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 45.187754][ T4301] RBP: 00007f62882e7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.195791][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.203776][ T4301] R13: 0000000000000000 R14: 00007f6289825f80 R15: 00007ffe16db15c8 [ 45.211766][ T4301] [ 45.277009][ T4302] hub 6-0:1.0: USB hub found [ 45.281770][ T4302] hub 6-0:1.0: 8 ports detected [ 45.331969][ T4292] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.378512][ T4292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.219: bg 0: block 255: padding at end of block bitmap is not set [ 45.439945][ T4292] EXT4-fs (loop0): Remounting filesystem read-only [ 45.449222][ T4307] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.460954][ T4307] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.473345][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.483706][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.495405][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.505752][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.515255][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 45.526451][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 45.536128][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.546564][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.555896][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.568085][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 45.596422][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.608820][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.618034][ T4292] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 45.680366][ T4313] loop2: detected capacity change from 0 to 2048 [ 45.686673][ T4314] loop4: detected capacity change from 0 to 512 [ 45.693930][ T4314] EXT4-fs: Ignoring removed orlov option [ 45.700138][ T4314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.714550][ T4313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.733404][ T4314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.747068][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.748323][ T4314] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.758880][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.775025][ T4314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.225: bg 0: block 255: padding at end of block bitmap is not set [ 45.790027][ T4314] EXT4-fs (loop4): Remounting filesystem read-only [ 45.798349][ T4314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 45.807263][ T4314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 45.844768][ T4323] FAULT_INJECTION: forcing a failure. [ 45.844768][ T4323] name failslab, interval 1, probability 0, space 0, times 0 [ 45.847899][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 45.857513][ T4323] CPU: 1 UID: 0 PID: 4323 Comm: syz.2.229 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 45.866377][ T4325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'. [ 45.876823][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.876839][ T4323] Call Trace: [ 45.876845][ T4323] [ 45.876853][ T4323] dump_stack_lvl+0xf2/0x150 [ 45.876958][ T4323] dump_stack+0x15/0x20 [ 45.877011][ T4323] should_fail_ex+0x223/0x230 [ 45.877052][ T4323] ? audit_log_d_path+0x96/0x250 [ 45.920663][ T4323] should_failslab+0x8f/0xb0 [ 45.925282][ T4323] __kmalloc_cache_noprof+0x4b/0x2a0 [ 45.930590][ T4323] audit_log_d_path+0x96/0x250 [ 45.935368][ T4323] ? get_file_rcu+0xeb/0x100 [ 45.939981][ T4323] ? __rcu_read_unlock+0x4e/0x70 [ 45.944940][ T4323] audit_log_d_path_exe+0x42/0x70 [ 45.950094][ T4323] audit_log_task+0x155/0x180 [ 45.954788][ T4323] audit_seccomp+0x68/0x130 [ 45.959397][ T4323] __seccomp_filter+0x6fa/0x1180 [ 45.964355][ T4323] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.970050][ T4323] ? vfs_write+0x596/0x920 [ 45.974646][ T4323] ? __pfx_kfree_link+0x10/0x10 [ 45.979573][ T4323] ? __rcu_read_unlock+0x4e/0x70 [ 45.984601][ T4323] ? __fget_files+0x1d4/0x210 [ 45.989334][ T4323] __secure_computing+0x9f/0x1c0 [ 45.994303][ T4323] syscall_trace_enter+0xd1/0x1f0 [ 45.999436][ T4323] ? fpregs_assert_state_consistent+0x83/0xa0 [ 46.005543][ T4323] do_syscall_64+0xaa/0x1c0 [ 46.010128][ T4323] ? clear_bhb_loop+0x55/0xb0 [ 46.014921][ T4323] ? clear_bhb_loop+0x55/0xb0 [ 46.019684][ T4323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.025665][ T4323] RIP: 0033:0x7f4f1f43d15c [ 46.030109][ T4323] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 46.049803][ T4323] RSP: 002b:00007f4f1e0b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.058311][ T4323] RAX: ffffffffffffffda RBX: 00007f4f1f5f5f80 RCX: 00007f4f1f43d15c [ 46.066318][ T4323] RDX: 000000000000000f RSI: 00007f4f1e0b10a0 RDI: 0000000000000003 [ 46.074302][ T4323] RBP: 00007f4f1e0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 46.082283][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.090300][ T4323] R13: 0000000000000000 R14: 00007f4f1f5f5f80 R15: 00007ffdb99b0618 [ 46.098289][ T4323] [ 46.150222][ T4327] loop0: detected capacity change from 0 to 2048 [ 46.205700][ T4337] Invalid ELF header magic: != ELF [ 46.237323][ T4341] loop3: detected capacity change from 0 to 512 [ 46.247251][ T4341] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.298163][ T4347] loop0: detected capacity change from 0 to 128 [ 46.323701][ T4347] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.329596][ T4352] loop4: detected capacity change from 0 to 512 [ 46.341018][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 46.341034][ T29] audit: type=1326 audit(1730378477.259:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9870bed3aa code=0x7ffc0000 [ 46.371596][ T4352] EXT4-fs: Ignoring removed orlov option [ 46.378503][ T4352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.387446][ T29] audit: type=1326 audit(1730378477.259:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.410940][ T29] audit: type=1326 audit(1730378477.259:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.411475][ T4354] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 46.434462][ T29] audit: type=1326 audit(1730378477.259:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.466218][ T29] audit: type=1326 audit(1730378477.259:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.489940][ T29] audit: type=1326 audit(1730378477.259:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.513369][ T29] audit: type=1326 audit(1730378477.259:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.536813][ T29] audit: type=1326 audit(1730378477.259:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628966e719 code=0x7ffc0000 [ 46.560154][ T29] audit: type=1326 audit(1730378477.259:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f628966d0b0 code=0x7ffc0000 [ 46.583567][ T29] audit: type=1326 audit(1730378477.259:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f628966ff47 code=0x7ffc0000 [ 46.612646][ T4352] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.625207][ T4352] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.239: bg 0: block 255: padding at end of block bitmap is not set [ 46.640088][ T4352] EXT4-fs (loop4): Remounting filesystem read-only [ 46.655756][ T4363] FAULT_INJECTION: forcing a failure. [ 46.655756][ T4363] name failslab, interval 1, probability 0, space 0, times 0 [ 46.668484][ T4363] CPU: 0 UID: 0 PID: 4363 Comm: syz.0.242 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 46.670482][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.679129][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.679147][ T4363] Call Trace: [ 46.679155][ T4363] [ 46.679165][ T4363] dump_stack_lvl+0xf2/0x150 [ 46.679199][ T4363] dump_stack+0x15/0x20 [ 46.690049][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.698002][ T4363] should_fail_ex+0x223/0x230 [ 46.698052][ T4363] ? __kvmalloc_node_noprof+0x72/0x170 [ 46.705084][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.708845][ T4363] should_failslab+0x8f/0xb0 [ 46.713056][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.721762][ T4363] __kmalloc_node_noprof+0xa8/0x380 [ 46.721811][ T4363] __kvmalloc_node_noprof+0x72/0x170 [ 46.764602][ T4363] xt_alloc_table_info+0x3d/0x80 [ 46.769596][ T4363] do_ipt_set_ctl+0x66f/0x8b0 [ 46.774289][ T4363] nf_setsockopt+0x195/0x1b0 [ 46.778943][ T4363] ip_setsockopt+0xea/0x100 [ 46.783490][ T4363] udp_setsockopt+0x95/0xb0 [ 46.788079][ T4363] sock_common_setsockopt+0x64/0x80 [ 46.793297][ T4363] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 46.799288][ T4363] __sys_setsockopt+0x1cc/0x240 [ 46.804164][ T4363] __x64_sys_setsockopt+0x66/0x80 [ 46.809250][ T4363] x64_sys_call+0x278d/0x2d60 [ 46.814015][ T4363] do_syscall_64+0xc9/0x1c0 [ 46.818531][ T4363] ? clear_bhb_loop+0x55/0xb0 [ 46.823282][ T4363] ? clear_bhb_loop+0x55/0xb0 [ 46.827991][ T4363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.833913][ T4363] RIP: 0033:0x7fc0a548e719 [ 46.838337][ T4363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.857971][ T4363] RSP: 002b:00007fc0a4107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.866500][ T4363] RAX: ffffffffffffffda RBX: 00007fc0a5645f80 RCX: 00007fc0a548e719 [ 46.874485][ T4363] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 46.882522][ T4363] RBP: 00007fc0a4107090 R08: 0000000000000268 R09: 0000000000000000 [ 46.890573][ T4363] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.898556][ T4363] R13: 0000000000000000 R14: 00007fc0a5645f80 R15: 00007ffd083bbd88 [ 46.906596][ T4363] [ 46.910252][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.921200][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.930199][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 46.939403][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 46.948681][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.957738][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.966653][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.975966][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 46.984861][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.994240][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 47.007586][ T4366] loop0: detected capacity change from 0 to 2048 [ 47.064787][ T4376] FAULT_INJECTION: forcing a failure. [ 47.064787][ T4376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.077950][ T4376] CPU: 0 UID: 0 PID: 4376 Comm: syz.2.247 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 47.088541][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.098601][ T4376] Call Trace: [ 47.101877][ T4376] [ 47.104819][ T4376] dump_stack_lvl+0xf2/0x150 [ 47.109425][ T4376] dump_stack+0x15/0x20 [ 47.113668][ T4376] should_fail_ex+0x223/0x230 [ 47.118369][ T4376] should_fail+0xb/0x10 [ 47.122538][ T4376] should_fail_usercopy+0x1a/0x20 [ 47.127574][ T4376] _copy_from_iter+0xd5/0xd00 [ 47.132335][ T4376] ? __alloc_skb+0x1b5/0x310 [ 47.136950][ T4376] ? kmalloc_reserve+0x16e/0x190 [ 47.141908][ T4376] ? __build_skb_around+0x196/0x1f0 [ 47.147153][ T4376] ? __alloc_skb+0x21f/0x310 [ 47.151806][ T4376] ? __virt_addr_valid+0x1ed/0x250 [ 47.156935][ T4376] ? __check_object_size+0x364/0x520 [ 47.162303][ T4376] netlink_sendmsg+0x460/0x6e0 [ 47.167144][ T4376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.172440][ T4376] __sock_sendmsg+0x140/0x180 [ 47.177247][ T4376] ____sys_sendmsg+0x312/0x410 [ 47.182056][ T4376] __sys_sendmsg+0x1d9/0x270 [ 47.186776][ T4376] __x64_sys_sendmsg+0x46/0x50 [ 47.191568][ T4376] x64_sys_call+0x2689/0x2d60 [ 47.196265][ T4376] do_syscall_64+0xc9/0x1c0 [ 47.200780][ T4376] ? clear_bhb_loop+0x55/0xb0 [ 47.205470][ T4376] ? clear_bhb_loop+0x55/0xb0 [ 47.210159][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.216077][ T4376] RIP: 0033:0x7f4f1f43e719 [ 47.220500][ T4376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.240190][ T4376] RSP: 002b:00007f4f1e0b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.248613][ T4376] RAX: ffffffffffffffda RBX: 00007f4f1f5f5f80 RCX: 00007f4f1f43e719 [ 47.256596][ T4376] RDX: 0000000000000080 RSI: 00000000200000c0 RDI: 0000000000000003 [ 47.264617][ T4376] RBP: 00007f4f1e0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 47.272601][ T4376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.280586][ T4376] R13: 0000000000000000 R14: 00007f4f1f5f5f80 R15: 00007ffdb99b0618 [ 47.288578][ T4376] [ 47.329994][ T4379] Invalid ELF header magic: != ELF [ 47.349606][ T4382] loop2: detected capacity change from 0 to 512 [ 47.378976][ T4382] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.395742][ T4388] netlink: '+}[@': attribute type 21 has an invalid length. [ 47.404501][ T4388] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 47.625776][ T4401] loop2: detected capacity change from 0 to 512 [ 47.636570][ T4401] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.740313][ T4404] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 47.916444][ T4411] loop2: detected capacity change from 0 to 512 [ 47.924553][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 47.925183][ T4411] EXT4-fs: Ignoring removed orlov option [ 47.942896][ T4412] bridge_slave_1: left allmulticast mode [ 47.948656][ T4412] bridge_slave_1: left promiscuous mode [ 47.954436][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.963892][ T4411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.964795][ T4412] bridge_slave_0: left allmulticast mode [ 47.978170][ T4412] bridge_slave_0: left promiscuous mode [ 47.983856][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.003377][ T4411] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.018388][ T4411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.258: bg 0: block 255: padding at end of block bitmap is not set [ 48.034294][ T4411] EXT4-fs (loop2): Remounting filesystem read-only [ 48.226947][ T4423] Invalid ELF header magic: != ELF [ 48.326030][ T4433] loop3: detected capacity change from 0 to 512 [ 48.337225][ T4433] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.423867][ T4442] loop1: detected capacity change from 0 to 128 [ 48.435751][ T4442] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.463127][ T4444] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 48.610738][ T4456] loop3: detected capacity change from 0 to 128 [ 48.628992][ T4454] loop0: detected capacity change from 0 to 512 [ 48.636302][ T4454] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.666354][ T4456] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.374901][ T4491] loop0: detected capacity change from 0 to 512 [ 49.382216][ T4491] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.613268][ T4495] syz.1.285[4495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.613561][ T4495] syz.1.285[4495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.649832][ T4495] syz.1.285[4495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.679775][ T4497] netlink: 'syz.0.284': attribute type 4 has an invalid length. [ 49.849152][ T4505] Invalid ELF header magic: != ELF [ 49.908272][ T4515] loop0: detected capacity change from 0 to 128 [ 49.998635][ T4528] netlink: '+}[@': attribute type 21 has an invalid length. [ 50.023628][ T4528] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.198380][ T4540] loop2: detected capacity change from 0 to 512 [ 50.208992][ T4535] loop0: detected capacity change from 0 to 512 [ 50.218843][ T4535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.238632][ T4535] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.241640][ T4540] /dev/loop2: Can't open blockdev [ 50.251673][ T4535] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.300: bg 0: block 248: padding at end of block bitmap is not set [ 50.266800][ T4535] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.300: Failed to acquire dquot type 1 [ 50.279316][ T4535] EXT4-fs (loop0): 1 truncate cleaned up [ 50.289881][ T4535] Option 'I"b4+eSlzݛmLI&de۟df'' to dns_resolver key: bad/missing value [ 50.323737][ T4535] syz.0.300 (4535) used greatest stack depth: 9368 bytes left [ 50.435197][ T4552] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 50.484927][ T4558] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 50.500357][ T4558] team0: Port device netdevsim1 added [ 50.518514][ T4558] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 50.534646][ T4558] team0: Port device netdevsim1 removed [ 50.546476][ T4558] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 50.567226][ T4558] loop0: detected capacity change from 0 to 764 [ 50.710119][ T4571] FAULT_INJECTION: forcing a failure. [ 50.710119][ T4571] name failslab, interval 1, probability 0, space 0, times 0 [ 50.722914][ T4571] CPU: 1 UID: 0 PID: 4571 Comm: syz.3.313 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 50.733573][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.743738][ T4571] Call Trace: [ 50.747023][ T4571] [ 50.749975][ T4571] dump_stack_lvl+0xf2/0x150 [ 50.754622][ T4571] dump_stack+0x15/0x20 [ 50.758809][ T4571] should_fail_ex+0x223/0x230 [ 50.763532][ T4571] ? kobject_uevent_env+0x1a4/0x550 [ 50.768926][ T4571] should_failslab+0x8f/0xb0 [ 50.773542][ T4571] __kmalloc_cache_noprof+0x4b/0x2a0 [ 50.778918][ T4571] ? __pfx_dev_uevent_name+0x10/0x10 [ 50.784228][ T4571] kobject_uevent_env+0x1a4/0x550 [ 50.789330][ T4571] ? kobject_put+0x10a/0x180 [ 50.794032][ T4571] kobject_uevent+0x1c/0x30 [ 50.798559][ T4571] device_release_driver_internal+0x478/0x4f0 [ 50.804683][ T4571] device_release_driver+0x19/0x20 [ 50.809923][ T4571] usb_driver_release_interface+0xf2/0x100 [ 50.815792][ T4571] proc_ioctl+0x1ef/0x400 [ 50.820155][ T4571] usbdev_ioctl+0x1f01/0x3e00 [ 50.824930][ T4571] ? do_vfs_ioctl+0x96e/0x1530 [ 50.829725][ T4571] ? selinux_file_ioctl+0x2f7/0x380 [ 50.834950][ T4571] ? __fget_files+0x1d4/0x210 [ 50.839729][ T4571] ? __pfx_usbdev_ioctl+0x10/0x10 [ 50.844831][ T4571] __se_sys_ioctl+0xcd/0x140 [ 50.849531][ T4571] __x64_sys_ioctl+0x43/0x50 [ 50.854203][ T4571] x64_sys_call+0x15cc/0x2d60 [ 50.859073][ T4571] do_syscall_64+0xc9/0x1c0 [ 50.863666][ T4571] ? clear_bhb_loop+0x55/0xb0 [ 50.868454][ T4571] ? clear_bhb_loop+0x55/0xb0 [ 50.873169][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.879118][ T4571] RIP: 0033:0x7f628966e719 [ 50.883563][ T4571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.903203][ T4571] RSP: 002b:00007f62882e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.911657][ T4571] RAX: ffffffffffffffda RBX: 00007f6289825f80 RCX: 00007f628966e719 [ 50.919654][ T4571] RDX: 0000000020000200 RSI: 00000000c0105512 RDI: 0000000000000005 [ 50.927690][ T4571] RBP: 00007f62882e7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.935714][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.943725][ T4571] R13: 0000000000000000 R14: 00007f6289825f80 R15: 00007ffe16db15c8 [ 50.951754][ T4571] [ 51.041467][ T4582] loop0: detected capacity change from 0 to 512 [ 51.065918][ T4582] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.080115][ T4584] loop3: detected capacity change from 0 to 128 [ 51.097054][ T4584] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.157186][ T4582] netlink: 'syz.0.317': attribute type 4 has an invalid length. [ 51.170785][ T4593] loop1: detected capacity change from 0 to 512 [ 51.195953][ T4593] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.320843][ T4606] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 51.336001][ T4602] loop4: detected capacity change from 0 to 512 [ 51.342567][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 51.342584][ T29] audit: type=1326 audit(1730378482.269:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9870bed3aa code=0x7ffc0000 [ 51.343031][ T4602] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.372198][ T29] audit: type=1326 audit(1730378482.269:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9870bed3aa code=0x7ffc0000 [ 51.401824][ T29] audit: type=1326 audit(1730378482.269:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9870becfb7 code=0x7ffc0000 [ 51.425258][ T29] audit: type=1326 audit(1730378482.269:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9870befeba code=0x7ffc0000 [ 51.449921][ T29] audit: type=1326 audit(1730378482.319:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9870bed0b0 code=0x7ffc0000 [ 51.473314][ T29] audit: type=1326 audit(1730378482.319:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9870bed497 code=0x7ffc0000 [ 51.496613][ T29] audit: type=1326 audit(1730378482.319:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9870bed0b0 code=0x7ffc0000 [ 51.520059][ T29] audit: type=1326 audit(1730378482.319:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9870bee719 code=0x7ffc0000 [ 51.543565][ T29] audit: type=1326 audit(1730378482.319:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9870bee719 code=0x7ffc0000 [ 51.567034][ T29] audit: type=1326 audit(1730378482.329:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9870bee719 code=0x7ffc0000 [ 52.055718][ T4615] loop3: detected capacity change from 0 to 128 [ 52.401440][ T4620] syz.2.325[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.401597][ T4620] syz.2.325[4620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.474015][ T4615] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.639666][ T4624] loop0: detected capacity change from 0 to 512 [ 52.666144][ T4624] EXT4-fs: Ignoring removed bh option [ 52.684788][ T4624] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.776682][ T4633] loop1: detected capacity change from 0 to 512 [ 52.849348][ T4633] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.892711][ T3321] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 52.909246][ T4633] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 52.931841][ T3321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 52.941072][ T3321] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 52.957772][ T3321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.043911][ T4638] FAULT_INJECTION: forcing a failure. [ 53.043911][ T4638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.057159][ T4638] CPU: 0 UID: 0 PID: 4638 Comm: syz.4.334 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 53.067773][ T4638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.077849][ T4638] Call Trace: [ 53.081147][ T4638] [ 53.084096][ T4638] dump_stack_lvl+0xf2/0x150 [ 53.088718][ T4638] dump_stack+0x15/0x20 [ 53.092888][ T4638] should_fail_ex+0x223/0x230 [ 53.097658][ T4638] should_fail+0xb/0x10 [ 53.101891][ T4638] should_fail_usercopy+0x1a/0x20 [ 53.106979][ T4638] fpu__restore_sig+0x11d/0xb00 [ 53.111867][ T4638] restore_sigcontext+0x1b5/0x220 [ 53.116953][ T4638] __do_sys_rt_sigreturn+0xfd/0x160 [ 53.122175][ T4638] x64_sys_call+0x28e1/0x2d60 [ 53.126886][ T4638] do_syscall_64+0xc9/0x1c0 [ 53.131416][ T4638] ? clear_bhb_loop+0x55/0xb0 [ 53.136188][ T4638] ? clear_bhb_loop+0x55/0xb0 [ 53.140928][ T4638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.146859][ T4638] RIP: 0033:0x7f9870bee719 [ 53.151288][ T4638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.170918][ T4638] RSP: 002b:00007f986f867038 EFLAGS: 00000246 [ 53.177062][ T4638] RAX: 0000000000000000 RBX: 00007f9870da5f80 RCX: 00007f9870bee719 [ 53.185049][ T4638] RDX: 0000000000000000 RSI: 00000000000000a3 RDI: 0000000000000001 [ 53.193081][ T4638] RBP: 00007f986f867090 R08: 0000000000000000 R09: 0000000000000000 [ 53.201098][ T4638] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 53.209095][ T4638] R13: 0000000000000000 R14: 00007f9870da5f80 R15: 00007fff3b8b0948 [ 53.214818][ T4646] loop1: detected capacity change from 0 to 512 [ 53.217077][ T4638] [ 53.223504][ T3321] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 53.240450][ T4646] EXT4-fs: Ignoring removed orlov option [ 53.258924][ T4646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.267465][ T3321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.276625][ T3321] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 53.290876][ T3321] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 53.300226][ T3321] EXT4-fs warning (device loop0): __ext4_unlink:3285: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 53.312985][ T3321] EXT4-fs warning (device loop0): __ext4_unlink:3285: inode #16: comm syz-executor: Deleting file 'file6' with no links [ 53.325728][ T3321] EXT4-fs warning (device loop0): __ext4_unlink:3285: inode #17: comm syz-executor: Deleting file 'bus' with no links [ 53.356911][ T4648] syz.4.337[4648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.357079][ T4648] syz.4.337[4648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.368861][ T4648] syz.4.337[4648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.380821][ T4646] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.438881][ T4646] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.336: bg 0: block 255: padding at end of block bitmap is not set [ 53.469426][ T4646] EXT4-fs (loop1): Remounting filesystem read-only [ 53.524879][ T4660] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.648379][ T4668] loop4: detected capacity change from 0 to 2048 [ 53.684587][ T4675] loop1: detected capacity change from 0 to 512 [ 53.694483][ T4675] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.777197][ T4675] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 53.793883][ T4681] vlan2: entered allmulticast mode [ 53.845896][ T4683] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.866003][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 53.876811][ T4686] bridge_slave_1: left allmulticast mode [ 53.882581][ T4686] bridge_slave_1: left promiscuous mode [ 53.888498][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.896803][ T4686] bridge_slave_0: left allmulticast mode [ 53.902588][ T4686] bridge_slave_0: left promiscuous mode [ 53.908447][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.943199][ T4691] Invalid ELF header magic: != ELF [ 54.127574][ T4698] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.209758][ T4701] syz.3.348[4701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.209838][ T4701] syz.3.348[4701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.266355][ T4703] loop1: detected capacity change from 0 to 512 [ 54.296461][ T4706] loop0: detected capacity change from 0 to 128 [ 54.302444][ T4703] EXT4-fs: Ignoring removed orlov option [ 54.315891][ T4703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.344742][ T4706] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.369986][ T4703] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.450640][ T4703] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.351: bg 0: block 255: padding at end of block bitmap is not set [ 54.500687][ T4713] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.529831][ T4703] EXT4-fs (loop1): Remounting filesystem read-only [ 54.571843][ T4714] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 54.592022][ T4714] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 54.602506][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 54.824568][ T4721] loop4: detected capacity change from 0 to 128 [ 54.870334][ T4721] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.917322][ T4724] loop4: detected capacity change from 0 to 512 [ 54.924004][ T4724] EXT4-fs: Ignoring removed bh option [ 54.944992][ T4724] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.977405][ T4728] loop3: detected capacity change from 0 to 128 [ 54.993344][ T3323] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 55.007448][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.009580][ T4728] syz.3.359: attempt to access beyond end of device [ 55.009580][ T4728] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 55.016498][ T3323] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 55.043660][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.052816][ T3323] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 55.066671][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.075859][ T3323] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 55.090480][ T3323] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 55.099985][ T3323] EXT4-fs warning (device loop4): __ext4_unlink:3285: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 55.112968][ T3323] EXT4-fs warning (device loop4): __ext4_unlink:3285: inode #16: comm syz-executor: Deleting file 'file6' with no links [ 55.114145][ T36] kworker/u8:2: attempt to access beyond end of device [ 55.114145][ T36] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 55.125863][ T3323] EXT4-fs warning (device loop4): __ext4_unlink:3285: inode #17: comm syz-executor: Deleting file 'bus' with no links [ 55.214596][ T4737] loop3: detected capacity change from 0 to 512 [ 55.222692][ T4737] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.265952][ T4743] loop1: detected capacity change from 0 to 128 [ 55.313666][ T4745] loop1: detected capacity change from 0 to 512 [ 55.320579][ T4745] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.333898][ T4745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.339232][ T4746] netlink: 'syz.3.364': attribute type 4 has an invalid length. [ 55.347909][ T4745] EXT4-fs (loop1): 1 truncate cleaned up [ 55.363318][ T4745] bridge0: entered promiscuous mode [ 55.368576][ T4745] bridge0: entered allmulticast mode [ 55.376028][ T4745] team0: Port device bridge0 added [ 55.402969][ T368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.485457][ T368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.553175][ T368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.565789][ T4767] loop0: detected capacity change from 0 to 512 [ 55.584936][ T4767] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.635918][ T368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.648026][ T4778] loop3: detected capacity change from 0 to 128 [ 55.666312][ T4778] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.678899][ T4767] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 55.773713][ T3320] ================================================================== [ 55.781863][ T3320] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 55.789650][ T3320] [ 55.791994][ T3320] write to 0xffff888237c2ac68 of 1 bytes by task 4784 on cpu 0: [ 55.799644][ T3320] folios_put_refs+0x26d/0x2b0 [ 55.804453][ T3320] folio_batch_move_lru+0x202/0x230 [ 55.809691][ T3320] folio_add_lru+0x145/0x1f0 [ 55.814319][ T3320] folio_add_lru_vma+0x48/0x60 [ 55.819121][ T3320] handle_mm_fault+0x2493/0x2a80 [ 55.824102][ T3320] __get_user_pages+0xf2c/0x2670 [ 55.829091][ T3320] __mm_populate+0x25b/0x3b0 [ 55.833717][ T3320] vm_mmap_pgoff+0x1d6/0x290 [ 55.838328][ T3320] ksys_mmap_pgoff+0xd0/0x330 [ 55.843036][ T3320] x64_sys_call+0x1884/0x2d60 [ 55.847750][ T3320] do_syscall_64+0xc9/0x1c0 [ 55.852275][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.858204][ T3320] [ 55.860540][ T3320] read to 0xffff888237c2ac68 of 1 bytes by task 3320 on cpu 1: [ 55.868111][ T3320] __lru_add_drain_all+0x136/0x3f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.873258][ T3320] lru_add_drain_all+0x10/0x20 [ 55.878062][ T3320] invalidate_bdev+0x47/0x70 [ 55.882781][ T3320] ext4_put_super+0x571/0x840 [ 55.887494][ T3320] generic_shutdown_super+0xe5/0x220 [ 55.892814][ T3320] kill_block_super+0x2a/0x70 [ 55.897539][ T3320] ext4_kill_sb+0x44/0x80 [ 55.901898][ T3320] deactivate_locked_super+0x7d/0x1c0 [ 55.907303][ T3320] deactivate_super+0x9f/0xb0 [ 55.912013][ T3320] cleanup_mnt+0x268/0x2e0 [ 55.916449][ T3320] __cleanup_mnt+0x19/0x20 [ 55.920896][ T3320] task_work_run+0x13a/0x1a0 [ 55.925519][ T3320] syscall_exit_to_user_mode+0xbe/0x130 [ 55.931099][ T3320] do_syscall_64+0xd6/0x1c0 [ 55.935629][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.941739][ T3320] [ 55.944103][ T3320] value changed: 0x1f -> 0x01 [ 55.948810][ T3320] [ 55.951151][ T3320] Reported by Kernel Concurrency Sanitizer on: [ 55.957317][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 55.968189][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.978266][ T3320] ================================================================== [ 56.060626][ T368] bridge_slave_1: left allmulticast mode [ 56.066442][ T368] bridge_slave_1: left promiscuous mode [ 56.072188][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.080249][ T368] bridge_slave_0: left allmulticast mode [ 56.086072][ T368] bridge_slave_0: left promiscuous mode [ 56.091924][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.194267][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.204855][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.215278][ T368] bond0 (unregistering): Released all slaves [ 56.277012][ T368] hsr_slave_0: left promiscuous mode [ 56.282909][ T368] hsr_slave_1: left promiscuous mode [ 56.288705][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.296196][ T368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.305984][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.313580][ T368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.323101][ T368] veth1_macvtap: left promiscuous mode [ 56.328613][ T368] veth0_macvtap: left promiscuous mode [ 56.334373][ T368] veth1_vlan: left promiscuous mode [ 56.339681][ T368] veth0_vlan: left promiscuous mode [ 56.430680][ T368] team0 (unregistering): Port device team_slave_1 removed [ 56.442699][ T368] team0 (unregistering): Port device team_slave_0 removed [ 56.767963][ T368] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.815012][ T368] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.866966][ T368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.915863][ T368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.010579][ T368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.076122][ T368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.125288][ T368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.174755][ T368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.261520][ T368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.315023][ T368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.364753][ T368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.417347][ T368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.511501][ T368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.575265][ T368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.605239][ T368] bond0: (slave netdevsim1): Releasing backup interface [ 57.614113][ T368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.646504][ T368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.722951][ T368] bridge_slave_1: left allmulticast mode [ 57.728667][ T368] bridge_slave_1: left promiscuous mode [ 57.734456][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.744169][ T368] bridge_slave_0: left allmulticast mode [ 57.749843][ T368] bridge_slave_0: left promiscuous mode [ 57.755587][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.765113][ T368] bridge_slave_1: left allmulticast mode [ 57.770790][ T368] bridge_slave_1: left promiscuous mode [ 57.776583][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.785660][ T368] bridge_slave_0: left allmulticast mode [ 57.791381][ T368] bridge_slave_0: left promiscuous mode [ 57.797090][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.003892][ T368] team0: Port device bridge0 removed [ 58.134173][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.144241][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.154283][ T368] bond0 (unregistering): Released all slaves [ 58.163658][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.174623][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.186034][ T368] bond0 (unregistering): Released all slaves [ 58.195203][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.205154][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.215185][ T368] bond0 (unregistering): Released all slaves [ 58.224266][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.234569][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.244806][ T368] bond0 (unregistering): Released all slaves [ 58.303044][ T368] hsr_slave_0: left promiscuous mode [ 58.308752][ T368] hsr_slave_1: left promiscuous mode [ 58.314813][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.322313][ T368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.329952][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.337459][ T368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.347098][ T368] hsr_slave_0: left promiscuous mode [ 58.352861][ T368] hsr_slave_1: left promiscuous mode [ 58.358574][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.366024][ T368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.374986][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.382504][ T368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.391518][ T368] hsr_slave_0: left promiscuous mode [ 58.397295][ T368] hsr_slave_1: left promiscuous mode [ 58.403102][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.410632][ T368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.418449][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.425880][ T368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.435298][ T368] hsr_slave_0: left promiscuous mode [ 58.440933][ T368] hsr_slave_1: left promiscuous mode [ 58.446616][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.454069][ T368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.461539][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.469001][ T368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.481884][ T368] veth1_macvtap: left promiscuous mode [ 58.487500][ T368] veth0_macvtap: left promiscuous mode [ 58.493073][ T368] veth1_vlan: left promiscuous mode [ 58.498301][ T368] veth0_vlan: left promiscuous mode [ 58.504077][ T368] veth1_macvtap: left promiscuous mode [ 58.509609][ T368] veth0_macvtap: left promiscuous mode [ 58.515132][ T368] veth1_vlan: left promiscuous mode [ 58.520361][ T368] veth0_vlan: left promiscuous mode [ 58.526156][ T368] veth1_macvtap: left promiscuous mode [ 58.531684][ T368] veth0_macvtap: left promiscuous mode [ 58.537230][ T368] veth1_vlan: left promiscuous mode [ 58.542503][ T368] veth0_vlan: left promiscuous mode [ 58.548276][ T368] veth1_macvtap: left promiscuous mode [ 58.553786][ T368] veth0_macvtap: left promiscuous mode [ 58.559397][ T368] veth1_vlan: left promiscuous mode [ 58.564689][ T368] veth0_vlan: left promiscuous mode [ 58.762627][ T368] team0 (unregistering): Port device team_slave_1 removed [ 58.772626][ T368] team0 (unregistering): Port device team_slave_0 removed [ 58.832675][ T368] team0 (unregistering): Port device team_slave_1 removed [ 58.842992][ T368] team0 (unregistering): Port device team_slave_0 removed [ 58.903172][ T368] team0 (unregistering): Port device team_slave_1 removed [ 58.913243][ T368] team0 (unregistering): Port device team_slave_0 removed [ 58.975122][ T368] team0 (unregistering): Port device team_slave_1 removed [ 58.985477][ T368] team0 (unregistering): Port device team_slave_0 removed [ 62.250842][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 62.250874][ T29] audit: type=1400 audit(1730378493.169:4055): avc: denied { unlink } for pid=2999 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1