last executing test programs: 2m30.069066386s ago: executing program 4 (id=682): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='mm_lru_activate\x00', r5, 0x0, 0x1}, 0x18) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f00000013c0)) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4, 0x40, 0x31, 0x4}, {0x6, 0x6a, 0x4, 0xfffffff7}, {0xc62, 0x3, 0x7c, 0x2}]}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 2m29.165621253s ago: executing program 4 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x0) 2m29.134986223s ago: executing program 4 (id=694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1}, 0x404}], 0x1, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x10001, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m28.247490591s ago: executing program 4 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8aba5d4b34740a93, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3, 0x0, 0xb}, 0x18) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd6}, 0x94) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40383d0c, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x83625fc5352ba305}, 0x14}}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x3, 0x6}, 0x21c0, 0x10000, 0x0, 0x6, 0x80000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000002c0)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, [@empty, @loopback, @broadcast]}, 0x1c) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000040)={0xd, 0x3, 0x1, 0x17}, 0x10) 2m27.911967967s ago: executing program 4 (id=712): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x10000000}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0xfffffdf0, 0x6, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRES32=r1], 0x64}}, 0x8011) 2m27.442295897s ago: executing program 4 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @padn]}]}}}}}, 0x0) 2m27.420197497s ago: executing program 32 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @padn]}]}}}}}, 0x0) 1.525159881s ago: executing program 2 (id=3088): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095", @ANYBLOB="f78b6ade7c7eceafe38a5713103daa38d0adb96bd2cea614e30e8c96bcab05e7fa57dd984e944f65a95ae6d07db8d515e96c2cfd374f", @ANYRESDEC=0x0], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 1.349173735s ago: executing program 2 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x7fffffff, 0xfff, 0x7, 0x2c40}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 1.100516019s ago: executing program 3 (id=3092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 1.019746501s ago: executing program 0 (id=3094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r2, 0x1) 999.140612ms ago: executing program 3 (id=3096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f00000003c0)='d') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) preadv2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/128, 0x80}, {0x0}], 0x2, 0xb, 0x101, 0x1) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 957.431742ms ago: executing program 1 (id=3097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) capget(&(0x7f0000000040)={0x20080522}, 0x0) 927.483323ms ago: executing program 1 (id=3098): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000000240)=""/46, 0x2e) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) shutdown(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000001480)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001300)={0xf4, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x91, 0x6, "9fd4ee3e82cecbd1573d803567f24d9bbffd7d7531b9f1ba1015f389a4e2130a99d0e35267223515a57643f694c17188db715abd1ee6c4619e4a99ae7f0c9d0bdf9a1ddcc45807bd68322acd756d10ec49498d2305b79565c5cbc98949a6dc5bff6b273750886b28fdbf39f5467730422c28ea5ca5b22ae22b88f66e2553f8879b987f626f04574110a4677407"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb, 0x6, "fcfe20fe18acb3"}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x3, 0x5, 0xfffffffe}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 892.985633ms ago: executing program 3 (id=3100): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x51d}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000180)=""/110) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x20) connect$netlink(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 867.176414ms ago: executing program 0 (id=3101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r1, &(0x7f00000010c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1311, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000850000007b00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 784.333316ms ago: executing program 1 (id=3103): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') socket$netlink(0x10, 0x3, 0x5) 733.908896ms ago: executing program 0 (id=3104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) eventfd2(0x0, 0x0) io_submit(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000080000001000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0000000000000000000000000000000000000000000025fef915375a"], 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4044) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x9, {0x15, 0x4, 0x0, 0x6, 0x65, 0x64, 0x4, 0x9, 0x84, 0x80, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x21, 0x0, 0x0, [0x4, 0x0, 0x8, 0x7]}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x88, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x0, [0x2, 0x4, 0x0]}]}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x1, 0x0, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) 694.531877ms ago: executing program 3 (id=3105): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x7707, 0x80, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x40) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlockall() r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="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"], 0x0, 0x0, 0xfffffffffffffeee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, 0x94) 625.219958ms ago: executing program 1 (id=3106): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x2, 0xc4ffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653a37054e3a2f4e00"]) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r5, 0x3d94, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0xc, 0x9033, r4, 0x8000000) syz_clone3(&(0x7f0000000400)={0x152000000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000100), {0xb}, &(0x7f00000007c0)=""/249, 0xf9, &(0x7f0000000300)=""/193, &(0x7f0000000140)=[0x0, 0x0], 0x2, {r4}}, 0x58) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r9}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8, r8, 0x0, &(0x7f0000000480)) 516.66733ms ago: executing program 2 (id=3107): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 455.229132ms ago: executing program 5 (id=3108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 359.569133ms ago: executing program 5 (id=3109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r1, &(0x7f00000010c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1311, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000850000007b00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 349.788074ms ago: executing program 2 (id=3110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f00000003c0)='d') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) preadv2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/128, 0x80}, {0x0}], 0x2, 0xb, 0x101, 0x1) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 293.197675ms ago: executing program 3 (id=3111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r2, 0x1) 287.932955ms ago: executing program 1 (id=3112): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00', 0x0, 0x10, &(0x7f0000000b80)) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000080)=0x1, 0x4) 280.537165ms ago: executing program 0 (id=3113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 264.170585ms ago: executing program 2 (id=3114): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff1811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 241.303866ms ago: executing program 5 (id=3115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 203.565647ms ago: executing program 1 (id=3116): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, 0x0, 0x0) 202.648527ms ago: executing program 3 (id=3117): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x7fffffff, 0xfff, 0x7, 0x2c40}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 157.837128ms ago: executing program 5 (id=3118): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000280)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) getrusage(0xffffffffffffffff, &(0x7f0000000380)) 149.718708ms ago: executing program 2 (id=3119): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 65.418089ms ago: executing program 5 (id=3120): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 21.43082ms ago: executing program 0 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 14.86533ms ago: executing program 0 (id=3122): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x2, 0xc4ffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653a37054e3a2f4e00"]) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r5, 0x3d94, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0xc, 0x9033, r4, 0x8000000) syz_clone3(&(0x7f0000000400)={0x152000000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000100), {0xb}, &(0x7f00000007c0)=""/249, 0xf9, &(0x7f0000000300)=""/193, &(0x7f0000000140)=[0x0, 0x0], 0x2, {r4}}, 0x58) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r9}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8, r8, 0x0, &(0x7f0000000480)) 0s ago: executing program 5 (id=3123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) eventfd2(0x0, 0x0) io_submit(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000080000001000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0000000000000000000000000000000000000000000025fef915375a"], 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4044) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x9, {0x15, 0x4, 0x0, 0x6, 0x65, 0x64, 0x4, 0x9, 0x84, 0x80, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x21, 0x0, 0x0, [0x4, 0x0, 0x8, 0x7]}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x88, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x0, [0x2, 0x4, 0x0]}]}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x1, 0x0, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): zed netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9663 comm=syz.0.2252 [ 152.501952][ T9663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9663 comm=syz.0.2252 [ 152.507006][ T9666] loop3: detected capacity change from 0 to 512 [ 152.555150][ T9666] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.572402][ T9666] EXT4-fs (loop3): mount failed [ 152.579713][ T9667] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2251'. [ 152.650303][ T9673] loop3: detected capacity change from 0 to 512 [ 152.673411][ T9673] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.697994][ T9673] EXT4-fs (loop3): mount failed [ 152.784789][ T9685] loop5: detected capacity change from 0 to 8192 [ 152.803007][ T9688] loop3: detected capacity change from 0 to 8192 [ 152.928536][ T9700] loop3: detected capacity change from 0 to 512 [ 152.953245][ T9700] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.975866][ T9700] EXT4-fs (loop3): mount failed [ 153.005042][ T9699] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2264'. [ 153.214702][ T9713] loop0: detected capacity change from 0 to 512 [ 153.238002][ T9713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.252393][ T9713] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.266183][ T9713] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.281878][ T9722] loop3: detected capacity change from 0 to 512 [ 153.302142][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.328296][ T9727] loop5: detected capacity change from 0 to 8192 [ 153.347502][ T9722] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.385454][ T9722] EXT4-fs (loop3): mount failed [ 153.400075][ T9733] loop0: detected capacity change from 0 to 1024 [ 153.414011][ T9733] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.448930][ T9733] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2277: Invalid block bitmap block 0 in block_group 0 [ 153.465845][ T9733] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2277: Failed to acquire dquot type 0 [ 153.479680][ T9733] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2277: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.500037][ T9733] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2277: Invalid inode bitmap blk 0 in block_group 0 [ 153.514353][ T9733] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 153.514397][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 153.536632][ T9733] EXT4-fs (loop0): 1 orphan inode deleted [ 153.547110][ T9733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.604438][ T9739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9739 comm=syz.1.2280 [ 153.617488][ T9739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9739 comm=syz.1.2280 [ 153.671285][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.789067][ T9763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9763 comm=syz.5.2290 [ 153.802166][ T9763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9763 comm=syz.5.2290 [ 153.853966][ T9759] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2286'. [ 153.871434][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2290'. [ 153.890579][ T9764] loop0: detected capacity change from 0 to 512 [ 153.915708][ T9764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.929689][ T9766] loop3: detected capacity change from 0 to 512 [ 153.941466][ T9764] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.958786][ T9761] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.970718][ T9766] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.985821][ T9766] EXT4-fs (loop3): mount failed [ 154.008569][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.042878][ T9773] loop0: detected capacity change from 0 to 512 [ 154.071635][ T9773] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.111379][ T9780] tmpfs: Bad value for 'mpol' [ 154.131605][ T9773] EXT4-fs (loop0): mount failed [ 154.752366][ T9805] netlink: 'syz.1.2303': attribute type 1 has an invalid length. [ 154.761914][ T9804] loop5: detected capacity change from 0 to 512 [ 154.773362][ T9804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.787452][ T9804] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.790016][ T9805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.808176][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 154.853536][ T9813] loop2: detected capacity change from 0 to 512 [ 154.863159][ T9810] bond1 (unregistering): Released all slaves [ 154.882682][ T9813] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.897905][ T9813] EXT4-fs (loop2): mount failed [ 154.946251][ T9819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9819 comm=syz.1.2307 [ 154.958991][ T9819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9819 comm=syz.1.2307 [ 154.985492][ T9817] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2305'. [ 155.134283][ T9826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9826 comm=syz.3.2311 [ 155.146779][ T9826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9826 comm=syz.3.2311 [ 155.390917][ T29] kauditd_printk_skb: 1887 callbacks suppressed [ 155.390932][ T29] audit: type=1400 audit(1756844562.313:29312): avc: denied { perfmon } for pid=9842 comm="syz.2.2315" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.419997][ T29] audit: type=1326 audit(1756844562.313:29311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d2668ebe9 code=0x7ffc0000 [ 155.443869][ T29] audit: type=1326 audit(1756844562.313:29313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2668ebe9 code=0x7ffc0000 [ 155.467512][ T29] audit: type=1326 audit(1756844562.313:29314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2668ebe9 code=0x7ffc0000 [ 155.491130][ T29] audit: type=1326 audit(1756844562.313:29315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6d2668ebe9 code=0x7ffc0000 [ 155.514744][ T29] audit: type=1400 audit(1756844562.393:29316): avc: denied { read write } for pid=9839 comm="syz.0.2314" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 155.539178][ T29] audit: type=1400 audit(1756844562.393:29317): avc: denied { open } for pid=9839 comm="syz.0.2314" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 155.564448][ T29] audit: type=1400 audit(1756844562.463:29318): avc: denied { open } for pid=9839 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.583904][ T29] audit: type=1400 audit(1756844562.463:29319): avc: denied { perfmon } for pid=9839 comm="syz.0.2314" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.605138][ T29] audit: type=1400 audit(1756844562.463:29320): avc: denied { kernel } for pid=9839 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.638258][ T9804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.688572][ T9852] loop5: detected capacity change from 0 to 512 [ 155.712449][ T9852] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.736525][ T9852] EXT4-fs (loop5): mount failed [ 156.371901][ T9872] tmpfs: Bad value for 'mpol' [ 156.644622][ T9880] loop2: detected capacity change from 0 to 512 [ 156.697015][ T9880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.709945][ T9880] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.723925][ T9880] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 156.757752][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.887209][ T9896] loop0: detected capacity change from 0 to 512 [ 156.914065][ T9896] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.929655][ T9896] EXT4-fs (loop0): mount failed [ 156.987121][ T9905] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 157.003728][ T9905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.016783][ T9905] __nla_validate_parse: 3 callbacks suppressed [ 157.016798][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 157.042774][ T9905] bond1 (unregistering): Released all slaves [ 157.054973][ T9909] tmpfs: Bad value for 'mpol' [ 157.549377][ T9926] loop3: detected capacity change from 0 to 512 [ 157.781022][ T9926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.808295][ T9926] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.862574][ T9935] loop2: detected capacity change from 0 to 512 [ 157.883264][ T9935] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 157.911919][ T9917] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.920602][ T9935] EXT4-fs (loop2): mount failed [ 157.938679][ T9934] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2340'. [ 158.001668][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.142433][ T9949] loop2: detected capacity change from 0 to 512 [ 158.163873][ T9949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.166493][ T9956] netlink: 'syz.1.2350': attribute type 1 has an invalid length. [ 158.193272][ T9949] EXT4-fs (loop2): 1 truncate cleaned up [ 158.199916][ T9955] loop3: detected capacity change from 0 to 512 [ 158.205623][ T9956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.214908][ T9949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.233162][ T9949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.255271][ T9955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.259787][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 158.289410][ T9955] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.301390][ T9956] bond1 (unregistering): Released all slaves [ 158.426887][ T9966] loop5: detected capacity change from 0 to 512 [ 158.436092][ T9966] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.492694][ T9966] EXT4-fs (loop5): 1 truncate cleaned up [ 158.502626][ T9966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.533115][ T9966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.709578][ T9986] loop5: detected capacity change from 0 to 512 [ 158.732438][ T9986] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.748698][ T9986] EXT4-fs (loop5): mount failed [ 159.007533][ T9955] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.019443][ T9999] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2364'. [ 159.200540][T10024] loop3: detected capacity change from 0 to 512 [ 159.231746][T10024] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.261441][T10024] EXT4-fs (loop3): mount failed [ 159.294006][T10030] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 159.318440][T10030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.337447][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 159.362843][T10030] bond1 (unregistering): Released all slaves [ 159.384047][T10037] loop3: detected capacity change from 0 to 512 [ 159.402557][T10037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.428635][T10037] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.446532][T10044] selinux_netlink_send: 2 callbacks suppressed [ 159.446549][T10044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10044 comm=syz.2.2380 [ 159.465783][T10044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10044 comm=syz.2.2380 [ 159.600943][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 159.945338][T10064] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2388'. [ 160.204695][T10037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.214895][T10077] 9pnet: Could not find request transport: fd0x0000000000000004 [ 160.273644][T10086] loop3: detected capacity change from 0 to 512 [ 160.291672][T10082] loop2: detected capacity change from 0 to 512 [ 160.316107][T10082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.323214][T10086] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.329758][T10082] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.361777][T10086] EXT4-fs (loop3): mount failed [ 160.367626][T10082] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 160.407894][ T29] kauditd_printk_skb: 1518 callbacks suppressed [ 160.407911][ T29] audit: type=1400 audit(1756844567.323:30833): avc: denied { read write } for pid=10078 comm="syz.0.2394" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 160.438737][ T29] audit: type=1400 audit(1756844567.323:30834): avc: denied { read write open } for pid=10078 comm="syz.0.2394" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 160.500169][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.584416][ T29] audit: type=1400 audit(1756844567.343:30835): avc: denied { prog_load } for pid=10094 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.604064][ T29] audit: type=1400 audit(1756844567.343:30836): avc: denied { bpf } for pid=10094 comm="syz.1.2400" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.624926][ T29] audit: type=1400 audit(1756844567.343:30837): avc: denied { perfmon } for pid=10094 comm="syz.1.2400" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.646133][ T29] audit: type=1400 audit(1756844567.343:30838): avc: denied { prog_run } for pid=10094 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.665410][ T29] audit: type=1400 audit(1756844567.393:30839): avc: denied { map_create } for pid=10093 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.684750][ T29] audit: type=1400 audit(1756844567.393:30840): avc: denied { map_create } for pid=10096 comm="syz.3.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.696464][T10109] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.704243][ T29] audit: type=1400 audit(1756844567.393:30841): avc: denied { prog_load } for pid=10093 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.829521][T10115] tmpfs: Bad value for 'mpol' [ 160.936194][T10122] loop5: detected capacity change from 0 to 512 [ 160.954747][T10122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.968883][T10122] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.112998][T10120] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2405'. [ 161.286562][T10138] loop3: detected capacity change from 0 to 512 [ 161.307892][T10138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.330202][T10138] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.366421][T10138] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 161.442371][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.689713][T10156] loop2: detected capacity change from 0 to 1024 [ 161.735481][T10156] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.767060][T10122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.855152][T10156] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2414: Invalid block bitmap block 0 in block_group 0 [ 161.888541][T10156] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2414: Failed to acquire dquot type 0 [ 161.930165][T10156] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2414: Freeing blocks not in datazone - block = 0, count = 4096 [ 162.041775][T10156] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2414: Invalid inode bitmap blk 0 in block_group 0 [ 162.064111][ T6191] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 162.076144][T10156] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 162.109481][T10156] EXT4-fs (loop2): 1 orphan inode deleted [ 162.119027][T10161] tmpfs: Bad value for 'mpol' [ 162.125758][T10156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.204377][T10166] 9pnet_fd: Insufficient options for proto=fd [ 162.305307][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.467919][T10186] loop2: detected capacity change from 0 to 8192 [ 162.590960][T10191] loop2: detected capacity change from 0 to 512 [ 162.612603][T10191] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.627745][T10191] EXT4-fs (loop2): mount failed [ 162.698120][T10197] 9pnet_fd: Insufficient options for proto=fd [ 162.739252][T10201] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2433'. [ 162.797357][T10199] loop2: detected capacity change from 0 to 512 [ 162.826686][T10199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.839922][T10199] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.853849][T10199] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.885477][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.049743][T10218] loop0: detected capacity change from 0 to 8192 [ 163.111796][T10226] netlink: 'syz.0.2442': attribute type 1 has an invalid length. [ 163.126861][T10226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.146203][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 163.156897][T10228] loop2: detected capacity change from 0 to 1024 [ 163.171094][T10228] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.182522][T10226] bond1 (unregistering): Released all slaves [ 163.196707][T10228] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2440: Invalid block bitmap block 0 in block_group 0 [ 163.211173][T10228] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2440: Failed to acquire dquot type 0 [ 163.229104][T10228] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2440: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.243360][T10228] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2440: Invalid inode bitmap blk 0 in block_group 0 [ 163.257341][T10228] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 163.266617][ T6191] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 163.278864][T10228] EXT4-fs (loop2): 1 orphan inode deleted [ 163.285119][T10228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.311284][T10231] 9pnet_fd: Insufficient options for proto=fd [ 163.337721][T10233] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2444'. [ 163.419694][T10241] tmpfs: Bad value for 'mpol' [ 163.451262][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2445'. [ 163.690592][T10256] loop0: detected capacity change from 0 to 8192 [ 164.127976][T10264] loop0: detected capacity change from 0 to 512 [ 164.136537][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.151100][T10264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.163963][T10264] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.485231][T10275] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2457'. [ 164.882878][T10264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.058719][T10300] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2467'. [ 165.561542][ T29] kauditd_printk_skb: 1532 callbacks suppressed [ 165.561558][ T29] audit: type=1400 audit(1756844572.133:32365): avc: denied { prog_load } for pid=10293 comm="syz.0.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.587091][ T29] audit: type=1400 audit(1756844572.133:32366): avc: denied { bpf } for pid=10293 comm="syz.0.2464" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.607936][ T29] audit: type=1400 audit(1756844572.133:32367): avc: denied { perfmon } for pid=10293 comm="syz.0.2464" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.629327][ T29] audit: type=1400 audit(1756844572.133:32368): avc: denied { bpf } for pid=10293 comm="syz.0.2464" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.651147][ T29] audit: type=1400 audit(1756844572.143:32369): avc: denied { read write } for pid=10293 comm="syz.0.2464" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 165.675210][ T29] audit: type=1400 audit(1756844572.143:32370): avc: denied { read write open } for pid=10293 comm="syz.0.2464" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 165.700300][ T29] audit: type=1400 audit(1756844572.143:32371): avc: denied { allowed } for pid=10293 comm="syz.0.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.720055][ T29] audit: type=1400 audit(1756844572.143:32372): avc: denied { create } for pid=10293 comm="syz.0.2464" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.741495][ T29] audit: type=1400 audit(1756844572.143:32373): avc: denied { map } for pid=10293 comm="syz.0.2464" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.766012][ T29] audit: type=1400 audit(1756844572.143:32374): avc: denied { read write } for pid=10293 comm="syz.0.2464" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.808966][T10312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2470'. [ 165.883952][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2466'. [ 165.955731][T10318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10318 comm=syz.2.2472 [ 165.968559][T10318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10318 comm=syz.2.2472 [ 166.047263][T10317] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2471'. [ 166.072871][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 166.683730][T10346] loop2: detected capacity change from 0 to 512 [ 166.720705][T10346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.747132][T10346] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.356265][T10375] loop3: detected capacity change from 0 to 512 [ 167.378902][T10377] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 167.387664][T10375] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 167.405089][T10375] EXT4-fs (loop3): mount failed [ 167.422823][T10377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.442872][T10381] bond1 (unregistering): Released all slaves [ 167.514104][T10385] loop3: detected capacity change from 0 to 512 [ 167.557563][T10385] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 167.574127][T10385] EXT4-fs (loop3): mount failed [ 167.633457][T10346] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.980331][T10392] __nla_validate_parse: 4 callbacks suppressed [ 167.986749][T10392] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2500'. [ 168.179350][T10418] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 168.208789][T10418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.222989][T10424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10424 comm=syz.0.2510 [ 168.235603][T10424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10424 comm=syz.0.2510 [ 168.254722][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 168.286514][T10423] loop8: detected capacity change from 0 to 16384 [ 168.301018][T10418] bond1 (unregistering): Released all slaves [ 168.321311][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 168.442009][T10433] random: crng reseeded on system resumption [ 168.457284][T10432] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2514'. [ 168.521033][T10428] loop8: detected capacity change from 16384 to 16383 [ 168.556593][T10437] loop3: detected capacity change from 0 to 512 [ 168.574533][T10437] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.595869][T10437] EXT4-fs (loop3): mount failed [ 169.200961][T10458] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2524'. [ 169.262412][T10456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10456 comm=syz.5.2523 [ 169.275279][T10456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10456 comm=syz.5.2523 [ 169.330315][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2523'. [ 169.363606][T10464] vhci_hcd: invalid port number 23 [ 169.601333][T10483] loop5: detected capacity change from 0 to 512 [ 169.618568][T10483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.632493][T10483] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.646049][T10487] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10487 comm=syz.3.2537 [ 169.658827][T10487] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10487 comm=syz.3.2537 [ 169.661061][T10484] loop2: detected capacity change from 0 to 512 [ 169.714641][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.749154][T10484] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.777751][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'. [ 170.087562][T10505] FAULT_INJECTION: forcing a failure. [ 170.087562][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 170.100433][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.1.2542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.100462][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 170.100474][T10505] Call Trace: [ 170.100480][T10505] [ 170.100487][T10505] __dump_stack+0x1d/0x30 [ 170.100508][T10505] dump_stack_lvl+0xe8/0x140 [ 170.100576][T10505] dump_stack+0x15/0x1b [ 170.100593][T10505] should_fail_ex+0x265/0x280 [ 170.100618][T10505] ? __ipv6_dev_mc_inc+0x284/0x5b0 [ 170.100646][T10505] should_failslab+0x8c/0xb0 [ 170.100707][T10505] __kmalloc_cache_noprof+0x4c/0x320 [ 170.100739][T10505] __ipv6_dev_mc_inc+0x284/0x5b0 [ 170.100764][T10505] __ipv6_sock_mc_join+0x290/0x470 [ 170.100848][T10505] ipv6_sock_mc_join+0x24/0x30 [ 170.100876][T10505] ipv6_mc_config+0x70/0xe0 [ 170.100894][T10505] inet6_addr_add+0x213/0x6a0 [ 170.100999][T10505] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 170.101018][T10505] ? __mutex_lock+0x25d/0xcc0 [ 170.101041][T10505] ? __rcu_read_unlock+0x4f/0x70 [ 170.101060][T10505] ? ipv6_get_ifaddr+0x2d9/0x310 [ 170.101109][T10505] inet6_rtm_newaddr+0x7f2/0x8b0 [ 170.101136][T10505] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 170.101157][T10505] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 170.101219][T10505] netlink_rcv_skb+0x123/0x220 [ 170.101240][T10505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.101269][T10505] rtnetlink_rcv+0x1c/0x30 [ 170.101291][T10505] netlink_unicast+0x5bd/0x690 [ 170.101329][T10505] netlink_sendmsg+0x58b/0x6b0 [ 170.101351][T10505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.101374][T10505] __sock_sendmsg+0x145/0x180 [ 170.101413][T10505] ____sys_sendmsg+0x31e/0x4e0 [ 170.101463][T10505] ___sys_sendmsg+0x17b/0x1d0 [ 170.101498][T10505] __x64_sys_sendmsg+0xd4/0x160 [ 170.101568][T10505] x64_sys_call+0x191e/0x2ff0 [ 170.101585][T10505] do_syscall_64+0xd2/0x200 [ 170.101611][T10505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.101635][T10505] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.101666][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.101682][T10505] RIP: 0033:0x7f010404ebe9 [ 170.101693][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.101705][T10505] RSP: 002b:00007f0102ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.101719][T10505] RAX: ffffffffffffffda RBX: 00007f0104285fa0 RCX: 00007f010404ebe9 [ 170.101728][T10505] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 170.101777][T10505] RBP: 00007f0102ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.101785][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.101793][T10505] R13: 00007f0104286038 R14: 00007f0104285fa0 R15: 00007fffa84d9c78 [ 170.101805][T10505] [ 170.453832][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.500895][T10483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.548642][T10509] atomic_op ffff888135278128 conn xmit_atomic 0000000000000000 [ 170.571095][ T29] kauditd_printk_skb: 1642 callbacks suppressed [ 170.571111][ T29] audit: type=1400 audit(1756844577.493:34014): avc: denied { recv } for pid=3293 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 170.610127][ T29] audit: type=1400 audit(1756844577.523:34015): avc: denied { recv } for pid=5519 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 170.667822][ T29] audit: type=1400 audit(1756844577.533:34016): avc: denied { prog_load } for pid=10516 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 170.687417][ T29] audit: type=1400 audit(1756844577.533:34017): avc: denied { bpf } for pid=10516 comm="syz.3.2547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.708308][ T29] audit: type=1400 audit(1756844577.533:34018): avc: denied { create } for pid=10516 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.728440][ T29] audit: type=1400 audit(1756844577.533:34019): avc: denied { setopt } for pid=10516 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.749153][ T29] audit: type=1400 audit(1756844577.533:34020): avc: denied { prog_load } for pid=10516 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 170.768603][ T29] audit: type=1400 audit(1756844577.543:34021): avc: denied { bpf } for pid=10516 comm="syz.3.2547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.789884][ T29] audit: type=1400 audit(1756844577.543:34022): avc: denied { perfmon } for pid=10516 comm="syz.3.2547" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.811067][ T29] audit: type=1400 audit(1756844577.543:34023): avc: denied { perfmon } for pid=10516 comm="syz.3.2547" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.919052][T10531] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 170.946775][T10531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.969292][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 170.987998][T10531] bond1 (unregistering): Released all slaves [ 171.016463][T10539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10539 comm=syz.0.2555 [ 171.029248][T10539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10539 comm=syz.0.2555 [ 171.091951][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'. [ 171.850027][T10571] loop3: detected capacity change from 0 to 512 [ 171.869224][T10571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.902570][T10571] EXT4-fs (loop3): 1 truncate cleaned up [ 171.917047][T10571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.160970][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.225488][T10589] loop3: detected capacity change from 0 to 512 [ 172.271446][T10589] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.326494][T10590] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2571'. [ 172.418838][T10589] EXT4-fs (loop3): mount failed [ 172.812399][T10615] loop5: detected capacity change from 0 to 8192 [ 173.085991][T10623] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2583'. [ 173.581336][T10637] loop3: detected capacity change from 0 to 8192 [ 173.623537][T10640] loop2: detected capacity change from 0 to 1024 [ 173.653266][T10640] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.682596][T10640] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2588: Invalid block bitmap block 0 in block_group 0 [ 173.702988][T10640] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2588: Failed to acquire dquot type 0 [ 173.745697][T10640] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2588: Freeing blocks not in datazone - block = 0, count = 4096 [ 173.821206][T10640] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2588: Invalid inode bitmap blk 0 in block_group 0 [ 173.846023][ T6223] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:47: Failed to release dquot type 0 [ 173.871164][T10640] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 173.898520][T10640] EXT4-fs (loop2): 1 orphan inode deleted [ 173.906346][T10652] loop5: detected capacity change from 0 to 512 [ 173.917628][T10640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.923895][T10654] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2594'. [ 173.966815][T10652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.011839][T10652] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.079389][T10649] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 174.096511][T10664] netlink: 'syz.0.2596': attribute type 13 has an invalid length. [ 174.186065][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.262551][T10667] loop5: detected capacity change from 0 to 512 [ 174.269668][T10665] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2597'. [ 174.298581][T10667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.311770][T10667] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.339996][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.677835][T10687] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2606'. [ 174.723853][T10689] netlink: 'syz.3.2607': attribute type 1 has an invalid length. [ 174.732999][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 174.954178][T10694] loop2: detected capacity change from 0 to 512 [ 174.984525][T10694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.026566][T10694] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.095614][T10667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.154563][T10693] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.292242][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.453438][T10720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2617'. [ 175.597698][ T29] kauditd_printk_skb: 1425 callbacks suppressed [ 175.597717][ T29] audit: type=1326 audit(1756844582.503:35445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bd0febe9 code=0x7ffc0000 [ 175.706630][ T29] audit: type=1400 audit(1756844582.553:35446): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.731309][ T29] audit: type=1400 audit(1756844582.553:35447): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.755528][ T29] audit: type=1400 audit(1756844582.553:35448): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.781490][ T29] audit: type=1326 audit(1756844582.553:35449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bd0febe9 code=0x7ffc0000 [ 175.805477][ T29] audit: type=1400 audit(1756844582.603:35450): avc: denied { recv } for pid=10707 comm="syz.0.2613" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 175.831090][ T29] audit: type=1400 audit(1756844582.603:35451): avc: denied { recv } for pid=10707 comm="syz.0.2613" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 175.909241][ T29] audit: type=1400 audit(1756844582.773:35452): avc: denied { map_create } for pid=10723 comm="syz.2.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.940281][ T29] audit: type=1400 audit(1756844582.843:35453): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 176.020113][ T29] audit: type=1400 audit(1756844582.893:35454): avc: denied { recv } for pid=10707 comm="syz.0.2613" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 176.068048][T10729] netlink: 'syz.5.2619': attribute type 1 has an invalid length. [ 176.095745][T10729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.145417][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 176.175206][T10729] bond1 (unregistering): Released all slaves [ 176.318004][T10738] tmpfs: Bad value for 'mpol' [ 176.346818][T10742] loop0: detected capacity change from 0 to 512 [ 176.347534][T10743] tipc: Resetting bearer [ 176.371884][T10743] syzkaller0: entered allmulticast mode [ 176.501871][T10742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.528839][T10742] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.539873][T10750] tipc: Disabling bearer [ 176.780080][T10766] loop2: detected capacity change from 0 to 512 [ 176.803494][T10766] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 176.840107][T10766] EXT4-fs (loop2): mount failed [ 177.148313][T10742] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.378251][T10784] loop0: detected capacity change from 0 to 512 [ 177.419086][T10784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.452166][T10784] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.768640][T10784] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 177.949575][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.136644][T10808] tmpfs: Bad value for 'mpol' [ 178.246611][T10805] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2647'. [ 178.479848][T10828] loop5: detected capacity change from 0 to 512 [ 178.488278][T10832] loop2: detected capacity change from 0 to 512 [ 178.500312][T10832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.569163][T10832] EXT4-fs (loop2): 1 truncate cleaned up [ 178.577995][T10832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.597710][T10832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.655262][T10828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.678300][T10828] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.807911][T10828] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 179.455091][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.534684][T10857] tmpfs: Bad value for 'mpol' [ 180.580903][T10872] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2669'. [ 180.602692][ T29] kauditd_printk_skb: 1137 callbacks suppressed [ 180.602708][ T29] audit: type=1400 audit(1756844587.523:36591): avc: denied { map_create } for pid=10877 comm="syz.2.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.628595][ T29] audit: type=1400 audit(1756844587.523:36592): avc: denied { map_read map_write } for pid=10877 comm="syz.2.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.675071][ T29] audit: type=1400 audit(1756844587.583:36593): avc: denied { prog_load } for pid=10877 comm="syz.2.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.694490][ T29] audit: type=1400 audit(1756844587.583:36594): avc: denied { bpf } for pid=10877 comm="syz.2.2673" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.715268][ T29] audit: type=1400 audit(1756844587.583:36595): avc: denied { perfmon } for pid=10877 comm="syz.2.2673" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.736561][ T29] audit: type=1400 audit(1756844587.583:36596): avc: denied { bpf } for pid=10877 comm="syz.2.2673" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.757304][ T29] audit: type=1400 audit(1756844587.583:36597): avc: denied { read } for pid=10877 comm="syz.2.2673" dev="nsfs" ino=4026532507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 180.778654][ T29] audit: type=1400 audit(1756844587.583:36598): avc: denied { read open } for pid=10877 comm="syz.2.2673" path="net:[4026532507]" dev="nsfs" ino=4026532507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 180.802513][ T29] audit: type=1400 audit(1756844587.583:36599): avc: denied { create } for pid=10877 comm="syz.2.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.822718][ T29] audit: type=1400 audit(1756844587.583:36600): avc: denied { create } for pid=10877 comm="syz.2.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.331989][T10898] loop2: detected capacity change from 0 to 512 [ 181.342020][T10898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.407071][T10898] EXT4-fs (loop2): 1 truncate cleaned up [ 181.418801][T10898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.455702][T10898] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.983182][T10917] loop3: detected capacity change from 0 to 512 [ 182.000413][T10917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.024312][T10917] EXT4-fs (loop3): 1 truncate cleaned up [ 182.035432][T10917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.050236][T10917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.065807][T10916] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2686'. [ 182.199176][T10922] loop3: detected capacity change from 0 to 512 [ 182.252409][T10922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.319822][T10922] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.446806][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.589007][T10938] loop3: detected capacity change from 0 to 512 [ 182.615221][T10938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.665629][T10938] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.512339][T10938] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.524283][T10957] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2700'. [ 183.534441][T10959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10959 comm=syz.0.2701 [ 183.547345][T10959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10959 comm=syz.0.2701 [ 183.815251][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'. [ 184.009040][T10973] loop5: detected capacity change from 0 to 512 [ 184.017954][T10973] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.039370][T10973] EXT4-fs (loop5): 1 truncate cleaned up [ 184.056153][T10973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.086268][T10973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.630608][T10990] loop0: detected capacity change from 0 to 512 [ 184.675257][T10990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.707797][T10990] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.178119][T11002] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2717'. [ 185.469017][T11012] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11012 comm=syz.5.2722 [ 185.481621][T11012] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11012 comm=syz.5.2722 [ 185.512674][T10990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.559341][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2722'. [ 185.695684][ T29] kauditd_printk_skb: 1011 callbacks suppressed [ 185.695700][ T29] audit: type=1400 audit(1756844592.613:37612): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.726442][ T29] audit: type=1400 audit(1756844592.613:37613): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.840456][ T29] audit: type=1400 audit(1756844592.643:37614): avc: denied { create } for pid=11013 comm="syz.0.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.861456][ T29] audit: type=1400 audit(1756844592.663:37615): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.887302][ T29] audit: type=1400 audit(1756844592.673:37616): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 185.912594][ T29] audit: type=1400 audit(1756844592.673:37617): avc: denied { create } for pid=11013 comm="syz.0.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.933584][ T29] audit: type=1400 audit(1756844592.683:37618): avc: denied { map_create } for pid=11017 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.953120][ T29] audit: type=1400 audit(1756844592.683:37619): avc: denied { perfmon } for pid=11017 comm="syz.3.2724" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.974410][ T29] audit: type=1400 audit(1756844592.683:37620): avc: denied { map_read map_write } for pid=11017 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.994900][ T29] audit: type=1400 audit(1756844592.683:37621): avc: denied { prog_load } for pid=11017 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 186.778514][T11056] loop5: detected capacity change from 0 to 512 [ 187.389190][T11094] loop3: detected capacity change from 0 to 512 [ 187.421363][T11089] loop5: detected capacity change from 0 to 512 [ 187.489803][T11094] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.550487][T11094] EXT4-fs (loop3): mount failed [ 188.205256][T11110] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2760'. [ 188.282659][ T6223] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.345521][ T6223] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.431884][ T6223] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.512378][ T6223] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.549205][T11127] loop2: detected capacity change from 0 to 512 [ 188.572693][T11127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.601449][T11127] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.623609][T11137] tmpfs: Bad value for 'mpol' [ 188.778088][T11143] loop3: detected capacity change from 0 to 512 [ 188.812678][T11143] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.813094][ T6223] bond0 (unregistering): Released all slaves [ 188.828765][T11143] EXT4-fs (loop3): mount failed [ 188.882798][ T6223] tipc: Left network mode [ 188.895872][ T6223] hsr_slave_0: left promiscuous mode [ 188.910552][ T6223] hsr_slave_1: left promiscuous mode [ 188.918444][ T6223] veth1_macvtap: left promiscuous mode [ 188.924840][ T6223] veth0_macvtap: left promiscuous mode [ 189.222642][T11116] chnl_net:caif_netlink_parms(): no params data found [ 189.306541][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.313828][T11116] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.332697][T11116] bridge_slave_0: entered allmulticast mode [ 189.339175][T11116] bridge_slave_0: entered promiscuous mode [ 189.349562][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.352828][T11135] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 189.356684][T11116] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.356933][T11116] bridge_slave_1: entered allmulticast mode [ 189.372404][T11135] EXT4-fs (loop2): Remounting filesystem read-only [ 189.379871][T11116] bridge_slave_1: entered promiscuous mode [ 189.405497][T11127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.446023][T11165] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 189.452157][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.479843][T11165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.594762][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.620595][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 189.646646][T11116] team0: Port device team_slave_0 added [ 189.663055][T11116] team0: Port device team_slave_1 added [ 189.684673][T11169] bond1 (unregistering): Released all slaves [ 189.775605][T11178] loop5: detected capacity change from 0 to 512 [ 189.812442][T11178] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.828865][T11178] EXT4-fs (loop5): mount failed [ 189.832210][T11116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.840941][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.867136][T11116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.880126][T11116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.887184][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.913239][T11116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.974363][T11116] hsr_slave_0: entered promiscuous mode [ 189.985785][T11116] hsr_slave_1: entered promiscuous mode [ 190.007113][T11116] debugfs: 'hsr0' already exists in 'hsr' [ 190.012942][T11116] Cannot create hsr debugfs directory [ 190.136169][T11188] tmpfs: Bad value for 'mpol' [ 190.192123][T11189] loop5: detected capacity change from 0 to 512 [ 190.243630][T11189] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.299455][T11189] EXT4-fs (loop5): mount failed [ 190.570231][T11200] loop5: detected capacity change from 0 to 512 [ 190.626387][T11200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.641532][T11116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.654225][T11116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.665587][T11116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.670825][T11200] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.686447][T11116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.701720][ T29] kauditd_printk_skb: 1068 callbacks suppressed [ 190.701767][ T29] audit: type=1400 audit(1756844597.623:38674): avc: denied { perfmon } for pid=11199 comm="syz.5.2783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.731431][ T29] audit: type=1400 audit(1756844597.623:38675): avc: denied { bpf } for pid=11199 comm="syz.5.2783" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.752249][ T29] audit: type=1400 audit(1756844597.623:38676): avc: denied { prog_run } for pid=11199 comm="syz.5.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.773101][ T29] audit: type=1400 audit(1756844597.703:38677): avc: denied { read } for pid=11116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.794064][ T29] audit: type=1400 audit(1756844597.703:38678): avc: denied { write } for pid=11116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.817337][ T29] audit: type=1400 audit(1756844597.743:38679): avc: denied { read } for pid=11116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.838226][ T29] audit: type=1400 audit(1756844597.743:38680): avc: denied { write } for pid=11116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.963905][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.003911][ T29] audit: type=1400 audit(1756844597.783:38681): avc: denied { prog_load } for pid=11195 comm="syz.3.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.023221][ T29] audit: type=1400 audit(1756844597.783:38682): avc: denied { bpf } for pid=11195 comm="syz.3.2782" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.044033][ T29] audit: type=1400 audit(1756844597.783:38683): avc: denied { perfmon } for pid=11195 comm="syz.3.2782" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.076258][T11116] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.135561][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.142803][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.162662][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.169755][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.370040][T11200] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.495022][T11116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.840929][T11236] loop2: detected capacity change from 0 to 8192 [ 191.854340][T11116] veth0_vlan: entered promiscuous mode [ 191.876730][T11116] veth1_vlan: entered promiscuous mode [ 191.905757][T11234] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2789'. [ 191.929414][T11116] veth0_macvtap: entered promiscuous mode [ 191.984754][T11116] veth1_macvtap: entered promiscuous mode [ 192.034331][T11116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.054494][T11241] tmpfs: Bad value for 'mpol' [ 192.063118][T11116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.091376][ T6238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.122357][ T6238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.167891][ T6238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.191326][ T6238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.528452][T11255] loop5: detected capacity change from 0 to 512 [ 192.576596][T11255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.589825][T11255] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.593072][T11263] loop3: detected capacity change from 0 to 512 [ 192.654677][T11263] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.677040][T11263] EXT4-fs (loop3): mount failed [ 192.923367][T11279] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2804'. [ 193.306083][T11255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.342936][T11298] loop2: detected capacity change from 0 to 1024 [ 193.353390][T11298] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.368915][T11298] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2808: Invalid block bitmap block 0 in block_group 0 [ 193.383764][T11298] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2808: Failed to acquire dquot type 0 [ 193.395583][T11298] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2808: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.410895][T11298] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2808: Invalid inode bitmap blk 0 in block_group 0 [ 193.425584][T11298] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 193.435709][ T6235] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:59: Failed to release dquot type 0 [ 193.449389][T11298] EXT4-fs (loop2): 1 orphan inode deleted [ 193.456326][T11298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.553110][T11306] loop5: detected capacity change from 0 to 512 [ 193.570164][T11306] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.590263][T11306] EXT4-fs (loop5): 1 truncate cleaned up [ 193.597662][T11306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.612596][T11306] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.696883][T11312] loop5: detected capacity change from 0 to 512 [ 193.716967][T11312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.733895][T11312] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.827032][T11316] loop3: detected capacity change from 0 to 512 [ 193.857497][T11316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.872249][T11316] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.886802][T11316] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 193.921894][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.071872][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.471241][T11341] loop2: detected capacity change from 0 to 512 [ 194.479868][T11341] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.486487][T11341] EXT4-fs: test_dummy_encryption option not supported [ 194.716300][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.202519][T11365] loop2: detected capacity change from 0 to 164 [ 195.269316][T11369] loop3: detected capacity change from 0 to 1024 [ 195.286987][T11369] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.325225][T11369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2830: Invalid block bitmap block 0 in block_group 0 [ 195.339037][T11369] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2830: Failed to acquire dquot type 0 [ 195.351783][T11369] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2830: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.369295][T11369] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2830: Invalid inode bitmap blk 0 in block_group 0 [ 195.383399][T11369] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 195.383896][ T6235] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:59: Failed to release dquot type 0 [ 195.393515][T11369] EXT4-fs (loop3): 1 orphan inode deleted [ 195.411029][T11369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.487034][T11388] FAULT_INJECTION: forcing a failure. [ 195.487034][T11388] name failslab, interval 1, probability 0, space 0, times 0 [ 195.499988][T11388] CPU: 1 UID: 0 PID: 11388 Comm: syz.2.2840 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.500056][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 195.500069][T11388] Call Trace: [ 195.500075][T11388] [ 195.500083][T11388] __dump_stack+0x1d/0x30 [ 195.500147][T11388] dump_stack_lvl+0xe8/0x140 [ 195.500160][T11388] dump_stack+0x15/0x1b [ 195.500171][T11388] should_fail_ex+0x265/0x280 [ 195.500184][T11388] should_failslab+0x8c/0xb0 [ 195.500201][T11388] kmem_cache_alloc_noprof+0x50/0x310 [ 195.500286][T11388] ? security_inode_alloc+0x37/0x100 [ 195.500313][T11388] security_inode_alloc+0x37/0x100 [ 195.500329][T11388] inode_init_always_gfp+0x4b7/0x500 [ 195.500358][T11388] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 195.500383][T11388] alloc_inode+0x58/0x170 [ 195.500406][T11388] new_inode+0x1d/0xe0 [ 195.500469][T11388] shmem_get_inode+0x244/0x750 [ 195.500484][T11388] __shmem_file_setup+0x113/0x210 [ 195.500504][T11388] shmem_file_setup+0x3b/0x50 [ 195.500524][T11388] __se_sys_memfd_create+0x2c3/0x590 [ 195.500592][T11388] __x64_sys_memfd_create+0x31/0x40 [ 195.500664][T11388] x64_sys_call+0x2abe/0x2ff0 [ 195.500678][T11388] do_syscall_64+0xd2/0x200 [ 195.500729][T11388] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.500751][T11388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.500779][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.500853][T11388] RIP: 0033:0x7fea0259ebe9 [ 195.500864][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.500876][T11388] RSP: 002b:00007fea00ffee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 195.500936][T11388] RAX: ffffffffffffffda RBX: 00000000000004e4 RCX: 00007fea0259ebe9 [ 195.500944][T11388] RDX: 00007fea00ffeef0 RSI: 0000000000000000 RDI: 00007fea026227e8 [ 195.501021][T11388] RBP: 0000200000002d40 R08: 00007fea00ffebb7 R09: 00007fea00ffee40 [ 195.501086][T11388] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 195.501094][T11388] R13: 00007fea00ffeef0 R14: 00007fea00ffeeb0 R15: 0000200000000380 [ 195.501108][T11388] [ 195.755209][ T29] kauditd_printk_skb: 1268 callbacks suppressed [ 195.755226][ T29] audit: type=1400 audit(1756844602.673:39945): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.786121][ T29] audit: type=1400 audit(1756844602.673:39946): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.810509][ T29] audit: type=1400 audit(1756844602.673:39947): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.836752][ T29] audit: type=1400 audit(1756844602.683:39948): avc: denied { prog_load } for pid=11389 comm="syz.2.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.856171][ T29] audit: type=1400 audit(1756844602.683:39949): avc: denied { bpf } for pid=11389 comm="syz.2.2841" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.878625][ T29] audit: type=1400 audit(1756844602.693:39950): avc: denied { perfmon } for pid=11389 comm="syz.2.2841" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.899937][ T29] audit: type=1400 audit(1756844602.693:39951): avc: denied { map_create } for pid=11389 comm="syz.2.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.919866][ T29] audit: type=1400 audit(1756844602.693:39952): avc: denied { bpf } for pid=11389 comm="syz.2.2841" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.940742][ T29] audit: type=1400 audit(1756844602.693:39953): avc: denied { map_read map_write } for pid=11389 comm="syz.2.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.961492][ T29] audit: type=1400 audit(1756844602.693:39954): avc: denied { prog_load } for pid=11389 comm="syz.2.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.019271][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.116394][T11405] loop2: detected capacity change from 0 to 512 [ 196.169073][T11405] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.194646][T11405] EXT4-fs (loop2): mount failed [ 196.232321][T11415] tmpfs: Bad value for 'mpol' [ 196.236160][T11416] loop5: detected capacity change from 0 to 8192 [ 196.456811][T11427] loop2: detected capacity change from 0 to 1024 [ 196.469740][T11427] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.493331][T11427] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2853: Invalid block bitmap block 0 in block_group 0 [ 196.511023][T11427] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2853: Failed to acquire dquot type 0 [ 196.529214][T11427] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2853: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.550329][T11432] loop3: detected capacity change from 0 to 1024 [ 196.632639][T11432] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.661357][T11427] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2853: Invalid inode bitmap blk 0 in block_group 0 [ 196.681246][ T6191] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 196.697399][T11432] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2855: Invalid block bitmap block 0 in block_group 0 [ 196.719569][T11427] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 196.744149][T11432] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2855: Failed to acquire dquot type 0 [ 196.759653][T11427] EXT4-fs (loop2): 1 orphan inode deleted [ 196.770416][T11432] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2855: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.787543][T11427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.790604][T11432] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2855: Invalid inode bitmap blk 0 in block_group 0 [ 196.813587][ T6238] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 0 [ 196.828716][T11432] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 196.849707][T11432] EXT4-fs (loop3): 1 orphan inode deleted [ 196.865222][T11432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.232293][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.319006][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.553330][T11457] loop5: detected capacity change from 0 to 512 [ 197.608530][T11457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.621638][T11457] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.637619][T11457] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 197.671297][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.813483][T11467] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2867'. [ 198.207305][T11490] loop5: detected capacity change from 0 to 2048 [ 198.215470][T11490] EXT4-fs (loop5): #clusters per group too big: 212992 [ 198.535779][T11495] loop2: detected capacity change from 0 to 1024 [ 198.544600][T11495] EXT4-fs: inline encryption not supported [ 198.552935][T11495] EXT4-fs: Ignoring removed nobh option [ 198.558610][T11495] EXT4-fs: Ignoring removed bh option [ 198.593305][T11495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.634111][T11495] Trying to write to read-only block-device loop2 [ 198.674886][T11500] loop3: detected capacity change from 0 to 512 [ 198.682598][T11500] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.695189][T11500] EXT4-fs (loop3): 1 truncate cleaned up [ 198.702132][T11500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.716345][T11500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.921862][T11509] tmpfs: Bad value for 'mpol' [ 199.081140][T11519] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 199.194122][T11524] loop0: detected capacity change from 0 to 512 [ 199.219533][T11524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.233710][T11524] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.248184][T11524] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 199.278201][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.312578][T11533] loop0: detected capacity change from 0 to 512 [ 199.329615][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.344069][T11533] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.359543][T11533] EXT4-fs (loop0): mount failed [ 199.558364][T11548] loop0: detected capacity change from 0 to 1024 [ 199.567448][T11546] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2889'. [ 199.581113][T11548] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.595347][T11548] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2891: Invalid block bitmap block 0 in block_group 0 [ 199.609414][T11548] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2891: Failed to acquire dquot type 0 [ 199.622250][T11548] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2891: Freeing blocks not in datazone - block = 0, count = 4096 [ 199.636732][T11548] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2891: Invalid inode bitmap blk 0 in block_group 0 [ 199.649669][T11548] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 199.659647][ T6235] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:59: Failed to release dquot type 0 [ 199.671334][T11548] EXT4-fs (loop0): 1 orphan inode deleted [ 199.677544][T11548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.895661][T11560] tmpfs: Bad value for 'mpol' [ 199.972713][T11559] netlink: 'syz.3.2896': attribute type 21 has an invalid length. [ 200.043048][T11561] loop3: detected capacity change from 0 to 128 [ 200.065360][T11561] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.127463][T11567] loop5: detected capacity change from 0 to 512 [ 200.210944][T11567] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.221280][T11561] ext4 filesystem being mounted at /594/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.226967][T11567] EXT4-fs (loop5): mount failed [ 200.313070][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.462094][T11583] tmpfs: Bad value for 'mpol' [ 200.518871][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2904'. [ 200.728412][T11596] tmpfs: Bad value for 'mpol' [ 200.733961][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.746920][T11599] loop2: detected capacity change from 0 to 512 [ 200.760889][ T29] kauditd_printk_skb: 1689 callbacks suppressed [ 200.760905][ T29] audit: type=1400 audit(1756844607.683:41632): avc: denied { mounton } for pid=11598 comm="syz.2.2909" path="/537/file0" dev="tmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 200.802245][ T29] audit: type=1400 audit(1756844607.683:41633): avc: denied { recv } for pid=11595 comm="syz.5.2908" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 200.828033][ T29] audit: type=1400 audit(1756844607.683:41634): avc: denied { recv } for pid=11595 comm="syz.5.2908" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 200.853640][ T29] audit: type=1400 audit(1756844607.683:41635): avc: denied { sys_module } for pid=11597 comm="syz.0.2910" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.875145][ T29] audit: type=1400 audit(1756844607.693:41636): avc: denied { module_request } for pid=11597 comm="syz.0.2910" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 200.896989][ T29] audit: type=1400 audit(1756844607.713:41637): avc: denied { read write } for pid=11598 comm="syz.2.2909" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.921470][ T29] audit: type=1400 audit(1756844607.713:41638): avc: denied { open } for pid=11598 comm="syz.2.2909" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.945914][ T29] audit: type=1400 audit(1756844607.713:41639): avc: denied { ioctl } for pid=11598 comm="syz.2.2909" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.953215][T11608] loop3: detected capacity change from 0 to 512 [ 200.971677][ T29] audit: type=1400 audit(1756844607.713:41640): avc: denied { open } for pid=11598 comm="syz.2.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 200.971708][ T29] audit: type=1400 audit(1756844607.713:41641): avc: denied { perfmon } for pid=11598 comm="syz.2.2909" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.002193][T11608] EXT4-fs error (device loop3): ext4_quota_enable:7128: inode #4: comm syz.3.2911: iget: bogus i_mode (4200) [ 201.038816][T11608] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.2911: Bad quota inode: 4, type: 1 [ 201.059660][T11608] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.079460][T11608] EXT4-fs (loop3): mount failed [ 201.146937][T11614] loop2: detected capacity change from 0 to 512 [ 202.659646][T11670] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2931'. [ 202.977394][T11672] loop0: detected capacity change from 0 to 8192 [ 203.409933][T11699] loop3: detected capacity change from 0 to 512 [ 203.419919][T11699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.423161][T11701] FAULT_INJECTION: forcing a failure. [ 203.423161][T11701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.443104][T11701] CPU: 1 UID: 0 PID: 11701 Comm: syz.5.2943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.443132][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 203.443143][T11701] Call Trace: [ 203.443150][T11701] [ 203.443158][T11701] __dump_stack+0x1d/0x30 [ 203.443211][T11701] dump_stack_lvl+0xe8/0x140 [ 203.443233][T11701] dump_stack+0x15/0x1b [ 203.443251][T11701] should_fail_ex+0x265/0x280 [ 203.443348][T11701] should_fail+0xb/0x20 [ 203.443423][T11701] should_fail_usercopy+0x1a/0x20 [ 203.443500][T11701] _copy_to_user+0x20/0xa0 [ 203.443525][T11701] simple_read_from_buffer+0xb5/0x130 [ 203.443546][T11701] proc_fail_nth_read+0x10e/0x150 [ 203.443627][T11701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.443652][T11701] vfs_read+0x1a8/0x770 [ 203.443674][T11701] ? __rcu_read_unlock+0x4f/0x70 [ 203.443696][T11701] ? __fget_files+0x184/0x1c0 [ 203.443728][T11701] ksys_read+0xda/0x1a0 [ 203.443748][T11701] __x64_sys_read+0x40/0x50 [ 203.443767][T11701] x64_sys_call+0x27bc/0x2ff0 [ 203.443796][T11701] do_syscall_64+0xd2/0x200 [ 203.443844][T11701] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.443869][T11701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 203.443892][T11701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.443912][T11701] RIP: 0033:0x7f19bd0fd5fc [ 203.443929][T11701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.444028][T11701] RSP: 002b:00007f19bbb67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.444052][T11701] RAX: ffffffffffffffda RBX: 00007f19bd335fa0 RCX: 00007f19bd0fd5fc [ 203.444067][T11701] RDX: 000000000000000f RSI: 00007f19bbb670a0 RDI: 0000000000000004 [ 203.444160][T11701] RBP: 00007f19bbb67090 R08: 0000000000000000 R09: 0000000000000000 [ 203.444174][T11701] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 203.444186][T11701] R13: 00007f19bd336038 R14: 00007f19bd335fa0 R15: 00007fffb48f5158 [ 203.444206][T11701] [ 203.445406][T11682] loop2: detected capacity change from 0 to 512 [ 203.572874][T11699] EXT4-fs (loop3): 1 truncate cleaned up [ 203.680875][T11699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.695087][T11699] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.753368][T11710] loop5: detected capacity change from 0 to 512 [ 203.881919][T11713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11713 comm=syz.2.2947 [ 203.982076][T11710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.012476][T11710] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.067589][T11710] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2945'. [ 204.130317][T11725] loop0: detected capacity change from 0 to 512 [ 204.154188][T11725] EXT4-fs: Ignoring removed bh option [ 204.160425][T11725] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.169641][T11725] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 204.175561][T11710] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2945'. [ 204.239976][T11725] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 204.249412][T11725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 204.261001][T11725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.301131][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.349444][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.363036][T11714] chnl_net:caif_netlink_parms(): no params data found [ 204.461244][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.468367][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.510294][T11714] bridge_slave_0: entered allmulticast mode [ 204.526916][T11714] bridge_slave_0: entered promiscuous mode [ 204.562122][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.569236][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.610222][T11714] bridge_slave_1: entered allmulticast mode [ 204.641604][T11714] bridge_slave_1: entered promiscuous mode [ 204.642962][T11743] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2952'. [ 204.765194][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.799738][T11763] loop0: detected capacity change from 0 to 8192 [ 204.815950][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.137989][T11714] team0: Port device team_slave_0 added [ 205.222648][T11714] team0: Port device team_slave_1 added [ 205.322809][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.330092][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.356253][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.374461][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.381484][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.407437][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.453008][T11714] hsr_slave_0: entered promiscuous mode [ 205.513865][T11714] hsr_slave_1: entered promiscuous mode [ 205.519765][T11714] debugfs: 'hsr0' already exists in 'hsr' [ 205.525566][T11714] Cannot create hsr debugfs directory [ 205.739716][T11786] tmpfs: Bad value for 'mpol' [ 205.770545][ T29] kauditd_printk_skb: 1089 callbacks suppressed [ 205.770561][ T29] audit: type=1400 audit(1756844612.683:42731): avc: denied { create } for pid=11787 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.812521][ T29] audit: type=1400 audit(1756844612.723:42732): avc: denied { perfmon } for pid=11785 comm="syz.5.2967" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.874013][ T29] audit: type=1400 audit(1756844612.753:42733): avc: denied { map_create } for pid=11787 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.893657][ T29] audit: type=1400 audit(1756844612.753:42734): avc: denied { perfmon } for pid=11787 comm="syz.2.2968" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.914929][ T29] audit: type=1400 audit(1756844612.753:42735): avc: denied { map_read map_write } for pid=11787 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.935098][ T29] audit: type=1400 audit(1756844612.753:42736): avc: denied { prog_load } for pid=11787 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.954622][ T29] audit: type=1400 audit(1756844612.753:42737): avc: denied { bpf } for pid=11787 comm="syz.2.2968" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.975561][ T29] audit: type=1400 audit(1756844612.753:42738): avc: denied { perfmon } for pid=11787 comm="syz.2.2968" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.997121][ T29] audit: type=1400 audit(1756844612.753:42739): avc: denied { prog_run } for pid=11787 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.016491][ T29] audit: type=1400 audit(1756844612.763:42740): avc: denied { module_request } for pid=11787 comm="syz.2.2968" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.121123][T11797] loop5: detected capacity change from 0 to 256 [ 206.132503][T11797] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 206.167105][T11714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.190702][T11714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.215094][T11714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.231598][T11797] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2969'. [ 206.246973][T11797] hsr_slave_0: left promiscuous mode [ 206.255750][T11797] hsr_slave_1: left promiscuous mode [ 206.274236][T11714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.367959][T11714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.385699][T11714] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.429199][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.436304][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.473361][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.480488][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.058446][T11714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.363181][T11714] veth0_vlan: entered promiscuous mode [ 207.382752][T11714] veth1_vlan: entered promiscuous mode [ 207.420223][T11714] veth0_macvtap: entered promiscuous mode [ 207.487439][T11714] veth1_macvtap: entered promiscuous mode [ 207.572243][T11714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.662761][T11844] netlink: 'syz.2.2981': attribute type 1 has an invalid length. [ 207.680097][T11714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.694630][T11844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.703863][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 207.713842][ T6225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.741315][T11844] bond2 (unregistering): Released all slaves [ 207.750400][ T6225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.759990][ T6225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.773922][ T6225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.909328][T11848] loop2: detected capacity change from 0 to 512 [ 207.951026][T11853] loop0: detected capacity change from 0 to 512 [ 207.980260][T11853] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.996578][T11853] EXT4-fs (loop0): mount failed [ 208.008859][T11857] loop3: detected capacity change from 0 to 512 [ 208.021640][T11857] EXT4-fs: Ignoring removed nobh option [ 208.028085][T11857] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.046914][T11853] loop0: detected capacity change from 0 to 1024 [ 208.055358][T11853] EXT4-fs: Ignoring removed nobh option [ 208.062692][T11853] EXT4-fs: Ignoring removed bh option [ 208.069174][T11857] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2984: iget: bad i_size value: 38620345925642 [ 208.069432][T11853] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.095992][T11857] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2984: couldn't read orphan inode 15 (err -117) [ 208.110654][T11857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.126651][T11853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.131834][T11861] loop2: detected capacity change from 0 to 764 [ 208.153142][T11853] lo: entered promiscuous mode [ 208.158076][T11853] tunl0: entered promiscuous mode [ 208.164141][T11853] gre0: entered promiscuous mode [ 208.167628][T11857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2984'. [ 208.169264][T11853] 0ªî{X¹¦: entered promiscuous mode [ 208.169336][T11853] 0ªî{X¹¦: left allmulticast mode [ 208.188815][T11853] erspan0: entered promiscuous mode [ 208.194358][T11853] ip_vti0: entered promiscuous mode [ 208.199649][T11853] ip6_vti0: entered promiscuous mode [ 208.205143][T11853] sit0: entered promiscuous mode [ 208.210240][T11853] ip6tnl0: entered promiscuous mode [ 208.215809][T11853] ip6gre0: entered promiscuous mode [ 208.219616][T11861] FAULT_INJECTION: forcing a failure. [ 208.219616][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 208.221449][T11853] syz_tun: entered promiscuous mode [ 208.234221][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.2.2985 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.234319][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 208.234331][T11861] Call Trace: [ 208.234339][T11861] [ 208.234348][T11861] __dump_stack+0x1d/0x30 [ 208.234427][T11861] dump_stack_lvl+0xe8/0x140 [ 208.234446][T11861] dump_stack+0x15/0x1b [ 208.234462][T11861] should_fail_ex+0x265/0x280 [ 208.234484][T11861] should_failslab+0x8c/0xb0 [ 208.234507][T11861] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 208.234614][T11861] ? __d_alloc+0x3d/0x340 [ 208.234679][T11861] __d_alloc+0x3d/0x340 [ 208.234703][T11861] ? avc_has_perm_noaudit+0x156/0x200 [ 208.234740][T11861] d_alloc_parallel+0x53/0xc60 [ 208.234784][T11861] ? selinux_inode_permission+0x62d/0x740 [ 208.234824][T11861] ? lockref_get_not_dead+0x120/0x1c0 [ 208.234852][T11861] ? __rcu_read_unlock+0x4f/0x70 [ 208.234875][T11861] __lookup_slow+0x8c/0x250 [ 208.234977][T11861] lookup_slow+0x3c/0x60 [ 208.235005][T11861] walk_component+0x1ec/0x220 [ 208.235045][T11861] path_lookupat+0xfe/0x2a0 [ 208.235077][T11861] filename_lookup+0x147/0x340 [ 208.235122][T11861] vfs_statx+0x9d/0x390 [ 208.235149][T11861] vfs_fstatat+0x115/0x170 [ 208.235175][T11861] __se_sys_newfstatat+0x55/0x260 [ 208.235229][T11861] ? __fget_files+0x184/0x1c0 [ 208.235253][T11861] ? fput+0x8f/0xc0 [ 208.235340][T11861] ? ksys_write+0x192/0x1a0 [ 208.235362][T11861] __x64_sys_newfstatat+0x55/0x70 [ 208.235391][T11861] x64_sys_call+0x135a/0x2ff0 [ 208.235412][T11861] do_syscall_64+0xd2/0x200 [ 208.235438][T11861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.235468][T11861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.235571][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.235592][T11861] RIP: 0033:0x7fea0259ebe9 [ 208.235675][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.235694][T11861] RSP: 002b:00007fea00fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 208.235714][T11861] RAX: ffffffffffffffda RBX: 00007fea027d5fa0 RCX: 00007fea0259ebe9 [ 208.235727][T11861] RDX: 00002000000007c0 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 208.235749][T11861] RBP: 00007fea00fff090 R08: 0000000000000000 R09: 0000000000000000 [ 208.235761][T11861] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 208.235773][T11861] R13: 00007fea027d6038 R14: 00007fea027d5fa0 R15: 00007ffe0313fad8 [ 208.235806][T11861] [ 208.349755][T11870] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2984: bg 0: block 5: invalid block bitmap [ 208.352828][T11853] bridge0: entered promiscuous mode [ 208.431620][T11870] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2984: invalid indirect mapped block 3973251072 (level 0) [ 208.437198][T11853] vcan0: entered promiscuous mode [ 208.526417][T11853] bond0: entered promiscuous mode [ 208.531558][T11853] bond_slave_0: entered promiscuous mode [ 208.537335][T11853] bond_slave_1: entered promiscuous mode [ 208.544257][T11853] dummy0: entered promiscuous mode [ 208.549660][T11853] team0: entered promiscuous mode [ 208.554741][T11853] team_slave_0: entered promiscuous mode [ 208.560553][T11853] team_slave_1: entered promiscuous mode [ 208.566455][T11853] nlmon0: entered promiscuous mode [ 208.571801][T11853] caif0: entered promiscuous mode [ 208.576975][T11853] batadv0: entered promiscuous mode [ 208.582334][T11853] vxcan0: entered promiscuous mode [ 208.587535][T11853] vxcan1: entered promiscuous mode [ 208.592765][T11853] veth0: entered promiscuous mode [ 208.597925][T11853] veth1: entered promiscuous mode [ 208.603063][T11853] wg0: entered promiscuous mode [ 208.608060][T11853] wg1: entered promiscuous mode [ 208.613157][T11853] wg2: left allmulticast mode [ 208.618140][T11853] veth0_to_bridge: entered promiscuous mode [ 208.624261][T11853] veth1_to_bridge: entered promiscuous mode [ 208.630260][T11853] veth0_to_bond: entered promiscuous mode [ 208.636326][T11853] veth1_to_bond: entered promiscuous mode [ 208.642245][T11853] veth0_to_team: entered promiscuous mode [ 208.648168][T11853] veth1_to_team: entered promiscuous mode [ 208.654112][T11853] veth0_to_batadv: entered promiscuous mode [ 208.660102][T11853] batadv_slave_0: entered promiscuous mode [ 208.666154][T11853] veth1_to_batadv: entered promiscuous mode [ 208.672275][T11853] batadv_slave_1: entered promiscuous mode [ 208.678206][T11853] xfrm0: entered promiscuous mode [ 208.683438][T11853] veth0_to_hsr: entered promiscuous mode [ 208.689341][T11853] veth1_to_hsr: entered promiscuous mode [ 208.695354][T11853] hsr0: entered promiscuous mode [ 208.700416][T11853] veth1_virt_wifi: entered promiscuous mode [ 208.706459][T11853] veth0_virt_wifi: entered promiscuous mode [ 208.712575][T11853] vlan0: entered promiscuous mode [ 208.717804][T11853] vlan1: entered promiscuous mode [ 208.722978][T11853] macvlan0: entered promiscuous mode [ 208.728626][T11853] macvlan1: entered promiscuous mode [ 208.734070][T11853] ipvlan0: entered promiscuous mode [ 208.739559][T11853] ipvlan1: entered promiscuous mode [ 208.744972][T11853] macvtap0: entered promiscuous mode [ 208.750511][T11853] macsec0: entered promiscuous mode [ 208.755813][T11853] geneve0: entered promiscuous mode [ 208.761154][T11853] geneve1: entered promiscuous mode [ 208.767139][T11853] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 208.775135][T11853] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 208.782617][T11853] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 208.790064][T11853] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 208.797538][T11853] pim6reg: entered promiscuous mode [ 208.803290][T11853] gtp0: entered promiscuous mode [ 208.808670][T11853] gtp1: entered promiscuous mode [ 208.813777][T11853] gtp2: entered promiscuous mode [ 208.819079][T11853] gtp3: entered promiscuous mode [ 208.824121][T11853] gtp4: entered promiscuous mode [ 208.829268][T11853] gtp5: entered promiscuous mode [ 208.834435][T11853] gtp6: entered promiscuous mode [ 208.839500][T11853] gtp7: entered promiscuous mode [ 208.844623][T11853] bridge1: entered promiscuous mode [ 208.849901][T11853] gtp8: entered promiscuous mode [ 208.854983][T11853] gtp9: entered promiscuous mode [ 208.860203][T11853] gtp10: entered promiscuous mode [ 208.865428][T11853] gtp11: entered promiscuous mode [ 208.870598][T11853] gtp12: entered promiscuous mode [ 208.875742][T11853] ipvlan2: entered promiscuous mode [ 208.881020][T11853] gtp13: entered promiscuous mode [ 208.886154][T11853] ipvlan3: entered promiscuous mode [ 208.891563][T11853] ipvlan4: entered promiscuous mode [ 208.896918][T11853] gtp14: entered promiscuous mode [ 208.902035][T11853] gtp15: entered promiscuous mode [ 208.907101][T11853] gtp16: entered promiscuous mode [ 208.912326][T11853] ipvlan5: entered promiscuous mode [ 208.933021][T11857] netlink: 'syz.3.2984': attribute type 3 has an invalid length. [ 209.122979][T11714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.142927][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.420923][T11889] netlink: 'syz.3.2992': attribute type 1 has an invalid length. [ 209.451895][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 210.081321][T11923] loop5: detected capacity change from 0 to 1024 [ 210.104345][T11923] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.135750][T11923] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3001: Invalid block bitmap block 0 in block_group 0 [ 210.163330][T11923] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3001: Failed to acquire dquot type 0 [ 210.180702][T11923] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.3001: Freeing blocks not in datazone - block = 0, count = 4096 [ 210.194605][T11923] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3001: Invalid inode bitmap blk 0 in block_group 0 [ 210.210463][ T6191] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 210.212537][T11923] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 210.240519][T11923] EXT4-fs (loop5): 1 orphan inode deleted [ 210.246613][T11923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.617892][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 210.783707][ T29] kauditd_printk_skb: 1261 callbacks suppressed [ 210.783724][ T29] audit: type=1400 audit(1756844617.703:43994): avc: denied { create } for pid=11957 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.837434][ T29] audit: type=1400 audit(1756844617.733:43995): avc: denied { setopt } for pid=11957 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.857457][ T29] audit: type=1400 audit(1756844617.733:43996): avc: denied { shutdown } for pid=11957 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.877529][ T29] audit: type=1400 audit(1756844617.743:43997): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.901465][ T29] audit: type=1400 audit(1756844617.743:43998): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.925084][ T29] audit: type=1400 audit(1756844617.743:43999): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=862 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.950144][ T29] audit: type=1400 audit(1756844617.753:44000): avc: denied { recv } for pid=6191 comm="kworker/u8:15" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 210.976355][ T29] audit: type=1400 audit(1756844617.753:44001): avc: denied { recv } for pid=3293 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.008520][ T29] audit: type=1400 audit(1756844617.873:44002): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.034432][ T29] audit: type=1400 audit(1756844617.933:44003): avc: denied { unmount } for pid=5519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 211.036117][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.301980][T11975] loop0: detected capacity change from 0 to 1024 [ 211.312185][T11975] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.325850][T11975] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3024: Invalid block bitmap block 0 in block_group 0 [ 211.341690][T11975] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3024: Failed to acquire dquot type 0 [ 211.353586][T11975] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.3024: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.369120][T11975] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3024: Invalid inode bitmap blk 0 in block_group 0 [ 211.383579][ T6238] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 0 [ 211.395412][T11975] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 211.411349][T11975] EXT4-fs (loop0): 1 orphan inode deleted [ 211.417636][T11975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.451897][T11982] 9pnet: Could not find request transport: f0xffffffffffffffff [ 211.647588][T11990] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3028'. [ 211.994160][T12001] loop2: detected capacity change from 0 to 1024 [ 212.054872][T12001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=12001 comm=syz.2.3034 [ 212.171673][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3035'. [ 212.273580][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.935454][T12026] loop0: detected capacity change from 0 to 512 [ 212.946670][T12026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.966456][T12026] EXT4-fs (loop0): 1 truncate cleaned up [ 212.973455][T12026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.991047][T12026] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.077406][T12036] loop5: detected capacity change from 0 to 1024 [ 213.110308][T12036] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.135396][T12036] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3046: Invalid block bitmap block 0 in block_group 0 [ 213.157688][T12036] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3046: Failed to acquire dquot type 0 [ 213.172094][T12036] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.3046: Freeing blocks not in datazone - block = 0, count = 4096 [ 213.269649][T12036] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3046: Invalid inode bitmap blk 0 in block_group 0 [ 213.284013][ T6191] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 213.297508][T12036] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 213.306524][T12036] EXT4-fs (loop5): 1 orphan inode deleted [ 213.312939][T12036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.363260][T12047] loop0: detected capacity change from 0 to 512 [ 213.407472][T12047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.444789][T12047] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.520000][T12045] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 213.604322][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.862959][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.056198][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3056'. [ 214.068023][T12067] FAULT_INJECTION: forcing a failure. [ 214.068023][T12067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.081476][T12067] CPU: 1 UID: 0 PID: 12067 Comm: syz.3.3058 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.081514][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 214.081525][T12067] Call Trace: [ 214.081534][T12067] [ 214.081543][T12067] __dump_stack+0x1d/0x30 [ 214.081563][T12067] dump_stack_lvl+0xe8/0x140 [ 214.081607][T12067] dump_stack+0x15/0x1b [ 214.081631][T12067] should_fail_ex+0x265/0x280 [ 214.081655][T12067] should_fail_alloc_page+0xf2/0x100 [ 214.081736][T12067] __alloc_frozen_pages_noprof+0xff/0x360 [ 214.081775][T12067] alloc_pages_mpol+0xb3/0x250 [ 214.081812][T12067] folio_alloc_mpol_noprof+0x39/0x80 [ 214.081897][T12067] shmem_get_folio_gfp+0x3cf/0xd60 [ 214.081935][T12067] shmem_write_begin+0xa8/0x190 [ 214.081957][T12067] generic_perform_write+0x181/0x490 [ 214.082019][T12067] shmem_file_write_iter+0xc5/0xf0 [ 214.082121][T12067] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 214.082142][T12067] vfs_write+0x52a/0x960 [ 214.082177][T12067] ksys_write+0xda/0x1a0 [ 214.082209][T12067] __x64_sys_write+0x40/0x50 [ 214.082298][T12067] x64_sys_call+0x27fe/0x2ff0 [ 214.082379][T12067] do_syscall_64+0xd2/0x200 [ 214.082462][T12067] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.082641][T12067] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.082760][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.082780][T12067] RIP: 0033:0x7ffa9652d69f [ 214.082795][T12067] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 214.082814][T12067] RSP: 002b:00007ffa94f96df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 214.082838][T12067] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007ffa9652d69f [ 214.082873][T12067] RDX: 0000000000010000 RSI: 00007ffa8cb77000 RDI: 0000000000000004 [ 214.082973][T12067] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001fe [ 214.082985][T12067] R10: 00000000000001cc R11: 0000000000000293 R12: 0000000000000004 [ 214.082997][T12067] R13: 00007ffa94f96ef0 R14: 00007ffa94f96eb0 R15: 00007ffa8cb77000 [ 214.083035][T12067] [ 214.371728][T12070] random: crng reseeded on system resumption [ 214.382650][T12070] Restarting kernel threads ... [ 214.388081][T12070] Done restarting kernel threads. [ 215.072080][T12087] loop0: detected capacity change from 0 to 512 [ 215.097254][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.144657][T12087] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.215436][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.255898][T12097] program syz.0.3068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.385835][T12097] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3068'. [ 215.437961][T12097] loop0: detected capacity change from 0 to 512 [ 215.456092][T12097] EXT4-fs: Invalid commit interval 67108868, must be smaller than 21474836 [ 215.650557][T12101] Falling back ldisc for ttyS3. [ 215.736363][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'. [ 215.835044][ T29] kauditd_printk_skb: 1392 callbacks suppressed [ 215.835133][ T29] audit: type=1400 audit(1756844622.753:45382): avc: denied { prog_load } for pid=12110 comm="syz.2.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.861088][ T29] audit: type=1400 audit(1756844622.753:45383): avc: denied { bpf } for pid=12110 comm="syz.2.3074" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.881971][ T29] audit: type=1400 audit(1756844622.753:45384): avc: denied { perfmon } for pid=12110 comm="syz.2.3074" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.906978][ T29] audit: type=1400 audit(1756844622.823:45385): avc: denied { create } for pid=12110 comm="syz.2.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.928177][ T29] audit: type=1400 audit(1756844622.823:45386): avc: denied { write } for pid=12110 comm="syz.2.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.953072][ T29] audit: type=1400 audit(1756844622.873:45387): avc: denied { recv } for pid=12088 comm="syz.5.3065" saddr=10.128.0.163 src=30036 daddr=10.128.1.38 dest=41680 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 216.159206][ T29] audit: type=1400 audit(1756844622.953:45388): avc: denied { prog_load } for pid=12109 comm="syz.0.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.178666][ T29] audit: type=1400 audit(1756844622.953:45389): avc: denied { bpf } for pid=12109 comm="syz.0.3072" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.199736][ T29] audit: type=1400 audit(1756844622.953:45390): avc: denied { perfmon } for pid=12109 comm="syz.0.3072" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.220910][ T29] audit: type=1400 audit(1756844622.953:45391): avc: denied { prog_load } for pid=12109 comm="syz.0.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 217.209614][T12149] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 217.436170][T12153] loop3: detected capacity change from 0 to 512 [ 217.463821][T12153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.474139][T12157] netlink: 'syz.2.3088': attribute type 298 has an invalid length. [ 217.500265][T12153] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.522853][T12153] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 217.540188][T12162] FAULT_INJECTION: forcing a failure. [ 217.540188][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 217.552899][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.1.3089 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.552926][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 217.552938][T12162] Call Trace: [ 217.552944][T12162] [ 217.552950][T12162] __dump_stack+0x1d/0x30 [ 217.552971][T12162] dump_stack_lvl+0xe8/0x140 [ 217.553050][T12162] dump_stack+0x15/0x1b [ 217.553064][T12162] should_fail_ex+0x265/0x280 [ 217.553083][T12162] should_failslab+0x8c/0xb0 [ 217.553132][T12162] kmem_cache_alloc_noprof+0x50/0x310 [ 217.553156][T12162] ? alloc_empty_file+0x76/0x200 [ 217.553182][T12162] alloc_empty_file+0x76/0x200 [ 217.553306][T12162] path_openat+0x68/0x2170 [ 217.553349][T12162] ? _parse_integer_limit+0x170/0x190 [ 217.553387][T12162] ? kstrtoull+0x111/0x140 [ 217.553453][T12162] ? kstrtouint+0x76/0xc0 [ 217.553470][T12162] do_filp_open+0x109/0x230 [ 217.553523][T12162] do_sys_openat2+0xa6/0x110 [ 217.553550][T12162] __x64_sys_openat+0xf2/0x120 [ 217.553577][T12162] x64_sys_call+0x2e9c/0x2ff0 [ 217.553595][T12162] do_syscall_64+0xd2/0x200 [ 217.553679][T12162] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.553700][T12162] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 217.553723][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.553741][T12162] RIP: 0033:0x7f6a84ddd550 [ 217.553756][T12162] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 217.553798][T12162] RSP: 002b:00007f6a8383ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 217.553816][T12162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a84ddd550 [ 217.553828][T12162] RDX: 0000000000000000 RSI: 00007f6a84e61f06 RDI: 00000000ffffff9c [ 217.553911][T12162] RBP: 00007f6a84e61f06 R08: 0000000000000000 R09: 0000000000000000 [ 217.553922][T12162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 217.553932][T12162] R13: 00007f6a85016038 R14: 00007f6a85015fa0 R15: 00007fffa1f0fbc8 [ 217.553947][T12162] [ 217.811055][T11714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.862671][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'. [ 218.226682][T12190] loop5: detected capacity change from 0 to 512 [ 218.255960][T12190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.269728][T12190] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.304232][T12204] tmpfs: Bad value for 'mpol' [ 218.360756][T12190] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 218.429638][ T5519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.481223][T12208] loop2: detected capacity change from 0 to 512 [ 218.672058][T12224] netlink: 'syz.0.3113': attribute type 1 has an invalid length. [ 218.686828][T12224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.706444][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 218.729596][T12224] bond1 (unregistering): Released all slaves [ 218.782400][T12235] loop2: detected capacity change from 0 to 512 [ 218.824445][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3117'. [ 218.853416][T12238] loop5: detected capacity change from 0 to 512 [ 218.872688][T12238] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.887808][T12238] EXT4-fs (loop5): mount failed [ 218.920835][T12245] tmpfs: Bad value for 'mpol' [ 218.997903][T12245] ================================================================== [ 219.006029][T12245] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 219.015014][T12245] [ 219.017363][T12245] read to 0xffff88810ea05320 of 4 bytes by task 12249 on cpu 0: [ 219.025086][T12245] selinux_inode_permission+0x334/0x740 [ 219.030752][T12245] security_inode_permission+0x6d/0xb0 [ 219.036257][T12245] inode_permission+0x106/0x310 [ 219.041141][T12245] link_path_walk+0x162/0x900 [ 219.045846][T12245] path_openat+0x1de/0x2170 [ 219.050361][T12245] do_filp_open+0x109/0x230 [ 219.054881][T12245] io_openat2+0x272/0x390 [ 219.059237][T12245] io_openat+0x1b/0x30 [ 219.063328][T12245] __io_issue_sqe+0xfe/0x2e0 [ 219.068013][T12245] io_issue_sqe+0x53/0x970 [ 219.072424][T12245] io_wq_submit_work+0x3f7/0x5f0 [ 219.077357][T12245] io_worker_handle_work+0x44e/0x9b0 [ 219.082646][T12245] io_wq_worker+0x22e/0x870 [ 219.087147][T12245] ret_from_fork+0xda/0x150 [ 219.091649][T12245] ret_from_fork_asm+0x1a/0x30 [ 219.096510][T12245] [ 219.098832][T12245] write to 0xffff88810ea05320 of 4 bytes by task 12245 on cpu 1: [ 219.106549][T12245] selinux_inode_permission+0x3ac/0x740 [ 219.112280][T12245] security_inode_permission+0x6d/0xb0 [ 219.117748][T12245] inode_permission+0x106/0x310 [ 219.122787][T12245] link_path_walk+0x162/0x900 [ 219.127466][T12245] path_openat+0x1de/0x2170 [ 219.131963][T12245] do_filp_open+0x109/0x230 [ 219.136465][T12245] io_openat2+0x272/0x390 [ 219.140799][T12245] io_openat+0x1b/0x30 [ 219.144885][T12245] __io_issue_sqe+0xfe/0x2e0 [ 219.149470][T12245] io_issue_sqe+0x53/0x970 [ 219.153883][T12245] io_submit_sqes+0x675/0x1060 [ 219.158670][T12245] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 219.164484][T12245] __x64_sys_io_uring_enter+0x78/0x90 [ 219.170024][T12245] x64_sys_call+0x2de1/0x2ff0 [ 219.174803][T12245] do_syscall_64+0xd2/0x200 [ 219.179322][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.185223][T12245] [ 219.187593][T12245] value changed: 0x00000000 -> 0x00000001 [ 219.193306][T12245] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 219.195628][T12245] Reported by Kernel Concurrency Sanitizer on: [ 219.201778][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.0.3122 Not tainted syzkaller #0 PREEMPT(voluntary) [ 219.211589][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 219.221751][T12245] ================================================================== [ 219.381962][ T6238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.433599][ T6238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.483473][ T6238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.543352][ T6238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.676816][ T6238] bridge_slave_1: left allmulticast mode [ 219.682591][ T6238] bridge_slave_1: left promiscuous mode [ 219.688272][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.696652][ T6238] bridge_slave_0: left promiscuous mode [ 219.702417][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.772891][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.782760][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.793176][ T6238] bond0 (unregistering): Released all slaves [ 219.834188][ T6238] hsr_slave_0: left promiscuous mode [ 219.839815][ T6238] hsr_slave_1: left promiscuous mode [ 219.845460][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.852873][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.860502][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.867967][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.878285][ T6238] veth1_macvtap: left promiscuous mode [ 219.884038][ T6238] veth0_macvtap: left promiscuous mode [ 219.889585][ T6238] veth1_vlan: left promiscuous mode [ 219.895387][ T6238] veth0_vlan: left promiscuous mode [ 219.953810][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 219.963738][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 220.252977][ T6238] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.311845][ T6238] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.351834][ T6238] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.412263][ T6238] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.474676][ T6238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.512946][ T6238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.563106][ T6238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.602969][ T6238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.713897][ T6238] bridge_slave_1: left allmulticast mode [ 220.720117][ T6238] bridge_slave_1: left promiscuous mode [ 220.725828][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.733727][ T6238] bridge_slave_0: left allmulticast mode [ 220.739375][ T6238] bridge_slave_0: left promiscuous mode [ 220.745206][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.753777][ T6238] bridge_slave_1: left allmulticast mode [ 220.759463][ T6238] bridge_slave_1: left promiscuous mode [ 220.765285][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.773136][ T6238] bridge_slave_0: left allmulticast mode [ 220.778867][ T6238] bridge_slave_0: left promiscuous mode [ 220.784578][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.892399][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.902202][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.911681][ T6238] bond0 (unregistering): Released all slaves [ 220.953225][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.962994][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.972435][ T6238] bond0 (unregistering): Released all slaves [ 221.024342][ T6238] IPVS: stopping master sync thread 7120 ... [ 221.032607][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.040320][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.047971][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.055438][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.064459][ T6238] hsr_slave_0: left promiscuous mode [ 221.070097][ T6238] hsr_slave_1: left promiscuous mode [ 221.075808][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.083294][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.091906][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.099275][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.111545][ T6238] veth1_macvtap: left promiscuous mode [ 221.117118][ T6238] veth0_macvtap: left promiscuous mode [ 221.122784][ T6238] veth1_vlan: left promiscuous mode [ 221.128035][ T6238] veth0_vlan: left promiscuous mode [ 221.133969][ T6238] veth1_macvtap: left promiscuous mode [ 221.139436][ T6238] veth0_macvtap: left promiscuous mode [ 221.145214][ T6238] veth1_vlan: left promiscuous mode [ 221.150499][ T6238] veth0_vlan: left promiscuous mode [ 221.237523][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 221.246893][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 221.293554][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 221.302919][ T6238] team0 (unregistering): Port device team_slave_0 removed