last executing test programs: 3.354357925s ago: executing program 0 (id=224): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 3.182239968s ago: executing program 1 (id=228): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 2.473720137s ago: executing program 0 (id=233): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) msgrcv(r0, &(0x7f0000000780)={0x0, ""/141}, 0x95, 0x1, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) 2.22733379s ago: executing program 1 (id=238): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x4, 0x0) 2.22673261s ago: executing program 2 (id=240): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 2.185651351s ago: executing program 2 (id=241): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024000780080006"], 0x108}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x63, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x80000002, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) 2.016414933s ago: executing program 1 (id=243): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 1.743614097s ago: executing program 4 (id=244): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RCLUNK(r0, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4411}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0xf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.680519838s ago: executing program 4 (id=245): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close(r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x4, 0x6}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) (fail_nth: 3) 1.50657014s ago: executing program 0 (id=246): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0x0, 0x0, 0x0}) write$binfmt_elf64(r1, 0x0, 0xa24) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) ioperm(0x2b, 0xa9, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x20) fcntl$dupfd(r7, 0x406, r0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)}, 0x10) 1.50053561s ago: executing program 4 (id=247): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000780)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "bf", "997238", 0x886c, "b73edb3d918b9ef7ab"}}}}}, 0x0) 1.48670614s ago: executing program 4 (id=248): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 1.45812397s ago: executing program 3 (id=249): openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.43355879s ago: executing program 3 (id=250): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="34c63a1cfdd8ef2caefdda9d240300005a90757f077038eff0f64ebbee07962c22772e11bc4e65d76641", 0x2a}], 0x1) 1.416064101s ago: executing program 3 (id=251): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1.361844391s ago: executing program 3 (id=252): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x528, &(0x7f0000001080)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) dup(0xffffffffffffffff) timer_create(0xb, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 1.312347002s ago: executing program 2 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010003704000000000000001800e1f900", @ANYRES32=0x0, @ANYBLOB="8b06050024000000400012800b000100697036746e6c00003000028014000300fc01000000000000000000000000000114000200fc010000000000000000000000000000040013"], 0x60}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) getpid() (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = memfd_secret(0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x10000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) 1.152551944s ago: executing program 2 (id=254): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0xfeff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.152037955s ago: executing program 1 (id=255): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, '/dev/rtc0\x00', 0x3a, '/dev/rtc0\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x3c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES16=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa1f9ffffffffff06010000f8ffc62b8a21000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r10}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TCFLSH(r9, 0x5608, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600), 0x2090c0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 1.098169565s ago: executing program 1 (id=256): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 1.075803235s ago: executing program 3 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)='\b', 0x1}, {&(0x7f0000000680)="84e1d2455d1a0f", 0x7}], 0x2, 0x0, 0x0, 0xe0000000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000}, 0x2, 0xffffffff, 0x2, 0x9, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x80080) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000009d80)=""/4096) r9 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r9, 0x1, 0x0) msgsnd(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) 1.026487876s ago: executing program 0 (id=258): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000780)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "bf", "997238", 0x886c, "b73edb3d918b9ef7ab"}}}}}, 0x0) 934.359107ms ago: executing program 0 (id=259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000f00000004c29b652c760a9db1b010000e1e4aea4accc036a4f00000000000000"], &(0x7f0000000c40)=""/3, 0x2b, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) io_uring_setup(0x4d3f, &(0x7f0000000080)={0x0, 0xca6a, 0x8000, 0x1, 0x5}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x5b, 0x0, 0x2, 0xafc, 0x0, @void, @value}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000200000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e88, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x7ffff000) fallocate(r8, 0x0, 0x0, 0x1001f0) 655.700751ms ago: executing program 2 (id=260): openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 601.325022ms ago: executing program 1 (id=261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000f00000004c29b652c760a9db1b010000e1e4aea4accc036a4f00000000000000"], &(0x7f0000000c40)=""/3, 0x2b, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) io_uring_setup(0x4d3f, &(0x7f0000000080)={0x0, 0xca6a, 0x8000, 0x1, 0x5}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x5b, 0x0, 0x2, 0xafc, 0x0, @void, @value}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000200000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e88, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x7ffff000) fallocate(r8, 0x0, 0x0, 0x1001f0) 522.846973ms ago: executing program 2 (id=262): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x12, 0x20}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x41, 0x0) mq_timedreceive(r4, &(0x7f0000000440)=""/187, 0xbb, 0x1, &(0x7f00000003c0)={0x0, 0x989680}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x8000203d}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r7, r8}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r11, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r11, 0x26, &(0x7f00000031c0)={0x1}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 199.557507ms ago: executing program 3 (id=263): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024000780080006"], 0x108}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x63, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x80000002, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) 60.522389ms ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf35d5affae69a39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000280)=0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0xff05, 0x4f34, 0x800, 0x9, 0x0, "5f730000a9003f00"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="280000000c060102ffff0000000000000a0000070900020073797a3200000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x20040845}, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f0000000100)={[{@numtail}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@utf8}, {@fat=@sys_immutable}, {@rodir}, {@utf8}, {@utf8}, {@fat=@showexec}]}, 0x1, 0x311, &(0x7f0000000600)="$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") 2.10811ms ago: executing program 0 (id=265): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=266): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00001805000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000076ffb868ee381b1f4f90c192576600000000f197e8116b9d8ac1fe516e388f7eed75994199af871eefe78775f6e032250737f96491fb0331886005d359cc4a0084d889d9b17e0f4f585ce9d0f73a86b2e03913d40f077b47a8c909f0774e4c267e4d949efbfd02428693258aa3a6e3949c2ad534d804ac31fff54a9d63fb02fc97c5fd6e5dcd44a9b54ceac273f18e53a639fb2feb158244236b211368"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x6, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) brk(0x689d80000000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c756e616d653dd0"]) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 35.166391][ T29] audit: type=1400 audit(1745684674.481:81): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.167573][ T3295] cgroup: Unknown subsys name 'net' [ 35.190066][ T29] audit: type=1400 audit(1745684674.481:82): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.218720][ T29] audit: type=1400 audit(1745684674.511:83): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.239340][ T29] audit: type=1400 audit(1745684674.521:84): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 35.360359][ T3295] cgroup: Unknown subsys name 'cpuset' [ 35.367091][ T3295] cgroup: Unknown subsys name 'rlimit' [ 35.477983][ T29] audit: type=1400 audit(1745684674.791:85): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.501312][ T29] audit: type=1400 audit(1745684674.791:86): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.521933][ T29] audit: type=1400 audit(1745684674.801:87): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.537258][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.542366][ T29] audit: type=1400 audit(1745684674.801:88): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.571272][ T29] audit: type=1400 audit(1745684674.811:89): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.596203][ T29] audit: type=1400 audit(1745684674.811:90): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.619601][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.789862][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.888850][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.903354][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 36.912252][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.935003][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.942181][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.949359][ T3306] bridge_slave_0: entered allmulticast mode [ 36.956028][ T3306] bridge_slave_0: entered promiscuous mode [ 36.976606][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.983922][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.991351][ T3306] bridge_slave_1: entered allmulticast mode [ 36.998284][ T3306] bridge_slave_1: entered promiscuous mode [ 37.064067][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.085003][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.092242][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.099417][ T3312] bridge_slave_0: entered allmulticast mode [ 37.106027][ T3312] bridge_slave_0: entered promiscuous mode [ 37.113453][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.131089][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.138616][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.146207][ T3305] bridge_slave_0: entered allmulticast mode [ 37.152822][ T3305] bridge_slave_0: entered promiscuous mode [ 37.165324][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.172999][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.180495][ T3312] bridge_slave_1: entered allmulticast mode [ 37.187471][ T3312] bridge_slave_1: entered promiscuous mode [ 37.211061][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.218280][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.226791][ T3305] bridge_slave_1: entered allmulticast mode [ 37.233551][ T3305] bridge_slave_1: entered promiscuous mode [ 37.255017][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.265392][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.275269][ T3306] team0: Port device team_slave_0 added [ 37.281969][ T3306] team0: Port device team_slave_1 added [ 37.292448][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.299677][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.306906][ T3315] bridge_slave_0: entered allmulticast mode [ 37.313524][ T3315] bridge_slave_0: entered promiscuous mode [ 37.321334][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.339845][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.349099][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.356973][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.364454][ T3315] bridge_slave_1: entered allmulticast mode [ 37.371013][ T3315] bridge_slave_1: entered promiscuous mode [ 37.395130][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.402360][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.428506][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.440745][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.466890][ T3312] team0: Port device team_slave_0 added [ 37.473750][ T3312] team0: Port device team_slave_1 added [ 37.484981][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.491991][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.518024][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.534828][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.558623][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.565793][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.593618][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.606492][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.618114][ T3305] team0: Port device team_slave_0 added [ 37.630926][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.637912][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.665068][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.677981][ T3305] team0: Port device team_slave_1 added [ 37.721488][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.728994][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.736548][ T3311] bridge_slave_0: entered allmulticast mode [ 37.743074][ T3311] bridge_slave_0: entered promiscuous mode [ 37.752638][ T3306] hsr_slave_0: entered promiscuous mode [ 37.758844][ T3306] hsr_slave_1: entered promiscuous mode [ 37.771661][ T3315] team0: Port device team_slave_0 added [ 37.777940][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.785293][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.811709][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.823661][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.830854][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.857122][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.867966][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.875243][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.883903][ T3311] bridge_slave_1: entered allmulticast mode [ 37.890707][ T3311] bridge_slave_1: entered promiscuous mode [ 37.913866][ T3315] team0: Port device team_slave_1 added [ 37.938914][ T3312] hsr_slave_0: entered promiscuous mode [ 37.945614][ T3312] hsr_slave_1: entered promiscuous mode [ 37.951818][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.959502][ T3312] Cannot create hsr debugfs directory [ 37.990697][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.006481][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.013789][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.039876][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.059812][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.074312][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.081335][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.107421][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.155153][ T3305] hsr_slave_0: entered promiscuous mode [ 38.161428][ T3305] hsr_slave_1: entered promiscuous mode [ 38.167527][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.175357][ T3305] Cannot create hsr debugfs directory [ 38.199869][ T3311] team0: Port device team_slave_0 added [ 38.232619][ T3311] team0: Port device team_slave_1 added [ 38.279806][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.290116][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.318543][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.332289][ T3315] hsr_slave_0: entered promiscuous mode [ 38.338987][ T3315] hsr_slave_1: entered promiscuous mode [ 38.345613][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.353946][ T3315] Cannot create hsr debugfs directory [ 38.371528][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.379312][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.408927][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.490103][ T3311] hsr_slave_0: entered promiscuous mode [ 38.496340][ T3311] hsr_slave_1: entered promiscuous mode [ 38.503145][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.511140][ T3311] Cannot create hsr debugfs directory [ 38.529154][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.539164][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.554025][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.591582][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.632195][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.654832][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.674088][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.696416][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.717257][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.748932][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.770701][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.781050][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.803131][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.818254][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.835201][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.852405][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.890260][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.908484][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.917949][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.933202][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.953890][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.993163][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.004989][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.024018][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.031648][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.048438][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.059599][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.071788][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.079131][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.106570][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.113880][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.128338][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.141642][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.149016][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.165980][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.195587][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.203929][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.214653][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.221961][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.241242][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.257925][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.272296][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.279487][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.305202][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.315680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.323143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.342945][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.371708][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.378897][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.402578][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.414195][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.421409][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.452714][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.463787][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.519546][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.543616][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.607804][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.632919][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.700142][ T3312] veth0_vlan: entered promiscuous mode [ 39.723021][ T3306] veth0_vlan: entered promiscuous mode [ 39.741190][ T3312] veth1_vlan: entered promiscuous mode [ 39.762589][ T3306] veth1_vlan: entered promiscuous mode [ 39.775512][ T3315] veth0_vlan: entered promiscuous mode [ 39.797141][ T3315] veth1_vlan: entered promiscuous mode [ 39.818206][ T3312] veth0_macvtap: entered promiscuous mode [ 39.826256][ T3311] veth0_vlan: entered promiscuous mode [ 39.835623][ T3312] veth1_macvtap: entered promiscuous mode [ 39.847897][ T3311] veth1_vlan: entered promiscuous mode [ 39.869770][ T3315] veth0_macvtap: entered promiscuous mode [ 39.879078][ T3305] veth0_vlan: entered promiscuous mode [ 39.893342][ T3306] veth0_macvtap: entered promiscuous mode [ 39.901057][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.908817][ T3315] veth1_macvtap: entered promiscuous mode [ 39.923252][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.935726][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.946360][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.958777][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.967360][ T3306] veth1_macvtap: entered promiscuous mode [ 39.981713][ T3305] veth1_vlan: entered promiscuous mode [ 39.989008][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.998152][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.007095][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.015959][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.029291][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.039851][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.050902][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.060161][ T3311] veth0_macvtap: entered promiscuous mode [ 40.073877][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.082785][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.091995][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.100844][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.112540][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.123087][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.132969][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.143641][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.154566][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.183392][ T3305] veth0_macvtap: entered promiscuous mode [ 40.191490][ T3311] veth1_macvtap: entered promiscuous mode [ 40.198686][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.209326][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.219324][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.229826][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.242353][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.255042][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 40.255061][ T29] audit: type=1400 audit(1745684679.571:107): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.hgFT4G/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.263976][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.285874][ T29] audit: type=1400 audit(1745684679.571:108): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.296275][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.296289][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.319278][ T29] audit: type=1400 audit(1745684679.571:109): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.hgFT4G/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.328698][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.339510][ T29] audit: type=1400 audit(1745684679.571:110): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.366170][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.377012][ T29] audit: type=1400 audit(1745684679.571:111): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.hgFT4G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.377051][ T29] audit: type=1400 audit(1745684679.571:112): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.hgFT4G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.399222][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.416345][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.436362][ T29] audit: type=1400 audit(1745684679.571:113): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.436951][ T29] audit: type=1400 audit(1745684679.721:114): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.523675][ T29] audit: type=1400 audit(1745684679.721:115): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.548316][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.557333][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.566738][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.575528][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.584690][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.612328][ T3305] veth1_macvtap: entered promiscuous mode [ 40.636798][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.647520][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.657580][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.668757][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.679974][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.690478][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.706848][ T29] audit: type=1400 audit(1745684679.961:116): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.732159][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.751359][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.761874][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.771720][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.782341][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.792294][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.803108][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.813410][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.823890][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.846566][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.861357][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.870218][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.879024][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.887836][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.931179][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.941769][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.951732][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.962549][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.974938][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.985663][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.996026][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.006826][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.021654][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.026348][ T3465] tipc: Can't bind to reserved service type 1 [ 41.042425][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.049698][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.057379][ T3451] bridge0: entered allmulticast mode [ 41.089117][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.098049][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.107195][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.115943][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.185380][ T3471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.201580][ T3471] No such timeout policy "syz0" [ 41.215558][ T3473] FAULT_INJECTION: forcing a failure. [ 41.215558][ T3473] name failslab, interval 1, probability 0, space 0, times 1 [ 41.229548][ T3473] CPU: 1 UID: 0 PID: 3473 Comm: syz.2.9 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 41.229664][ T3473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.229685][ T3473] Call Trace: [ 41.229694][ T3473] [ 41.229704][ T3473] __dump_stack+0x1d/0x30 [ 41.229762][ T3473] dump_stack_lvl+0xe8/0x140 [ 41.229790][ T3473] dump_stack+0x15/0x1b [ 41.229812][ T3473] should_fail_ex+0x265/0x280 [ 41.229852][ T3473] should_failslab+0x8c/0xb0 [ 41.229882][ T3473] kmem_cache_alloc_noprof+0x50/0x310 [ 41.229950][ T3473] ? getname_flags+0x80/0x3b0 [ 41.229990][ T3473] ? kstrtouint+0x76/0xc0 [ 41.230070][ T3473] getname_flags+0x80/0x3b0 [ 41.230109][ T3473] user_path_at+0x28/0x130 [ 41.230133][ T3473] user_statfs+0x4d/0x110 [ 41.230214][ T3473] __x64_sys_statfs+0x65/0xf0 [ 41.230257][ T3473] ? fput+0x8f/0xc0 [ 41.230274][ T3473] ? ksys_write+0x16e/0x1a0 [ 41.230300][ T3473] ? fpregs_assert_state_consistent+0x84/0xa0 [ 41.230345][ T3473] x64_sys_call+0x1edd/0x2fb0 [ 41.230374][ T3473] do_syscall_64+0xd0/0x1a0 [ 41.230400][ T3473] ? clear_bhb_loop+0x25/0x80 [ 41.230429][ T3473] ? clear_bhb_loop+0x25/0x80 [ 41.230492][ T3473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.230611][ T3473] RIP: 0033:0x7fd42165e969 [ 41.230631][ T3473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.230654][ T3473] RSP: 002b:00007fd41fcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 41.230680][ T3473] RAX: ffffffffffffffda RBX: 00007fd421885fa0 RCX: 00007fd42165e969 [ 41.230692][ T3473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.230704][ T3473] RBP: 00007fd41fcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.230716][ T3473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.230793][ T3473] R13: 0000000000000000 R14: 00007fd421885fa0 R15: 00007ffe8458bf18 [ 41.230818][ T3473] [ 41.467506][ T3466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3466 comm=syz.1.2 [ 41.480052][ T3466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3466 comm=syz.1.2 [ 41.556606][ T3480] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 41.564337][ T3480] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 41.571891][ T3480] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1'. [ 41.621599][ T3484] smc: net device bond0 applied user defined pnetid SYZ2 [ 41.781342][ T3490] loop0: detected capacity change from 0 to 128 [ 41.917303][ T3495] loop2: detected capacity change from 0 to 512 [ 41.970630][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.004028][ T3476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.014342][ T3476] Zero length message leads to an empty skb [ 42.023084][ T3500] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16'. [ 42.060256][ T3495] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.070677][ T3500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 42.109384][ T3500] loop0: detected capacity change from 0 to 128 [ 42.133678][ T3500] syz.0.16: attempt to access beyond end of device [ 42.133678][ T3500] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 42.146986][ T3500] Buffer I/O error on dev loop0, logical block 2065, async page read [ 42.230066][ T3500] syz.0.16: attempt to access beyond end of device [ 42.230066][ T3500] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 42.244439][ T3500] Buffer I/O error on dev loop0, logical block 2066, async page read [ 42.288793][ T3500] syz.0.16: attempt to access beyond end of device [ 42.288793][ T3500] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 42.302045][ T3500] Buffer I/O error on dev loop0, logical block 2067, async page read [ 42.338526][ T3500] syz.0.16: attempt to access beyond end of device [ 42.338526][ T3500] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 42.351695][ T3500] Buffer I/O error on dev loop0, logical block 2068, async page read [ 42.368261][ T3482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'. [ 42.371531][ T3500] syz.0.16: attempt to access beyond end of device [ 42.371531][ T3500] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 42.390275][ T3500] Buffer I/O error on dev loop0, logical block 2069, async page read [ 42.410414][ T3507] netlink: 'syz.3.19': attribute type 2 has an invalid length. [ 42.416870][ T3500] syz.0.16: attempt to access beyond end of device [ 42.416870][ T3500] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 42.418024][ T3507] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 42.431081][ T3500] Buffer I/O error on dev loop0, logical block 2070, async page read [ 42.446993][ T3507] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.19'. [ 42.455681][ T3500] syz.0.16: attempt to access beyond end of device [ 42.455681][ T3500] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 42.469218][ T3500] Buffer I/O error on dev loop0, logical block 2071, async page read [ 42.518072][ T3500] syz.0.16: attempt to access beyond end of device [ 42.518072][ T3500] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 42.531387][ T3500] Buffer I/O error on dev loop0, logical block 2072, async page read [ 42.539765][ T3492] syz.0.16: attempt to access beyond end of device [ 42.539765][ T3492] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 42.553243][ T3492] Buffer I/O error on dev loop0, logical block 2065, async page read [ 42.578277][ T3482] kexec: Could not allocate control_code_buffer [ 42.619704][ T3492] syz.0.16: attempt to access beyond end of device [ 42.619704][ T3492] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 42.633941][ T3492] Buffer I/O error on dev loop0, logical block 2066, async page read [ 42.660919][ T3509] loop3: detected capacity change from 0 to 2048 [ 42.695141][ T3509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.756224][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.779494][ C0] hrtimer: interrupt took 60436 ns [ 42.796825][ T3509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20'. [ 43.091123][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.592272][ T3513] syz.4.21 (3513) used greatest stack depth: 10896 bytes left [ 43.664383][ T3533] netlink: 156 bytes leftover after parsing attributes in process `syz.1.26'. [ 43.674492][ T3533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 43.683964][ T3523] loop3: detected capacity change from 0 to 512 [ 43.697440][ T3533] loop1: detected capacity change from 0 to 128 [ 43.722602][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.738470][ T3523] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.740855][ T3537] loop2: detected capacity change from 0 to 1024 [ 43.777838][ T3523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25'. [ 43.781783][ T3537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.910163][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.921569][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.954084][ T3544] loop0: detected capacity change from 0 to 128 [ 44.082469][ T3548] syz.3.31 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.104080][ T3554] loop2: detected capacity change from 0 to 128 [ 44.494649][ T3559] loop4: detected capacity change from 0 to 512 [ 44.494706][ T3557] loop1: detected capacity change from 0 to 128 [ 44.511938][ T3559] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 44.522761][ T3559] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.34: iget: bad i_size value: -67835469387268086 [ 44.559169][ T3559] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.34: couldn't read orphan inode 15 (err -117) [ 44.587553][ T3559] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.600334][ T3559] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.614286][ T3559] EXT4-fs error (device loop4): ext4_add_entry:2419: inode #2: comm syz.4.34: Directory hole found for htree leaf block 0 [ 44.776330][ T3568] loop1: detected capacity change from 0 to 1024 [ 44.788415][ T3306] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 44.820796][ T3568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.850623][ T3576] loop4: detected capacity change from 0 to 128 [ 44.874585][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.939090][ T3580] loop2: detected capacity change from 0 to 512 [ 44.955621][ T3585] loop1: detected capacity change from 0 to 128 [ 44.979879][ T3580] EXT4-fs: Ignoring removed nobh option [ 45.001613][ T3580] EXT4-fs: journaled quota format not specified [ 45.009275][ T3585] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.031058][ T3585] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.076966][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.088236][ T3593] lo: entered promiscuous mode [ 45.115168][ T3593] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 45.154362][ T3598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.165170][ T3598] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 45.180783][ T3583] loop3: detected capacity change from 0 to 512 [ 45.187384][ T3593] loop2: detected capacity change from 0 to 512 [ 45.196919][ T3593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.215387][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.236570][ T3593] EXT4-fs (loop2): 1 orphan inode deleted [ 45.237652][ T3602] capability: warning: `GPL' uses deprecated v2 capabilities in a way that may be insecure [ 45.242887][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.266296][ T52] __quota_error: 390 callbacks suppressed [ 45.266312][ T52] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.266360][ T3593] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.290128][ T3583] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.294017][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 45.327151][ T3603] loop4: detected capacity change from 0 to 128 [ 45.343908][ T29] audit: type=1400 audit(1745684683.660:507): avc: denied { read write } for pid=3597 comm="syz.1.47" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.367849][ T29] audit: type=1400 audit(1745684683.660:508): avc: denied { open } for pid=3597 comm="syz.1.47" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.394597][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.426029][ T29] audit: type=1400 audit(1745684683.740:509): avc: denied { ioctl } for pid=3608 comm="syz.2.50" path="socket:[5208]" dev="sockfs" ino=5208 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.451042][ T29] audit: type=1400 audit(1745684683.740:510): avc: denied { bind } for pid=3608 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.470602][ T29] audit: type=1400 audit(1745684683.740:511): avc: denied { connect } for pid=3608 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.490664][ T29] audit: type=1400 audit(1745684683.740:512): avc: denied { read } for pid=3608 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.510842][ T3598] syz.1.47 (3598) used greatest stack depth: 10728 bytes left [ 45.540523][ T3611] loop1: detected capacity change from 0 to 128 [ 45.557031][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.609523][ T29] audit: type=1326 audit(1745684683.920:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.1.53" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f521442e969 code=0x0 [ 45.635126][ T29] audit: type=1400 audit(1745684683.950:514): avc: denied { execute } for pid=3617 comm="syz.3.54" path="/9/cpu.stat" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.662194][ T3622] loop1: detected capacity change from 0 to 128 [ 45.677198][ T3625] loop3: detected capacity change from 0 to 128 [ 45.718565][ T3631] loop3: detected capacity change from 0 to 128 [ 45.767192][ T29] audit: type=1400 audit(1745684684.080:515): avc: denied { write } for pid=3632 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.201309][ T3650] loop4: detected capacity change from 0 to 128 [ 46.209997][ T3647] loop0: detected capacity change from 0 to 512 [ 46.245245][ T3647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.249004][ T3652] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET) [ 46.278374][ T3647] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.395040][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.433680][ T3660] loop0: detected capacity change from 0 to 128 [ 46.443135][ T3660] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.458653][ T3663] FAULT_INJECTION: forcing a failure. [ 46.458653][ T3663] name failslab, interval 1, probability 0, space 0, times 0 [ 46.471638][ T3663] CPU: 1 UID: 0 PID: 3663 Comm: syz.1.67 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 46.471664][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.471675][ T3663] Call Trace: [ 46.471760][ T3663] [ 46.471844][ T3663] __dump_stack+0x1d/0x30 [ 46.471868][ T3663] dump_stack_lvl+0xe8/0x140 [ 46.471886][ T3663] dump_stack+0x15/0x1b [ 46.471901][ T3663] should_fail_ex+0x265/0x280 [ 46.471937][ T3663] ? alloc_netdev_mqs+0x829/0xab0 [ 46.472079][ T3663] should_failslab+0x8c/0xb0 [ 46.472107][ T3663] __kmalloc_cache_noprof+0x4c/0x320 [ 46.472166][ T3663] alloc_netdev_mqs+0x829/0xab0 [ 46.472211][ T3663] ip6_tnl_locate+0x37e/0x4a0 [ 46.472246][ T3663] ip6_tnl_siocdevprivate+0x550/0x920 [ 46.472297][ T3663] dev_ifsioc+0x8f5/0xaa0 [ 46.472319][ T3663] dev_ioctl+0x78d/0x960 [ 46.472336][ T3663] sock_ioctl+0x593/0x610 [ 46.472358][ T3663] ? __pfx_sock_ioctl+0x10/0x10 [ 46.472385][ T3663] __se_sys_ioctl+0xcb/0x140 [ 46.472476][ T3663] __x64_sys_ioctl+0x43/0x50 [ 46.472500][ T3663] x64_sys_call+0x19a8/0x2fb0 [ 46.472525][ T3663] do_syscall_64+0xd0/0x1a0 [ 46.472581][ T3663] ? clear_bhb_loop+0x25/0x80 [ 46.472607][ T3663] ? clear_bhb_loop+0x25/0x80 [ 46.472633][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.472659][ T3663] RIP: 0033:0x7f521442e969 [ 46.472723][ T3663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.472751][ T3663] RSP: 002b:00007f5212a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.472773][ T3663] RAX: ffffffffffffffda RBX: 00007f5214655fa0 RCX: 00007f521442e969 [ 46.472788][ T3663] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 46.472801][ T3663] RBP: 00007f5212a97090 R08: 0000000000000000 R09: 0000000000000000 [ 46.472815][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.472900][ T3663] R13: 0000000000000000 R14: 00007f5214655fa0 R15: 00007ffcc2aa4788 [ 46.472919][ T3663] [ 46.685312][ T3660] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.704754][ T3666] loop2: detected capacity change from 0 to 1024 [ 46.717282][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.736950][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.805207][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.926784][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.935287][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.112533][ T3683] bridge0: entered allmulticast mode [ 47.429826][ T3699] __nla_validate_parse: 9 callbacks suppressed [ 47.429860][ T3699] netlink: 156 bytes leftover after parsing attributes in process `syz.4.77'. [ 47.447315][ T3696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 47.456147][ T3696] netlink: 108 bytes leftover after parsing attributes in process `syz.3.78'. [ 47.459887][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 47.479606][ T3696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 47.488625][ T3698] loop1: detected capacity change from 0 to 2048 [ 47.488826][ T3696] netlink: 108 bytes leftover after parsing attributes in process `syz.3.78'. [ 47.504296][ T3696] netlink: 84 bytes leftover after parsing attributes in process `syz.3.78'. [ 47.514632][ T3699] loop4: detected capacity change from 0 to 128 [ 47.522492][ T3700] loop3: detected capacity change from 0 to 128 [ 47.533979][ T3700] ======================================================= [ 47.533979][ T3700] WARNING: The mand mount option has been deprecated and [ 47.533979][ T3700] and is ignored by this kernel. Remove the mand [ 47.533979][ T3700] option from the mount to silence this warning. [ 47.533979][ T3700] ======================================================= [ 47.575085][ T3699] bio_check_eod: 710 callbacks suppressed [ 47.575101][ T3699] syz.4.77: attempt to access beyond end of device [ 47.575101][ T3699] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 47.583546][ T3296] Alternate GPT is invalid, using primary GPT. [ 47.594709][ T3699] buffer_io_error: 710 callbacks suppressed [ 47.594728][ T3699] Buffer I/O error on dev loop4, logical block 2065, async page read [ 47.601094][ T3296] loop1: p1 p2 p3 [ 47.607473][ T3699] syz.4.77: attempt to access beyond end of device [ 47.607473][ T3699] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 47.634532][ T3699] Buffer I/O error on dev loop4, logical block 2066, async page read [ 47.663932][ T3699] syz.4.77: attempt to access beyond end of device [ 47.663932][ T3699] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 47.678236][ T3699] Buffer I/O error on dev loop4, logical block 2067, async page read [ 47.726602][ T3703] loop3: detected capacity change from 0 to 128 [ 47.743820][ T3703] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.758908][ T3703] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.763656][ T3698] Alternate GPT is invalid, using primary GPT. [ 47.776318][ T3698] loop1: p1 p2 p3 [ 47.785561][ T3699] syz.4.77: attempt to access beyond end of device [ 47.785561][ T3699] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 47.799669][ T3699] Buffer I/O error on dev loop4, logical block 2068, async page read [ 47.808155][ T3699] syz.4.77: attempt to access beyond end of device [ 47.808155][ T3699] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 47.822101][ T3699] Buffer I/O error on dev loop4, logical block 2069, async page read [ 47.831951][ T3699] syz.4.77: attempt to access beyond end of device [ 47.831951][ T3699] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 47.845886][ T3699] Buffer I/O error on dev loop4, logical block 2070, async page read [ 47.854645][ T3699] syz.4.77: attempt to access beyond end of device [ 47.854645][ T3699] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 47.867966][ T3699] Buffer I/O error on dev loop4, logical block 2071, async page read [ 47.876560][ T3699] syz.4.77: attempt to access beyond end of device [ 47.876560][ T3699] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 47.890350][ T3699] Buffer I/O error on dev loop4, logical block 2072, async page read [ 47.898892][ T3699] syz.4.77: attempt to access beyond end of device [ 47.898892][ T3699] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 47.912135][ T3699] Buffer I/O error on dev loop4, logical block 2065, async page read [ 47.922236][ T3699] syz.4.77: attempt to access beyond end of device [ 47.922236][ T3699] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 47.935808][ T3699] Buffer I/O error on dev loop4, logical block 2066, async page read [ 47.954892][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.962500][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.975176][ T3705] bridge0: entered allmulticast mode [ 47.984245][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.046681][ T3709] FAULT_INJECTION: forcing a failure. [ 48.046681][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 48.061477][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.064229][ T3709] CPU: 0 UID: 0 PID: 3709 Comm: syz.3.82 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 48.064270][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.064287][ T3709] Call Trace: [ 48.064298][ T3709] [ 48.064386][ T3709] __dump_stack+0x1d/0x30 [ 48.064417][ T3709] dump_stack_lvl+0xe8/0x140 [ 48.064498][ T3709] dump_stack+0x15/0x1b [ 48.064522][ T3709] should_fail_ex+0x265/0x280 [ 48.064568][ T3709] should_failslab+0x8c/0xb0 [ 48.064612][ T3709] kmem_cache_alloc_noprof+0x50/0x310 [ 48.064716][ T3709] ? skb_clone+0x151/0x1f0 [ 48.064826][ T3709] skb_clone+0x151/0x1f0 [ 48.064855][ T3709] __netlink_deliver_tap+0x2c9/0x500 [ 48.064908][ T3709] __netlink_sendskb+0xc3/0xd0 [ 48.064957][ T3709] netlink_dump+0x698/0x7f0 [ 48.065034][ T3709] __netlink_dump_start+0x43e/0x520 [ 48.065141][ T3709] genl_family_rcv_msg_dumpit+0x115/0x180 [ 48.069228][ T3709] ? __pfx_genl_start+0x10/0x10 [ 48.069272][ T3709] ? __pfx_genl_dumpit+0x10/0x10 [ 48.069305][ T3709] ? __pfx_genl_done+0x10/0x10 [ 48.069420][ T3709] genl_rcv_msg+0x3f0/0x460 [ 48.069457][ T3709] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 48.069494][ T3709] netlink_rcv_skb+0x120/0x220 [ 48.069546][ T3709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 48.069592][ T3709] genl_rcv+0x28/0x40 [ 48.069650][ T3709] netlink_unicast+0x59e/0x670 [ 48.069694][ T3709] netlink_sendmsg+0x58b/0x6b0 [ 48.069812][ T3709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.069859][ T3709] __sock_sendmsg+0x142/0x180 [ 48.069915][ T3709] ____sys_sendmsg+0x31e/0x4e0 [ 48.070023][ T3709] ___sys_sendmsg+0x17b/0x1d0 [ 48.070075][ T3709] __x64_sys_sendmsg+0xd4/0x160 [ 48.070111][ T3709] x64_sys_call+0x2999/0x2fb0 [ 48.070143][ T3709] do_syscall_64+0xd0/0x1a0 [ 48.070236][ T3709] ? clear_bhb_loop+0x25/0x80 [ 48.070267][ T3709] ? clear_bhb_loop+0x25/0x80 [ 48.070299][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.070329][ T3709] RIP: 0033:0x7ff308ece969 [ 48.070357][ T3709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.070382][ T3709] RSP: 002b:00007ff307537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.070422][ T3709] RAX: ffffffffffffffda RBX: 00007ff3090f5fa0 RCX: 00007ff308ece969 [ 48.070489][ T3709] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 48.070506][ T3709] RBP: 00007ff307537090 R08: 0000000000000000 R09: 0000000000000000 [ 48.070563][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.070580][ T3709] R13: 0000000000000000 R14: 00007ff3090f5fa0 R15: 00007ffc22cce708 [ 48.070609][ T3709] [ 48.095273][ T3711] loop1: detected capacity change from 0 to 1024 [ 48.235583][ T3709] loop3: detected capacity change from 0 to 164 [ 48.257145][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 48.261903][ T3606] udevd[3606]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 48.265962][ T3709] iso9660: Unknown parameter '0000000000000000000000018446744073709551615ÿÿ00000000000000000005' [ 48.352415][ T3711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.456045][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.530053][ T3725] loop1: detected capacity change from 0 to 128 [ 48.568709][ T3729] loop0: detected capacity change from 0 to 128 [ 48.587604][ T3732] loop4: detected capacity change from 0 to 128 [ 48.646572][ T3735] loop0: detected capacity change from 0 to 2048 [ 48.689301][ T3736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 48.701723][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.724140][ T3739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.94'. [ 48.733780][ T3739] netlink: 108 bytes leftover after parsing attributes in process `syz.4.94'. [ 48.769854][ T3739] loop4: detected capacity change from 0 to 128 [ 48.815124][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.896206][ T3748] loop0: detected capacity change from 0 to 1024 [ 48.922000][ T3748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.995312][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.033927][ T3759] loop0: detected capacity change from 0 to 128 [ 49.064124][ T3754] syz.4.99 (3754) used greatest stack depth: 10424 bytes left [ 49.078702][ T3760] loop1: detected capacity change from 0 to 128 [ 49.101448][ T3762] loop0: detected capacity change from 0 to 128 [ 49.157187][ T3770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.204555][ T3770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.216752][ T3774] loop4: detected capacity change from 0 to 2048 [ 49.235601][ T3774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.264828][ T3770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.326701][ T3770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.380617][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.414454][ T3781] loop3: detected capacity change from 0 to 128 [ 49.421678][ T3783] loop4: detected capacity change from 0 to 128 [ 49.435607][ T3770] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.453837][ T3770] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.482738][ T3786] loop2: detected capacity change from 0 to 2048 [ 49.484893][ T3770] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.511678][ T3770] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.531319][ T3786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.554055][ T3791] loop4: detected capacity change from 0 to 1024 [ 49.582206][ T3791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.615059][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.627363][ T3800] loop0: detected capacity change from 0 to 128 [ 49.644346][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.700914][ T3804] loop2: detected capacity change from 0 to 128 [ 49.824743][ T3816] loop4: detected capacity change from 0 to 128 [ 49.854587][ T3799] loop3: detected capacity change from 0 to 512 [ 49.874460][ T3799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.874538][ T3799] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.964867][ T3822] loop1: detected capacity change from 0 to 128 [ 50.039225][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.039373][ T3822] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.054328][ T3824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.058303][ T3822] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.097158][ T3824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.097197][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.101734][ T3828] $Hÿ: renamed from bond0 (while UP) [ 50.103535][ T3828] $Hÿ: entered promiscuous mode [ 50.103590][ T3828] bond_slave_0: entered promiscuous mode [ 50.103789][ T3828] bond_slave_1: entered promiscuous mode [ 50.150034][ T3824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.235810][ T3832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.275578][ T3824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.316215][ T3832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.364748][ T3824] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.370250][ T3824] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.392874][ T3835] loop3: detected capacity change from 0 to 128 [ 50.395020][ T3832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.417564][ T3824] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.420819][ T3824] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.446418][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 50.446438][ T29] audit: type=1400 audit(1745684688.760:715): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.498059][ T3832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.529491][ T29] audit: type=1326 audit(1745684688.840:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.555904][ T29] audit: type=1326 audit(1745684688.870:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.555946][ T29] audit: type=1326 audit(1745684688.870:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.556001][ T29] audit: type=1326 audit(1745684688.870:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.556401][ T29] audit: type=1326 audit(1745684688.870:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.556678][ T29] audit: type=1326 audit(1745684688.870:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.556826][ T29] audit: type=1326 audit(1745684688.870:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.556955][ T29] audit: type=1326 audit(1745684688.870:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.557020][ T29] audit: type=1326 audit(1745684688.870:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1503a7e969 code=0x7ffc0000 [ 50.631014][ T3843] loop0: detected capacity change from 0 to 128 [ 50.633406][ T3832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.643113][ T3832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.646654][ T3832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.650820][ T3832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.714028][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.714069][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.715273][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.715300][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.761626][ T3854] loop1: detected capacity change from 0 to 128 [ 50.828398][ T3855] loop3: detected capacity change from 0 to 1024 [ 50.860290][ T3856] loop0: detected capacity change from 0 to 128 [ 50.877793][ T3852] loop4: detected capacity change from 0 to 128 [ 50.917223][ T3855] EXT4-fs: Ignoring removed orlov option [ 50.971834][ T3852] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.992240][ T3855] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 50.993290][ T3852] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.024971][ T3855] kernel profiling enabled (shift: 62) [ 51.030571][ T3855] profiling shift: 62 too large [ 51.118174][ T3861] loop2: detected capacity change from 0 to 8192 [ 51.181648][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.207653][ T3874] loop3: detected capacity change from 0 to 128 [ 51.292487][ T3880] loop4: detected capacity change from 0 to 128 [ 51.495007][ T3881] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 51.503086][ T3881] FAT-fs (loop2): Filesystem has been set read-only [ 51.530548][ T3861] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 51.726523][ T3889] loop4: detected capacity change from 0 to 2048 [ 51.797604][ T3889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.870448][ T3901] loop2: detected capacity change from 0 to 128 [ 52.304716][ T3901] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.391092][ T3901] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.467413][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.508045][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.607398][ T3915] __nla_validate_parse: 13 callbacks suppressed [ 52.607415][ T3915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 52.625470][ T3917] loop0: detected capacity change from 0 to 512 [ 52.646030][ T3917] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 52.667799][ T3917] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.156: iget: bad i_size value: -67835469387268086 [ 52.688018][ T3917] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.156: couldn't read orphan inode 15 (err -117) [ 52.702036][ T3921] loop4: detected capacity change from 0 to 128 [ 52.708067][ T3919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.709049][ T3917] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.717339][ T3919] netlink: 108 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.729726][ T3917] ext2 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.753331][ T3919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.766727][ T3919] netlink: 108 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.776520][ T3919] netlink: 84 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.785915][ T3917] EXT4-fs error (device loop0): ext4_add_entry:2419: inode #2: comm syz.0.156: Directory hole found for htree leaf block 0 [ 52.805614][ T3919] loop1: detected capacity change from 0 to 128 [ 52.814196][ T3924] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 52.853883][ T3924] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 52.885151][ T3927] loop3: detected capacity change from 0 to 512 [ 52.886688][ T3305] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 52.918803][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.936606][ T3927] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.950907][ T3924] serio: Serial port ptm0 [ 52.966471][ T3927] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 52.986616][ T3927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.160'. [ 52.996282][ T3927] unsupported nlmsg_type 40 [ 53.003731][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.017985][ T3924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.032299][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.051042][ T3939] loop4: detected capacity change from 0 to 128 [ 53.082904][ T3939] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.102251][ T3939] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.122644][ T3944] loop2: detected capacity change from 0 to 2048 [ 53.152337][ T3944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.169188][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.186306][ T3944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.165'. [ 53.200389][ T3952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.166'. [ 53.210660][ T3952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 53.220618][ T3954] FAULT_INJECTION: forcing a failure. [ 53.220618][ T3954] name failslab, interval 1, probability 0, space 0, times 0 [ 53.223523][ T3952] loop3: detected capacity change from 0 to 128 [ 53.234169][ T3954] CPU: 1 UID: 0 PID: 3954 Comm: syz.4.167 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 53.234317][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.234335][ T3954] Call Trace: [ 53.234344][ T3954] [ 53.234356][ T3954] __dump_stack+0x1d/0x30 [ 53.234386][ T3954] dump_stack_lvl+0xe8/0x140 [ 53.234413][ T3954] dump_stack+0x15/0x1b [ 53.234437][ T3954] should_fail_ex+0x265/0x280 [ 53.234555][ T3954] should_failslab+0x8c/0xb0 [ 53.234596][ T3954] kmem_cache_alloc_noprof+0x50/0x310 [ 53.234643][ T3954] ? create_new_namespaces+0x3c/0x410 [ 53.234699][ T3954] ? __rcu_read_unlock+0x4f/0x70 [ 53.234772][ T3954] create_new_namespaces+0x3c/0x410 [ 53.234817][ T3954] __se_sys_setns+0x1b8/0xf10 [ 53.234865][ T3954] __x64_sys_setns+0x31/0x40 [ 53.234941][ T3954] x64_sys_call+0x2e95/0x2fb0 [ 53.234969][ T3954] do_syscall_64+0xd0/0x1a0 [ 53.234999][ T3954] ? clear_bhb_loop+0x25/0x80 [ 53.235074][ T3954] ? clear_bhb_loop+0x25/0x80 [ 53.235104][ T3954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.235134][ T3954] RIP: 0033:0x7f1503a7e969 [ 53.235285][ T3954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.235311][ T3954] RSP: 002b:00007f15020e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 53.235338][ T3954] RAX: ffffffffffffffda RBX: 00007f1503ca5fa0 RCX: 00007f1503a7e969 [ 53.235356][ T3954] RDX: 0000000000000000 RSI: 0000000034020000 RDI: 0000000000000006 [ 53.235374][ T3954] RBP: 00007f15020e7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.235391][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.235408][ T3954] R13: 0000000000000000 R14: 00007f1503ca5fa0 R15: 00007ffffdc606a8 [ 53.235462][ T3954] [ 53.430268][ T3952] bio_check_eod: 614 callbacks suppressed [ 53.430287][ T3952] syz.3.166: attempt to access beyond end of device [ 53.430287][ T3952] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 53.449345][ T3952] buffer_io_error: 614 callbacks suppressed [ 53.449396][ T3952] Buffer I/O error on dev loop3, logical block 2065, async page read [ 53.464811][ T3952] syz.3.166: attempt to access beyond end of device [ 53.464811][ T3952] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 53.478079][ T3952] Buffer I/O error on dev loop3, logical block 2066, async page read [ 53.487404][ T3952] syz.3.166: attempt to access beyond end of device [ 53.487404][ T3952] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 53.487395][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.500667][ T3952] Buffer I/O error on dev loop3, logical block 2067, async page read [ 53.500704][ T3952] syz.3.166: attempt to access beyond end of device [ 53.500704][ T3952] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 53.533330][ T3952] Buffer I/O error on dev loop3, logical block 2068, async page read [ 53.559771][ T3952] syz.3.166: attempt to access beyond end of device [ 53.559771][ T3952] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 53.573116][ T3952] Buffer I/O error on dev loop3, logical block 2069, async page read [ 53.599060][ T3952] syz.3.166: attempt to access beyond end of device [ 53.599060][ T3952] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 53.608695][ T3965] loop2: detected capacity change from 0 to 512 [ 53.613461][ T3952] Buffer I/O error on dev loop3, logical block 2070, async page read [ 53.629276][ T3952] syz.3.166: attempt to access beyond end of device [ 53.629276][ T3952] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 53.642765][ T3952] Buffer I/O error on dev loop3, logical block 2071, async page read [ 53.654569][ T3965] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 53.660573][ T3952] syz.3.166: attempt to access beyond end of device [ 53.660573][ T3952] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 53.670386][ T3965] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.171: iget: bad i_size value: -67835469387268086 [ 53.675941][ T3952] Buffer I/O error on dev loop3, logical block 2072, async page read [ 53.699167][ T3965] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.171: couldn't read orphan inode 15 (err -117) [ 53.700040][ T3947] syz.3.166: attempt to access beyond end of device [ 53.700040][ T3947] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 53.716157][ T3965] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.724492][ T3947] Buffer I/O error on dev loop3, logical block 2065, async page read [ 53.737046][ T3965] ext2 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.760509][ T3947] syz.3.166: attempt to access beyond end of device [ 53.760509][ T3947] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 53.773975][ T3947] Buffer I/O error on dev loop3, logical block 2066, async page read [ 53.780010][ T3965] EXT4-fs error (device loop2): ext4_add_entry:2419: inode #2: comm syz.2.171: Directory hole found for htree leaf block 0 [ 53.834113][ T3972] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 53.879401][ T3978] loop0: detected capacity change from 0 to 128 [ 53.896091][ T3315] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 53.912664][ T3978] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.947256][ T3978] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.963511][ T3981] loop4: detected capacity change from 0 to 128 [ 54.098002][ T3993] loop3: detected capacity change from 0 to 512 [ 54.098854][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.120575][ T3993] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 54.156559][ T3993] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.183: iget: bad i_size value: -67835469387268086 [ 54.193937][ T3993] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.183: couldn't read orphan inode 15 (err -117) [ 54.225348][ T3993] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.241333][ T3993] ext2 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.256579][ T3993] EXT4-fs error (device loop3): ext4_add_entry:2419: inode #2: comm syz.3.183: Directory hole found for htree leaf block 0 [ 54.308196][ T4005] loop0: detected capacity change from 0 to 512 [ 54.316034][ T4005] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 54.406432][ T4008] netlink: 'syz.4.187': attribute type 4 has an invalid length. [ 54.515639][ T4005] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.188: iget: bad i_size value: -67835469387268086 [ 54.529221][ T4005] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.188: couldn't read orphan inode 15 (err -117) [ 54.549396][ T4005] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.622681][ T4005] ext2 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.651535][ T4005] EXT4-fs error (device loop0): ext4_add_entry:2419: inode #2: comm syz.0.188: Directory hole found for htree leaf block 0 [ 54.687525][ T3305] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 54.769854][ T4017] loop0: detected capacity change from 0 to 128 [ 54.882508][ T4021] loop0: detected capacity change from 0 to 128 [ 55.010115][ T4023] loop2: detected capacity change from 0 to 128 [ 55.019185][ T3311] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 55.039170][ T4025] loop1: detected capacity change from 0 to 128 [ 55.083669][ T4025] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.186082][ T4037] loop1: detected capacity change from 0 to 512 [ 55.199842][ T4037] EXT4-fs: Ignoring removed nobh option [ 55.205472][ T4037] EXT4-fs: Ignoring removed bh option [ 55.231335][ T4037] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.199: invalid indirect mapped block 256 (level 2) [ 55.244760][ T4029] loop3: detected capacity change from 0 to 512 [ 55.245827][ T4037] EXT4-fs (loop1): 2 truncates cleaned up [ 55.264334][ T4029] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.264891][ T4037] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.199: bg 0: block 5: invalid block bitmap [ 55.326811][ T4045] loop2: detected capacity change from 0 to 512 [ 55.330262][ T4037] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 55.345637][ T4037] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.345637][ T4037] [ 55.355606][ T4037] EXT4-fs (loop1): Total free blocks count 0 [ 55.361726][ T4037] EXT4-fs (loop1): Free/Dirty block details [ 55.367678][ T4037] EXT4-fs (loop1): free_blocks=0 [ 55.372687][ T4037] EXT4-fs (loop1): dirty_blocks=2 [ 55.377994][ T4037] EXT4-fs (loop1): Block reservation details [ 55.384138][ T4037] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 55.385174][ T4045] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 55.391030][ T4046] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.410855][ T4046] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.410855][ T4046] [ 55.423818][ T4045] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.201: iget: bad i_size value: -67835469387268086 [ 55.437634][ T4045] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.201: couldn't read orphan inode 15 (err -117) [ 55.455326][ T4045] ext2 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.461279][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 55.461299][ T29] audit: type=1400 audit(1745684689.779:927): avc: denied { map } for pid=4036 comm="syz.1.199" path="/31/file1/blkio.bfq.empty_time" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.499226][ T4037] serio: Serial port ptm0 [ 55.499579][ T4045] EXT4-fs error (device loop2): ext4_add_entry:2419: inode #2: comm syz.2.201: Directory hole found for htree leaf block 0 [ 55.509099][ T29] audit: type=1326 audit(1745684689.829:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.541721][ T29] audit: type=1326 audit(1745684689.829:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.566387][ T29] audit: type=1326 audit(1745684689.829:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.589941][ T29] audit: type=1326 audit(1745684689.829:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.607577][ T4055] loop4: detected capacity change from 0 to 128 [ 55.613324][ T29] audit: type=1326 audit(1745684689.829:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.613367][ T29] audit: type=1326 audit(1745684689.829:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.666392][ T29] audit: type=1326 audit(1745684689.829:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.689820][ T29] audit: type=1326 audit(1745684689.829:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.713192][ T29] audit: type=1326 audit(1745684689.829:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308ece969 code=0x7ffc0000 [ 55.720637][ T4054] loop3: detected capacity change from 0 to 128 [ 55.755116][ T4037] syz.1.199 (4037) used greatest stack depth: 10152 bytes left [ 55.803888][ T4063] loop3: detected capacity change from 0 to 128 [ 55.935930][ T4069] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 56.252004][ T4075] 9pnet_fd: Insufficient options for proto=fd [ 56.409154][ T4081] loop4: detected capacity change from 0 to 128 [ 56.638634][ T4083] loop4: detected capacity change from 0 to 512 [ 56.666602][ T4089] loop0: detected capacity change from 0 to 512 [ 56.702927][ T4089] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.788621][ T4083] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.885282][ T4101] loop0: detected capacity change from 0 to 128 [ 56.905426][ T4100] loop1: detected capacity change from 0 to 128 [ 56.992609][ T4103] loop3: detected capacity change from 0 to 128 [ 57.016643][ T4105] FAULT_INJECTION: forcing a failure. [ 57.016643][ T4105] name failslab, interval 1, probability 0, space 0, times 0 [ 57.029517][ T4105] CPU: 0 UID: 0 PID: 4105 Comm: syz.1.219 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 57.029544][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.029664][ T4105] Call Trace: [ 57.029673][ T4105] [ 57.029683][ T4105] __dump_stack+0x1d/0x30 [ 57.029710][ T4105] dump_stack_lvl+0xe8/0x140 [ 57.029730][ T4105] dump_stack+0x15/0x1b [ 57.029746][ T4105] should_fail_ex+0x265/0x280 [ 57.029869][ T4105] ? alloc_pipe_info+0xae/0x350 [ 57.029902][ T4105] should_failslab+0x8c/0xb0 [ 57.029931][ T4105] __kmalloc_cache_noprof+0x4c/0x320 [ 57.029954][ T4105] alloc_pipe_info+0xae/0x350 [ 57.030007][ T4105] fifo_open+0xa1/0x5d0 [ 57.030108][ T4105] do_dentry_open+0x646/0xa20 [ 57.030139][ T4105] ? __pfx_fifo_open+0x10/0x10 [ 57.030194][ T4105] vfs_open+0x37/0x1e0 [ 57.030280][ T4105] path_openat+0x1c5e/0x2170 [ 57.030304][ T4105] ? ilookup5+0x209/0x240 [ 57.030337][ T4105] ? getname_kernel+0x3c/0x1f0 [ 57.030441][ T4105] do_file_open_root+0x1d0/0x3f0 [ 57.030493][ T4105] file_open_root+0xfd/0x130 [ 57.030574][ T4105] do_handle_open+0x5d7/0x640 [ 57.030667][ T4105] __x64_sys_open_by_handle_at+0x44/0x50 [ 57.030693][ T4105] x64_sys_call+0xaa0/0x2fb0 [ 57.030716][ T4105] do_syscall_64+0xd0/0x1a0 [ 57.030743][ T4105] ? clear_bhb_loop+0x25/0x80 [ 57.030777][ T4105] ? clear_bhb_loop+0x25/0x80 [ 57.030852][ T4105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.030880][ T4105] RIP: 0033:0x7f521442e969 [ 57.030899][ T4105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.030920][ T4105] RSP: 002b:00007f5212a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 57.030943][ T4105] RAX: ffffffffffffffda RBX: 00007f5214655fa0 RCX: 00007f521442e969 [ 57.030958][ T4105] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 57.030969][ T4105] RBP: 00007f5212a97090 R08: 0000000000000000 R09: 0000000000000000 [ 57.031013][ T4105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.031024][ T4105] R13: 0000000000000000 R14: 00007f5214655fa0 R15: 00007ffcc2aa4788 [ 57.031042][ T4105] [ 58.252523][ T4133] 9pnet_fd: Insufficient options for proto=fd [ 58.359039][ T4136] loop4: detected capacity change from 0 to 128 [ 58.548095][ T4140] __nla_validate_parse: 16 callbacks suppressed [ 58.548110][ T4140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 58.565220][ T4140] netlink: 108 bytes leftover after parsing attributes in process `syz.4.231'. [ 58.574804][ T4140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 58.584146][ T4140] netlink: 108 bytes leftover after parsing attributes in process `syz.4.231'. [ 58.593241][ T4140] netlink: 84 bytes leftover after parsing attributes in process `syz.4.231'. [ 58.603187][ T4141] loop4: detected capacity change from 0 to 128 [ 58.628717][ T4143] loop4: detected capacity change from 0 to 512 [ 58.635991][ T4143] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 58.646527][ T4143] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.232: iget: bad i_size value: -67835469387268086 [ 58.661433][ T4143] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.232: couldn't read orphan inode 15 (err -117) [ 58.673899][ T4143] ext2 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.691134][ T4143] EXT4-fs error (device loop4): ext4_add_entry:2419: inode #2: comm syz.4.232: Directory hole found for htree leaf block 0 [ 58.861626][ T4150] loop4: detected capacity change from 0 to 512 [ 58.874378][ T4150] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 58.892977][ T4150] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.234: iget: bad i_size value: -67835469387268086 [ 58.907200][ T4150] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.234: couldn't read orphan inode 15 (err -117) [ 58.927935][ T4150] ext2 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.959482][ T4150] EXT4-fs error (device loop4): ext4_add_entry:2419: inode #2: comm syz.4.234: Directory hole found for htree leaf block 0 [ 58.984542][ T4166] loop2: detected capacity change from 0 to 128 [ 59.022066][ T4167] loop3: detected capacity change from 0 to 2048 [ 59.091720][ T4171] netlink: 156 bytes leftover after parsing attributes in process `syz.2.241'. [ 59.100884][ T4171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 59.107448][ T4173] loop4: detected capacity change from 0 to 512 [ 59.116188][ T4171] loop2: detected capacity change from 0 to 128 [ 59.126886][ T4173] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 59.136217][ T4171] bio_check_eod: 566 callbacks suppressed [ 59.136233][ T4171] syz.2.241: attempt to access beyond end of device [ 59.136233][ T4171] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 59.145059][ T4173] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.242: iget: bad i_size value: -67835469387268086 [ 59.155270][ T4171] buffer_io_error: 566 callbacks suppressed [ 59.155288][ T4171] Buffer I/O error on dev loop2, logical block 2065, async page read [ 59.169356][ T4173] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.242: couldn't read orphan inode 15 (err -117) [ 59.195685][ T4173] ext2 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.225748][ T4171] syz.2.241: attempt to access beyond end of device [ 59.225748][ T4171] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 59.239867][ T4171] Buffer I/O error on dev loop2, logical block 2066, async page read [ 59.249238][ T4173] EXT4-fs error (device loop4): ext4_add_entry:2419: inode #2: comm syz.4.242: Directory hole found for htree leaf block 0 [ 59.253711][ T4171] syz.2.241: attempt to access beyond end of device [ 59.253711][ T4171] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 59.276073][ T4171] Buffer I/O error on dev loop2, logical block 2067, async page read [ 59.285315][ T4171] syz.2.241: attempt to access beyond end of device [ 59.285315][ T4171] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 59.298753][ T4171] Buffer I/O error on dev loop2, logical block 2068, async page read [ 59.307010][ T4171] syz.2.241: attempt to access beyond end of device [ 59.307010][ T4171] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 59.320234][ T4171] Buffer I/O error on dev loop2, logical block 2069, async page read [ 59.328326][ T4171] syz.2.241: attempt to access beyond end of device [ 59.328326][ T4171] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 59.341524][ T4171] Buffer I/O error on dev loop2, logical block 2070, async page read [ 59.349727][ T4171] syz.2.241: attempt to access beyond end of device [ 59.349727][ T4171] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 59.363019][ T4171] Buffer I/O error on dev loop2, logical block 2071, async page read [ 59.371153][ T4171] syz.2.241: attempt to access beyond end of device [ 59.371153][ T4171] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 59.384458][ T4171] Buffer I/O error on dev loop2, logical block 2072, async page read [ 59.392605][ T4171] syz.2.241: attempt to access beyond end of device [ 59.392605][ T4171] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 59.405851][ T4171] Buffer I/O error on dev loop2, logical block 2065, async page read [ 59.414096][ T4171] syz.2.241: attempt to access beyond end of device [ 59.414096][ T4171] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 59.427341][ T4171] Buffer I/O error on dev loop2, logical block 2066, async page read [ 59.487600][ T4181] FAULT_INJECTION: forcing a failure. [ 59.487600][ T4181] name failslab, interval 1, probability 0, space 0, times 0 [ 59.500378][ T4181] CPU: 0 UID: 0 PID: 4181 Comm: syz.4.245 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 59.500403][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.500413][ T4181] Call Trace: [ 59.500419][ T4181] [ 59.500479][ T4181] __dump_stack+0x1d/0x30 [ 59.500497][ T4181] dump_stack_lvl+0xe8/0x140 [ 59.500514][ T4181] dump_stack+0x15/0x1b [ 59.500528][ T4181] should_fail_ex+0x265/0x280 [ 59.500556][ T4181] ? __se_sys_mount+0xef/0x2e0 [ 59.500612][ T4181] should_failslab+0x8c/0xb0 [ 59.500637][ T4181] __kmalloc_cache_noprof+0x4c/0x320 [ 59.500656][ T4181] ? memdup_user+0x99/0xd0 [ 59.500706][ T4181] __se_sys_mount+0xef/0x2e0 [ 59.500726][ T4181] ? fput+0x8f/0xc0 [ 59.500740][ T4181] ? ksys_write+0x16e/0x1a0 [ 59.500860][ T4181] __x64_sys_mount+0x67/0x80 [ 59.500883][ T4181] x64_sys_call+0xd36/0x2fb0 [ 59.500901][ T4181] do_syscall_64+0xd0/0x1a0 [ 59.500950][ T4181] ? clear_bhb_loop+0x25/0x80 [ 59.500985][ T4181] ? clear_bhb_loop+0x25/0x80 [ 59.501011][ T4181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.501059][ T4181] RIP: 0033:0x7f1503a7e969 [ 59.501072][ T4181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.501087][ T4181] RSP: 002b:00007f15020e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.501103][ T4181] RAX: ffffffffffffffda RBX: 00007f1503ca5fa0 RCX: 00007f1503a7e969 [ 59.501114][ T4181] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 59.501124][ T4181] RBP: 00007f15020e7090 R08: 00002000000003c0 R09: 0000000000000000 [ 59.501172][ T4181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.501182][ T4181] R13: 0000000000000000 R14: 00007f1503ca5fa0 R15: 00007ffffdc606a8 [ 59.501223][ T4181] [ 59.735162][ T4183] program syz.0.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.794963][ T4193] loop3: detected capacity change from 0 to 128 [ 59.852200][ T4197] loop3: detected capacity change from 0 to 512 [ 59.859658][ T4197] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 59.870358][ T4197] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.252: iget: bad i_size value: -67835469387268086 [ 59.892047][ T4197] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.252: couldn't read orphan inode 15 (err -117) [ 59.906009][ T4197] ext2 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.940901][ T4197] EXT4-fs error (device loop3): ext4_add_entry:2419: inode #2: comm syz.3.252: Directory hole found for htree leaf block 0 [ 59.978847][ T4205] 9pnet_fd: Insufficient options for proto=fd [ 60.026845][ T4208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.059880][ T4211] binfmt_misc: register: failed to install interpreter file ./file0 [ 60.120995][ T4214] loop1: detected capacity change from 0 to 128 [ 60.131541][ T4208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.221460][ T4208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.289015][ T4220] loop0: detected capacity change from 0 to 2048 [ 60.313033][ T4208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.382923][ T4208] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.392114][ T4214] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.468638][ T4208] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.481453][ T4208] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.494694][ T4208] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.511607][ T4220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.259'. [ 60.695330][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 60.695349][ T29] audit: type=1326 audit(1745684691.018:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.725156][ T29] audit: type=1326 audit(1745684691.018:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.750582][ T29] audit: type=1326 audit(1745684691.018:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.774409][ T29] audit: type=1326 audit(1745684691.018:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.774421][ T4228] loop1: detected capacity change from 0 to 2048 [ 60.804999][ T29] audit: type=1326 audit(1745684691.018:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.828583][ T29] audit: type=1326 audit(1745684691.018:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.852454][ T29] audit: type=1326 audit(1745684691.018:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.876201][ T29] audit: type=1326 audit(1745684691.018:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.900045][ T29] audit: type=1326 audit(1745684691.018:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 60.923692][ T29] audit: type=1326 audit(1745684691.018:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42165e969 code=0x7ffc0000 [ 61.080991][ T4238] netlink: 156 bytes leftover after parsing attributes in process `syz.3.263'. [ 61.109039][ T4228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.261'. [ 61.161762][ T4240] loop4: detected capacity change from 0 to 128 [ 61.169225][ T4238] loop3: detected capacity change from 0 to 128 [ 61.189486][ T4220] syz.0.259 (4220) used greatest stack depth: 9800 bytes left [ 61.207448][ T3305] ================================================================== [ 61.215887][ T3305] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 61.223638][ T3305] [ 61.225979][ T3305] read-write to 0xffff888237c26b70 of 8 bytes by task 4238 on cpu 0: [ 61.234780][ T3305] find_get_block_common+0x4f0/0x960 [ 61.240294][ T3305] bdev_getblk+0x7f/0x3d0 [ 61.244919][ T3305] __bread_gfp+0x51/0x250 [ 61.249415][ T3305] fat_get_entry+0x46e/0x5d0 [ 61.254513][ T3305] fat_search_long+0x23b/0x9c0 [ 61.259516][ T3305] vfat_lookup+0xd5/0x2d0 [ 61.263882][ T3305] path_openat+0xcf0/0x2170 [ 61.268500][ T3305] do_filp_open+0x109/0x230 [ 61.273027][ T3305] do_sys_openat2+0xa6/0x110 [ 61.277721][ T3305] __x64_sys_openat+0xf2/0x120 [ 61.282579][ T3305] x64_sys_call+0x1af/0x2fb0 [ 61.287250][ T3305] do_syscall_64+0xd0/0x1a0 [ 61.291771][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.297954][ T3305] [ 61.300319][ T3305] read to 0xffff888237c26b70 of 8 bytes by task 3305 on cpu 1: [ 61.308405][ T3305] has_bh_in_lru+0x35/0x1f0 [ 61.312941][ T3305] smp_call_function_many_cond+0x394/0xb20 [ 61.318802][ T3305] on_each_cpu_cond_mask+0x3c/0x80 [ 61.323955][ T3305] invalidate_bh_lrus+0x2a/0x30 [ 61.328852][ T3305] blkdev_flush_mapping+0x9a/0x1a0 [ 61.333988][ T3305] bdev_release+0x2bf/0x3d0 [ 61.338540][ T3305] blkdev_release+0x15/0x20 [ 61.343086][ T3305] __fput+0x298/0x650 [ 61.347083][ T3305] ____fput+0x1c/0x30 [ 61.351078][ T3305] task_work_run+0x12e/0x1a0 [ 61.355686][ T3305] resume_user_mode_work+0x6a/0x70 [ 61.360809][ T3305] syscall_exit_to_user_mode+0x77/0xb0 [ 61.366333][ T3305] do_syscall_64+0xdd/0x1a0 [ 61.370913][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.376845][ T3305] [ 61.379278][ T3305] value changed: 0xffff8881051328f0 -> 0xffff888105132d00 [ 61.386402][ T3305] [ 61.388736][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 61.394980][ T3305] CPU: 1 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 61.407593][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.417667][ T3305] ==================================================================