last executing test programs: 7.163030631s ago: executing program 4 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) fcntl$setlease(r2, 0x400, 0x1) 7.104857842s ago: executing program 4 (id=3391): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.208900096s ago: executing program 2 (id=3401): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0xeffb, 0x9) 4.013640529s ago: executing program 4 (id=3420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) unshare(0x64000600) 3.241068811s ago: executing program 1 (id=3428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x1}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 3.144892852s ago: executing program 1 (id=3429): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(r0, 0x400, 0x0) 3.116672522s ago: executing program 1 (id=3431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xd}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "251cde23d0c0457059746a2ab82a7e34"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x100, 0x7ffd, 0x2, 0x5744, 0xa173}}, {0x4}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00ca779982b95b05072ad39c66fd65d78c735e776ea7107533d54c6a205100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) 3.049364514s ago: executing program 1 (id=3432): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xeffb, 0x9) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") 3.048183034s ago: executing program 4 (id=3433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="5cc46bb7a43c", 0x6}, {0x0}, {0x0}], 0x3}}], 0x2, 0x24000800) 2.790516337s ago: executing program 3 (id=3439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x1}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 2.743549398s ago: executing program 3 (id=3440): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.524920942s ago: executing program 2 (id=3441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x14}, 0x108003, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) (fail_nth: 1) 2.456725233s ago: executing program 3 (id=3442): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") 1.483141418s ago: executing program 0 (id=3443): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 1.468743338s ago: executing program 4 (id=3444): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) memfd_create(&(0x7f00000000c0)='GPL\x00', 0xa) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.185095752s ago: executing program 1 (id=3445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000640)=@nfc_llcp, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/215, 0xd7}], 0x2, &(0x7f0000000880)=""/175, 0xaf}, 0x8}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.024263534s ago: executing program 0 (id=3446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) fcntl$setlease(r1, 0x400, 0x1) 904.001806ms ago: executing program 2 (id=3447): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="01800008004503005a00650000002f827800000000e0000001248022eb006f0000000008000000000086dd080088be00000000100000000180000000000000080022eb00000000200000fc0200000000000000000000000800655800000002000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r0}, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) 848.587317ms ago: executing program 0 (id=3448): sched_setaffinity(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20401) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x310, 0x206, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001812000073c94ed35858a8964531bb532886da63c50218b63cbf47ba53f18854040282054a44c49509b3677507ac3d4140affa40ccc56c73c7a5203809b685aa08ed9047ffeca94f8cbb4ae55455435157feb01a08a1d92576dc32b034c4253d58ac8a01a5a3b86862ee41d17ee5e9a5abe5c3d311ee33af9b50bd9fd1c4e42965bc021871ed2c216533e9efd51b9942c8a0fe", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 848.248047ms ago: executing program 2 (id=3449): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000003c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x222a}}, {@errors_remount}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) getpid() io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 778.648688ms ago: executing program 0 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x1}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 719.362109ms ago: executing program 0 (id=3451): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) io_uring_setup(0x2b1b, &(0x7f0000002700)={0x0, 0x91cd, 0x100, 0x0, 0x19d}) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) r5 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f}, @fragment={0x73}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 654.53364ms ago: executing program 2 (id=3452): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x190, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x154, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x12c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x34, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "4ac6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 653.69882ms ago: executing program 2 (id=3453): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34538, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) signalfd4(r1, &(0x7f0000000040)={[0x10]}, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r6, 0x53, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x3, r2, 0x0, 0x0, 0xfffffffffffffffd}]) shutdown(r5, 0x0) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 604.836551ms ago: executing program 4 (id=3454): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000017c0)}, 0x4008800) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000850000000700000018110200", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec5) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@private1}, &(0x7f00000018c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040), 0x4) close_range(r4, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0xa, 0x3, 0x8000, 0xb, 0x6, 0xff, 0x3, 0x5, r6}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r6, 0x8}, &(0x7f0000000080)=0x8) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffa8) getsockopt$MRT(r8, 0x0, 0xcf, &(0x7f00000003c0), &(0x7f0000000440)=0x4) 581.883861ms ago: executing program 0 (id=3455): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002940)}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$eJzs3d9rW1UcAPDvTX/tl7aCoPOpIGhhLLWzbgo+VHwQwcFAn91CmpXZtBlNOtZS0CGCL4KKb/qyZ3/MN1/98ar/hQ/imNoNJz5I5abJmq1Jl25pMs3nA7c9596bnPO9P849yT3cBNC3xtM/mYjDEfFhEjFam59ExFA1NRgxs7nezfW1fDolsbHx+u9JdZ0b62v5aHhN6mAt83hEfP9exJHM9nLLK6vzuWKxsFTLT1YWzk+WV1aPnlvIzRXmCovHp6anj5147sTxzsX650+rh65+9MrTX838/e5jVz74IYmZOFRb1hhHp4zHeG2bDKWb8DYvd7qwHkt6XQHuSXpqDmye5XE4RmOgmgIA/s/ejogNAKDPJK7/ANBn6t8D3Fhfy9en3n4j0V3XXoqIfZvx1+9vbi4ZrN2z21e9D3rgRnLbnZEkIsY6UP54RHz2zZtfpFPs0X1IgGbeuRQRZ8bGt7f/ybYxC7v1zA7Lhmv/x++Yr/2D7vk27f8836z/l7nV/4km/Z+RJufuvai+x/BWftv5v78Dhewg7f+92DC27WZD/DVjA7XcQ9U+31By9lyxkLZtD0fERAyNpPmpHcqYuP7P9VbLGvt/f3z81udp+en/rTUyvw6O3P6a2Vwldz8xN7p2KeKJwWbxJ7f2f9Ki/3uqzTJefeH9T1stS+NP461P2+OP2uikvbFxOeKppvt/a0RbsuP4xMnq4TBZPyia+Prn1vVv3P/plJZf/yzQDen+P7Bz/GNJ43jN8u7L+PHy6Hetlt09/ubH/3DyRjVdbzou5iqVpamI4eS17fOPbb22nq+vn8Y/8WTz83+n4z/9THimzfgHr/725b3Hv7fS+Gd3tf93n7hyc36gVfnt7f/pamqiNqed9q/dCt7PtgMAAAAAAAAAAAAAAAAAAAAAAACAdmUi4lAkmeytdCaTzW7+hvejcSBTLJUrR86Wlhdno/pb2WMxlKk/6nK04XmoU7Xn4dfzx+7IPxsRj0TEJyP7k/pzFGd7HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1B1s8fv/qV9Gel07AGDP7Ot1BQCArnP9B4D+4/oPAP3H9R8A+o/rPwD0H9d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tipkyfTaeOv9bV8mp+9sLI8X7pwdLZQns8uLOez+dLS+excqTRXLGTzpYW7vV+xVDo/HYvLFycrhXJlsryyenqhtLxYOX1uITdXOF0Y6kpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA75ZXV+VyxWFiS2EqkG6atlTd6XtUOJGY68D4DtcPpAQin+4nkwahGhxPNWovhrrZNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8F/wYAAP//hNkgcA==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000640)=@nfc_llcp, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/215, 0xd7}], 0x2, &(0x7f0000000880)=""/175, 0xaf}, 0x8}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) unshare(0x64000600) 72.890709ms ago: executing program 3 (id=3457): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4008010) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 16.64268ms ago: executing program 3 (id=3458): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) fcntl$setlease(r2, 0x400, 0x1) 0s ago: executing program 3 (id=3459): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x19, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r1}, 0x10) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$char_usb(r2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mprotect(&(0x7f00004dd000/0x4000)=nil, 0x4000, 0x1) (async) bpf$MAP_CREATE(0x1d, &(0x7f0000000700), 0x48) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x3, 0x1000, 0xd4, &(0x7f0000000140)="8617268ef92f08cb7ea67a5e09068f6507c9661d87fa96eb524044c0fcca7e22bd069b1d37842406b97414755565c88efc9b6f02c86d80c26766cbd9efea6aca08afa1815fa3c17a261599444cf33364bb76f47f3541e3e2ee8e5ffe7fa02382b77ab15d967a369ed36c3784f6fb885d08f1fa34c462943593808a9d58da91e3cddef8c9f3f9e5f0a844f58209428ff8dea29c8d31697fa70f99db9ebdfa7a00c8fa25f0e265b216fc654787b0dbe499d30d77e71fd3ca74e838b914df5c6a6c4c661bb206a470b8c679e32be869ae2199d9b4e3", 0x11, 0x0, &(0x7f0000000080)="0933cfed87081cbfdc2cac42ac802ccc0f"}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x4, 0x7ffc1ffb}]}) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x9, 0x80002) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x7ff, 0x0, 0x5, 0x0}) r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000ac0)=ANY=[@ANYRES64=r5, @ANYRES32=r4, @ANYRES16], &(0x7f0000000780)='GPL\x00', 0x6000, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0884}, 0x94) write$cgroup_pid(r5, &(0x7f0000000940), 0x12) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES16=r7, @ANYRESOCT=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB='\x00'/28], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000000)={r7, 0x8, 0x2, 0x6}) (async, rerun: 32) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r11, 0x0, 0x23, 0x0, 0x0) kernel console output (not intermixed with test programs): 4294967295 subj=root:sysadm_r:sysadm_t pid=14308 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcdc1e9a9 code=0x7fc00000 [ 500.240337][T14395] macsec0: left allmulticast mode [ 500.245537][T14395] bridge0: left allmulticast mode [ 500.311061][T14395] bridge0: left promiscuous mode [ 500.483305][T14422] netlink: 'syz.1.2602': attribute type 13 has an invalid length. [ 500.554286][ T29] audit: type=1326 audit(1753202481.555:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcdc1e9a9 code=0x7ffc0000 [ 500.586373][ T29] audit: type=1326 audit(1753202481.555:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcdc1e9a9 code=0x7ffc0000 [ 500.610110][ T29] audit: type=1326 audit(1753202481.555:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfcdc1e9a9 code=0x7ffc0000 [ 500.703058][T14427] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 500.719466][T14433] loop1: detected capacity change from 0 to 8192 [ 500.719757][T14433] msdos: Unknown parameter 'dots debug' [ 500.748117][T14433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2605'. [ 500.856266][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'. [ 500.948505][T14463] loop0: detected capacity change from 0 to 512 [ 500.982375][T14466] loop1: detected capacity change from 0 to 512 [ 500.989602][T14463] EXT4-fs (loop0): orphan cleanup on readonly fs [ 501.009011][T14466] EXT4-fs (loop1): unable to read superblock [ 501.030340][T14471] SELinux: failed to load policy [ 501.038026][T14463] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.2610: bad orphan inode 13 [ 501.063414][T14463] ext4_test_bit(bit=12, block=18) = 1 [ 501.068895][T14463] is_bad_inode(inode)=0 [ 501.073259][T14463] NEXT_ORPHAN(inode)=2130706432 [ 501.078184][T14463] max_ino=32 [ 501.081481][T14463] i_nlink=1 [ 501.086356][T14463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.119949][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.131518][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'. [ 501.175503][T14481] netlink: 'syz.0.2615': attribute type 13 has an invalid length. [ 501.236062][T14486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.432510][T14491] netlink: '+}[@': attribute type 13 has an invalid length. [ 501.512792][T14503] loop4: detected capacity change from 0 to 2048 [ 501.598907][T14506] loop3: detected capacity change from 0 to 1024 [ 501.621750][T14506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 501.702016][T14506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.758307][T14516] macsec0: entered promiscuous mode [ 501.763632][T14516] bridge0: entered promiscuous mode [ 501.802963][T14519] loop0: detected capacity change from 0 to 2048 [ 501.820471][T14516] bridge0: port 3(macsec0) entered blocking state [ 501.827150][T14516] bridge0: port 3(macsec0) entered disabled state [ 501.845707][T14519] EXT4-fs: Ignoring removed nobh option [ 501.884996][T14519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.913925][T14516] macsec0: entered allmulticast mode [ 501.919307][T14516] bridge0: entered allmulticast mode [ 501.959124][T14516] macsec0: left allmulticast mode [ 501.964353][T14516] bridge0: left allmulticast mode [ 502.007535][T14516] bridge0: left promiscuous mode [ 502.021008][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.399461][T14503] loop4: p4 < > [ 502.438333][ T2995] loop4: p4 < > [ 502.503843][T14543] loop0: detected capacity change from 0 to 2048 [ 502.540252][T14551] loop4: detected capacity change from 0 to 1024 [ 502.565874][T14543] EXT4-fs: Ignoring removed nobh option [ 502.614156][T14543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.631558][ T4685] udevd[4685]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 502.669003][T14551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.718044][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 502.723615][T14551] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.872977][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 503.047901][T14572] loop1: detected capacity change from 0 to 1024 [ 503.100090][T14572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.165227][T14572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.228632][T14579] loop2: detected capacity change from 0 to 2048 [ 503.283044][T14579] loop2: p4 < > [ 503.348427][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.387838][ T172] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 503.426633][T14579] macsec0: entered promiscuous mode [ 503.432017][T14579] bridge0: entered promiscuous mode [ 503.439474][T14579] bridge0: port 1(macsec0) entered blocking state [ 503.446005][T14579] bridge0: port 1(macsec0) entered disabled state [ 503.454272][T14579] macsec0: entered allmulticast mode [ 503.459616][T14579] bridge0: entered allmulticast mode [ 503.466386][ T172] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 503.479007][ T172] EXT4-fs (loop4): This should not happen!! Data will be lost [ 503.479007][ T172] [ 503.488789][ T172] EXT4-fs (loop4): Total free blocks count 0 [ 503.494818][ T172] EXT4-fs (loop4): Free/Dirty block details [ 503.500739][ T172] EXT4-fs (loop4): free_blocks=4293918720 [ 503.506523][ T172] EXT4-fs (loop4): dirty_blocks=16400 [ 503.511949][ T172] EXT4-fs (loop4): Block reservation details [ 503.518232][ T172] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 503.525226][T14579] macsec0: left allmulticast mode [ 503.530433][T14579] bridge0: left allmulticast mode [ 503.536576][T14579] bridge0: left promiscuous mode [ 503.587096][T14591] loop0: detected capacity change from 0 to 2048 [ 503.611565][T14591] EXT4-fs: Ignoring removed nobh option [ 503.625908][ T172] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2088 with max blocks 2048 with error 28 [ 503.640715][T14591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.695652][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'. [ 503.819743][T14607] loop2: detected capacity change from 0 to 2048 [ 503.851390][T14607] EXT4-fs: Ignoring removed nobh option [ 503.901630][T14607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.966351][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.173363][T14636] netlink: '+}[@': attribute type 13 has an invalid length. [ 504.250680][T14638] loop2: detected capacity change from 0 to 2048 [ 504.269164][T14638] EXT4-fs: Ignoring removed nobh option [ 504.303738][T14638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.413319][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.522218][T14652] lo speed is unknown, defaulting to 1000 [ 504.602004][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.628035][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 504.679516][T14685] netlink: 'syz.2.2645': attribute type 13 has an invalid length. [ 504.844415][T14697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.904713][T14702] loop0: detected capacity change from 0 to 512 [ 505.003153][T14711] loop0: detected capacity change from 0 to 512 [ 505.050505][T14711] EXT4-fs (loop0): orphan cleanup on readonly fs [ 505.081115][T14711] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.2652: bad orphan inode 13 [ 505.166672][T14711] ext4_test_bit(bit=12, block=18) = 1 [ 505.172197][T14711] is_bad_inode(inode)=0 [ 505.176555][T14711] NEXT_ORPHAN(inode)=2130706432 [ 505.181478][T14711] max_ino=32 [ 505.184819][T14711] i_nlink=1 [ 505.197127][T14725] netlink: '+}[@': attribute type 13 has an invalid length. [ 505.206212][T14711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.249022][T14727] loop4: detected capacity change from 0 to 2048 [ 505.267222][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.281586][ T3293] loop4: p4 < > [ 505.304527][T14727] loop4: p4 < > [ 505.322003][T14727] macsec0: entered promiscuous mode [ 505.327316][T14727] bridge0: entered promiscuous mode [ 505.342658][T14727] bridge0: port 3(macsec0) entered blocking state [ 505.349505][T14727] bridge0: port 3(macsec0) entered disabled state [ 505.367157][T14727] macsec0: entered allmulticast mode [ 505.372696][T14727] bridge0: entered allmulticast mode [ 505.395163][T14727] macsec0: left allmulticast mode [ 505.400301][T14727] bridge0: left allmulticast mode [ 505.416993][T14727] bridge0: left promiscuous mode [ 505.674775][T14766] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 505.722256][T14768] lo speed is unknown, defaulting to 1000 [ 505.810015][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 505.810029][ T29] audit: type=1400 audit(1753202486.805:1179): avc: denied { read } for pid=14795 comm="syz.0.2666" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 505.839456][ T29] audit: type=1400 audit(1753202486.805:1180): avc: denied { open } for pid=14795 comm="syz.0.2666" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 505.883499][T14800] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 505.903055][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.922177][ T29] audit: type=1400 audit(1753202486.865:1181): avc: denied { ioctl } for pid=14795 comm="syz.0.2666" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 505.962282][T14809] loop3: detected capacity change from 0 to 512 [ 505.987076][T14809] EXT4-fs (loop3): orphan cleanup on readonly fs [ 506.005188][T14809] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.2668: bad orphan inode 13 [ 506.024782][T14809] ext4_test_bit(bit=12, block=18) = 1 [ 506.030245][T14809] is_bad_inode(inode)=0 [ 506.034585][T14809] NEXT_ORPHAN(inode)=2130706432 [ 506.039501][T14809] max_ino=32 [ 506.042844][T14809] i_nlink=1 [ 506.056097][T14809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 506.177159][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.194008][T14818] loop0: detected capacity change from 0 to 2048 [ 506.282195][ T4685] loop0: p4 < > [ 506.290611][T14818] loop0: p4 < > [ 506.309375][T14818] macsec0: entered promiscuous mode [ 506.314700][T14818] bridge0: entered promiscuous mode [ 506.333350][T14818] bridge0: port 3(macsec0) entered blocking state [ 506.339968][T14818] bridge0: port 3(macsec0) entered disabled state [ 506.376825][T14818] macsec0: entered allmulticast mode [ 506.382456][T14818] bridge0: entered allmulticast mode [ 506.399766][T14818] macsec0: left allmulticast mode [ 506.404987][T14818] bridge0: left allmulticast mode [ 506.411151][T14818] bridge0: left promiscuous mode [ 506.459086][T14817] lo speed is unknown, defaulting to 1000 [ 506.574024][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.583171][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 506.670107][T14888] loop1: detected capacity change from 0 to 512 [ 506.857808][T14909] loop0: detected capacity change from 0 to 2048 [ 506.910606][T14911] lo speed is unknown, defaulting to 1000 [ 506.932429][ T3293] loop0: p4 < > [ 506.946098][T14909] loop0: p4 < > [ 506.973175][T14909] macsec0: entered promiscuous mode [ 506.978507][T14909] bridge0: entered promiscuous mode [ 506.984456][T14909] bridge0: port 3(macsec0) entered blocking state [ 506.991166][T14909] bridge0: port 3(macsec0) entered disabled state [ 506.998236][T14909] macsec0: entered allmulticast mode [ 507.004052][T14909] bridge0: entered allmulticast mode [ 507.010217][T14909] macsec0: left allmulticast mode [ 507.015333][T14909] bridge0: left allmulticast mode [ 507.021424][T14909] bridge0: left promiscuous mode [ 507.042746][T14918] lo speed is unknown, defaulting to 1000 [ 507.052995][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 507.148463][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 507.210993][T15005] Set syz1 is full, maxelem 65536 reached [ 507.241417][T15010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.270174][ T29] audit: type=1326 audit(1753202488.265:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.3.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcdc1e9a9 code=0x7ffc0000 [ 507.302711][ T29] audit: type=1326 audit(1753202488.265:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.3.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcdc1e9a9 code=0x7ffc0000 [ 507.353096][T15021] netlink: '+}[@': attribute type 13 has an invalid length. [ 507.418457][T15034] Cannot find del_set index 4 as target [ 507.538176][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 507.548445][T15056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.626393][T15063] loop0: detected capacity change from 0 to 2048 [ 507.672303][ T3293] loop0: p4 < > [ 507.684944][T15063] loop0: p4 < > [ 507.707480][T15063] macsec0: entered promiscuous mode [ 507.712897][T15063] bridge0: entered promiscuous mode [ 507.761866][T15063] bridge0: port 3(macsec0) entered blocking state [ 507.768402][T15063] bridge0: port 3(macsec0) entered disabled state [ 507.777668][T15082] Cannot find del_set index 4 as target [ 507.785582][T15079] loop2: detected capacity change from 0 to 2048 [ 507.792690][T15063] macsec0: entered allmulticast mode [ 507.798139][T15063] bridge0: entered allmulticast mode [ 507.819149][T15063] macsec0: left allmulticast mode [ 507.824362][T15063] bridge0: left allmulticast mode [ 507.848636][T15079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.862433][T15094] netlink: '+}[@': attribute type 13 has an invalid length. [ 507.872519][T15079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.897222][T15063] bridge0: left promiscuous mode [ 508.026682][T15111] loop1: detected capacity change from 0 to 512 [ 508.088730][T15127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.190433][T15130] loop0: detected capacity change from 0 to 2048 [ 508.216129][T15130] EXT4-fs: Ignoring removed nobh option [ 508.233327][T15130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.516006][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 508.586510][T15156] loop3: detected capacity change from 0 to 2048 [ 508.632580][T15156] loop3: p4 < > [ 508.649868][T15156] macsec0: entered promiscuous mode [ 508.655180][T15156] bridge0: entered promiscuous mode [ 508.664287][T15156] bridge0: port 1(macsec0) entered blocking state [ 508.670798][T15156] bridge0: port 1(macsec0) entered disabled state [ 508.677703][T15156] macsec0: entered allmulticast mode [ 508.683099][T15156] bridge0: entered allmulticast mode [ 508.689062][T15156] macsec0: left allmulticast mode [ 508.694245][T15156] bridge0: left allmulticast mode [ 508.705382][T15156] bridge0: left promiscuous mode [ 508.816134][T15172] netlink: '+}[@': attribute type 13 has an invalid length. [ 508.873966][T15179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.015255][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 509.066092][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.103565][T15205] loop3: detected capacity change from 0 to 2048 [ 509.120484][T15205] EXT4-fs: Ignoring removed nobh option [ 509.183184][T15205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.656305][T15229] loop4: detected capacity change from 0 to 512 [ 509.900850][T15240] netlink: '+}[@': attribute type 13 has an invalid length. [ 509.985242][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.099186][T15258] loop0: detected capacity change from 0 to 512 [ 510.113431][T15258] EXT4-fs (loop0): unable to read superblock [ 510.188470][T15275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.222985][T15278] loop0: detected capacity change from 0 to 512 [ 510.241812][T15278] EXT4-fs (loop0): orphan cleanup on readonly fs [ 510.250878][T15278] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.2753: bad orphan inode 13 [ 510.261336][T15278] ext4_test_bit(bit=12, block=18) = 1 [ 510.266749][T15278] is_bad_inode(inode)=0 [ 510.270927][T15278] NEXT_ORPHAN(inode)=2130706432 [ 510.275901][T15278] max_ino=32 [ 510.279139][T15278] i_nlink=1 [ 510.282762][T15278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 510.308655][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.339934][T15286] loop0: detected capacity change from 0 to 2048 [ 510.353315][T15286] EXT4-fs: Ignoring removed nobh option [ 510.372827][T15286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.400670][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.677477][T15323] loop0: detected capacity change from 0 to 512 [ 510.696057][T15323] EXT4-fs (loop0): unable to read superblock [ 510.742803][T15333] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 510.747595][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 510.753094][T15333] SELinux: failed to load policy [ 510.789661][T15338] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 510.801744][T15340] loop0: detected capacity change from 0 to 512 [ 510.840693][T15349] netlink: '+}[@': attribute type 13 has an invalid length. [ 510.928013][T15357] Set syz1 is full, maxelem 65536 reached [ 511.004415][T15369] loop2: detected capacity change from 0 to 2048 [ 511.022347][T15369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.035143][T15369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.087290][ T29] audit: type=1400 audit(1753202492.085:1184): avc: denied { sqpoll } for pid=15380 comm="syz.2.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 511.126063][ T29] audit: type=1400 audit(1753202492.115:1185): avc: denied { create } for pid=15380 comm="syz.2.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 511.161739][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 511.305334][T15399] loop1: detected capacity change from 0 to 2048 [ 511.314609][T15399] EXT4-fs: Ignoring removed nobh option [ 511.333559][T15399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.365993][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.367830][T15400] lo speed is unknown, defaulting to 1000 [ 511.485977][T15444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.516848][T15447] loop1: detected capacity change from 0 to 2048 [ 511.532679][T15447] EXT4-fs: Ignoring removed nobh option [ 511.554149][T15447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.592227][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.648681][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2788'. [ 511.737173][T15471] loop0: detected capacity change from 0 to 512 [ 511.748037][T15471] EXT4-fs (loop0): unable to read superblock [ 512.018464][T15486] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 512.118130][T15487] lo speed is unknown, defaulting to 1000 [ 512.271587][T15511] loop2: detected capacity change from 0 to 2048 [ 512.287779][T15511] EXT4-fs: Ignoring removed nobh option [ 512.336347][T15511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.352603][T15529] loop0: detected capacity change from 0 to 2048 [ 512.365198][T15534] loop1: detected capacity change from 0 to 512 [ 512.374966][T15534] EXT4-fs (loop1): unable to read superblock [ 512.384368][ T3293] loop0: p4 < > [ 512.499525][T15529] loop0: p4 < > [ 512.509694][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.523755][T15529] macsec0: entered promiscuous mode [ 512.529411][T15529] bridge0: entered promiscuous mode [ 512.551425][T15529] bridge0: port 3(macsec0) entered blocking state [ 512.558041][T15529] bridge0: port 3(macsec0) entered disabled state [ 512.592305][T15529] macsec0: entered allmulticast mode [ 512.597821][T15529] bridge0: entered allmulticast mode [ 512.648700][T15529] macsec0: left allmulticast mode [ 512.654013][T15529] bridge0: left allmulticast mode [ 512.708230][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 512.988664][T15529] bridge0: left promiscuous mode [ 513.165888][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 513.758977][T15594] lo speed is unknown, defaulting to 1000 [ 513.949817][T15627] loop0: detected capacity change from 0 to 2048 [ 513.964982][T15627] EXT4-fs: Ignoring removed nobh option [ 513.982794][T15627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.015777][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.075175][T15636] loop0: detected capacity change from 0 to 2048 [ 514.094339][T15636] EXT4-fs: Ignoring removed nobh option [ 514.134996][T15636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.187033][T15648] loop4: detected capacity change from 0 to 512 [ 514.207984][T15648] EXT4-fs (loop4): unable to read superblock [ 514.475661][T15663] netlink: '+}[@': attribute type 13 has an invalid length. [ 515.264886][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.314093][T15691] loop1: detected capacity change from 0 to 512 [ 515.417729][T15702] FAULT_INJECTION: forcing a failure. [ 515.417729][T15702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.431208][T15702] CPU: 1 UID: 0 PID: 15702 Comm: syz.0.2821 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 515.431239][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.431320][T15702] Call Trace: [ 515.431328][T15702] [ 515.431340][T15702] __dump_stack+0x1d/0x30 [ 515.431407][T15702] dump_stack_lvl+0xe8/0x140 [ 515.431427][T15702] dump_stack+0x15/0x1b [ 515.431443][T15702] should_fail_ex+0x265/0x280 [ 515.431476][T15702] should_fail+0xb/0x20 [ 515.431586][T15702] should_fail_usercopy+0x1a/0x20 [ 515.431629][T15702] _copy_from_user+0x1c/0xb0 [ 515.431654][T15702] ___sys_sendmsg+0xc1/0x1d0 [ 515.431712][T15702] __x64_sys_sendmsg+0xd4/0x160 [ 515.431757][T15702] x64_sys_call+0x2999/0x2fb0 [ 515.431898][T15702] do_syscall_64+0xd2/0x200 [ 515.431922][T15702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 515.431997][T15702] ? clear_bhb_loop+0x40/0x90 [ 515.432019][T15702] ? clear_bhb_loop+0x40/0x90 [ 515.432040][T15702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.432062][T15702] RIP: 0033:0x7fa31a0ce9a9 [ 515.432206][T15702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.432229][T15702] RSP: 002b:00007fa318737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.432298][T15702] RAX: ffffffffffffffda RBX: 00007fa31a2f5fa0 RCX: 00007fa31a0ce9a9 [ 515.432314][T15702] RDX: 0000000024008818 RSI: 00002000000002c0 RDI: 0000000000000003 [ 515.432329][T15702] RBP: 00007fa318737090 R08: 0000000000000000 R09: 0000000000000000 [ 515.432350][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.432364][T15702] R13: 0000000000000000 R14: 00007fa31a2f5fa0 R15: 00007ffc3c624798 [ 515.432390][T15702] [ 515.734214][T15714] netlink: '+}[@': attribute type 13 has an invalid length. [ 515.750204][T15711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.013197][T15717] loop2: detected capacity change from 0 to 2048 [ 516.069981][T15717] EXT4-fs: Ignoring removed nobh option [ 516.202612][T15717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.233456][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 516.361424][T15741] Cannot find del_set index 4 as target [ 516.396089][T15750] loop0: detected capacity change from 0 to 512 [ 516.640607][T15763] loop3: detected capacity change from 0 to 2048 [ 516.651449][T15763] EXT4-fs: Ignoring removed nobh option [ 516.673095][T15763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.779840][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.789070][T15770] SELinux: failed to load policy [ 516.800031][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.841692][T15775] netlink: '+}[@': attribute type 13 has an invalid length. [ 516.918527][T15791] loop2: detected capacity change from 0 to 512 [ 516.926352][T15791] EXT4-fs (loop2): unable to read superblock [ 516.933924][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 516.999901][T15798] loop1: detected capacity change from 0 to 2048 [ 517.052209][T15798] loop1: p4 < > [ 517.062645][T15798] macsec0: entered promiscuous mode [ 517.067954][T15798] bridge0: entered promiscuous mode [ 517.073930][T15798] bridge0: port 3(macsec0) entered blocking state [ 517.080544][T15798] bridge0: port 3(macsec0) entered disabled state [ 517.087392][T15798] macsec0: entered allmulticast mode [ 517.093793][T15798] bridge0: entered allmulticast mode [ 517.100506][T15798] macsec0: left allmulticast mode [ 517.105949][T15798] bridge0: left allmulticast mode [ 517.112210][T15798] bridge0: left promiscuous mode [ 517.609891][T15817] loop1: detected capacity change from 0 to 512 [ 517.807982][T15824] lo speed is unknown, defaulting to 1000 [ 517.879095][T15833] loop4: detected capacity change from 0 to 2048 [ 517.900847][T15838] loop3: detected capacity change from 0 to 2048 [ 517.918614][T15833] EXT4-fs: Ignoring removed nobh option [ 517.940873][T15838] EXT4-fs: Ignoring removed nobh option [ 517.984875][T15833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.013958][T15838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.419667][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.495329][T15878] loop0: detected capacity change from 0 to 512 [ 518.512884][T15878] EXT4-fs (loop0): unable to read superblock [ 518.804323][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.011698][T15904] Cannot find del_set index 4 as target [ 519.110454][T15914] loop3: detected capacity change from 0 to 1024 [ 519.142525][T15914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 519.193047][T15914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.716166][T15940] loop4: detected capacity change from 0 to 512 [ 519.724281][T15940] EXT4-fs (loop4): unable to read superblock [ 519.842016][T15944] lo speed is unknown, defaulting to 1000 [ 519.897558][T15969] loop2: detected capacity change from 0 to 512 [ 519.916300][T15969] EXT4-fs (loop2): unable to read superblock [ 522.145916][T15988] loop4: detected capacity change from 0 to 2048 [ 522.211580][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 522.380380][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 522.538508][ T4685] loop4: p4 < > [ 522.558089][T15988] loop4: p4 < > [ 522.724599][T16027] netlink: '+}[@': attribute type 13 has an invalid length. [ 522.768201][T16029] loop4: detected capacity change from 0 to 2048 [ 522.780222][T16029] EXT4-fs: Ignoring removed nobh option [ 522.786102][T16038] loop0: detected capacity change from 0 to 512 [ 522.805498][ T29] audit: type=1400 audit(1753202503.795:1186): avc: denied { mounton } for pid=16042 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 522.817395][T16038] EXT4-fs (loop0): unable to read superblock [ 522.846963][T16029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.163085][T16083] loop1: detected capacity change from 0 to 512 [ 523.322751][ T31] bond0 (unregistering): Released all slaves [ 523.341513][ T29] audit: type=1400 audit(1753202504.335:1187): avc: denied { search } for pid=3034 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.362966][ T29] audit: type=1400 audit(1753202504.335:1188): avc: denied { search } for pid=3034 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.384624][ T29] audit: type=1400 audit(1753202504.335:1189): avc: denied { search } for pid=3034 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.406450][ T29] audit: type=1400 audit(1753202504.335:1190): avc: denied { read } for pid=3034 comm="dhcpcd" name="n27" dev="tmpfs" ino=25419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.413161][T16042] lo speed is unknown, defaulting to 1000 [ 523.428369][ T29] audit: type=1400 audit(1753202504.335:1191): avc: denied { open } for pid=3034 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=25419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.457421][ T29] audit: type=1400 audit(1753202504.405:1192): avc: denied { getattr } for pid=3034 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=25419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.577241][ T31] hsr_slave_0: left promiscuous mode [ 523.623320][ T31] hsr_slave_1: left promiscuous mode [ 523.649514][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.669275][ T29] audit: type=1400 audit(1753202504.645:1193): avc: denied { read open } for pid=16104 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.695381][ T29] audit: type=1400 audit(1753202504.645:1194): avc: denied { getattr } for pid=16104 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.879955][ T29] audit: type=1400 audit(1753202504.875:1195): avc: denied { add_name } for pid=16103 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.905694][T16042] chnl_net:caif_netlink_parms(): no params data found [ 523.913302][T16211] loop4: detected capacity change from 0 to 2048 [ 523.969395][T16211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.982200][T16211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.131669][T16042] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.138866][T16042] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.166364][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 524.184011][T16042] bridge_slave_0: entered allmulticast mode [ 524.200920][T16042] bridge_slave_0: entered promiscuous mode [ 524.220605][T16042] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.227806][T16042] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.274011][T16042] bridge_slave_1: entered allmulticast mode [ 524.290070][T16293] loop1: detected capacity change from 0 to 2048 [ 524.307300][T16042] bridge_slave_1: entered promiscuous mode [ 524.349852][T16042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.381632][ T4685] loop1: p4 < > [ 524.385438][T16042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.398013][T16293] loop1: p4 < > [ 524.443854][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 524.469875][T16042] team0: Port device team_slave_0 added [ 524.492270][T16042] team0: Port device team_slave_1 added [ 524.499613][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 524.560518][T16042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.567630][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.593878][T16042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.652123][T16042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.659128][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.685849][T16042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.901831][T16042] hsr_slave_0: entered promiscuous mode [ 524.922288][T16042] hsr_slave_1: entered promiscuous mode [ 525.009805][T16457] lo speed is unknown, defaulting to 1000 [ 525.296046][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.349142][T16576] loop3: detected capacity change from 0 to 512 [ 525.412993][T16042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 525.443670][T16042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 525.456692][T16042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.466382][T16042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 525.484039][T16604] loop1: detected capacity change from 0 to 2048 [ 525.521935][ T3293] loop1: p4 < > [ 525.531623][T16042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.531645][T16604] loop1: p4 < > [ 525.558383][T16042] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.578022][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.585235][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.618663][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.625817][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.716988][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 525.759268][T16636] loop4: detected capacity change from 0 to 512 [ 525.802499][T16636] EXT4-fs (loop4): unable to read superblock [ 525.825590][T16642] loop1: detected capacity change from 0 to 2048 [ 525.852948][T16642] EXT4-fs: Ignoring removed nobh option [ 525.888092][T16042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.908039][T16642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.074782][T16042] veth0_vlan: entered promiscuous mode [ 526.095273][T16042] veth1_vlan: entered promiscuous mode [ 526.178636][T16042] veth0_macvtap: entered promiscuous mode [ 526.201957][T16042] veth1_macvtap: entered promiscuous mode [ 526.313914][T16042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.335709][T16042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.372675][T16042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.381581][T16042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.390695][T16042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.399573][T16042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.509265][T16711] netlink: '+}[@': attribute type 13 has an invalid length. [ 526.566939][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 526.636737][T16734] loop4: detected capacity change from 0 to 512 [ 526.659596][T16736] netlink: '+}[@': attribute type 13 has an invalid length. [ 526.678861][T16734] EXT4-fs (loop4): unable to read superblock [ 526.688689][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.779869][T16757] loop1: detected capacity change from 0 to 512 [ 527.048629][T16797] Cannot find del_set index 4 as target [ 527.138440][T16806] loop2: detected capacity change from 0 to 2048 [ 527.171323][T16806] EXT4-fs: Ignoring removed nobh option [ 527.187507][T16806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.342309][T16829] loop0: detected capacity change from 0 to 512 [ 527.550073][T16846] lo speed is unknown, defaulting to 1000 [ 527.758717][T16958] lo speed is unknown, defaulting to 1000 [ 527.787997][T16846] chnl_net:caif_netlink_parms(): no params data found [ 528.122368][T16963] loop1: detected capacity change from 0 to 8192 [ 528.215082][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.222280][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.232434][T17064] loop3: detected capacity change from 0 to 512 [ 528.245862][T17067] loop2: detected capacity change from 0 to 2048 [ 528.251063][T17064] EXT4-fs (loop3): unable to read superblock [ 528.252464][T16846] bridge_slave_0: entered allmulticast mode [ 528.269397][T16846] bridge_slave_0: entered promiscuous mode [ 528.276596][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.283820][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.291281][T16846] bridge_slave_1: entered allmulticast mode [ 528.298069][T16846] bridge_slave_1: entered promiscuous mode [ 528.313390][ T3441] bridge_slave_1: left allmulticast mode [ 528.319111][ T3441] bridge_slave_1: left promiscuous mode [ 528.324901][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.332474][T17067] loop2: p4 < > [ 528.351325][ T3441] bridge_slave_0: left allmulticast mode [ 528.357065][ T3441] bridge_slave_0: left promiscuous mode [ 528.362916][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.386536][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 528.463710][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.474896][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.484041][ T3441] bond0 (unregistering): Released all slaves [ 528.519210][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.542769][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.608160][T17146] loop2: detected capacity change from 0 to 512 [ 528.628233][T17146] EXT4-fs (loop2): unable to read superblock [ 528.642403][T16846] team0: Port device team_slave_0 added [ 528.652479][ T3441] hsr_slave_0: left promiscuous mode [ 528.654652][T17149] loop4: detected capacity change from 0 to 512 [ 528.664843][ T3441] hsr_slave_1: left promiscuous mode [ 528.681259][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.701570][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.166091][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 529.166205][ T29] audit: type=1400 audit(1753202510.165:1203): avc: denied { write } for pid=17176 comm="syz.2.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 529.404901][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 529.415939][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 529.509803][T16846] team0: Port device team_slave_1 added [ 529.567249][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.574351][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.600674][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.622260][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.629271][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.655387][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.772683][T16846] hsr_slave_0: entered promiscuous mode [ 529.803445][T16846] hsr_slave_1: entered promiscuous mode [ 529.814378][T16846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.831282][T16846] Cannot create hsr debugfs directory [ 529.926770][T17281] loop4: detected capacity change from 0 to 2048 [ 529.961333][T17281] EXT4-fs: Ignoring removed nobh option [ 530.002340][T17281] EXT4-fs mount: 1 callbacks suppressed [ 530.002428][T17281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.312970][T16846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.327076][T16846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.339506][T16846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.359122][T16846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.449296][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.480515][ T29] audit: type=1400 audit(1753202511.475:1204): avc: denied { search } for pid=17415 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.501694][ T29] audit: type=1400 audit(1753202511.475:1205): avc: denied { search } for pid=17415 comm="rm" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.523577][ T29] audit: type=1400 audit(1753202511.475:1206): avc: denied { search } for pid=17415 comm="rm" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.546229][ T29] audit: type=1400 audit(1753202511.475:1207): avc: denied { getattr } for pid=17415 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=26041 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.580540][ T29] audit: type=1400 audit(1753202511.555:1208): avc: denied { remove_name } for pid=17415 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=26041 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.604606][ T29] audit: type=1400 audit(1753202511.555:1209): avc: denied { unlink } for pid=17415 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=26041 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.613401][T16846] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.628144][ T29] audit: type=1400 audit(1753202511.575:1210): avc: denied { read write } for pid=16042 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.659243][ T29] audit: type=1400 audit(1753202511.575:1211): avc: denied { open } for pid=16042 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.683815][ T29] audit: type=1400 audit(1753202511.575:1212): avc: denied { ioctl } for pid=16042 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.695072][T16846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.720361][T16846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.776051][T17422] loop1: detected capacity change from 0 to 512 [ 530.783304][T17422] EXT4-fs (loop1): unable to read superblock [ 530.813269][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.942925][T16986] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.950355][T16986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.997997][T16986] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.005182][T16986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.221148][T16846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.364686][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 531.512896][T16846] veth0_vlan: entered promiscuous mode [ 531.533337][T16846] veth1_vlan: entered promiscuous mode [ 531.592399][T16846] veth0_macvtap: entered promiscuous mode [ 531.610791][T16846] veth1_macvtap: entered promiscuous mode [ 531.636697][T16846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.663257][T16846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.669851][T17495] loop4: detected capacity change from 0 to 2048 [ 531.678560][T16846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.687498][T16846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.696372][T16846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.705222][T16846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.741465][T17495] EXT4-fs: Ignoring removed nobh option [ 531.761911][T17495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.990162][T17520] loop2: detected capacity change from 0 to 2048 [ 532.118116][T17520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.131710][T17520] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.847799][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.986555][T17558] loop4: detected capacity change from 0 to 2048 [ 534.063557][ T3293] loop4: p4 < > [ 534.082980][T17558] loop4: p4 < > [ 534.092077][ T2995] loop4: p4 < > [ 534.212772][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 534.382390][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 534.382408][ T29] audit: type=1400 audit(1753202515.385:1293): avc: denied { create } for pid=17601 comm="syz.1.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.394381][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 534.413595][ T29] audit: type=1400 audit(1753202515.405:1294): avc: denied { getopt } for pid=17601 comm="syz.1.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.438283][ T29] audit: type=1400 audit(1753202515.405:1295): avc: denied { connect } for pid=17601 comm="syz.1.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.458118][ T29] audit: type=1400 audit(1753202515.405:1296): avc: denied { name_connect } for pid=17601 comm="syz.1.2974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 534.511446][T17606] netlink: 'syz.0.2973': attribute type 13 has an invalid length. [ 534.541509][T17603] SELinux: failed to load policy [ 534.558527][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 534.570600][ T29] audit: type=1400 audit(1753202515.485:1297): avc: denied { write } for pid=17601 comm="syz.1.2974" lport=36841 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.594846][ T29] audit: type=1400 audit(1753202515.505:1298): avc: denied { tracepoint } for pid=17605 comm="syz.0.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 534.614918][ T29] audit: type=1400 audit(1753202515.525:1299): avc: denied { load_policy } for pid=17601 comm="syz.1.2974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 534.654392][T17606] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.661753][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.721256][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.733433][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.755467][ T29] audit: type=1400 audit(1753202515.755:1300): avc: denied { create } for pid=17611 comm="syz.3.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.776987][ T29] audit: type=1400 audit(1753202515.755:1301): avc: denied { name_bind } for pid=17611 comm="syz.3.2975" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 534.799491][ T29] audit: type=1400 audit(1753202515.755:1302): avc: denied { node_bind } for pid=17611 comm="syz.3.2975" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 534.834532][T17606] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.843739][T17606] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.852737][T17606] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.861729][T17606] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.879853][T17612] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 535.007283][T17647] Cannot find del_set index 4 as target [ 535.028803][T17645] loop3: detected capacity change from 0 to 2048 [ 535.050824][T17650] loop4: detected capacity change from 0 to 2048 [ 535.074151][ T3293] loop3: p4 < > [ 535.080853][T17645] loop3: p4 < > [ 535.113522][T17650] loop4: p4 < > [ 535.200229][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 535.200895][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 535.279841][T17685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.304433][T17689] loop1: detected capacity change from 0 to 512 [ 535.329216][T17696] netlink: 'syz.0.2989': attribute type 13 has an invalid length. [ 535.432884][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 535.445705][T17708] loop3: detected capacity change from 0 to 2048 [ 535.524976][T17708] loop3: p4 < > [ 535.586607][T17742] loop4: detected capacity change from 0 to 1024 [ 535.620353][T17742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.634287][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 535.662502][T17742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.719551][T17754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.730904][T17757] SELinux: failed to load policy [ 535.963498][T17772] loop1: detected capacity change from 0 to 1024 [ 536.011438][T17772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.056306][T17780] loop2: detected capacity change from 0 to 512 [ 536.096888][T17772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.965689][T17827] loop2: detected capacity change from 0 to 512 [ 536.996300][T17827] EXT4-fs (loop2): unable to read superblock [ 537.738510][T17841] netlink: '+}[@': attribute type 13 has an invalid length. [ 537.974485][T17852] Cannot find del_set index 4 as target [ 538.204759][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3018'. [ 538.227663][T17868] loop3: detected capacity change from 0 to 512 [ 538.265065][T17868] EXT4-fs (loop3): unable to read superblock [ 538.423967][T17877] loop0: detected capacity change from 0 to 512 [ 538.430921][T17877] EXT4-fs (loop0): unable to read superblock [ 539.495694][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 539.495787][ T29] audit: type=1400 audit(1753202520.495:1326): avc: denied { sqpoll } for pid=17892 comm="syz.2.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 539.621373][ T29] audit: type=1400 audit(1753202520.525:1327): avc: denied { map } for pid=17892 comm="syz.2.3022" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 539.645842][ T29] audit: type=1400 audit(1753202520.525:1328): avc: denied { read write } for pid=17892 comm="syz.2.3022" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 539.714527][T17900] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 539.765060][T17900] SELinux: failed to load policy [ 540.366505][T17908] loop2: detected capacity change from 0 to 2048 [ 540.577264][T17912] Cannot find del_set index 4 as target [ 541.156161][ T29] audit: type=1400 audit(1753202522.155:1329): avc: denied { mounton } for pid=17930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 541.243942][T17908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.258240][T17908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.213784][ T29] audit: type=1400 audit(1753202523.215:1330): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 542.300193][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3032'. [ 542.354966][T17975] netlink: '+}[@': attribute type 13 has an invalid length. [ 542.412682][ T3441] bond0 (unregistering): Released all slaves [ 542.473754][ T3441] tipc: Disabling bearer [ 542.481548][ T3441] tipc: Left network mode [ 542.490698][ T3441] hsr_slave_0: left promiscuous mode [ 542.516072][ T3441] hsr_slave_1: left promiscuous mode [ 542.553962][T18004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 542.771337][T17930] chnl_net:caif_netlink_parms(): no params data found [ 542.932370][T17930] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.939813][T17930] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.966886][T17930] bridge_slave_0: entered allmulticast mode [ 542.973724][T17930] bridge_slave_0: entered promiscuous mode [ 542.991512][T17930] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.999457][T17930] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.041090][T17930] bridge_slave_1: entered allmulticast mode [ 543.094073][T17930] bridge_slave_1: entered promiscuous mode [ 543.107323][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.274684][T18182] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 543.519630][T18190] netlink: '+}[@': attribute type 13 has an invalid length. [ 543.642030][T17930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.656466][T18213] loop4: detected capacity change from 0 to 2048 [ 543.677093][T18213] EXT4-fs: Ignoring removed nobh option [ 543.692735][T17930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.734825][T18213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.760186][T17930] team0: Port device team_slave_0 added [ 543.767264][T17930] team0: Port device team_slave_1 added [ 543.796252][T18254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.810317][T17930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.825818][T17930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.852315][T17930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.897324][ T29] audit: type=1400 audit(1753202524.895:1331): avc: denied { write } for pid=18212 comm="syz.4.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 543.923480][T17930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.924944][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.930803][T17930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.951561][T18284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3047'. [ 543.966460][T17930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.053323][T17930] hsr_slave_0: entered promiscuous mode [ 544.061705][T17930] hsr_slave_1: entered promiscuous mode [ 544.068138][T17930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.076221][T17930] Cannot create hsr debugfs directory [ 544.076795][T18298] loop1: detected capacity change from 0 to 8192 [ 544.106639][ T29] audit: type=1400 audit(1753202525.105:1332): avc: denied { mount } for pid=18297 comm="syz.1.3049" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 544.141336][ T29] audit: type=1400 audit(1753202525.125:1333): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 544.286229][T18374] loop1: detected capacity change from 0 to 2048 [ 544.328249][T18374] EXT4-fs: Ignoring removed nobh option [ 544.338778][T18394] loop0: detected capacity change from 0 to 1024 [ 544.351669][T18394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.383889][T18374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.427431][T18394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.537017][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.644236][T18455] netlink: '+}[@': attribute type 13 has an invalid length. [ 544.763296][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.255136][T18455] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.262641][T18455] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.998933][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.015726][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.064767][T18455] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.073908][T18455] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.083478][T18455] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.092719][T18455] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.240638][T17930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.290202][T17930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.333394][T17930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 546.354677][T17930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.473499][T17930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.508471][T18543] SELinux: failed to load policy [ 546.532664][T17930] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.556940][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.564351][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.603180][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.610688][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.757437][T17930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.825053][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 546.959079][T17930] veth0_vlan: entered promiscuous mode [ 546.959232][T18598] loop4: detected capacity change from 0 to 512 [ 546.987455][T17930] veth1_vlan: entered promiscuous mode [ 546.987728][T18598] EXT4-fs (loop4): unable to read superblock [ 547.041867][T17930] veth0_macvtap: entered promiscuous mode [ 547.057619][T17930] veth1_macvtap: entered promiscuous mode [ 547.113349][T17930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.140794][T17930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.151514][T17930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.161089][T17930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.170243][T17930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.179412][T17930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.183724][T18624] loop1: detected capacity change from 0 to 8192 [ 548.949062][T18720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.073254][T18737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3079'. [ 549.134195][T18802] Cannot find del_set index 4 as target [ 549.172314][T18700] chnl_net:caif_netlink_parms(): no params data found [ 549.210680][T18843] Cannot find del_set index 4 as target [ 549.281632][T18885] loop2: detected capacity change from 0 to 2048 [ 549.291514][T18885] EXT4-fs: Ignoring removed nobh option [ 549.316490][T18885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.340200][T18700] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.347491][T18700] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.368260][T18700] bridge_slave_0: entered allmulticast mode [ 549.377152][T18700] bridge_slave_0: entered promiscuous mode [ 549.384629][T18700] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.392457][T18700] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.401663][T18700] bridge_slave_1: entered allmulticast mode [ 549.408388][T18700] bridge_slave_1: entered promiscuous mode [ 549.482125][T18700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.507923][ T172] bridge_slave_1: left allmulticast mode [ 549.513807][ T172] bridge_slave_1: left promiscuous mode [ 549.519509][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.544983][ T172] bridge_slave_0: left allmulticast mode [ 549.550921][ T172] bridge_slave_0: left promiscuous mode [ 549.556875][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.618496][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.645891][T18970] loop0: detected capacity change from 0 to 512 [ 549.653973][T18970] EXT4-fs (loop0): unable to read superblock [ 549.694924][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.704532][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.715480][ T172] bond0 (unregistering): Released all slaves [ 549.757171][T18700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.791182][T18700] team0: Port device team_slave_0 added [ 549.798021][T18700] team0: Port device team_slave_1 added [ 549.819130][ T172] hsr_slave_0: left promiscuous mode [ 549.825308][ T172] hsr_slave_1: left promiscuous mode [ 549.833353][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.855349][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.948193][ T172] team0 (unregistering): Port device team_slave_1 removed [ 549.960923][ T172] team0 (unregistering): Port device team_slave_0 removed [ 550.059408][T18700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.068952][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.096846][T18700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.122741][T18700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.129807][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.155814][T18700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.212895][T16042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.255974][T18700] hsr_slave_0: entered promiscuous mode [ 550.276177][T18700] hsr_slave_1: entered promiscuous mode [ 550.323055][T19101] loop3: detected capacity change from 0 to 2048 [ 550.334404][T19101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.348905][T19101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.414178][T19105] Set syz1 is full, maxelem 65536 reached [ 550.582847][T18700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.601505][T18700] Cannot create hsr debugfs directory [ 552.075214][T19259] loop2: detected capacity change from 0 to 2048 [ 552.094430][T19259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.109104][T19259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.180854][T19298] SELinux: failed to load policy [ 553.314278][T18700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 553.345617][T18700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 553.357985][T19318] loop4: detected capacity change from 0 to 2048 [ 553.374885][T18700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 553.387378][T19318] EXT4-fs: Ignoring removed nobh option [ 553.425524][T18700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.443041][T19318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.577113][T18700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.620120][T18700] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.653805][ T2149] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.660988][ T2149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.718607][ T2149] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.726368][ T2149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.938581][T19357] SELinux: failed to load policy [ 553.948297][T18700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.087396][T18700] veth0_vlan: entered promiscuous mode [ 554.111702][T18700] veth1_vlan: entered promiscuous mode [ 554.154895][T18700] veth0_macvtap: entered promiscuous mode [ 554.179751][T18700] veth1_macvtap: entered promiscuous mode [ 554.211358][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.213835][T18700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.265695][T18700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.276739][T18700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.285579][T18700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.294566][T18700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.303497][T18700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.375116][T19407] netlink: '+}[@': attribute type 13 has an invalid length. [ 554.526668][T19407] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.536694][T19407] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.624046][T19407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.635487][T19407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.700335][T19407] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.709716][T19407] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.718854][T19407] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.728106][T19407] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.019806][T19442] loop2: detected capacity change from 0 to 512 [ 555.053545][T19446] loop4: detected capacity change from 0 to 512 [ 555.497539][T19487] loop3: detected capacity change from 0 to 2048 [ 555.511957][T19487] EXT4-fs: Ignoring removed nobh option [ 555.533724][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3117'. [ 555.554234][T19487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.663110][T19533] loop1: detected capacity change from 0 to 512 [ 555.663779][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 555.701636][T19541] Cannot find del_set index 4 as target [ 555.728534][T19544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3124'. [ 555.764867][T19548] loop0: detected capacity change from 0 to 2048 [ 555.782531][T19548] EXT4-fs: Ignoring removed nobh option [ 555.803646][T19548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.887989][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 555.965450][T19569] loop2: detected capacity change from 0 to 512 [ 555.973574][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.975582][T19569] EXT4-fs (loop2): unable to read superblock [ 556.153930][T19604] loop0: detected capacity change from 0 to 2048 [ 556.156142][T19607] loop4: detected capacity change from 0 to 512 [ 556.165322][T19604] EXT4-fs: Ignoring removed nobh option [ 556.176472][T19607] EXT4-fs (loop4): unable to read superblock [ 556.220351][T19604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.322964][T17930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.385552][T19622] loop3: detected capacity change from 0 to 512 [ 556.433797][T19622] EXT4-fs (loop3): unable to read superblock [ 556.696186][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.140051][T19647] loop1: detected capacity change from 0 to 512 [ 557.148178][T19648] loop0: detected capacity change from 0 to 512 [ 557.168886][T19647] EXT4-fs (loop1): unable to read superblock [ 557.325931][T19660] Cannot find del_set index 4 as target [ 557.436081][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 557.608128][T19666] loop0: detected capacity change from 0 to 2048 [ 557.637956][T19666] EXT4-fs: Ignoring removed nobh option [ 557.693287][T19666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.136222][T19684] SELinux: failed to load policy [ 558.425208][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.532055][T19688] loop0: detected capacity change from 0 to 2048 [ 558.543824][T19688] EXT4-fs: Ignoring removed nobh option [ 558.571362][T19688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.988277][T19703] loop3: detected capacity change from 0 to 512 [ 559.009535][T19703] EXT4-fs (loop3): unable to read superblock [ 559.466386][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.722399][T19714] loop0: detected capacity change from 0 to 512 [ 560.591372][T19725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3150'. [ 560.723282][T19728] FAULT_INJECTION: forcing a failure. [ 560.723282][T19728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.736585][T19728] CPU: 1 UID: 0 PID: 19728 Comm: syz.0.3151 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 560.736619][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.736635][T19728] Call Trace: [ 560.736644][T19728] [ 560.736654][T19728] __dump_stack+0x1d/0x30 [ 560.736678][T19728] dump_stack_lvl+0xe8/0x140 [ 560.736703][T19728] dump_stack+0x15/0x1b [ 560.736729][T19728] should_fail_ex+0x265/0x280 [ 560.736764][T19728] should_fail+0xb/0x20 [ 560.736838][T19728] should_fail_usercopy+0x1a/0x20 [ 560.736869][T19728] _copy_from_user+0x1c/0xb0 [ 560.736894][T19728] get_user_ifreq+0x53/0x110 [ 560.736922][T19728] sock_ioctl+0x54e/0x610 [ 560.736970][T19728] ? __pfx_sock_ioctl+0x10/0x10 [ 560.737061][T19728] __se_sys_ioctl+0xcb/0x140 [ 560.737092][T19728] __x64_sys_ioctl+0x43/0x50 [ 560.737123][T19728] x64_sys_call+0x19a8/0x2fb0 [ 560.737152][T19728] do_syscall_64+0xd2/0x200 [ 560.737170][T19728] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 560.737267][T19728] ? clear_bhb_loop+0x40/0x90 [ 560.737294][T19728] ? clear_bhb_loop+0x40/0x90 [ 560.737330][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.737349][T19728] RIP: 0033:0x7f46981ce9a9 [ 560.737498][T19728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.737519][T19728] RSP: 002b:00007f4696837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.737542][T19728] RAX: ffffffffffffffda RBX: 00007f46983f5fa0 RCX: 00007f46981ce9a9 [ 560.737567][T19728] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 560.737578][T19728] RBP: 00007f4696837090 R08: 0000000000000000 R09: 0000000000000000 [ 560.737590][T19728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.737602][T19728] R13: 0000000000000000 R14: 00007f46983f5fa0 R15: 00007fffd5502668 [ 560.737623][T19728] [ 561.103471][T19733] loop0: detected capacity change from 0 to 8192 [ 561.203446][T19744] loop3: detected capacity change from 0 to 512 [ 561.221583][T19744] EXT4-fs (loop3): unable to read superblock [ 561.704893][T19761] loop0: detected capacity change from 0 to 2048 [ 561.773847][T19761] EXT4-fs: Ignoring removed nobh option [ 561.954849][T19761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.394454][T19797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3162'. [ 562.499851][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.518622][T19800] netlink: '+}[@': attribute type 13 has an invalid length. [ 562.798191][T19825] loop2: detected capacity change from 0 to 512 [ 562.837590][T19825] EXT4-fs (loop2): unable to read superblock [ 562.995563][T19835] loop3: detected capacity change from 0 to 512 [ 563.054831][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3168'. [ 563.096001][T19846] loop0: detected capacity change from 0 to 512 [ 563.127410][T19846] EXT4-fs (loop0): unable to read superblock [ 563.244332][ T29] audit: type=1400 audit(1753202544.165:1334): avc: denied { ioctl } for pid=19854 comm="syz.1.3174" path="socket:[37793]" dev="sockfs" ino=37793 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 563.270827][ T29] audit: type=1326 audit(1753202544.175:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.290278][T19859] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 563.294546][ T29] audit: type=1326 audit(1753202544.175:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.316064][T19858] loop1: detected capacity change from 0 to 1024 [ 563.327718][ T29] audit: type=1326 audit(1753202544.175:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.327757][ T29] audit: type=1326 audit(1753202544.175:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.382774][ T29] audit: type=1326 audit(1753202544.175:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.384698][T19859] SELinux: failed to load policy [ 563.406687][ T29] audit: type=1326 audit(1753202544.175:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.406747][ T29] audit: type=1326 audit(1753202544.175:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.435957][T19858] EXT4-fs: Ignoring removed nobh option [ 563.459328][ T29] audit: type=1326 audit(1753202544.175:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.459390][ T29] audit: type=1326 audit(1753202544.175:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 563.465065][T19858] EXT4-fs: Ignoring removed bh option [ 563.533789][T19865] loop4: detected capacity change from 0 to 2048 [ 563.554214][T19865] EXT4-fs: Ignoring removed nobh option [ 563.582589][T19865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.622876][T19858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.051586][T19884] loop0: detected capacity change from 0 to 512 [ 564.068477][T19887] loop3: detected capacity change from 0 to 1024 [ 564.090369][T19887] EXT4-fs: Ignoring removed oldalloc option [ 564.097631][T19887] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 564.122675][T19887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.197021][T18700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.277717][T19925] random: crng reseeded on system resumption [ 564.293185][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.406298][T19941] loop1: detected capacity change from 0 to 512 [ 564.433198][T19941] EXT4-fs (loop1): unable to read superblock [ 564.458402][T17930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.825258][T19989] loop1: detected capacity change from 0 to 2048 [ 564.841237][T19989] EXT4-fs: Ignoring removed nobh option [ 564.852460][T19989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.998502][T20008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.075097][T20014] loop0: detected capacity change from 0 to 512 [ 565.111082][T20017] netlink: 'syz.3.3193': attribute type 13 has an invalid length. [ 565.120265][T20017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3193'. [ 565.159600][T20023] netlink: '+}[@': attribute type 13 has an invalid length. [ 565.264860][T20029] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 565.285255][T20029] loop3: detected capacity change from 0 to 2048 [ 565.336158][ T3293] loop3: p2 p3 p7 [ 565.367042][T20029] loop3: p2 p3 p7 [ 565.546099][ T5424] udevd[5424]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 565.553724][ T4685] udevd[4685]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 565.562587][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 565.709816][T18700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.812598][T20137] netlink: 'syz.1.3205': attribute type 13 has an invalid length. [ 565.820507][T20137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3205'. [ 565.893465][T20143] loop1: detected capacity change from 0 to 512 [ 565.900739][T20143] EXT4-fs (loop1): unable to read superblock [ 566.045779][T20134] chnl_net:caif_netlink_parms(): no params data found [ 566.094028][ T12] bridge_slave_1: left allmulticast mode [ 566.099928][ T12] bridge_slave_1: left promiscuous mode [ 566.105863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.115715][ T12] bridge_slave_0: left allmulticast mode [ 566.121708][ T12] bridge_slave_0: left promiscuous mode [ 566.127757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.197382][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.207179][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.218959][ T12] bond0 (unregistering): Released all slaves [ 566.242152][T20290] netlink: '+}[@': attribute type 13 has an invalid length. [ 566.278460][ T12] hsr_slave_0: left promiscuous mode [ 566.288791][ T12] hsr_slave_1: left promiscuous mode [ 566.303086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.311001][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.353892][ T12] team0 (unregistering): Port device team_slave_1 removed [ 566.368540][T20327] loop3: detected capacity change from 0 to 512 [ 566.375362][ T12] team0 (unregistering): Port device team_slave_0 removed [ 566.383686][T20327] EXT4-fs (loop3): unable to read superblock [ 566.427363][T20134] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.434678][T20134] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.443894][T20134] bridge_slave_0: entered allmulticast mode [ 566.455808][T20134] bridge_slave_0: entered promiscuous mode [ 566.465394][T20324] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 566.487005][T20134] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.494169][T20134] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.502689][T20134] bridge_slave_1: entered allmulticast mode [ 566.509470][T20134] bridge_slave_1: entered promiscuous mode [ 566.544709][T20134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.573522][T20134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.599155][T20376] loop0: detected capacity change from 0 to 512 [ 566.606232][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3211'. [ 566.617596][T20376] EXT4-fs: inline encryption not supported [ 566.623603][T20376] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.630822][T20376] EXT4-fs: test_dummy_encryption option not supported [ 566.703979][T20134] team0: Port device team_slave_0 added [ 566.710865][T20134] team0: Port device team_slave_1 added [ 566.767607][T20428] loop1: detected capacity change from 0 to 2048 [ 566.774930][T20428] EXT4-fs: Ignoring removed nobh option [ 566.775782][T20134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.787606][T20134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.814041][T20134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.839409][T20134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.846703][T20134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.873314][T20134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.124478][T20448] loop2: detected capacity change from 0 to 8192 [ 567.151122][T20134] hsr_slave_0: entered promiscuous mode [ 567.158838][T20134] hsr_slave_1: entered promiscuous mode [ 567.173754][T20134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.182036][T20134] Cannot create hsr debugfs directory [ 567.263061][T20428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.283172][T20481] netlink: 'syz.3.3215': attribute type 13 has an invalid length. [ 567.291260][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3215'. [ 567.597316][T20569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 567.627973][T18700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.657680][T20579] netlink: '+}[@': attribute type 13 has an invalid length. [ 567.816940][T20623] loop0: detected capacity change from 0 to 512 [ 567.848942][T20628] loop1: detected capacity change from 0 to 1024 [ 567.858965][T20623] EXT4-fs (loop0): unable to read superblock [ 567.898225][T20628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.092815][T20628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.179355][T20134] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 568.194504][T18700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.211641][T20134] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 568.233392][T20134] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 568.243653][T20134] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 568.327381][T20134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.359088][T20134] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.384242][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.391594][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.456474][T20688] loop1: detected capacity change from 0 to 8192 [ 568.471904][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.479041][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.511954][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 568.511974][ T29] audit: type=1400 audit(1753202549.495:1378): avc: denied { create } for pid=20689 comm="syz.3.3226" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 568.539405][ T29] audit: type=1400 audit(1753202549.495:1379): avc: denied { write } for pid=20689 comm="syz.3.3226" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 568.561884][ T29] audit: type=1400 audit(1753202549.495:1380): avc: denied { open } for pid=20689 comm="syz.3.3226" path="/45/file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 568.584911][ T29] audit: type=1400 audit(1753202549.495:1381): avc: denied { ioctl } for pid=20689 comm="syz.3.3226" path="/45/file0" dev="tmpfs" ino=270 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 568.649584][T20134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 568.660069][T20134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.725844][ T29] audit: type=1400 audit(1753202549.685:1382): avc: denied { name_connect } for pid=20698 comm="syz.1.3227" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 568.755161][T20699] syz.1.3227 (20699) used greatest stack depth: 9464 bytes left [ 568.812399][ T29] audit: type=1400 audit(1753202549.755:1383): avc: denied { shutdown } for pid=20698 comm="syz.1.3227" laddr=fe80::11 lport=54171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 568.832694][T20134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.921852][T20690] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3226'. [ 568.932897][ T29] audit: type=1400 audit(1753202549.915:1384): avc: denied { setopt } for pid=20689 comm="syz.3.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 569.092662][ T29] audit: type=1400 audit(1753202550.085:1385): avc: denied { unlink } for pid=17930 comm="syz-executor" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 569.130702][T20727] loop1: detected capacity change from 0 to 2048 [ 569.139965][T20134] veth0_vlan: entered promiscuous mode [ 569.162102][T20134] veth1_vlan: entered promiscuous mode [ 569.174740][T20729] loop3: detected capacity change from 0 to 2048 [ 569.181388][T20727] EXT4-fs: Ignoring removed nobh option [ 569.190794][T20134] veth0_macvtap: entered promiscuous mode [ 569.205900][T20134] veth1_macvtap: entered promiscuous mode [ 569.211741][T20729] EXT4-fs: Ignoring removed nobh option [ 569.222754][T20727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.223150][T20729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.259830][T20134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.283809][T20134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.333664][T20134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.342705][T20134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.351561][T20134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.360398][T20134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.435908][T17930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.514652][T20745] loop3: detected capacity change from 0 to 512 [ 569.542215][T20745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 569.563862][T20748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.583866][T20745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.617549][T20745] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.634455][T20752] loop4: detected capacity change from 0 to 512 [ 569.708530][ T29] audit: type=1400 audit(1753202550.705:1386): avc: denied { ioctl } for pid=20744 comm="syz.3.3233" path="/49/bus/memory.events" dev="loop3" ino=18 ioctlcmd=0x4b67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 569.811527][T20759] loop4: detected capacity change from 0 to 2048 [ 569.824309][T20759] EXT4-fs: Ignoring removed nobh option [ 569.853568][T20759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.868728][T17930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.985222][T18700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.183853][T20134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.215071][T20772] 8021q: VLANs not supported on ip6tnl0 [ 570.224218][T20772] netlink: 'syz.1.3240': attribute type 1 has an invalid length. [ 570.232172][T20772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3240'. [ 570.241633][ T29] audit: type=1400 audit(1753202551.225:1387): avc: denied { create } for pid=20771 comm="syz.1.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 570.292422][T20804] netlink: '+}[@': attribute type 13 has an invalid length. [ 570.411873][T20812] loop1: detected capacity change from 0 to 2048 [ 570.444173][T20812] EXT4-fs: Ignoring removed nobh option [ 570.463573][T20804] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.470998][T20804] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.500627][T20812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.634133][T20804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.674602][T20804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.814443][T20804] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.824002][T20804] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.833093][T20804] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.842251][T20804] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.155326][T20832] FAULT_INJECTION: forcing a failure. [ 571.155326][T20832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.168641][T20832] CPU: 1 UID: 0 PID: 20832 Comm: syz.4.3245 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 571.168667][T20832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.168737][T20832] Call Trace: [ 571.168743][T20832] [ 571.168750][T20832] __dump_stack+0x1d/0x30 [ 571.168805][T20832] dump_stack_lvl+0xe8/0x140 [ 571.168867][T20832] dump_stack+0x15/0x1b [ 571.168888][T20832] should_fail_ex+0x265/0x280 [ 571.169004][T20832] should_fail+0xb/0x20 [ 571.169030][T20832] should_fail_usercopy+0x1a/0x20 [ 571.169060][T20832] _copy_from_user+0x1c/0xb0 [ 571.169080][T20832] get_user_ifreq+0x53/0x110 [ 571.169107][T20832] sock_ioctl+0x54e/0x610 [ 571.169154][T20832] ? __pfx_sock_ioctl+0x10/0x10 [ 571.169236][T20832] __se_sys_ioctl+0xcb/0x140 [ 571.169264][T20832] __x64_sys_ioctl+0x43/0x50 [ 571.169291][T20832] x64_sys_call+0x19a8/0x2fb0 [ 571.169316][T20832] do_syscall_64+0xd2/0x200 [ 571.169342][T20832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.169373][T20832] ? clear_bhb_loop+0x40/0x90 [ 571.169396][T20832] ? clear_bhb_loop+0x40/0x90 [ 571.169417][T20832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.169437][T20832] RIP: 0033:0x7f9fd0f6e9a9 [ 571.169493][T20832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.169511][T20832] RSP: 002b:00007f9fcf5d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.169580][T20832] RAX: ffffffffffffffda RBX: 00007f9fd1195fa0 RCX: 00007f9fd0f6e9a9 [ 571.169592][T20832] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 571.169606][T20832] RBP: 00007f9fcf5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 571.169621][T20832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.169684][T20832] R13: 0000000000000000 R14: 00007f9fd1195fa0 R15: 00007ffdc4182f88 [ 571.169712][T20832] [ 571.463757][T20836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3247'. [ 571.488526][T18700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.515823][T20841] loop2: detected capacity change from 0 to 512 [ 571.590102][T20853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 571.847823][T20875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3257'. [ 571.887870][T20891] loop3: detected capacity change from 0 to 512 [ 571.895141][T20891] EXT4-fs (loop3): unable to read superblock [ 572.315863][T20898] loop4: detected capacity change from 0 to 2048 [ 572.324658][T20898] EXT4-fs: Ignoring removed nobh option [ 572.364945][T20898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.453290][T20904] loop1: detected capacity change from 0 to 512 [ 572.461872][T20904] EXT4-fs (loop1): unable to read superblock [ 572.849287][T20913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3263'. [ 573.142626][T20922] loop0: detected capacity change from 0 to 1024 [ 573.309606][T20922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.344613][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 573.364841][T20134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.451740][T20922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.639868][T20941] loop3: detected capacity change from 0 to 512 [ 573.647249][T20941] EXT4-fs (loop3): unable to read superblock [ 573.690614][T20952] netlink: '+}[@': attribute type 13 has an invalid length. [ 573.827902][T20963] loop4: detected capacity change from 0 to 512 [ 573.846935][T20963] EXT4-fs (loop4): unable to read superblock [ 573.859784][T20968] loop3: detected capacity change from 0 to 512 [ 573.881535][T20968] EXT4-fs (loop3): unable to read superblock [ 574.449609][T20999] loop2: detected capacity change from 0 to 512 [ 575.029714][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 575.069360][T21009] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 575.219913][T21038] loop1: detected capacity change from 0 to 512 [ 575.253141][T21038] EXT4-fs (loop1): unable to read superblock [ 575.614521][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 575.614540][ T29] audit: type=1400 audit(1753202556.575:1390): avc: denied { read write } for pid=21045 comm="syz.1.3284" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 575.645400][ T29] audit: type=1400 audit(1753202556.575:1391): avc: denied { open } for pid=21045 comm="syz.1.3284" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 575.669778][ T29] audit: type=1400 audit(1753202556.575:1392): avc: denied { ioctl } for pid=21045 comm="syz.1.3284" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 575.759155][ T29] audit: type=1400 audit(1753202556.755:1393): avc: denied { create } for pid=21051 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 575.893374][T21058] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 575.920315][ T29] audit: type=1400 audit(1753202556.915:1394): avc: denied { execute } for pid=21051 comm="syz.1.3286" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 576.077141][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 576.092828][ T29] audit: type=1400 audit(1753202557.065:1395): avc: denied { connect } for pid=21059 comm="syz.4.3289" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 576.113696][ T29] audit: type=1400 audit(1753202557.065:1396): avc: denied { setopt } for pid=21059 comm="syz.4.3289" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 576.135634][ T29] audit: type=1400 audit(1753202557.065:1397): avc: denied { write } for pid=21059 comm="syz.4.3289" path="socket:[39565]" dev="sockfs" ino=39565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 576.201486][T21072] loop2: detected capacity change from 0 to 512 [ 576.210787][T21072] EXT4-fs (loop2): unable to read superblock [ 576.280653][T21075] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 576.352790][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 576.489457][T21081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 576.546750][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 576.836978][T21098] loop1: detected capacity change from 0 to 2048 [ 576.911675][T21098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.928448][T21098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.034262][T21106] loop4: detected capacity change from 0 to 512 [ 577.078604][T21106] EXT4-fs (loop4): unable to read superblock [ 578.384765][T21122] loop3: detected capacity change from 0 to 512 [ 578.491446][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 578.561022][ T29] audit: type=1400 audit(1753202559.525:1398): avc: denied { connect } for pid=21128 comm="syz.1.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 578.879892][T21140] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3305'. [ 578.968720][T21163] loop3: detected capacity change from 0 to 2048 [ 578.985915][T21163] EXT4-fs: Ignoring removed nobh option [ 579.041406][T21163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.156009][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.399115][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 579.519197][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 579.591793][T21186] loop0: detected capacity change from 0 to 512 [ 579.624772][T21186] EXT4-fs (loop0): unable to read superblock [ 579.760873][T21194] loop1: detected capacity change from 0 to 2048 [ 579.855330][T21194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.889929][T21194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.159917][T17930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.643914][T21208] netlink: 'syz.0.3317': attribute type 13 has an invalid length. [ 581.651980][T21208] netlink: 'syz.0.3317': attribute type 27 has an invalid length. [ 581.823895][T21218] loop1: detected capacity change from 0 to 512 [ 581.909710][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'. [ 582.015700][T21233] loop0: detected capacity change from 0 to 512 [ 582.038044][T21233] EXT4-fs: inline encryption not supported [ 582.043983][T21233] EXT4-fs: Ignoring removed mblk_io_submit option [ 582.050829][T21231] loop3: detected capacity change from 0 to 2048 [ 582.067225][T21233] EXT4-fs: test_dummy_encryption option not supported [ 582.197056][T21231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.308465][T21231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.738915][ T29] audit: type=1326 audit(1753202563.735:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 582.822157][ T29] audit: type=1326 audit(1753202563.735:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 582.916731][ T29] audit: type=1326 audit(1753202563.915:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 582.975488][ T29] audit: type=1326 audit(1753202563.945:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 582.999569][ T29] audit: type=1326 audit(1753202563.955:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 583.023683][ T29] audit: type=1326 audit(1753202563.955:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 583.047924][ T29] audit: type=1326 audit(1753202563.965:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 583.073188][ T29] audit: type=1326 audit(1753202563.965:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 583.097206][ T29] audit: type=1326 audit(1753202563.965:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 583.177135][T21255] netlink: '+}[@': attribute type 13 has an invalid length. [ 583.215078][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 583.215276][T21261] netlink: 'syz.2.3332': attribute type 13 has an invalid length. [ 583.232099][T21261] netlink: 'syz.2.3332': attribute type 27 has an invalid length. [ 583.275872][ T29] audit: type=1326 audit(1753202563.965:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf09e9a9 code=0x7ffc0000 [ 583.488056][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'. [ 583.557325][T21278] loop2: detected capacity change from 0 to 512 [ 583.696742][T21287] loop4: detected capacity change from 0 to 512 [ 583.707219][T21287] EXT4-fs: inline encryption not supported [ 583.713927][T21287] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.723504][T21287] EXT4-fs: test_dummy_encryption option not supported [ 584.013405][T21302] loop1: detected capacity change from 0 to 2048 [ 584.041091][T21302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.055913][T21302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.940200][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 584.959965][T21323] loop4: detected capacity change from 0 to 512 [ 584.987132][T21323] EXT4-fs (loop4): unable to read superblock [ 586.366518][T21333] loop1: detected capacity change from 0 to 512 [ 586.511484][T21333] EXT4-fs (loop1): unable to read superblock [ 587.205605][T21407] loop4: detected capacity change from 0 to 512 [ 587.226396][T21407] EXT4-fs: inline encryption not supported [ 587.232391][T21407] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.256833][T21407] EXT4-fs: test_dummy_encryption option not supported [ 587.492896][T21416] SELinux: failed to load policy [ 588.105927][T21422] netlink: '+}[@': attribute type 13 has an invalid length. [ 588.148494][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 588.148508][ T29] audit: type=1326 audit(1753202569.145:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.185018][ T29] audit: type=1326 audit(1753202569.185:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.213901][ T29] audit: type=1326 audit(1753202569.185:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.238118][ T29] audit: type=1326 audit(1753202569.185:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.262002][ T29] audit: type=1326 audit(1753202569.205:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.285882][ T29] audit: type=1326 audit(1753202569.205:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.309506][ T29] audit: type=1326 audit(1753202569.205:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.343706][ T29] audit: type=1326 audit(1753202569.215:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.367520][ T29] audit: type=1326 audit(1753202569.245:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.391145][ T29] audit: type=1326 audit(1753202569.245:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21420 comm="syz.4.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 588.423085][T21434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 588.677070][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 589.087232][T21532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3372'. [ 589.504678][T21567] netlink: '+}[@': attribute type 13 has an invalid length. [ 589.696624][T21587] loop3: detected capacity change from 0 to 2048 [ 589.703967][T21587] EXT4-fs: Ignoring removed nobh option [ 589.713997][T21587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.779773][T21583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3384'. [ 590.013225][T21608] loop0: detected capacity change from 0 to 512 [ 590.020011][T21608] EXT4-fs (loop0): unable to read superblock [ 590.546726][T17930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.575025][T21624] loop3: detected capacity change from 0 to 512 [ 590.582876][T21624] EXT4-fs (loop3): unable to read superblock [ 590.943942][T21643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 591.266177][T21679] loop2: detected capacity change from 0 to 1024 [ 591.283492][T21679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.297184][T21679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.536674][T21710] loop3: detected capacity change from 0 to 512 [ 591.556260][T21710] EXT4-fs (loop3): unable to read superblock [ 591.903183][T21716] loop0: detected capacity change from 0 to 512 [ 591.924001][T21719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3407'. [ 591.925067][T21716] EXT4-fs (loop0): unable to read superblock [ 592.087549][T21729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.149096][T21731] loop3: detected capacity change from 0 to 512 [ 592.224533][T21731] EXT4-fs: inline encryption not supported [ 592.230911][T21731] EXT4-fs: Ignoring removed mblk_io_submit option [ 592.239267][T21731] EXT4-fs: test_dummy_encryption option not supported [ 592.263211][T21735] netlink: '+}[@': attribute type 13 has an invalid length. [ 592.452054][T21735] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.459600][T21735] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.622508][T21735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.662584][T21735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.794331][T21735] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.803467][T21735] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.812556][T21735] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.821642][T21735] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.840434][T21750] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 593.075134][T21777] loop1: detected capacity change from 0 to 512 [ 593.111696][T21777] EXT4-fs (loop1): unable to read superblock [ 593.306683][T21785] loop0: detected capacity change from 0 to 2048 [ 593.335739][T21785] EXT4-fs: Ignoring removed nobh option [ 593.365339][T21785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.530072][T21797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.615994][T21800] loop3: detected capacity change from 0 to 512 [ 593.641607][T21800] EXT4-fs (loop3): unable to read superblock [ 594.113949][T21838] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3426'. [ 594.200749][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.245432][T21848] macsec0: entered allmulticast mode [ 594.261092][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 594.261111][ T29] audit: type=1400 audit(1753202575.245:1459): avc: denied { cpu } for pid=21843 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 594.407358][T21867] SELinux: failed to load policy [ 594.436024][T21868] loop1: detected capacity change from 0 to 2048 [ 594.472555][T21868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.486427][T21868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.613878][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3440'. [ 594.625334][ T29] audit: type=1400 audit(1753202575.605:1460): avc: denied { setopt } for pid=21875 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 594.645629][ T29] audit: type=1400 audit(1753202575.605:1461): avc: denied { write } for pid=21875 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 594.665357][ T29] audit: type=1400 audit(1753202575.615:1462): avc: denied { create } for pid=21875 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.686008][ T29] audit: type=1400 audit(1753202575.615:1463): avc: denied { write } for pid=21875 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.706475][ T29] audit: type=1400 audit(1753202575.615:1464): avc: denied { nlmsg_write } for pid=21875 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.816121][T16042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.749771][T21886] loop3: detected capacity change from 0 to 2048 [ 595.815196][T21886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.828736][T21886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.889926][T21898] FAULT_INJECTION: forcing a failure. [ 595.889926][T21898] name failslab, interval 1, probability 0, space 0, times 0 [ 595.903775][T21898] CPU: 1 UID: 0 PID: 21898 Comm: syz.2.3441 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 595.903810][T21898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.903826][T21898] Call Trace: [ 595.903838][T21898] [ 595.903855][T21898] __dump_stack+0x1d/0x30 [ 595.903882][T21898] dump_stack_lvl+0xe8/0x140 [ 595.903907][T21898] dump_stack+0x15/0x1b [ 595.903930][T21898] should_fail_ex+0x265/0x280 [ 595.903968][T21898] should_failslab+0x8c/0xb0 [ 595.903995][T21898] kmem_cache_alloc_node_noprof+0x57/0x320 [ 595.904109][T21898] ? __alloc_skb+0x101/0x320 [ 595.904147][T21898] __alloc_skb+0x101/0x320 [ 595.904220][T21898] ? avc_has_perm+0xd3/0x150 [ 595.904254][T21898] alloc_skb_with_frags+0x7d/0x470 [ 595.904292][T21898] ? selinux_file_open+0x2df/0x330 [ 595.904367][T21898] ? __rcu_read_unlock+0x4f/0x70 [ 595.904395][T21898] sock_alloc_send_pskb+0x43a/0x4f0 [ 595.904427][T21898] ? terminate_walk+0x27f/0x2a0 [ 595.904456][T21898] tun_get_user+0x8d3/0x2500 [ 595.904552][T21898] ? avc_has_perm+0xd3/0x150 [ 595.904585][T21898] ? ref_tracker_alloc+0x1f2/0x2f0 [ 595.904667][T21898] ? selinux_file_permission+0x2f0/0x320 [ 595.904696][T21898] tun_chr_write_iter+0x15e/0x210 [ 595.904731][T21898] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 595.904763][T21898] vfs_write+0x49d/0x8e0 [ 595.904885][T21898] ksys_write+0xda/0x1a0 [ 595.904927][T21898] __x64_sys_write+0x40/0x50 [ 595.904965][T21898] x64_sys_call+0x2cdd/0x2fb0 [ 595.904996][T21898] do_syscall_64+0xd2/0x200 [ 595.905018][T21898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 595.905048][T21898] ? clear_bhb_loop+0x40/0x90 [ 595.905072][T21898] ? clear_bhb_loop+0x40/0x90 [ 595.905132][T21898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.905158][T21898] RIP: 0033:0x7f540418e9a9 [ 595.905177][T21898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.905273][T21898] RSP: 002b:00007f54027ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.905343][T21898] RAX: ffffffffffffffda RBX: 00007f54043b5fa0 RCX: 00007f540418e9a9 [ 595.905359][T21898] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 595.905375][T21898] RBP: 00007f54027ef090 R08: 0000000000000000 R09: 0000000000000000 [ 595.905390][T21898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.905405][T21898] R13: 0000000000000000 R14: 00007f54043b5fa0 R15: 00007fffbf4c61c8 [ 595.905433][T21898] [ 596.213934][ T29] audit: type=1326 audit(1753202576.885:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 596.237638][ T29] audit: type=1326 audit(1753202576.885:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 596.261523][ T29] audit: type=1326 audit(1753202576.885:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 596.285440][ T29] audit: type=1326 audit(1753202576.885:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0f6e9a9 code=0x7ffc0000 [ 596.480450][T21910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.505499][T21914] loop2: detected capacity change from 0 to 512 [ 596.545343][T21914] EXT4-fs: inline encryption not supported [ 596.551968][T21914] EXT4-fs: Ignoring removed mblk_io_submit option [ 596.594747][T21914] EXT4-fs: test_dummy_encryption option not supported [ 596.649223][T21942] netlink: '+}[@': attribute type 13 has an invalid length. [ 596.778292][T21955] loop0: detected capacity change from 0 to 2048 [ 596.787008][T21955] EXT4-fs: Ignoring removed nobh option [ 596.803749][T21955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.846958][T21959] SELinux: failed to load policy [ 597.396082][T21978] ================================================================== [ 597.404244][T21978] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 597.411164][T21978] [ 597.413545][T21978] write to 0xffff888106417a08 of 8 bytes by task 21967 on cpu 0: [ 597.421291][T21978] call_rcu+0x51/0x3f0 [ 597.425404][T21978] mas_wmb_replace+0xc6a/0x14a0 [ 597.430269][T21978] mas_wr_store_entry+0x1773/0x2b50 [ 597.435913][T21978] mas_store_prealloc+0x74d/0x9e0 [ 597.441265][T21978] vma_iter_store_new+0x1c5/0x200 [ 597.446629][T21978] vma_complete+0x125/0x580 [ 597.452922][T21978] __split_vma+0x591/0x650 [ 597.457458][T21978] vma_modify+0x21e/0xc80 [ 597.461815][T21978] vma_modify_flags+0x101/0x130 [ 597.467039][T21978] mprotect_fixup+0x2cc/0x570 [ 597.471861][T21978] do_mprotect_pkey+0x6d6/0x980 [ 597.476933][T21978] __x64_sys_mprotect+0x48/0x60 [ 597.482150][T21978] x64_sys_call+0x2794/0x2fb0 [ 597.486978][T21978] do_syscall_64+0xd2/0x200 [ 597.491544][T21978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.497587][T21978] [ 597.499932][T21978] read to 0xffff888106417a08 of 8 bytes by task 21978 on cpu 1: [ 597.507601][T21978] mas_state_walk+0x28f/0x650 [ 597.512346][T21978] mas_walk+0x30/0x120 [ 597.516548][T21978] lock_vma_under_rcu+0xa2/0x2f0 [ 597.521718][T21978] do_user_addr_fault+0x233/0x1090 [ 597.526879][T21978] exc_page_fault+0x62/0xa0 [ 597.531413][T21978] asm_exc_page_fault+0x26/0x30 [ 597.536401][T21978] [ 597.538735][T21978] value changed: 0x00007fca8cf66fff -> 0xffff888106470108 [ 597.546109][T21978] [ 597.548442][T21978] Reported by Kernel Concurrency Sanitizer on: [ 597.554725][T21978] CPU: 1 UID: 0 PID: 21978 Comm: syz.3.3459 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 597.565515][T21978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.575641][T21978] ================================================================== [ 597.633112][T16846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.