last executing test programs: 9.110878019s ago: executing program 3 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/145, 0x91}], 0x2, 0x0, 0x0) 8.349365631s ago: executing program 0 (id=483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d617463680000003000028008000240000000011800030051b1ef41816fd67a0527f76ec1db9e537c4c30600a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000400000000000000000a"], 0x98}}, 0x4048010) 8.348882162s ago: executing program 1 (id=484): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_tmpfile\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 8.348417491s ago: executing program 0 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @random="1cf800", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x7, 0x30, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0x6, [@rand_addr=0x64010101]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x10229, 0x7, 0x6}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) (fail_nth: 12) 8.301050403s ago: executing program 0 (id=487): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x40, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48c0}, 0x10080) recvmsg$inet_nvme(r2, &(0x7f0000000c00)={&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/89, 0x59}, {&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/105, 0x69}], 0x4, &(0x7f0000000b40)=""/150, 0x96}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x2d8, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x4, {@empty, {[0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x1000, 0x100, &(0x7f0000000280)) 8.300616723s ago: executing program 4 (id=488): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000210010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 8.210355364s ago: executing program 3 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000020010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x10) 8.167960685s ago: executing program 3 (id=490): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000014006b05c84e21000ab16d6e230675f803000000040002005817d30461bc24ee6bb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bad700007dc0504bb9189d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x2}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) fcntl$notify(r6, 0x402, 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 8.041235357s ago: executing program 3 (id=491): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0xb89, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 7.998615407s ago: executing program 3 (id=492): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r1, &(0x7f0000000200)=0x8000000000, r2, &(0x7f0000000280)=0xf6, 0xe96, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000"], 0x5c}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x4, 0x0, 0x8}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.758192141s ago: executing program 3 (id=493): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.718190922s ago: executing program 32 (id=493): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.015511574s ago: executing program 1 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "51b1ef41816fd67a0527f76ec1db9e537c4c3060"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) (fail_nth: 14) 6.441250163s ago: executing program 1 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 5.862854663s ago: executing program 0 (id=501): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0xc940) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) close(0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x800000000052c0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xffc4}, 0x4008041) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000414000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000dbe60287e3eddb010450000904000000010100000a2401ff0108020102090401190001020000090401010101020000097ebd1405010910000500000725010209d800090402000001020000090402010101020000090582094274251837d89525e37b8a4ee208c043b20d0007250101000500000000000000"], 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r12) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0xc, 0x800, 0x0, 0x2, 0xc2, 0x5}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r13 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r13, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 5.862137573s ago: executing program 1 (id=502): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0xc940) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) close(0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x800000000052c0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xffc4}, 0x4008041) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000414000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000dbe60287e3eddb010450000904000000010100000a2401ff0108020102090401190001020000090401010101020000097ebd1405010910000500000725010209d800090402000001020000090402010101020000090582094274251837d89525e37b8a4ee208c043b20d0007250101000500000000000000"], 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r12) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0xc, 0x800, 0x0, 0x2, 0xc2, 0x5}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r13 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r13, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) (fail_nth: 1) 5.861683973s ago: executing program 2 (id=503): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) setsockopt$inet_mtu(0xffffffffffffffff, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 5.861241463s ago: executing program 4 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000001693b16027fcab112eacbf41b198c903d4dc0a37702d248a3d4fd0004fa68a475cad0e37ca45427b7034fa36"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x101100, 0xc0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) fallocate(r3, 0x10, 0x1000001, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x6, 0xa, 0x100) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @empty, 0x2}, {0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0xffffffffffffffff, 0x3dd}}, 0x48) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0x1}) 5.143420445s ago: executing program 2 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003b15ff0800000008ebcc48ee7c9f4d00000000000000", @ANYRES16=r3, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRESOCT=r2], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x240418c0) 4.281175519s ago: executing program 2 (id=506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f281fed1487d879183f66fa7c1ddba0f155b12407d7fe0f39af0626eb9275c76d6f013805fade5437541a929dd038fee6054d64ed472dec66facb0e09e910a51d795c556b1fbf4bbd97e35e7430032a9e932bcc9e5383ac8956e36c95283ecea0539d023880ecd0c8fe7a9c5e79a0b6f421100b48f780a433cff12a15b90890600c05d3bece678d1a173c3db7803015ccd5b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYRES8=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f27aa66eb2e1e017e32f75ffeaacd5236e8c03c9495524f6f7889171674f731c1cae7d9a1ce9b77bc79fe09dd7e5cb8e0d9ed94b850ef864a0bb9019e7"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff56e24ca5a82adacc89ffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x200, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r10, 0x5) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r12 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff2, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r14}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r13}, &(0x7f0000000180), &(0x7f00000001c0)=r12}, 0x20) flock(r11, 0x1) flock(r11, 0x2) 4.280382869s ago: executing program 4 (id=507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spmi_write_begin\x00', r0, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8a}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioperm(0x3, 0x7, 0x7) ioperm(0x0, 0x7ff, 0xa) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="420f42aec526", 0x0, 0x3, 0x10000, 0x22, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r3}, 0x38) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) poll(&(0x7f0000000080)=[{r4, 0x1080}, {r4, 0x274}], 0x2, 0x7f) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8404f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)={[0x5]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x7, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4000000011000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r7 = timerfd_create(0x8, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) exit(0x5) timerfd_settime(r7, 0x3, &(0x7f0000000400), 0x0) unshare(0x2040400) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) 3.407966593s ago: executing program 2 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x25, 0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x10, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000001, 0x2}, 0x112}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2480, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@map_acorn}, {@uid}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x41}}, {@map_acorn}, {@nocompress}, {@map_off}, {@nojoliet}, {@map_off}, {@overriderock}, {@check_strict}]}, 0x2, 0xa1a, &(0x7f0000001880)="$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") setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) 3.406867084s ago: executing program 4 (id=509): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001080)='balance_dirty_pages\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7240, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0xacc9, 0x2}, 0x482, 0xffffffff, 0x6, 0x0, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, r6, 0x8, 0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20001, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x7809, 0xf, 0x101, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x65, 0x0, 0x9, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0xb, 0x60, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) 1.258128279s ago: executing program 0 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x300000c, &(0x7f0000000000), 0x1, 0x533, &(0x7f0000000e40)="$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") 1.257605469s ago: executing program 1 (id=511): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x1, 0x3, 0x35, 0x7}]}) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000000)='./file1\x00', 0x0) semtimedop(0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.256930099s ago: executing program 2 (id=512): capset(&(0x7f0000000380)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd, 0x80470000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f0000000140)={[{@gid}, {}]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80000000}) 1.256448289s ago: executing program 4 (id=513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = timerfd_create(0x7, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000ff030000ffff00000000000000510200", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="009e020000000000feff64010c00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r3}, 0x18) mmap$xdp(&(0x7f0000df1000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x79, 0x34, &(0x7f0000000300)="fc93083a5f68508d9c8d7f4e889185e17639df783197fa977ca0c256c8b202641f84717c4ad1be9565370335e2505f011f51138e6a954bc0f1c7982b38b1a4cedf44372ad3f796f3f496d3006775f60080896cc347883e3aba10b4f44d51aa6c1c86156a50778f5cbf3a2b4264ecc2753716de794555e1fe2b", &(0x7f00000000c0)=""/52, 0x0, 0x0, 0x11, 0x58, &(0x7f0000000140)="9d62f95dc7e93795000000000000000000", &(0x7f00000003c0)="c2faa1f165b87818f7ae7c45d2aa76f5674c5a677b9ef24b7fc6caa4d3fb8512a8aca6bd5cc0348f012f7ec70a3888743d3aff1eee035e3386395b3b3718addd85dbb9dd003604b1701d3cd13af14ccb5052ba186939b69e", 0x0, 0x0, 0x6}, 0x50) syz_clone3(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x5faf, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES32=r3], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000380)=0x7b, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x2043, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 27.73405ms ago: executing program 0 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@usrquota}, {@data_err_ignore}, {@sysvgroups}, {@auto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000001a40)="$eJzs3U1rXFUfAPD/nSR9S5+nKZSiLiTQhZXaSZP4UtFFXYoWC7qvQ3IbSiadkpmUJhZsF3bjRoogYkH8AO5dFr+An6KghSIl6MLNyJ3caabJTJKm086Y+f3gtufcc5Nzz733f3LOnBkmgIE1nv1TiHg5Ir5JIo60lA1HXji+dtzqoxsz2ZZEvf7pn0kk+b7m8Un+/2ieeSkifv0q4lRhc73V5ZX5UrmcLub5idrC1Ynq8srpywuluXQuvTI1PX32rempd995e/MP799dW1+/8Pf3n9z78OzXJ1a/+/nB0TtJnIvDeVlrO57BzdbMeIzn12Qkzm04cLILlfWTpNcnwK4M5XE+ElkfcCSG8qgH9r4vI6IODKhE/MOAao4DmnP7LefB9b03y3v4wdoEaHP7k7XXRuJAY250aDV5YmaUXYmxLtSf1fHLH3fvZFt073UIgG3dvBURZ4aHn+j//h8t/V9b7x3cwe8+s4NjNtah/4MX5142/nljf5vxT+Hx+CfajH9G28Tubmwf/4UHXaimo2z8937b8e/jRauxoTz3v8aYbyS5dLmcZn1b1k2ejJH9WX6r9Zyzq/frncpax3/ZltXfHAvm5/FgeMN612ypVnqWNrd6eCvilW3Gv0mb+59djws7rON4evfVTmXbt//5qv8U8Vrb+78+10m2Xp+caDwPE82nYrO/bh//rVP9vW5/dv8Pbd3+saR1vbb69HX8eOCftFPZeJIvmj7l878v+ayR3pfvu16q1RYnI/YlH2/eP7X+s8188/is/SdPtI//rZ7/bPzz+Q7bf/vY7Y6H9sP9n32q+98hUU86Ft3/6IsfOtW/s/7vzUbqZL5nJ/3fFmf6ROJZrh0AAAAAAAD0m0JEHI6kUHycLhSKxbX3dxyLQ4VypVo7damydGU2Gp+VHYuRQnOle7Tl/RCT+fthm/mpDfnpiDgaEd8OHWzkizOV8myvGw8AAAAAAAAAAAAAAAAAAAB9YrTD5/8zvw/1+uyA585XfsPg2jb+u/FNT0Bf8vcfBpf4h8El/mFwiX8YXOIfBpf4h8El/mFwrcf/gZ6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAOwRF86fz7b66qMbM1l+9try0nzl2unZtDpfXFiaKc5UFq8W5yqVuXJanKksbPf7ypXK1cmpWLo+UUuT2kR1eeXiQmXpSu3i5YXSXHoxHXkhrQIAAAAAAAAAAAAAAAAAAID/luryynypXE4XJSR2lRjuj9OQ6HKi1z0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz7NwAA//9PojbP") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f0000000740)="cc", 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000089"], 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b3bf474300000000004000009000000010000000c20bb0730aa2b0eb329d38a3981ae7df4", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r13, @ANYRES32=r9, @ANYRES16=r2, @ANYRESDEC=r13, @ANYRES8=r11], 0x3c}}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xc, &(0x7f0000000ec0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8=r12, @ANYRESHEX=r8, @ANYRESHEX=r9, @ANYRES8=r7, @ANYRES8=r10, @ANYBLOB="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", @ANYRESDEC=r14, @ANYRESDEC=r11], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r13, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0xf75784fa17f5fb9, &(0x7f00000002c0)={[{@nombcache}, {@nodioread_nolock}]}, 0xff, 0xbc8, &(0x7f0000002380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, 0x0, 0x0) 1.1068ms ago: executing program 1 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0xa}, 0x18) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x68a02, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"}) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r7, 0xffffffffffffffff, 0x0) 614.87µs ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000001693b16027fcab112eacbf41b198c903d4dc0a37702d248a3d4fd0004fa68a475cad0e37ca45427b7034fa36"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x101100, 0xc0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) fallocate(r3, 0x10, 0x1000001, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x6, 0xa, 0x100) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @empty, 0x2}, {0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0xffffffffffffffff, 0x3dd}}, 0x48) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0x1}) 0s ago: executing program 4 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) chdir(&(0x7f0000000480)='./cgroup\x00') r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000140)={0x200000, 0xe0, 0x20}, 0x18) r10 = openat(r9, &(0x7f0000000180)='./cgroup/file0\x00', 0x100, 0x0) open_by_handle_at(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001009a"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) r11 = socket(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r11, 0x29, 0x37, &(0x7f00000000c0)={0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xc}]}, 0x10) r12 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r14, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r14, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2000004}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0xfffffffffffffe19}}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 23.676352][ T29] audit: type=1400 audit(1752241117.416:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.677188][ T3295] cgroup: Unknown subsys name 'net' [ 23.699194][ T29] audit: type=1400 audit(1752241117.416:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.726495][ T29] audit: type=1400 audit(1752241117.446:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.879316][ T3295] cgroup: Unknown subsys name 'cpuset' [ 23.885326][ T3295] cgroup: Unknown subsys name 'rlimit' [ 24.043974][ T29] audit: type=1400 audit(1752241117.786:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.067224][ T29] audit: type=1400 audit(1752241117.786:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.087712][ T29] audit: type=1400 audit(1752241117.786:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.108142][ T29] audit: type=1400 audit(1752241117.786:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.128415][ T29] audit: type=1400 audit(1752241117.806:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.134977][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.153191][ T29] audit: type=1400 audit(1752241117.806:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.185016][ T29] audit: type=1400 audit(1752241117.906:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.225357][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.460512][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.475648][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.486383][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 25.502140][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 25.529223][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.572083][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.579186][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.586255][ T3313] bridge_slave_0: entered allmulticast mode [ 25.592609][ T3313] bridge_slave_0: entered promiscuous mode [ 25.599400][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.606501][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.613663][ T3313] bridge_slave_1: entered allmulticast mode [ 25.619895][ T3313] bridge_slave_1: entered promiscuous mode [ 25.658339][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.665487][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.672613][ T3306] bridge_slave_0: entered allmulticast mode [ 25.679225][ T3306] bridge_slave_0: entered promiscuous mode [ 25.697590][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.710834][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.717875][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.725057][ T3306] bridge_slave_1: entered allmulticast mode [ 25.731402][ T3306] bridge_slave_1: entered promiscuous mode [ 25.744886][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.754055][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.761128][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.768283][ T3314] bridge_slave_0: entered allmulticast mode [ 25.774596][ T3314] bridge_slave_0: entered promiscuous mode [ 25.785936][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.792983][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.800055][ T3305] bridge_slave_0: entered allmulticast mode [ 25.806233][ T3305] bridge_slave_0: entered promiscuous mode [ 25.824822][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.831919][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.839048][ T3314] bridge_slave_1: entered allmulticast mode [ 25.845425][ T3314] bridge_slave_1: entered promiscuous mode [ 25.856249][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.863317][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.870491][ T3305] bridge_slave_1: entered allmulticast mode [ 25.876761][ T3305] bridge_slave_1: entered promiscuous mode [ 25.888105][ T3313] team0: Port device team_slave_0 added [ 25.899272][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.917017][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.924065][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.931330][ T3311] bridge_slave_0: entered allmulticast mode [ 25.937657][ T3311] bridge_slave_0: entered promiscuous mode [ 25.944422][ T3313] team0: Port device team_slave_1 added [ 25.950955][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.965318][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.979054][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.986347][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.993625][ T3311] bridge_slave_1: entered allmulticast mode [ 26.000031][ T3311] bridge_slave_1: entered promiscuous mode [ 26.015472][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.025481][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.047537][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.054537][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.080442][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.092097][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.106073][ T3306] team0: Port device team_slave_0 added [ 26.112424][ T3306] team0: Port device team_slave_1 added [ 26.126466][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.133409][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.159295][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.171010][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.188063][ T3314] team0: Port device team_slave_0 added [ 26.194595][ T3314] team0: Port device team_slave_1 added [ 26.204895][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.224347][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.231302][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.257309][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.272700][ T3305] team0: Port device team_slave_0 added [ 26.292463][ T3313] hsr_slave_0: entered promiscuous mode [ 26.298525][ T3313] hsr_slave_1: entered promiscuous mode [ 26.304473][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.311434][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.337386][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.352710][ T3305] team0: Port device team_slave_1 added [ 26.358985][ T3311] team0: Port device team_slave_0 added [ 26.372132][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.379080][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.404997][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.416616][ T3311] team0: Port device team_slave_1 added [ 26.431906][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.438879][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.464783][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.480649][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.487576][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.513499][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.534366][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.541339][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.567321][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.578659][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.585628][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.611622][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.641070][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.648106][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.674227][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.709773][ T3305] hsr_slave_0: entered promiscuous mode [ 26.715652][ T3305] hsr_slave_1: entered promiscuous mode [ 26.721608][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.729174][ T3305] Cannot create hsr debugfs directory [ 26.736670][ T3306] hsr_slave_0: entered promiscuous mode [ 26.742723][ T3306] hsr_slave_1: entered promiscuous mode [ 26.748507][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.756118][ T3306] Cannot create hsr debugfs directory [ 26.775097][ T3314] hsr_slave_0: entered promiscuous mode [ 26.781166][ T3314] hsr_slave_1: entered promiscuous mode [ 26.787005][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.794702][ T3314] Cannot create hsr debugfs directory [ 26.837751][ T3311] hsr_slave_0: entered promiscuous mode [ 26.843632][ T3311] hsr_slave_1: entered promiscuous mode [ 26.849636][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.857164][ T3311] Cannot create hsr debugfs directory [ 26.981836][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.990337][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.009598][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.021320][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.043647][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.055741][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.067497][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.076237][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.104636][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.114062][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.129881][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.142108][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.151720][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.160846][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.172141][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.188000][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.234202][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.241477][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.255746][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.264358][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.274297][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.291272][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.308551][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.315738][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.330217][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.340602][ T2887] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.347762][ T2887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.368198][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.377796][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.392635][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.399785][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.412005][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.422589][ T2887] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.429626][ T2887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.449543][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.468661][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.475705][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.487966][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.499685][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.510981][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.518124][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.530511][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.537574][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.552117][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.559197][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.577310][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.613852][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.627612][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.638075][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.671211][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.678352][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.696044][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.703182][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.718073][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.733960][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.771895][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.782342][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.791132][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.852541][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.902204][ T3313] veth0_vlan: entered promiscuous mode [ 27.928386][ T3313] veth1_vlan: entered promiscuous mode [ 27.944179][ T3314] veth0_vlan: entered promiscuous mode [ 27.956431][ T3313] veth0_macvtap: entered promiscuous mode [ 27.967858][ T3313] veth1_macvtap: entered promiscuous mode [ 27.984613][ T3305] veth0_vlan: entered promiscuous mode [ 27.991338][ T3314] veth1_vlan: entered promiscuous mode [ 27.998935][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.011609][ T3306] veth0_vlan: entered promiscuous mode [ 28.017884][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.037902][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.046685][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.055509][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.064329][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.079598][ T3305] veth1_vlan: entered promiscuous mode [ 28.087517][ T3306] veth1_vlan: entered promiscuous mode [ 28.102113][ T3314] veth0_macvtap: entered promiscuous mode [ 28.116200][ T3314] veth1_macvtap: entered promiscuous mode [ 28.125597][ T3305] veth0_macvtap: entered promiscuous mode [ 28.135136][ T3305] veth1_macvtap: entered promiscuous mode [ 28.148340][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.164011][ T3311] veth0_vlan: entered promiscuous mode [ 28.170610][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.182045][ T3306] veth0_macvtap: entered promiscuous mode [ 28.189201][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.198032][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.209392][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.218083][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.226839][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.235659][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.251329][ T3311] veth1_vlan: entered promiscuous mode [ 28.258210][ T3306] veth1_macvtap: entered promiscuous mode [ 28.265623][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.274365][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.283112][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.291929][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.302811][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.327188][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.352585][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.374926][ T3311] veth0_macvtap: entered promiscuous mode [ 28.386708][ T3311] veth1_macvtap: entered promiscuous mode [ 28.403604][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.412431][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.421161][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.429949][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.454262][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.461982][ T3481] loop1: detected capacity change from 0 to 512 [ 28.470813][ T3481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.481767][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.493877][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.493960][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.511787][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.511817][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.552603][ T3481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.552828][ T3481] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.604277][ T3481] syz.1.2 (3481) used greatest stack depth: 10904 bytes left [ 28.624528][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.677856][ T3497] Zero length message leads to an empty skb [ 28.692255][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 28.692269][ T29] audit: type=1400 audit(1752241122.436:128): avc: denied { write } for pid=3499 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.699420][ T3497] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 28.718524][ T29] audit: type=1400 audit(1752241122.436:129): avc: denied { read } for pid=3499 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.764461][ T29] audit: type=1400 audit(1752241122.436:130): avc: denied { create } for pid=3499 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 28.784348][ T29] audit: type=1400 audit(1752241122.436:131): avc: denied { write } for pid=3499 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 28.804219][ T29] audit: type=1400 audit(1752241122.446:132): avc: denied { write } for pid=3495 comm="syz.4.5" path="socket:[3763]" dev="sockfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.816149][ C1] hrtimer: interrupt took 28172 ns [ 28.827428][ T29] audit: type=1400 audit(1752241122.476:133): avc: denied { relabelto } for pid=3495 comm="syz.4.5" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 28.859675][ T29] audit: type=1400 audit(1752241122.476:134): avc: denied { associate } for pid=3495 comm="syz.4.5" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0" [ 28.887755][ T29] audit: type=1400 audit(1752241122.506:135): avc: denied { setopt } for pid=3502 comm="syz.1.9" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.940435][ T3505] loop2: detected capacity change from 0 to 128 [ 28.947230][ T3501] infiniband syz1: set active [ 28.952058][ T3501] infiniband syz1: added syz_tun [ 28.962909][ T29] audit: type=1400 audit(1752241122.706:136): avc: denied { create } for pid=3506 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.984549][ T3507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11'. [ 28.996349][ T3505] EXT4-fs: Ignoring removed nobh option [ 29.003808][ T3501] RDS/IB: syz1: added [ 29.018092][ T29] audit: type=1400 audit(1752241122.726:137): avc: denied { write } for pid=3506 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.032483][ T3501] smc: adding ib device syz1 with port count 1 [ 29.065918][ T3501] smc: ib device syz1 port 1 has pnetid [ 29.072526][ T3505] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.090327][ T3505] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.120567][ T3523] loop4: detected capacity change from 0 to 256 [ 29.140968][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.227105][ T3535] loop4: detected capacity change from 0 to 512 [ 29.235201][ T3535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.293558][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.333916][ T3535] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.364389][ T3501] syz.0.8 (3501) used greatest stack depth: 10608 bytes left [ 29.395939][ T3542] $Hÿ: renamed from bond0 (while UP) [ 29.405712][ T3542] $Hÿ: entered promiscuous mode [ 29.410844][ T3542] bond_slave_0: entered promiscuous mode [ 29.416616][ T3542] bond_slave_1: entered promiscuous mode [ 29.430838][ T3548] loop0: detected capacity change from 0 to 512 [ 29.437682][ T3548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.484271][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.512981][ T3548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.536647][ T3548] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.578451][ T3559] loop4: detected capacity change from 0 to 512 [ 29.596966][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.652415][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.665943][ T3559] EXT4-fs (loop4): 1 orphan inode deleted [ 29.677651][ T379] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 29.687823][ T3559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.707261][ T3559] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.740394][ T3559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.093017][ T3590] loop4: detected capacity change from 0 to 512 [ 30.149818][ T3590] EXT4-fs (loop4): 1 orphan inode deleted [ 30.170378][ T2887] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 30.191333][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.252122][ T3590] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.285615][ T3590] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.566101][ T3616] loop3: detected capacity change from 0 to 512 [ 30.575837][ T3616] /dev/loop3: Can't open blockdev [ 30.718524][ T3625] capability: warning: `syz.3.47' uses deprecated v2 capabilities in a way that may be insecure [ 30.744551][ T3634] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.758240][ T3625] loop3: detected capacity change from 0 to 512 [ 31.073192][ T3664] loop0: detected capacity change from 0 to 128 [ 31.080466][ T3665] netlink: 96 bytes leftover after parsing attributes in process `syz.2.55'. [ 31.282175][ T3672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.60'. [ 31.383202][ T3681] syz.3.64 uses obsolete (PF_INET,SOCK_PACKET) [ 31.440213][ T3687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 31.826060][ T3715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 31.902028][ T3723] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 31.908588][ T3723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 31.916220][ T3723] vhci_hcd vhci_hcd.0: Device attached [ 31.938089][ T3718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=3718 comm=syz.3.71 [ 31.975196][ T3725] vhci_hcd: connection closed [ 31.975457][ T12] vhci_hcd: stop threads [ 31.984439][ T12] vhci_hcd: release socket [ 31.988856][ T12] vhci_hcd: disconnect device [ 32.070788][ T3748] netlink: 196 bytes leftover after parsing attributes in process `syz.4.84'. [ 32.129635][ T3702] loop3: detected capacity change from 0 to 512 [ 32.141268][ T3702] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.172461][ T3702] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.199401][ T3702] EXT4-fs (loop3): 1 truncate cleaned up [ 32.206403][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.298709][ T3772] loop1: detected capacity change from 0 to 512 [ 32.368168][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.391645][ T3772] EXT4-fs (loop1): 1 orphan inode deleted [ 32.408988][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 32.501412][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.533893][ T3763] syzkaller1: entered promiscuous mode [ 32.539428][ T3763] syzkaller1: entered allmulticast mode [ 32.557619][ T3772] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.583458][ T3772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.696435][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 32.708723][ T3805] xt_cluster: node mask cannot exceed total number of nodes [ 32.710081][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 32.756177][ T3809] loop3: detected capacity change from 0 to 128 [ 32.772181][ T3809] EXT4-fs: Ignoring removed nobh option [ 32.785198][ T3816] netlink: 71 bytes leftover after parsing attributes in process `syz.4.105'. [ 32.806750][ T3809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.830906][ T3809] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.964862][ T3826] loop1: detected capacity change from 0 to 512 [ 32.977766][ T3826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.988304][ T3826] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 32.999648][ T3391] hid-generic 0000:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 33.078995][ T3391] hid-generic 0000:FFFFFFFF:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.345813][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.416866][ T3841] fido_id[3841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.503404][ T3845] loop4: detected capacity change from 0 to 8192 [ 33.524043][ T3853] loop1: detected capacity change from 0 to 1024 [ 33.589101][ T3853] ======================================================= [ 33.589101][ T3853] WARNING: The mand mount option has been deprecated and [ 33.589101][ T3853] and is ignored by this kernel. Remove the mand [ 33.589101][ T3853] option from the mount to silence this warning. [ 33.589101][ T3853] ======================================================= [ 33.671883][ T3853] EXT4-fs: inline encryption not supported [ 33.677956][ T3853] EXT4-fs: Ignoring removed bh option [ 33.720680][ T3853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.747175][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 33.747188][ T29] audit: type=1400 audit(1752241127.486:362): avc: denied { ioctl } for pid=3852 comm="syz.1.118" path="/20/file1/file1" dev="loop1" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.817293][ T29] audit: type=1400 audit(1752241127.556:363): avc: denied { read } for pid=3842 comm="syz.2.113" path="socket:[5322]" dev="sockfs" ino=5322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.823035][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 33.848749][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 33.900034][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.907837][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.915519][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.923442][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.929885][ T3865] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.118: Allocating blocks 497-513 which overlap fs metadata [ 33.931498][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.949956][ T3865] EXT4-fs (loop1): Remounting filesystem read-only [ 33.952529][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.966778][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.974489][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.982179][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.989995][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 33.997677][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 34.005617][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 34.013485][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 34.013507][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 34.023115][ T10] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 34.030954][ T3869] fido_id[3869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.075492][ T3872] netlink: 240 bytes leftover after parsing attributes in process `syz.2.113'. [ 34.104332][ T29] audit: type=1400 audit(1752241127.846:364): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.126835][ T29] audit: type=1400 audit(1752241127.866:365): avc: denied { read write } for pid=3852 comm="syz.1.118" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 34.150306][ T29] audit: type=1400 audit(1752241127.866:366): avc: denied { open } for pid=3852 comm="syz.1.118" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 34.175811][ T3852] EXT4-fs (loop1): pa ffff888106ea9070: logic 256, phys. 369, len 9 [ 34.198910][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.208222][ T10] IPVS: starting estimator thread 0... [ 34.216092][ T3874] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.122'. [ 34.244535][ T3879] loop1: detected capacity change from 0 to 512 [ 34.254839][ T3880] loop4: detected capacity change from 0 to 512 [ 34.259888][ T29] audit: type=1326 audit(1752241127.986:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9d34fe929 code=0x0 [ 34.268652][ T3880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.284468][ T3879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.315406][ T3879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.319137][ T29] audit: type=1400 audit(1752241128.056:368): avc: denied { map } for pid=3881 comm="syz.2.125" path="socket:[6210]" dev="sockfs" ino=6210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.328857][ T3876] IPVS: using max 2592 ests per chain, 129600 per kthread [ 34.350541][ T29] audit: type=1400 audit(1752241128.056:369): avc: denied { read accept } for pid=3881 comm="syz.2.125" path="socket:[6210]" dev="sockfs" ino=6210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.389148][ T3880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.402901][ T3880] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.421164][ T3879] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.470540][ T3882] wg2: entered promiscuous mode [ 34.471405][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.475496][ T3882] wg2: entered allmulticast mode [ 34.496758][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.517174][ T29] audit: type=1400 audit(1752241128.256:370): avc: denied { associate } for pid=3889 comm="syz.0.128" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 34.553243][ T3894] FAULT_INJECTION: forcing a failure. [ 34.553243][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.561585][ T29] audit: type=1326 audit(1752241128.296:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f70c0e929 code=0x7ffc0000 [ 34.566380][ T3894] CPU: 0 UID: 0 PID: 3894 Comm: syz.0.129 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 34.566427][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.566443][ T3894] Call Trace: [ 34.566450][ T3894] [ 34.566457][ T3894] __dump_stack+0x1d/0x30 [ 34.566479][ T3894] dump_stack_lvl+0xe8/0x140 [ 34.566498][ T3894] dump_stack+0x15/0x1b [ 34.566564][ T3894] should_fail_ex+0x265/0x280 [ 34.566672][ T3894] should_fail+0xb/0x20 [ 34.566697][ T3894] should_fail_usercopy+0x1a/0x20 [ 34.566726][ T3894] strncpy_from_user+0x25/0x230 [ 34.566751][ T3894] path_setxattrat+0xeb/0x310 [ 34.566830][ T3894] __x64_sys_fsetxattr+0x6b/0x80 [ 34.566849][ T3894] x64_sys_call+0x2f7c/0x2fb0 [ 34.566870][ T3894] do_syscall_64+0xd2/0x200 [ 34.566887][ T3894] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.566939][ T3894] ? clear_bhb_loop+0x40/0x90 [ 34.566960][ T3894] ? clear_bhb_loop+0x40/0x90 [ 34.566981][ T3894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.567096][ T3894] RIP: 0033:0x7fcbe2f0e929 [ 34.567119][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.567170][ T3894] RSP: 002b:00007fcbe1577038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 34.567191][ T3894] RAX: ffffffffffffffda RBX: 00007fcbe3135fa0 RCX: 00007fcbe2f0e929 [ 34.567203][ T3894] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000008 [ 34.567215][ T3894] RBP: 00007fcbe1577090 R08: 0000000000000000 R09: 0000000000000000 [ 34.567227][ T3894] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 34.567239][ T3894] R13: 0000000000000000 R14: 00007fcbe3135fa0 R15: 00007fff6a185358 [ 34.567256][ T3894] [ 34.670442][ T3892] loop1: detected capacity change from 0 to 8192 [ 34.855009][ T3904] pim6reg: entered allmulticast mode [ 34.926017][ T3909] netlink: 'syz.4.135': attribute type 13 has an invalid length. [ 34.977132][ T3911] loop4: detected capacity change from 0 to 1024 [ 35.087705][ T3911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.166421][ T3911] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 35.224029][ T3920] tipc: Started in network mode [ 35.228958][ T3920] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 35.277753][ T3921] 9pnet_fd: Insufficient options for proto=fd [ 35.286418][ T3920] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 35.294895][ T3920] tipc: Enabled bearer , priority 10 [ 35.358264][ T3926] loop2: detected capacity change from 0 to 512 [ 35.382631][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.399682][ T3926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.407269][ T3926] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.140: bg 0: block 248: padding at end of block bitmap is not set [ 35.475716][ T3926] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.140: Failed to acquire dquot type 1 [ 35.551560][ T3926] EXT4-fs (loop2): 1 truncate cleaned up [ 35.573135][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.588639][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.595831][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.703908][ T3926] syz.2.140 (3926) used greatest stack depth: 9576 bytes left [ 35.713915][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.724056][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.761857][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.777044][ T3931] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.786203][ T3931] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.795098][ T3931] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.804032][ T3931] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.886568][ T3940] netlink: 'syz.1.146': attribute type 13 has an invalid length. [ 35.915053][ T3938] loop2: detected capacity change from 0 to 2048 [ 35.989453][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.031048][ T3938] EXT4-fs (loop2): shut down requested (0) [ 36.040966][ T3946] gtp0: entered promiscuous mode [ 36.045992][ T3946] gtp0: entered allmulticast mode [ 36.139534][ T3948] loop4: detected capacity change from 0 to 256 [ 36.178926][ T3955] loop1: detected capacity change from 0 to 256 [ 36.206216][ T3955] FAT-fs (loop1): bogus number of FAT sectors [ 36.212361][ T3955] FAT-fs (loop1): Can't find a valid FAT filesystem [ 36.212808][ T3957] loop4: detected capacity change from 0 to 512 [ 36.230141][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.263536][ T3957] EXT4-fs (loop4): 1 orphan inode deleted [ 36.280194][ T2887] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 36.302355][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.303340][ T3964] loop2: detected capacity change from 0 to 512 [ 36.317250][ T3957] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.333346][ T3957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.357227][ T3964] EXT4-fs (loop2): 1 orphan inode deleted [ 36.368885][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 36.373733][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.399338][ T3964] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.409799][ T3413] tipc: Node number set to 1 [ 36.418065][ T3964] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.450192][ T3970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 36.495273][ T3978] Illegal XDP return value 4294967274 on prog (id 123) dev N/A, expect packet loss! [ 36.519563][ T3970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3970 comm=syz.4.155 [ 36.563915][ T3984] netlink: 'syz.2.161': attribute type 4 has an invalid length. [ 36.596036][ T3984] loop2: detected capacity change from 0 to 1024 [ 36.607740][ T3984] ext2: Unknown parameter 'euid' [ 36.647407][ T3988] netlink: 14 bytes leftover after parsing attributes in process `syz.2.162'. [ 36.696510][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 36.705516][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 36.714558][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 36.723915][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 36.732955][ T3992] netlink: 'syz.2.164': attribute type 6 has an invalid length. [ 36.740716][ T3993] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.163'. [ 36.760939][ T3982] team0 (unregistering): Port device team_slave_0 removed [ 36.768682][ T3982] team0 (unregistering): Port device team_slave_1 removed [ 36.801572][ T3998] loop2: detected capacity change from 0 to 2048 [ 36.829808][ T3998] loop2: p1 < > p4 [ 36.834733][ T3998] loop2: p4 size 8388608 extends beyond EOD, truncated [ 36.920629][ T4008] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 36.935462][ T4008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.020551][ T4035] netlink: 'syz.3.173': attribute type 10 has an invalid length. [ 37.028338][ T4035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.173'. [ 37.037631][ T4035] vlan0: entered promiscuous mode [ 37.042898][ T4035] vlan0: entered allmulticast mode [ 37.048067][ T4035] veth0_vlan: entered allmulticast mode [ 37.057917][ T4035] bridge0: port 3(vlan0) entered blocking state [ 37.064327][ T4035] bridge0: port 3(vlan0) entered disabled state [ 37.072692][ T4035] bridge0: port 3(vlan0) entered blocking state [ 37.079102][ T4035] bridge0: port 3(vlan0) entered forwarding state [ 37.088640][ T4040] loop2: detected capacity change from 0 to 2048 [ 37.097095][ T4040] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.139665][ T4045] vlan2: entered allmulticast mode [ 37.154628][ T4040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.218571][ T4056] loop1: detected capacity change from 0 to 256 [ 37.255931][ T4056] FAT-fs (loop1): bogus number of FAT sectors [ 37.262157][ T4056] FAT-fs (loop1): Can't find a valid FAT filesystem [ 37.447841][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.832105][ T4083] loop2: detected capacity change from 0 to 1024 [ 38.074608][ T4099] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 38.085850][ T4099] veth0_macvtap: left promiscuous mode [ 38.103584][ T4099] veth0_macvtap: entered promiscuous mode [ 38.115092][ T4099] team0: Device macvtap0 failed to register rx_handler [ 38.122453][ T4099] veth0_macvtap: left promiscuous mode [ 38.162345][ T4108] loop2: detected capacity change from 0 to 2048 [ 38.257108][ T4113] loop3: detected capacity change from 0 to 512 [ 38.282585][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.300792][ T4113] EXT4-fs (loop3): 1 orphan inode deleted [ 38.303112][ T4108] EXT4-fs (loop2): shut down requested (0) [ 38.307104][ T4113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.322413][ T4122] random: crng reseeded on system resumption [ 38.328134][ T4113] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.341356][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 38.353808][ T4113] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.398394][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.419657][ T4127] loop3: detected capacity change from 0 to 2048 [ 38.442685][ T4127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.465879][ T4127] dummy0: entered promiscuous mode [ 38.471104][ T4127] vlan2: entered promiscuous mode [ 38.520788][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.564474][ T4144] loop4: detected capacity change from 0 to 128 [ 38.582031][ T4148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 38.598487][ T4144] EXT4-fs: Ignoring removed nobh option [ 38.609262][ T4144] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.624312][ T4144] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.646274][ T4148] wireguard0: entered promiscuous mode [ 38.679399][ T4158] loop3: detected capacity change from 0 to 512 [ 38.744632][ T4158] EXT4-fs (loop3): 1 orphan inode deleted [ 38.751718][ T4158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.764457][ T59] __quota_error: 441 callbacks suppressed [ 38.764469][ T59] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.766116][ T29] audit: type=1326 audit(1752241132.506:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 38.770264][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 38.781437][ T4158] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.865236][ T4158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.877141][ T29] audit: type=1326 audit(1752241132.546:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 38.900547][ T29] audit: type=1326 audit(1752241132.546:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 38.923770][ T29] audit: type=1326 audit(1752241132.546:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 38.946988][ T29] audit: type=1326 audit(1752241132.546:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 38.970289][ T29] audit: type=1326 audit(1752241132.546:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 38.993559][ T29] audit: type=1326 audit(1752241132.546:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 39.016823][ T29] audit: type=1326 audit(1752241132.546:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 39.040099][ T29] audit: type=1326 audit(1752241132.566:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2f0e929 code=0x7ffc0000 [ 39.245702][ T4177] : renamed from bond0 (while UP) [ 39.268661][ T4179] loop3: detected capacity change from 0 to 2048 [ 39.366378][ T4179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.382191][ T4179] FAULT_INJECTION: forcing a failure. [ 39.382191][ T4179] name failslab, interval 1, probability 0, space 0, times 0 [ 39.394892][ T4179] CPU: 0 UID: 0 PID: 4179 Comm: syz.3.218 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 39.394942][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.394952][ T4179] Call Trace: [ 39.394957][ T4179] [ 39.394963][ T4179] __dump_stack+0x1d/0x30 [ 39.394984][ T4179] dump_stack_lvl+0xe8/0x140 [ 39.395011][ T4179] dump_stack+0x15/0x1b [ 39.395029][ T4179] should_fail_ex+0x265/0x280 [ 39.395099][ T4179] should_failslab+0x8c/0xb0 [ 39.395117][ T4179] kmem_cache_alloc_noprof+0x50/0x310 [ 39.395142][ T4179] ? __es_insert_extent+0x508/0xee0 [ 39.395161][ T4179] __es_insert_extent+0x508/0xee0 [ 39.395176][ T4179] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 39.395200][ T4179] ? probe_sched_wakeup+0x85/0xa0 [ 39.395232][ T4179] ? ttwu_do_activate+0x1cf/0x210 [ 39.395268][ T4179] ext4_es_cache_extent+0x276/0x370 [ 39.395291][ T4179] ext4_find_extent+0x336/0x7a0 [ 39.395395][ T4179] ext4_ext_map_blocks+0x11f/0x38a0 [ 39.395421][ T4179] ? loop_queue_rq+0x4c8/0x680 [ 39.395454][ T4179] ? widen_string+0x98/0x210 [ 39.395513][ T4179] ? format_decode+0xaf/0x580 [ 39.395596][ T4179] ext4_map_query_blocks+0xa8/0x480 [ 39.395633][ T4179] ext4_map_blocks+0x3a1/0xd70 [ 39.395661][ T4179] ? xas_load+0x413/0x430 [ 39.395739][ T4179] ? __account_obj_stock+0x1f6/0x350 [ 39.395758][ T4179] ext4_getblk+0x114/0x510 [ 39.395840][ T4179] ext4_bread_batch+0x5c/0x320 [ 39.395859][ T4179] __ext4_find_entry+0x840/0xf40 [ 39.395937][ T4179] ? __d_lookup_rcu+0x251/0x2a0 [ 39.395966][ T4179] ? d_alloc_parallel+0xb9a/0xc40 [ 39.395991][ T4179] ext4_lookup+0xbb/0x390 [ 39.396096][ T4179] __lookup_slow+0x190/0x250 [ 39.396119][ T4179] lookup_slow+0x3c/0x60 [ 39.396221][ T4179] walk_component+0x1ec/0x220 [ 39.396244][ T4179] path_lookupat+0xfe/0x2a0 [ 39.396268][ T4179] filename_lookup+0x147/0x340 [ 39.396330][ T4179] filename_setxattr+0x56/0x400 [ 39.396417][ T4179] path_setxattrat+0x2c9/0x310 [ 39.396451][ T4179] __x64_sys_setxattr+0x6e/0x90 [ 39.396481][ T4179] x64_sys_call+0x28a7/0x2fb0 [ 39.396502][ T4179] do_syscall_64+0xd2/0x200 [ 39.396561][ T4179] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.396588][ T4179] ? clear_bhb_loop+0x40/0x90 [ 39.396609][ T4179] ? clear_bhb_loop+0x40/0x90 [ 39.396631][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.396699][ T4179] RIP: 0033:0x7fd9d34fe929 [ 39.396713][ T4179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.396729][ T4179] RSP: 002b:00007fd9d1b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 39.396745][ T4179] RAX: ffffffffffffffda RBX: 00007fd9d3725fa0 RCX: 00007fd9d34fe929 [ 39.396758][ T4179] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000300 [ 39.396770][ T4179] RBP: 00007fd9d1b67090 R08: 0000000000000001 R09: 0000000000000000 [ 39.396781][ T4179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.396792][ T4179] R13: 0000000000000000 R14: 00007fd9d3725fa0 R15: 00007ffc9c5c29e8 [ 39.396808][ T4179] [ 39.704628][ T4179] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.218: Failed to acquire dquot type 0 [ 39.746690][ T4192] __nla_validate_parse: 4 callbacks suppressed [ 39.746776][ T4192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 39.749272][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.773451][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.805690][ T4194] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 39.817362][ T4199] loop2: detected capacity change from 0 to 128 [ 39.824326][ T4200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=4200 comm=syz.3.224 [ 39.842117][ T4199] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.850026][ T4199] FAT-fs (loop2): Filesystem has been set read-only [ 39.857375][ T4199] syz.2.226: attempt to access beyond end of device [ 39.857375][ T4199] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 39.887679][ T4199] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.895576][ T4199] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.903944][ T4199] syz.2.226: attempt to access beyond end of device [ 39.903944][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.910618][ T4192] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 39.946052][ T4199] syz.2.226: attempt to access beyond end of device [ 39.946052][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.960408][ T4199] syz.2.226: attempt to access beyond end of device [ 39.960408][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.973871][ T4199] syz.2.226: attempt to access beyond end of device [ 39.973871][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.988006][ T4199] syz.2.226: attempt to access beyond end of device [ 39.988006][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.002148][ T4199] syz.2.226: attempt to access beyond end of device [ 40.002148][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.015485][ T4199] syz.2.226: attempt to access beyond end of device [ 40.015485][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.038403][ T4199] syz.2.226: attempt to access beyond end of device [ 40.038403][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.054336][ T4199] syz.2.226: attempt to access beyond end of device [ 40.054336][ T4199] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.103248][ T4213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'. [ 40.483804][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 40.492732][ T4225] loop4: detected capacity change from 0 to 2048 [ 40.566048][ T4225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.580357][ T4225] EXT4-fs (loop4): shut down requested (0) [ 40.600922][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.638644][ T4240] loop4: detected capacity change from 0 to 512 [ 40.674029][ T4240] EXT4-fs (loop4): 1 orphan inode deleted [ 40.683313][ T4240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.696861][ T2887] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 40.709827][ T4240] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.768052][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 40.788333][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.813207][ T4257] loop2: detected capacity change from 0 to 2048 [ 40.830101][ T4257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.832669][ T4263] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 40.855192][ T4263] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 40.865794][ T4263] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 40.907440][ T4257] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.243: Failed to acquire dquot type 0 [ 40.927312][ T4268] 9pnet_fd: Insufficient options for proto=fd [ 41.011812][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.114110][ T4297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.253'. [ 41.124518][ T4299] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.124585][ T4300] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.145768][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 41.145821][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.170281][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.203429][ T4306] 9pnet_fd: Insufficient options for proto=fd [ 41.441897][ T4301] loop2: detected capacity change from 0 to 1024 [ 41.445062][ T4301] EXT4-fs: Ignoring removed orlov option [ 41.458405][ T4301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.846383][ T4339] loop3: detected capacity change from 0 to 256 [ 42.036622][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.413570][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 42.536272][ T4348] hsr_slave_0: left promiscuous mode [ 42.597841][ T4348] hsr_slave_1: left promiscuous mode [ 42.896633][ T4374] loop3: detected capacity change from 0 to 128 [ 42.905381][ T4374] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.974044][ T4374] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.007558][ T4378] loop2: detected capacity change from 0 to 256 [ 43.120929][ T4393] loop2: detected capacity change from 0 to 512 [ 43.144156][ T4390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.285'. [ 43.153646][ T4391] tipc: Failed to remove unknown binding: 66,1,1/0:2576859093/2576859095 [ 43.164231][ T4393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.177587][ T4393] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.191160][ T4393] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.284: Failed to acquire dquot type 0 [ 43.227665][ T4406] loop4: detected capacity change from 0 to 1024 [ 43.229880][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.254782][ T4406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.271546][ T4406] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.292136][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 43.311609][ T4406] bond0: (slave bond_slave_1): Releasing backup interface [ 43.450707][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.469675][ T4428] loop4: detected capacity change from 0 to 128 [ 43.491111][ T4428] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 43.499911][ T4428] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 43.508592][ T4428] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 43.517522][ T4428] Buffer I/O error on dev loop4, logical block 145, lost async page write [ 43.526264][ T4428] Buffer I/O error on dev loop4, logical block 146, lost async page write [ 43.535075][ T4428] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 43.543716][ T4428] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 43.544352][ T4430] loop2: detected capacity change from 0 to 256 [ 43.552590][ T4428] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 43.568208][ T4428] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 43.578348][ T4428] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 43.660152][ T4439] loop2: detected capacity change from 0 to 1024 [ 43.696194][ T4439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.712750][ T4439] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.725232][ T4439] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.783765][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 43.783779][ T29] audit: type=1400 audit(1752241137.526:1137): avc: denied { create } for pid=4438 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.821843][ T29] audit: type=1400 audit(1752241137.536:1138): avc: denied { read } for pid=4454 comm="syz.1.303" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.842972][ T29] audit: type=1400 audit(1752241137.536:1139): avc: denied { open } for pid=4454 comm="syz.1.303" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.866569][ T29] audit: type=1400 audit(1752241137.536:1140): avc: denied { create } for pid=4454 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.886466][ T29] audit: type=1400 audit(1752241137.556:1141): avc: denied { setopt } for pid=4438 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.906021][ T29] audit: type=1400 audit(1752241137.556:1142): avc: denied { ioctl } for pid=4454 comm="syz.1.303" path="socket:[6974]" dev="sockfs" ino=6974 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.917101][ T4460] loop3: detected capacity change from 0 to 256 [ 43.930964][ T29] audit: type=1400 audit(1752241137.566:1143): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.941587][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.966496][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 43.967322][ T29] audit: type=1400 audit(1752241137.616:1144): avc: denied { tracepoint } for pid=4459 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.995019][ T29] audit: type=1400 audit(1752241137.656:1145): avc: denied { create } for pid=4459 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.015182][ T29] audit: type=1400 audit(1752241137.656:1146): avc: denied { write } for pid=4459 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.153664][ T4479] loop3: detected capacity change from 0 to 2048 [ 44.169003][ T4479] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.191302][ T4479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.232599][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.253691][ T4489] loop3: detected capacity change from 0 to 128 [ 44.261623][ T4489] FAT-fs (loop3): Directory bread(block 162) failed [ 44.268369][ T4489] FAT-fs (loop3): Directory bread(block 163) failed [ 44.276011][ T4489] FAT-fs (loop3): Directory bread(block 164) failed [ 44.283517][ T4489] FAT-fs (loop3): Directory bread(block 165) failed [ 44.290239][ T4489] FAT-fs (loop3): Directory bread(block 166) failed [ 44.296887][ T4489] FAT-fs (loop3): Directory bread(block 167) failed [ 44.308586][ T4489] FAT-fs (loop3): Directory bread(block 168) failed [ 44.315334][ T4489] FAT-fs (loop3): Directory bread(block 169) failed [ 44.324845][ T4489] FAT-fs (loop3): Directory bread(block 162) failed [ 44.331543][ T4489] FAT-fs (loop3): Directory bread(block 163) failed [ 44.341835][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.349283][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.356837][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.364265][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.461286][ T4504] tipc: Started in network mode [ 44.466208][ T4504] tipc: Node identity ac14140f, cluster identity 4711 [ 44.473240][ T4504] tipc: New replicast peer: 0.0.255.255 [ 44.478872][ T4504] tipc: Enabled bearer , priority 10 [ 44.612504][ T4517] loop3: detected capacity change from 0 to 512 [ 44.620580][ T4517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.633494][ T4517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.646642][ T4517] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.670716][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.699819][ T4523] netlink: 'syz.3.325': attribute type 4 has an invalid length. [ 44.744175][ T4526] loop3: detected capacity change from 0 to 512 [ 44.771175][ T4526] EXT4-fs (loop3): 1 orphan inode deleted [ 44.777473][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.791087][ T4526] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.028879][ T2887] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 45.043450][ T4526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.148629][ T4547] loop3: detected capacity change from 0 to 256 [ 45.190239][ T4556] FAULT_INJECTION: forcing a failure. [ 45.190239][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 45.202905][ T4556] CPU: 1 UID: 0 PID: 4556 Comm: syz.1.338 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 45.202979][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.202990][ T4556] Call Trace: [ 45.202995][ T4556] [ 45.203002][ T4556] __dump_stack+0x1d/0x30 [ 45.203022][ T4556] dump_stack_lvl+0xe8/0x140 [ 45.203038][ T4556] dump_stack+0x15/0x1b [ 45.203132][ T4556] should_fail_ex+0x265/0x280 [ 45.203161][ T4556] ? route4_init+0x31/0x70 [ 45.203237][ T4556] should_failslab+0x8c/0xb0 [ 45.203258][ T4556] __kmalloc_cache_noprof+0x4c/0x320 [ 45.203283][ T4556] route4_init+0x31/0x70 [ 45.203309][ T4556] tcf_proto_create+0x130/0x1a0 [ 45.203337][ T4556] tc_new_tfilter+0x95c/0x10a0 [ 45.203362][ T4556] ? __pfx_tc_new_tfilter+0x10/0x10 [ 45.203379][ T4556] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 45.203466][ T4556] netlink_rcv_skb+0x123/0x220 [ 45.203530][ T4556] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 45.203556][ T4556] rtnetlink_rcv+0x1c/0x30 [ 45.203575][ T4556] netlink_unicast+0x5a5/0x680 [ 45.203626][ T4556] netlink_sendmsg+0x58b/0x6b0 [ 45.203642][ T4556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.203732][ T4556] __sock_sendmsg+0x142/0x180 [ 45.203752][ T4556] ____sys_sendmsg+0x31e/0x4e0 [ 45.203833][ T4556] ___sys_sendmsg+0x17b/0x1d0 [ 45.203868][ T4556] __x64_sys_sendmsg+0xd4/0x160 [ 45.203972][ T4556] x64_sys_call+0x2999/0x2fb0 [ 45.203990][ T4556] do_syscall_64+0xd2/0x200 [ 45.204004][ T4556] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.204027][ T4556] ? clear_bhb_loop+0x40/0x90 [ 45.204046][ T4556] ? clear_bhb_loop+0x40/0x90 [ 45.204064][ T4556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.204081][ T4556] RIP: 0033:0x7f4f70c0e929 [ 45.204094][ T4556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.204179][ T4556] RSP: 002b:00007f4f6f277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.204195][ T4556] RAX: ffffffffffffffda RBX: 00007f4f70e35fa0 RCX: 00007f4f70c0e929 [ 45.204205][ T4556] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006 [ 45.204215][ T4556] RBP: 00007f4f6f277090 R08: 0000000000000000 R09: 0000000000000000 [ 45.204225][ T4556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.204280][ T4556] R13: 0000000000000000 R14: 00007f4f70e35fa0 R15: 00007ffcc7e5b0e8 [ 45.204362][ T4556] [ 45.468921][ T4563] loop2: detected capacity change from 0 to 512 [ 45.493003][ T4565] loop3: detected capacity change from 0 to 1024 [ 45.502284][ T4563] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.509197][ T4565] EXT4-fs: Ignoring removed orlov option [ 45.514892][ T4565] EXT4-fs: inline encryption not supported [ 45.521190][ T4563] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.337: Failed to acquire dquot type 1 [ 45.557256][ T4565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.578076][ T4563] EXT4-fs (loop2): 1 truncate cleaned up [ 45.592091][ T4563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.604522][ T3413] tipc: Node number set to 2886997007 [ 45.613423][ T4565] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 45.639339][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.656328][ T4562] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.696639][ T4588] __nla_validate_parse: 1 callbacks suppressed [ 45.696652][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 45.716817][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 45.726251][ T4588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.741982][ T4588] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.005272][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.160971][ T4613] syz.2.354 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.237130][ T4615] 9pnet_fd: Insufficient options for proto=fd [ 46.604324][ T4613] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 46.612125][ T4613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.354'. [ 46.647879][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 46.678479][ T4623] vcan0: entered allmulticast mode [ 46.684310][ T4625] loop2: detected capacity change from 0 to 2048 [ 46.706867][ T4623] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16912 sclass=netlink_xfrm_socket pid=4623 comm=syz.1.357 [ 46.731271][ T4625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.744918][ T4625] EXT4-fs (loop2): shut down requested (0) [ 46.746210][ T4631] FAULT_INJECTION: forcing a failure. [ 46.746210][ T4631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.763998][ T4631] CPU: 0 UID: 0 PID: 4631 Comm: syz.1.360 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 46.764027][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.764038][ T4631] Call Trace: [ 46.764043][ T4631] [ 46.764048][ T4631] __dump_stack+0x1d/0x30 [ 46.764068][ T4631] dump_stack_lvl+0xe8/0x140 [ 46.764142][ T4631] dump_stack+0x15/0x1b [ 46.764156][ T4631] should_fail_ex+0x265/0x280 [ 46.764191][ T4631] should_fail+0xb/0x20 [ 46.764218][ T4631] should_fail_usercopy+0x1a/0x20 [ 46.764367][ T4631] strncpy_from_user+0x25/0x230 [ 46.764389][ T4631] ? kmem_cache_alloc_noprof+0x186/0x310 [ 46.764412][ T4631] ? getname_flags+0x80/0x3b0 [ 46.764465][ T4631] getname_flags+0xae/0x3b0 [ 46.764484][ T4631] user_path_at+0x28/0x130 [ 46.764508][ T4631] __se_sys_quotactl+0xb6/0x670 [ 46.764614][ T4631] __x64_sys_quotactl+0x55/0x70 [ 46.764755][ T4631] x64_sys_call+0x2886/0x2fb0 [ 46.764777][ T4631] do_syscall_64+0xd2/0x200 [ 46.764793][ T4631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.764890][ T4631] ? clear_bhb_loop+0x40/0x90 [ 46.764911][ T4631] ? clear_bhb_loop+0x40/0x90 [ 46.764930][ T4631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.765006][ T4631] RIP: 0033:0x7f4f70c0e929 [ 46.765089][ T4631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.765104][ T4631] RSP: 002b:00007f4f6f277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 46.765122][ T4631] RAX: ffffffffffffffda RBX: 00007f4f70e35fa0 RCX: 00007f4f70c0e929 [ 46.765135][ T4631] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffff80000200 [ 46.765148][ T4631] RBP: 00007f4f6f277090 R08: 0000000000000000 R09: 0000000000000000 [ 46.765159][ T4631] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 46.765171][ T4631] R13: 0000000000000000 R14: 00007f4f70e35fa0 R15: 00007ffcc7e5b0e8 [ 46.765190][ T4631] [ 46.966669][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.079013][ T4640] loop4: detected capacity change from 0 to 512 [ 47.121848][ T4640] EXT4-fs (loop4): 1 orphan inode deleted [ 47.138901][ T2887] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 47.158474][ T4640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.200553][ T4640] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.232280][ T4640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.364005][ T4667] loop2: detected capacity change from 0 to 128 [ 47.398668][ T4667] capability: warning: `syz.2.372' uses 32-bit capabilities (legacy support in use) [ 47.473799][ T4673] loop4: detected capacity change from 0 to 512 [ 47.619281][ T4673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.657812][ T4673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.698020][ T4684] loop3: detected capacity change from 0 to 512 [ 47.707394][ T4686] loop2: detected capacity change from 0 to 128 [ 47.715764][ T4686] EXT4-fs: Ignoring removed nobh option [ 47.736158][ T4686] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.750797][ T4673] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.793173][ T4686] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.316442][ T4708] loop3: detected capacity change from 0 to 512 [ 48.449080][ T4708] EXT4-fs (loop3): 1 orphan inode deleted [ 48.458999][ T379] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 48.468125][ T4708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.485134][ T4708] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.500432][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.513308][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.584550][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.628720][ T4723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4723 comm=syz.3.390 [ 48.741301][ T4741] block device autoloading is deprecated and will be removed. [ 48.771341][ T4743] loop3: detected capacity change from 0 to 2048 [ 48.796807][ T4743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.810563][ T4743] EXT4-fs (loop3): shut down requested (0) [ 48.837269][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.877810][ T4754] loop3: detected capacity change from 0 to 128 [ 48.887275][ T4754] EXT4-fs: Ignoring removed nobh option [ 48.904096][ T4754] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.931684][ T4754] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.158726][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 49.170578][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 49.253879][ T4774] loop2: detected capacity change from 0 to 512 [ 49.288623][ T4774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.321235][ T4774] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.390252][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 49.390268][ T29] audit: type=1326 audit(1752241143.136:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c762be929 code=0x0 [ 49.487858][ T29] audit: type=1400 audit(1752241143.186:1503): avc: denied { map } for pid=4773 comm="syz.2.407" path="/78/file1/hugetlb.1GB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.512257][ T29] audit: type=1400 audit(1752241143.196:1504): avc: denied { create } for pid=4773 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.531613][ T29] audit: type=1400 audit(1752241143.206:1505): avc: denied { bind } for pid=4773 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.555670][ T4782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 49.565311][ T4782] netlink: 108 bytes leftover after parsing attributes in process `syz.4.408'. [ 49.574343][ T4782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 49.585391][ T29] audit: type=1400 audit(1752241143.326:1506): avc: denied { read } for pid=4781 comm="syz.4.408" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 49.608693][ T29] audit: type=1400 audit(1752241143.326:1507): avc: denied { open } for pid=4781 comm="syz.4.408" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 49.656561][ T29] audit: type=1400 audit(1752241143.356:1508): avc: denied { ioctl } for pid=4781 comm="syz.4.408" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 49.681694][ T29] audit: type=1400 audit(1752241143.356:1509): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.704375][ T29] audit: type=1400 audit(1752241143.396:1510): avc: denied { ioctl } for pid=4785 comm="syz.1.411" path="socket:[8531]" dev="sockfs" ino=8531 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.729779][ T29] audit: type=1400 audit(1752241143.396:1511): avc: denied { mount } for pid=4785 comm="syz.1.411" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.796818][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.871319][ T4797] vhci_hcd: default hub control req: 6009 v0003 i0001 l0 [ 49.952728][ T4791] loop3: detected capacity change from 0 to 1024 [ 50.000458][ T4791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.040940][ T4799] tipc: Started in network mode [ 50.045840][ T4799] tipc: Node identity 7f000001, cluster identity 4711 [ 50.063175][ T4799] tipc: Enabled bearer , priority 10 [ 50.114852][ T4806] bridge1: entered promiscuous mode [ 50.120125][ T4806] bridge1: entered allmulticast mode [ 50.194531][ T4810] FAULT_INJECTION: forcing a failure. [ 50.194531][ T4810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.207694][ T4810] CPU: 0 UID: 0 PID: 4810 Comm: syz.2.418 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 50.207736][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.207749][ T4810] Call Trace: [ 50.207755][ T4810] [ 50.207762][ T4810] __dump_stack+0x1d/0x30 [ 50.207784][ T4810] dump_stack_lvl+0xe8/0x140 [ 50.207808][ T4810] dump_stack+0x15/0x1b [ 50.207885][ T4810] should_fail_ex+0x265/0x280 [ 50.207910][ T4810] should_fail+0xb/0x20 [ 50.207956][ T4810] should_fail_usercopy+0x1a/0x20 [ 50.207988][ T4810] _copy_from_iter+0xcf/0xe40 [ 50.208093][ T4810] ? mntput+0x4b/0x80 [ 50.208115][ T4810] ? terminate_walk+0x27f/0x2a0 [ 50.208139][ T4810] tun_get_user+0x144/0x2500 [ 50.208169][ T4810] ? ref_tracker_alloc+0x1f2/0x2f0 [ 50.208196][ T4810] ? selinux_file_permission+0x1e4/0x320 [ 50.208296][ T4810] tun_chr_write_iter+0x15e/0x210 [ 50.208321][ T4810] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 50.208347][ T4810] vfs_write+0x4a0/0x8e0 [ 50.208416][ T4810] ksys_write+0xda/0x1a0 [ 50.208442][ T4810] __x64_sys_write+0x40/0x50 [ 50.208499][ T4810] x64_sys_call+0x2cdd/0x2fb0 [ 50.208517][ T4810] do_syscall_64+0xd2/0x200 [ 50.208533][ T4810] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.208561][ T4810] ? clear_bhb_loop+0x40/0x90 [ 50.208582][ T4810] ? clear_bhb_loop+0x40/0x90 [ 50.208602][ T4810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.208619][ T4810] RIP: 0033:0x7f7c762be929 [ 50.208632][ T4810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.208648][ T4810] RSP: 002b:00007f7c74927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.208664][ T4810] RAX: ffffffffffffffda RBX: 00007f7c764e5fa0 RCX: 00007f7c762be929 [ 50.208675][ T4810] RDX: 000000000000004b RSI: 0000200000000340 RDI: 0000000000000004 [ 50.208741][ T4810] RBP: 00007f7c74927090 R08: 0000000000000000 R09: 0000000000000000 [ 50.208798][ T4810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.208809][ T4810] R13: 0000000000000000 R14: 00007f7c764e5fa0 R15: 00007ffd78b0e878 [ 50.208825][ T4810] [ 50.505371][ T4818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 50.537515][ T4818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4818 comm=syz.3.422 [ 50.602049][ T4826] bridge_slave_0: left allmulticast mode [ 50.607719][ T4826] bridge_slave_0: left promiscuous mode [ 50.613480][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.637512][ T4826] bridge_slave_1: left allmulticast mode [ 50.643229][ T4826] bridge_slave_1: left promiscuous mode [ 50.649037][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.668086][ T4826] bond0: (slave bond_slave_0): Releasing backup interface [ 50.683447][ T4826] bond0: (slave bond_slave_1): Releasing backup interface [ 50.702658][ T4826] team0: Port device team_slave_0 removed [ 50.727386][ T4826] team0: Port device team_slave_1 removed [ 50.742371][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.749896][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.759374][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.766774][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.772792][ T4839] xt_hashlimit: max too large, truncated to 1048576 [ 50.884180][ T4852] mmap: syz.0.436 (4852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.917439][ T4859] __nla_validate_parse: 4 callbacks suppressed [ 50.917456][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 51.078810][ T36] tipc: Node number set to 2130706433 [ 51.306792][ T4899] netlink: 14 bytes leftover after parsing attributes in process `syz.0.456'. [ 51.320324][ T4899]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.333145][ T4899]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.349156][ T4899]  (unregistering): Released all slaves [ 51.490836][ T4924] wireguard0: entered promiscuous mode [ 51.514811][ T4926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.124439][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 52.213420][ T4942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.277616][ T4944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 52.616695][ T4978] netlink: 'syz.3.490': attribute type 2 has an invalid length. [ 52.977386][ T3443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.112974][ T3443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.202207][ T3443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.291099][ T3443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.411271][ T3443] bridge0: port 3(vlan0) entered disabled state [ 53.450070][ T3443] bridge_slave_1: left allmulticast mode [ 53.455749][ T3443] bridge_slave_1: left promiscuous mode [ 53.461458][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.501693][ T3443] bridge_slave_0: left allmulticast mode [ 53.507469][ T3443] bridge_slave_0: left promiscuous mode [ 53.513262][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.721590][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.743773][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.780824][ T3443] bond0 (unregistering): Released all slaves [ 53.808645][ T3443] bond1 (unregistering): Released all slaves [ 53.917453][ T3443] hsr_slave_0: left promiscuous mode [ 53.931556][ T3443] hsr_slave_1: left promiscuous mode [ 53.954092][ T3443] veth1_macvtap: left promiscuous mode [ 53.969362][ T3443] veth0_macvtap: left promiscuous mode [ 53.982704][ T3443] veth1_vlan: left promiscuous mode [ 54.126451][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 54.149942][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 54.372293][ T3443] IPVS: stop unused estimator thread 0... [ 54.398994][ T29] kauditd_printk_skb: 6290 callbacks suppressed [ 54.399008][ T29] audit: type=1400 audit(1752241148.136:7145): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.410627][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.426295][ T29] audit: type=1400 audit(1752241148.136:7146): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.432800][ T3034] audit: audit_lost=221 audit_rate_limit=0 audit_backlog_limit=64 [ 54.453796][ T29] audit: type=1400 audit(1752241148.136:7147): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.453821][ T29] audit: type=1400 audit(1752241148.136:7148): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.461607][ T3034] audit: backlog limit exceeded [ 54.482613][ T29] audit: type=1400 audit(1752241148.136:7149): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.529719][ T29] audit: type=1400 audit(1752241148.136:7150): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.550820][ T29] audit: type=1400 audit(1752241148.136:7151): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.975363][ T5011] FAULT_INJECTION: forcing a failure. [ 54.975363][ T5011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.988460][ T5011] CPU: 0 UID: 0 PID: 5011 Comm: syz.1.502 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 54.988484][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.988569][ T5011] Call Trace: [ 54.988576][ T5011] [ 54.988583][ T5011] __dump_stack+0x1d/0x30 [ 54.988604][ T5011] dump_stack_lvl+0xe8/0x140 [ 54.988622][ T5011] dump_stack+0x15/0x1b [ 54.988636][ T5011] should_fail_ex+0x265/0x280 [ 54.988712][ T5011] should_fail+0xb/0x20 [ 54.988737][ T5011] should_fail_usercopy+0x1a/0x20 [ 54.988789][ T5011] _copy_from_iter+0xcf/0xe40 [ 54.988819][ T5011] ? __rcu_read_unlock+0x4f/0x70 [ 54.988840][ T5011] ? avc_has_perm_noaudit+0x1b1/0x200 [ 54.988877][ T5011] ? __pfx_random_ioctl+0x10/0x10 [ 54.988896][ T5011] write_pool_user+0x7c/0x1e0 [ 54.988918][ T5011] ? import_ubuf+0xe8/0x120 [ 54.988939][ T5011] ? __pfx_random_ioctl+0x10/0x10 [ 54.988958][ T5011] random_ioctl+0x2cc/0x400 [ 54.988985][ T5011] __se_sys_ioctl+0xce/0x140 [ 54.989031][ T5011] __x64_sys_ioctl+0x43/0x50 [ 54.989053][ T5011] x64_sys_call+0x19a8/0x2fb0 [ 54.989071][ T5011] do_syscall_64+0xd2/0x200 [ 54.989087][ T5011] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.989169][ T5011] ? clear_bhb_loop+0x40/0x90 [ 54.989187][ T5011] ? clear_bhb_loop+0x40/0x90 [ 54.989205][ T5011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.989224][ T5011] RIP: 0033:0x7f4f70c0e929 [ 54.989239][ T5011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.989258][ T5011] RSP: 002b:00007f4f6f256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.989323][ T5011] RAX: ffffffffffffffda RBX: 00007f4f70e36080 RCX: 00007f4f70c0e929 [ 54.989335][ T5011] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 000000000000000a [ 54.989346][ T5011] RBP: 00007f4f6f256090 R08: 0000000000000000 R09: 0000000000000000 [ 54.989356][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.989366][ T5011] R13: 0000000000000000 R14: 00007f4f70e36080 R15: 00007ffcc7e5b0e8 [ 54.989432][ T5011] [ 55.633778][ T5016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.505'. [ 57.380809][ T5027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.509'. [ 59.408841][ T29] kauditd_printk_skb: 55414 callbacks suppressed [ 59.408858][ T29] audit: type=1400 audit(1752241153.156:60529): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.414983][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.415199][ T29] audit: type=1400 audit(1752241153.156:60530): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.436275][ T3034] audit: audit_lost=901 audit_rate_limit=0 audit_backlog_limit=64 [ 59.442831][ T29] audit: type=1400 audit(1752241153.156:60531): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.463861][ T3034] audit: backlog limit exceeded [ 59.464394][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.471687][ T29] audit: type=1400 audit(1752241153.156:60532): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.492816][ T3034] audit: audit_lost=902 audit_rate_limit=0 audit_backlog_limit=64 [ 59.492831][ T3034] audit: backlog limit exceeded [ 60.785423][ T5049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.515'. [ 60.971862][ T5051] ================================================================== [ 60.979959][ T5051] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 60.988297][ T5051] [ 60.990616][ T5051] write to 0xffff88811af4d264 of 4 bytes by task 5043 on cpu 0: [ 60.998247][ T5051] inode_update_timestamps+0x147/0x270 [ 61.003710][ T5051] file_update_time+0x20e/0x2b0 [ 61.008566][ T5051] shmem_file_write_iter+0x9c/0xf0 [ 61.013687][ T5051] iter_file_splice_write+0x5f2/0x970 [ 61.019072][ T5051] direct_splice_actor+0x153/0x2a0 [ 61.024197][ T5051] splice_direct_to_actor+0x30f/0x680 [ 61.029583][ T5051] do_splice_direct+0xda/0x150 [ 61.034355][ T5051] do_sendfile+0x380/0x650 [ 61.038777][ T5051] __x64_sys_sendfile64+0x105/0x150 [ 61.043985][ T5051] x64_sys_call+0xb39/0x2fb0 [ 61.048588][ T5051] do_syscall_64+0xd2/0x200 [ 61.053091][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.058980][ T5051] [ 61.061301][ T5051] read to 0xffff88811af4d264 of 4 bytes by task 5051 on cpu 1: [ 61.068843][ T5051] atime_needs_update+0x2a8/0x3e0 [ 61.073874][ T5051] touch_atime+0x4a/0x340 [ 61.078205][ T5051] shmem_file_splice_read+0x5b1/0x600 [ 61.083580][ T5051] splice_direct_to_actor+0x26f/0x680 [ 61.088959][ T5051] do_splice_direct+0xda/0x150 [ 61.093733][ T5051] do_sendfile+0x380/0x650 [ 61.098147][ T5051] __x64_sys_sendfile64+0x105/0x150 [ 61.103344][ T5051] x64_sys_call+0xb39/0x2fb0 [ 61.107951][ T5051] do_syscall_64+0xd2/0x200 [ 61.112448][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.118343][ T5051] [ 61.120659][ T5051] value changed: 0x2a17f31c -> 0x2ab0899b [ 61.126376][ T5051] [ 61.128695][ T5051] Reported by Kernel Concurrency Sanitizer on: [ 61.134850][ T5051] CPU: 1 UID: 0 PID: 5051 Comm: syz.0.514 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 61.147185][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.157248][ T5051] ================================================================== [ 62.144073][ T379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.192049][ T59] smc: removing ib device syz1 [ 62.199186][ T36] syz1: Port: 1 Link DOWN [ 62.214628][ T379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.322208][ T379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.371712][ T379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.531562][ T379] bond0 (unregistering): Released all slaves [ 62.651493][ T379] hsr_slave_0: left promiscuous mode [ 62.657151][ T379] hsr_slave_1: left promiscuous mode [ 62.664980][ T379] veth1_macvtap: left promiscuous mode [ 62.670522][ T379] veth0_macvtap: left promiscuous mode [ 62.676205][ T379] veth1_vlan: left promiscuous mode [ 62.681646][ T379] veth0_vlan: left promiscuous mode [ 63.123714][ T379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.172163][ T379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.222483][ T379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.283175][ T379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.363646][ T379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.421935][ T379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.481642][ T379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.541897][ T379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.624327][ T379] bridge_slave_1: left allmulticast mode [ 63.630039][ T379] bridge_slave_1: left promiscuous mode [ 63.635687][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.644155][ T379] bridge_slave_0: left promiscuous mode [ 63.649888][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.658180][ T379] bridge_slave_1: left allmulticast mode [ 63.663951][ T379] bridge_slave_1: left promiscuous mode [ 63.669579][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.678471][ T379] bridge_slave_0: left allmulticast mode [ 63.684250][ T379] bridge_slave_0: left promiscuous mode [ 63.689950][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.800623][ T379] ÿ (unregistering): Released all slaves [ 63.861805][ T379] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.871144][ T379] bond_slave_0: left promiscuous mode [ 63.877672][ T379] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.886763][ T379] bond_slave_1: left promiscuous mode [ 63.893380][ T379] $Hÿ (unregistering): Released all slaves [ 63.950626][ T379] tipc: Disabling bearer [ 63.955676][ T379] tipc: Left network mode [ 63.960386][ T379] tipc: Disabling bearer [ 63.965357][ T379] tipc: Left network mode [ 63.972653][ T379] hsr_slave_0: left promiscuous mode [ 63.978243][ T379] hsr_slave_1: left promiscuous mode [ 63.983977][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.991577][ T379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.001146][ T379] hsr_slave_0: left promiscuous mode [ 64.006860][ T379] hsr_slave_1: left promiscuous mode [ 64.012632][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.020044][ T379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.027660][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.035164][ T379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.047910][ T379] veth1_macvtap: left promiscuous mode [ 64.053437][ T379] veth0_macvtap: left promiscuous mode [ 64.059082][ T379] veth1_vlan: left promiscuous mode [ 64.064434][ T379] veth0_vlan: left promiscuous mode [ 64.070267][ T379] veth1_macvtap: left promiscuous mode [ 64.075847][ T379] veth1_vlan: left promiscuous mode [ 64.081280][ T379] veth0_vlan: left promiscuous mode [ 64.172383][ T379] team0 (unregistering): Port device team_slave_1 removed [ 64.184009][ T379] team0 (unregistering): Port device team_slave_0 removed [ 64.242869][ T379] team0 (unregistering): Port device team_slave_1 removed [ 64.252211][ T379] team0 (unregistering): Port device team_slave_0 removed [ 64.282730][ T379] vcan0 (unregistering): left allmulticast mode [ 64.418841][ T29] kauditd_printk_skb: 48281 callbacks suppressed [ 64.418858][ T29] audit: type=1400 audit(1752241158.166:106666): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.425548][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.447162][ T29] audit: type=1400 audit(1752241158.166:106667): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.452973][ T3034] audit: audit_lost=1619 audit_rate_limit=0 audit_backlog_limit=64 [ 64.452986][ T3034] audit: backlog limit exceeded [ 64.453174][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.474297][ T29] audit: type=1400 audit(1752241158.166:106668): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.482143][ T3034] audit: audit_lost=1620 audit_rate_limit=0 audit_backlog_limit=64 [ 64.482156][ T3034] audit: backlog limit exceeded [ 64.486974][ T29] audit: type=1400 audit(1752241158.166:106669): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.428867][ T29] kauditd_printk_skb: 57154 callbacks suppressed [ 69.428882][ T29] audit: type=1400 audit(1752241163.166:163824): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.435195][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.435262][ T3034] audit: audit_lost=1621 audit_rate_limit=0 audit_backlog_limit=64 [ 69.456884][ T29] audit: type=1400 audit(1752241163.176:163825): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.462975][ T3034] audit: backlog limit exceeded [ 69.463483][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.470875][ T29] audit: type=1400 audit(1752241163.176:163826): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.492025][ T3034] audit: audit_lost=1622 audit_rate_limit=0 audit_backlog_limit=64 [ 69.492040][ T3034] audit: backlog limit exceeded [ 69.492234][ T3034] audit: audit_backlog=65 > audit_backlog_limit=64