last executing test programs: 26.727542065s ago: executing program 0 (id=380): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 26.680960795s ago: executing program 0 (id=381): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x4008844) (fail_nth: 3) 26.648160866s ago: executing program 0 (id=384): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x800000, 0x2) 26.342069579s ago: executing program 0 (id=390): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") creat(&(0x7f0000000180)='./file1\x00', 0x30) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\xf30\xf5:J\xfeQ\xb0\xf3a:\xad\xbb\xc8j\xeb;+\x93\xb8`\xf5g\xd4\xda\x8d\x01\xac{\x05\xc3\xb0') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x50) unlink(&(0x7f0000000040)='./file1\x00') unlink(&(0x7f0000000100)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0xed24a148cfe3a75d, 0x7e, 0x4f, 0xfffffffc, 0x63, @mcast1, @mcast1, 0x8000, 0x7, 0x4, 0x5}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES32=r4, @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = syz_open_procfs(r6, &(0x7f0000000040)='stat\x00') pread64(r8, &(0x7f0000000240)=""/106, 0x6a, 0x7fff) r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file1/file0\x00', 0x200000, &(0x7f00000008c0)={[], [{@appraise}, {@flag='lazytime'}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_gt}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xe}}, './file0/file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003000000ff0f00000700000010000100", @ANYRES32=r4, @ANYBLOB="03000000000000000000000000000000000000000a61433709dda36d52f5757351521865b40058a0cbd548993b95fa20deb070983f7cedbf4ab54b", @ANYRES32=r3, @ANYRES32=r11, @ANYBLOB="050000000100"/24, @ANYRES32=r5, @ANYBLOB], 0x50) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000600)={0x23e7, 0x4, 0x1, 0x6}) socketpair(0x18, 0x2, 0x0, &(0x7f0000000040)) 25.745508997s ago: executing program 0 (id=393): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") 24.477325043s ago: executing program 0 (id=405): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") 24.477060403s ago: executing program 32 (id=405): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") 2.481918199s ago: executing program 1 (id=839): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 2.33079587s ago: executing program 1 (id=844): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x55b, &(0x7f0000000f80)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x70de, 0x100) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r3}, 0x18) add_key(&(0x7f0000000380)='id_legacy\x00', 0x0, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="720ac4ff03000000711006000000000095000000008d0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x7}, 0x0, 0xfffffffffffffff8, 0x800000, 0x7, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='timer_start\x00', 0xffffffffffffffff, 0x0, 0x40000006}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000530420002bbd7000fbdbdf25000000006c932628d9916903935433a5612b9479bd2623b2c207f03c9a56ea5c"], 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.436948792s ago: executing program 1 (id=858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x100, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6c07}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 1.366934382s ago: executing program 1 (id=860): get_mempolicy(0x0, &(0x7f0000000140), 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {@in6=@empty, 0x4d0, 0x32}, @in=@multicast2, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0x100000}, {0xffffffff}, 0x1, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.297322823s ago: executing program 3 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.275353064s ago: executing program 3 (id=863): syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 1.236725865s ago: executing program 5 (id=864): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x40, 0x0, 0x3d7}) r2 = socket$inet6(0xa, 0x806, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4018}, 0x18) modify_ldt$read(0x0, &(0x7f0000000480)=""/140, 0x8c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x64b8, 0x9, 0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRES16=r6, @ANYRES8=r3, @ANYBLOB="c32627d93cd84517e98bac46602cea37f47ca30fcdb94fa8fb972088c99725f8883dfde2b96d74aab74104d0b48b24ef1fcfb16d0aca8a88e7c6da55a678ad473c40c278687f43293601c256fa908fb0b811beedba36fcf4aeef19206c0b95f3216ac6fd83f727118871c739ebd126e948c620cb1a3b6f3a8c2055395747a8ce389f88698e741c24493b62f805be440915688ba63b0a4e403e4cd430143d349b2e2d6ef5f5723c9865aedb725f7476e5a461304450b2aad496d10c3f6256f97b406257f9ac8fc88b591ffa8d152ac880e599", @ANYRESHEX=r0, @ANYRES8=r7], &(0x7f0000000140)='GPL\x00', 0xe2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r9, 0x5385, &(0x7f0000000040)={0x1d, ""/29}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x3) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.175112766s ago: executing program 3 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000280), 0xf6, 0x452, &(0x7f0000000440)="$eJzs3MtvG0UYAPBvnTh9URJKefQFgYKoeCRN+qAHLkUgcQAJCQ5FnEyaVqVug5og0aqCwiEcUSXuiCMSfwEXygUBJySucEdIEcqFwslo7d3UOLYTJ05c4t9PWnXGO+7Mt7sTj2d2HUDfGo2IAxFxT0T8GhHDEZE0Fhit/XN78frU34vXp5KoVN74M6mW+2vx+lReNH/frlqmMtCm3vm3I0rl8vSVLD8+d+m98dmr1567cKl0fvr89OXJU6eOHzs0dHLyRFfi3J22df+HMwf3vfLWzdemztx858evkyzuaIijW0arR625J7tdWY/trksngz1sCB1J+2h6uorV/j8cA7Fjad9wvPxJTxsHbKhKpVDZ1nr3jQqwhaWjeaAf5R/06ffffNukocddYeF0LM1j3M622p7BKGRlihtY/2hEnLnxzxfpFhs0DwEAUO/W6Yh4ttn4rxAP1pW7N1sbGomI+yJiT0TcHxF7I+KBiGrZhyLi4Q7rb1whWT7+qQyvKbBVSsd/L2RrW/8d/+WjvxgZyHK7q/EXk3MXytNHs2NyJIrb0vxEmzq+e+mXz1rtqx//pVtafz4WzNrxx2DDBN3ZUrG0npjrLXxcWwBYHn8S+TJOOj7eFxH7O/y/8+8YF57+6mCrMivH30YX1pkqX0Y8VTv/N6Ih/lzScn1y4vmTkyfGt0d5+uh4flUs99PP86+3qn9d8XfBwq1K7Gx6/S/FP5Jsj5i9eu1idb12tvM65n/7tOV3mrVd/3OloeTNanooe+2D0tzclYmIoeTV5a9P3nlvns/Lp9f/kcPN+/+euHMkDkREehEfiohHIuLRrO2PRcTjEXG4Tfw/vPjEu53H32ZWvovS+M+udP6j/vx3nhi4+P03ncefS8//8WrqSPZKev5Ximu1DVzPsQMAAID/i0L1HvikMLaULhTGxmr38O+NnYXyzOzcM+dm3r98tnav/EgUC/lM13DdfOhENjec5ycb8seyeePPB3ZU82NTM+VO5xOB7trVov+nfm/3AA+wNXheC/qX/g/9S/+H/qX/Q//S/6F/Nev/H/WgHcDmW+Hzf8dmtQPYfMb/0L/0f+hf+j/0pZbPxhfW9ci/RI8S3w6t77caVp+Iwl0S8pZJFKPprsFV/5jFGhJJRGxruqvXf5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6498AAAD//9di55E=") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r5], 0x48}}, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000240)=@req={0x3, 0x1, 0xfffffffb, 0x3}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x6, 0x1, 0x40, 0x1, 0x3b1, 0x1000, 0xc10}, 0x1c) sendmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001480)="eeaa648fd51089594a8bb0ef9bb96c09b8", 0x1}]}}], 0x1, 0x9200000000000000) r8 = dup3(r7, r6, 0x0) recvmmsg$unix(r8, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) 1.152232815s ago: executing program 5 (id=866): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.044042087s ago: executing program 5 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 925.392009ms ago: executing program 5 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="00100000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10fc}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d7, 0x32}, @in=@dev, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4da, 0x8}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, {}, 0x1, 0x0, 0x2, 0x1, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) 879.012869ms ago: executing program 5 (id=869): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09b4957d13fc00009500000000000000bf91000000000000b7020000010800e43900000085000000b7000000000000009500ca8044910eea10d29dec00"/106], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='mm_lru_insertion\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRES8=r8, @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r9, 0x0, 0x80000001}, 0x18) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r10, 0x0, 0x400000, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r11, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r12, 0x8002f515, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) shutdown(r0, 0x0) 803.24296ms ago: executing program 4 (id=870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x100, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6c07}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 724.942281ms ago: executing program 2 (id=872): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") 691.372741ms ago: executing program 4 (id=873): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") 494.154244ms ago: executing program 2 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="00100000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10fc}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa2, 0x8000}, 0x0, 0x0, 0x800000, 0x9, 0x1, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r7}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0xc080, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f0000000240)=0x14) bind$can_j1939(r9, &(0x7f00000002c0)={0x1d, r10, 0x1, {0x1, 0xf0, 0x6}, 0x103}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000094000000ae000000952674067167e463c391d0e602668ab4ba102220ff7edc650b0a268dfa1795b31f7bb9e970c08c70c168e857d8dca9671808d013e343a5a53f0afeb095436a56822e87e217b4bad51da1f14f1e6d09f8"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000200)=0x1) 484.155574ms ago: executing program 4 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 439.767024ms ago: executing program 4 (id=876): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 410.147904ms ago: executing program 4 (id=877): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") 308.455396ms ago: executing program 2 (id=878): r0 = io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x40, 0x0, 0x3d7}) r1 = socket$inet6(0xa, 0x806, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4018}, 0x18) modify_ldt$read(0x0, &(0x7f0000000480)=""/140, 0x8c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioperm(0x64b8, 0x9, 0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000040)={0x1d, ""/29}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 307.613956ms ago: executing program 3 (id=879): socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) brk(0x400000ffc020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="186d21c30000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xdc, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20048005) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) chmod(&(0x7f0000000200)='./file1\x00', 0x2) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 304.758526ms ago: executing program 4 (id=880): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x4994) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x23, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f00000016c0)="ab", 0x1, 0x18844, &(0x7f0000001440)={0x2, 0x4e22, @local}, 0x10) 287.931936ms ago: executing program 3 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x48, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 247.376947ms ago: executing program 2 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240001800b00010072656a656374000014000280080001400000000105ff07000000000000000180080001006669620008000b40000000000900010073797a3000000000140000"], 0x104}}, 0x0) 217.241847ms ago: executing program 2 (id=883): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x1}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 198.614898ms ago: executing program 3 (id=884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000280), 0xf6, 0x452, &(0x7f0000000440)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r5], 0x48}}, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000240)=@req={0x3, 0x1, 0xfffffffb, 0x3}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x6, 0x1, 0x40, 0x1, 0x3b1, 0x1000, 0xc10}, 0x1c) sendmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001480)="eeaa648fd51089594a8bb0ef9bb96c09b8", 0x1}]}}], 0x1, 0x9200000000000000) r8 = dup3(r7, r6, 0x0) recvmmsg$unix(r8, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) 193.153268ms ago: executing program 1 (id=885): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$eJzs3M9r02AYwPGn6dZ0k/04CXrxQS96CbMe1UOVDcSC0q2iHoSMZVpa25EUbUUwZ0/7O4ZHb4L4D+y/8DYE2WknI22zNOu633Wt3fcDI++b5323J3nJeNKSbD1ff1ta9axVuyZGWsUQ8WVHZFaKsisRblOtdiraL/cz4sutuXfbnxdfvHyczeXm86oL2aU7GVWdvvb9/ccv13/ULj37Om2asjn7aut35ufm5c0rW3+W3hQ9LaakUq2prcvVas1eLju6UvRKlurTsmN7jhYrnuPuia+Wq2trDbUrK1OTa67jeWpXGmpIQ2tVTYdZVdSyLJ2abLbTcoGkTjyjsJHP29lOfz7Z34wwDFw3azcXdmLf1VDYGExGAABgkA6u/41ozG79b3TX/yJH1P+fwlHT33rW/56evv5PSlT/l5xW/V9zG2q/tovx+h+H6q7/j8f4N8ngLBJ+rPNgT8h1sxO9J1H/AwAAAAAAAAAAAAAAAAAAAADwP9gJgpkgCGaaW0NEgrBvikgy1u8x9UI9Wz+q4usfxH7McIEPWX+MgNiDe2mRX369UC8kWtt2fOFRbn5OW2IP/m3X64VkFL/djuve+LhMhvFMz3hKbt5ox5uxh09y8fh6vTAhK4dm7vfrFAAAAAAAMPIsjcxGO9MS3d9blprSHW/dv7dbfufzAe28GqgZH5OrY+d5JAAAAAAA4CBe40PJLpcd93wayXP8W6duiJxu+t3A7EsaSRE5Ykx+UWTwJ2pfw5ShSGOUG/f69guDhEh7z3j4z6DrKgAAAAAwWjr3Ayefy9f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0x5neImYcb/CgjxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFn8DAAD//8DvvIM=") 126.910418ms ago: executing program 2 (id=886): unshare(0x20000400) r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfff, @mcast2, 0x7f, 0x200}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x100000000000}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendmsg$rds(r7, &(0x7f0000000800)={&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000540)=""/91, 0x5b}, {&(0x7f00000005c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000900)=""/164, 0xa4}], 0x4, 0x0, 0x0, 0x840}, 0x24000840) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffe, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES64=r5, @ANYRESHEX=r5, @ANYBLOB="34e7f426cf7bb868cf6592da363d38afaa49d91be9aeb3f0b20691bd611a87ad42ff3a3dac559cc88c055f07d428ece7f92bd4f5f6d75a8bc50ca6"], &(0x7f00000003c0)='syzkaller\x00', 0x1c, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) 101.717469ms ago: executing program 1 (id=887): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x40, 0x0, 0x3d7}) r2 = socket$inet6(0xa, 0x806, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4018}, 0x18) modify_ldt$read(0x0, &(0x7f0000000480)=""/140, 0x8c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x64b8, 0x9, 0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRES16=r6, @ANYRES8=r3, @ANYBLOB="c32627d93cd84517e98bac46602cea37f47ca30fcdb94fa8fb972088c99725f8883dfde2b96d74aab74104d0b48b24ef1fcfb16d0aca8a88e7c6da55a678ad473c40c278687f43293601c256fa908fb0b811beedba36fcf4aeef19206c0b95f3216ac6fd83f727118871c739ebd126e948c620cb1a3b6f3a8c2055395747a8ce389f88698e741c24493b62f805be440915688ba63b0a4e403e4cd430143d349b2e2d6ef5f5723c9865aedb725f7476e5a461304450b2aad496d10c3f6256f97b406257f9ac8fc88b591ffa8d152ac880e599", @ANYRESHEX=r0, @ANYRES8=r7], &(0x7f0000000140)='GPL\x00', 0xe2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r9, 0x5385, &(0x7f0000000040)={0x1d, ""/29}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x3) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffff", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6c07}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) getxattr(0x0, &(0x7f0000000180)=@random={'user.', 'blkio.bfq.time_recursive\x00'}, 0x0, 0x0) kernel console output (not intermixed with test programs): text=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.171048][ T4091] loop0: detected capacity change from 0 to 2048 [ 41.188706][ T4090] loop1: detected capacity change from 0 to 2048 [ 41.227460][ T29] audit: type=1400 audit(1746314035.205:480): avc: denied { read } for pid=4098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.238430][ T4097] loop2: detected capacity change from 0 to 512 [ 41.260701][ T29] audit: type=1400 audit(1746314035.235:481): avc: denied { open } for pid=4098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.285760][ T29] audit: type=1400 audit(1746314035.235:482): avc: denied { getattr } for pid=4098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.364068][ T4105] loop1: detected capacity change from 0 to 512 [ 41.365803][ T29] audit: type=1400 audit(1746314035.305:483): avc: denied { create } for pid=4096 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.389963][ T29] audit: type=1400 audit(1746314035.305:484): avc: denied { ioctl } for pid=4096 comm="syz.2.208" path="socket:[6637]" dev="sockfs" ino=6637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.417269][ T29] audit: type=1400 audit(1746314035.405:485): avc: denied { audit_write } for pid=4096 comm="syz.2.208" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 41.447591][ T4106] vlan2: entered allmulticast mode [ 41.467544][ T4109] loop0: detected capacity change from 0 to 512 [ 41.491349][ T4109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.515160][ T4109] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.542564][ T4105] vlan2: entered allmulticast mode [ 41.547700][ T4105] bridge_slave_0: entered allmulticast mode [ 41.578008][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.623498][ T4131] loop0: detected capacity change from 0 to 512 [ 41.631676][ T4131] EXT4-fs: Ignoring removed oldalloc option [ 41.637897][ T4131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.675303][ T4131] EXT4-fs (loop0): 1 truncate cleaned up [ 41.681128][ T4136] serio: Serial port ptm0 [ 41.681570][ T4131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.710777][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.749654][ T4139] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 41.809401][ T4143] pim6reg: entered allmulticast mode [ 41.869121][ T4143] loop0: detected capacity change from 0 to 128 [ 41.941753][ T4147] pim6reg: entered allmulticast mode [ 41.948312][ T4150] pim6reg: left allmulticast mode [ 41.952007][ T4149] loop3: detected capacity change from 0 to 128 [ 41.962761][ T4142] pim6reg: left allmulticast mode [ 42.017401][ T4147] loop4: detected capacity change from 0 to 128 [ 42.088707][ T4156] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.098659][ T4158] loop4: detected capacity change from 0 to 1024 [ 42.107113][ T4158] EXT4-fs: Ignoring removed oldalloc option [ 42.113423][ T4158] EXT4-fs: Ignoring removed orlov option [ 42.121066][ T4158] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 42.132664][ T4156] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.146548][ T4162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.155931][ T4162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.172849][ T4158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.207818][ T4160] loop3: detected capacity change from 0 to 128 [ 42.208017][ T4166] pim6reg: entered allmulticast mode [ 42.225407][ T4166] pim6reg: left allmulticast mode [ 42.255390][ T4156] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.268192][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.281521][ T4167] loop2: detected capacity change from 0 to 128 [ 42.320909][ T4156] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.361751][ T4177] loop4: detected capacity change from 0 to 512 [ 42.377151][ T4179] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.410934][ T4177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 42.419616][ T4177] System zones: 0-2, 18-18, 34-34 [ 42.428529][ T4179] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.428718][ T4177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.229: bg 0: block 248: padding at end of block bitmap is not set [ 42.452881][ T4177] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.229: Failed to acquire dquot type 1 [ 42.456903][ T4185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.476874][ T4177] EXT4-fs (loop4): 1 truncate cleaned up [ 42.478875][ T4185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.483984][ T4177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.504972][ T4177] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.515620][ T4183] Falling back ldisc for ttyS3. [ 42.548315][ T4183] loop2: detected capacity change from 0 to 2048 [ 42.548734][ T4179] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.594754][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.606813][ T4179] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.729434][ T4212] loop4: detected capacity change from 0 to 128 [ 42.815809][ T4225] loop2: detected capacity change from 0 to 512 [ 42.835678][ T4225] EXT4-fs: Ignoring removed oldalloc option [ 42.852423][ T4225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.892129][ T4225] EXT4-fs (loop2): 1 truncate cleaned up [ 42.916015][ T4225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.929763][ T4237] sd 0:0:1:0: device reset [ 42.952464][ T4239] loop4: detected capacity change from 0 to 512 [ 42.983943][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.003669][ T4241] loop2: detected capacity change from 0 to 512 [ 43.031680][ T4241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 43.043300][ T4241] System zones: 0-2, 18-18, 34-34 [ 43.055604][ T4241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.244: bg 0: block 248: padding at end of block bitmap is not set [ 43.068548][ T4239] vlan2: entered allmulticast mode [ 43.070497][ T4241] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.244: Failed to acquire dquot type 1 [ 43.086943][ T4241] EXT4-fs (loop2): 1 truncate cleaned up [ 43.098377][ T4241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.111297][ T4241] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.147868][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.159672][ T4245] Falling back ldisc for ttyS3. [ 43.182499][ T4245] loop1: detected capacity change from 0 to 2048 [ 43.229710][ T4261] loop2: detected capacity change from 0 to 128 [ 43.477119][ T4179] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.489928][ T4179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.503701][ T4179] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.529034][ T4288] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.545532][ T4290] loop4: detected capacity change from 0 to 128 [ 43.558437][ T4179] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.578585][ T4291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.597028][ T4291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.606745][ T4288] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.654588][ T4295] __nla_validate_parse: 8 callbacks suppressed [ 43.654606][ T4295] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 43.701416][ T4288] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.792394][ T4288] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.804736][ T4302] FAULT_INJECTION: forcing a failure. [ 43.804736][ T4302] name failslab, interval 1, probability 0, space 0, times 1 [ 43.817452][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.1.257 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 43.817480][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.817494][ T4302] Call Trace: [ 43.817499][ T4302] [ 43.817510][ T4302] __dump_stack+0x1d/0x30 [ 43.817525][ T4302] dump_stack_lvl+0xe8/0x140 [ 43.817539][ T4302] dump_stack+0x15/0x1b [ 43.817583][ T4302] should_fail_ex+0x265/0x280 [ 43.817607][ T4302] should_failslab+0x8c/0xb0 [ 43.817629][ T4302] __kvmalloc_node_noprof+0x126/0x4d0 [ 43.817657][ T4302] ? xt_alloc_entry_offsets+0x48/0x50 [ 43.817708][ T4302] xt_alloc_entry_offsets+0x48/0x50 [ 43.817727][ T4302] translate_table+0xa9/0xf90 [ 43.817806][ T4302] ? __memcg_slab_post_alloc_hook+0x464/0x5a0 [ 43.817824][ T4302] ? should_fail_ex+0xdb/0x280 [ 43.817847][ T4302] ? _copy_from_user+0x89/0xb0 [ 43.817864][ T4302] do_ipt_set_ctl+0x66f/0x820 [ 43.817961][ T4302] ? _raw_spin_unlock_bh+0x36/0x40 [ 43.817982][ T4302] ? tcp_release_cb+0xf1/0x370 [ 43.818006][ T4302] nf_setsockopt+0x196/0x1b0 [ 43.818068][ T4302] ip_setsockopt+0x102/0x110 [ 43.818087][ T4302] tcp_setsockopt+0x95/0xb0 [ 43.818108][ T4302] sock_common_setsockopt+0x66/0x80 [ 43.818128][ T4302] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 43.818199][ T4302] __sys_setsockopt+0x181/0x200 [ 43.818224][ T4302] __x64_sys_setsockopt+0x64/0x80 [ 43.818248][ T4302] x64_sys_call+0x2bd5/0x2fb0 [ 43.818264][ T4302] do_syscall_64+0xd0/0x1a0 [ 43.818344][ T4302] ? clear_bhb_loop+0x25/0x80 [ 43.818367][ T4302] ? clear_bhb_loop+0x25/0x80 [ 43.818397][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.818459][ T4302] RIP: 0033:0x7f283252e969 [ 43.818474][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.818486][ T4302] RSP: 002b:00007f2830b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.818499][ T4302] RAX: ffffffffffffffda RBX: 00007f2832755fa0 RCX: 00007f283252e969 [ 43.818508][ T4302] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 43.818516][ T4302] RBP: 00007f2830b97090 R08: 0000000000000290 R09: 0000000000000000 [ 43.818589][ T4302] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 43.818598][ T4302] R13: 0000000000000000 R14: 00007f2832755fa0 R15: 00007fffcda70a38 [ 43.818611][ T4302] [ 44.068824][ T4156] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.081742][ T4156] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.094217][ T4156] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.105039][ T4304] sd 0:0:1:0: device reset [ 44.117288][ T4156] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.140532][ T4288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.175553][ T4288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.194068][ T4306] loop4: detected capacity change from 0 to 128 [ 44.214428][ T4288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.230001][ T4288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.317251][ T4317] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.367803][ T4320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.377717][ T4320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.386576][ T4317] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.431642][ T4317] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.457812][ T4322] loop1: detected capacity change from 0 to 512 [ 44.521119][ T4317] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.542299][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 44.551863][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'. [ 44.554090][ T4322] vlan2: entered allmulticast mode [ 44.624484][ T4331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4331 comm=syz.4.268 [ 44.665652][ T4333] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.685689][ T4335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.713334][ T4337] sd 0:0:1:0: device reset [ 44.718907][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.734591][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.735364][ T4333] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.744787][ T4341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.765501][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 44.765830][ T4341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.793666][ T4335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.831246][ T4333] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.867909][ T4335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.901130][ T4333] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.937528][ T4352] loop0: detected capacity change from 0 to 512 [ 44.945126][ T4335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.985678][ T4354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.278'. [ 45.002611][ T4333] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.016853][ T4333] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.032889][ T4333] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.046136][ T4333] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.066384][ T4335] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.092350][ T4351] vlan2: entered allmulticast mode [ 45.097476][ T4351] bridge_slave_0: entered allmulticast mode [ 45.116090][ T4335] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.130411][ T4335] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.143526][ T4335] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.173778][ T4365] loop2: detected capacity change from 0 to 128 [ 45.216244][ T4367] pim6reg: entered allmulticast mode [ 45.228511][ T4367] pim6reg: left allmulticast mode [ 45.289722][ T4367] loop0: detected capacity change from 0 to 128 [ 45.349154][ T4379] loop2: detected capacity change from 0 to 128 [ 45.356864][ T4379] FAT-fs (loop2): bogus number of reserved sectors [ 45.363455][ T4379] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 45.372789][ T4379] FAT-fs (loop2): Can't find a valid FAT filesystem [ 45.424487][ T4384] loop0: detected capacity change from 0 to 1024 [ 45.431330][ T4384] EXT4-fs: Ignoring removed oldalloc option [ 45.437363][ T4384] EXT4-fs: Ignoring removed orlov option [ 45.444766][ T4384] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 45.456571][ T4382] loop2: detected capacity change from 0 to 128 [ 45.475257][ T4384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.500406][ T4389] loop2: detected capacity change from 0 to 512 [ 45.511610][ T4389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 45.512591][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.519810][ T4389] System zones: 0-2, 18-18, 34-34 [ 45.534728][ T4389] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.290: bg 0: block 248: padding at end of block bitmap is not set [ 45.550045][ T4389] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.290: Failed to acquire dquot type 1 [ 45.561777][ T4389] EXT4-fs (loop2): 1 truncate cleaned up [ 45.567853][ T4389] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.634139][ T4397] loop2: detected capacity change from 0 to 512 [ 45.646228][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 45.668967][ T4399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.294'. [ 45.717135][ T4409] loop1: detected capacity change from 0 to 128 [ 45.760489][ T4397] vlan2: entered allmulticast mode [ 45.786513][ T4412] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 45.802137][ T4414] sctp: [Deprecated]: syz.1.298 (pid 4414) Use of int in max_burst socket option. [ 45.802137][ T4414] Use struct sctp_assoc_value instead [ 45.816840][ T4412] batman_adv: batadv0: Adding interface: team0 [ 45.823123][ T4412] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.848408][ T4412] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 45.858909][ T4415] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 45.866798][ T4415] netlink: 2 bytes leftover after parsing attributes in process `syz.0.299'. [ 45.876569][ T4415] team0: entered promiscuous mode [ 45.884026][ T4415] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.891139][ T4415] batman_adv: batadv0: Interface activated: team0 [ 45.897562][ T4415] batman_adv: batadv0: Interface deactivated: team0 [ 45.904229][ T4415] batman_adv: batadv0: Removing interface: team0 [ 45.915203][ T4415] bridge0: port 1(team0) entered blocking state [ 45.921546][ T4415] bridge0: port 1(team0) entered disabled state [ 45.927986][ T4415] team0: entered allmulticast mode [ 45.954878][ T4420] loop1: detected capacity change from 0 to 128 [ 45.985515][ T4424] loop2: detected capacity change from 0 to 512 [ 46.021985][ T4424] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 46.033282][ T4424] System zones: 0-2, 18-18, 34-34 [ 46.039240][ T4424] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.303: bg 0: block 248: padding at end of block bitmap is not set [ 46.054002][ T4424] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.303: Failed to acquire dquot type 1 [ 46.078907][ T4424] EXT4-fs (loop2): 1 truncate cleaned up [ 46.090581][ T4424] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.125949][ T4438] FAULT_INJECTION: forcing a failure. [ 46.125949][ T4438] name failslab, interval 1, probability 0, space 0, times 0 [ 46.138618][ T4438] CPU: 1 UID: 0 PID: 4438 Comm: syz.1.309 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 46.138674][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.138753][ T4438] Call Trace: [ 46.138798][ T4438] [ 46.138804][ T4438] __dump_stack+0x1d/0x30 [ 46.138826][ T4438] dump_stack_lvl+0xe8/0x140 [ 46.138847][ T4438] dump_stack+0x15/0x1b [ 46.138866][ T4438] should_fail_ex+0x265/0x280 [ 46.138915][ T4438] ? alloc_mnt_ns+0x72/0x270 [ 46.138940][ T4438] should_failslab+0x8c/0xb0 [ 46.138984][ T4438] __kmalloc_cache_noprof+0x4c/0x320 [ 46.139002][ T4438] ? inc_ucount+0xcb/0x140 [ 46.139075][ T4438] alloc_mnt_ns+0x72/0x270 [ 46.139095][ T4438] vfs_open_tree+0x1da/0x540 [ 46.139192][ T4438] __x64_sys_open_tree+0x45/0xc0 [ 46.139218][ T4438] x64_sys_call+0x28d3/0x2fb0 [ 46.139250][ T4438] do_syscall_64+0xd0/0x1a0 [ 46.139290][ T4438] ? clear_bhb_loop+0x25/0x80 [ 46.139316][ T4438] ? clear_bhb_loop+0x25/0x80 [ 46.139340][ T4438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.139362][ T4438] RIP: 0033:0x7f283252e969 [ 46.139378][ T4438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.139455][ T4438] RSP: 002b:00007f2830b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 46.139472][ T4438] RAX: ffffffffffffffda RBX: 00007f2832755fa0 RCX: 00007f283252e969 [ 46.139487][ T4438] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 46.139501][ T4438] RBP: 00007f2830b97090 R08: 0000000000000000 R09: 0000000000000000 [ 46.139514][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.139528][ T4438] R13: 0000000000000001 R14: 00007f2832755fa0 R15: 00007fffcda70a38 [ 46.139616][ T4438] [ 46.323623][ T4440] pimreg: entered allmulticast mode [ 46.341911][ T4434] pimreg: left allmulticast mode [ 46.357723][ T4444] loop1: detected capacity change from 0 to 512 [ 46.364048][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 46.364059][ T29] audit: type=1400 audit(1746314040.335:845): avc: denied { create } for pid=4445 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.406332][ T29] audit: type=1326 audit(1746314040.375:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4215b6e969 code=0x0 [ 46.441214][ T4444] EXT4-fs (loop1): 1 orphan inode deleted [ 46.450297][ T4444] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.461520][ T29] audit: type=1400 audit(1746314040.415:847): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.485732][ T29] audit: type=1400 audit(1746314040.415:848): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.486679][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 46.509746][ T29] audit: type=1400 audit(1746314040.415:849): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.509775][ T29] audit: type=1400 audit(1746314040.435:850): avc: denied { append } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.509802][ T29] audit: type=1400 audit(1746314040.435:851): avc: denied { mount } for pid=4443 comm="syz.1.312" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.519577][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 46.548967][ T4451] loop4: detected capacity change from 0 to 512 [ 46.568683][ T29] audit: type=1400 audit(1746314040.505:852): avc: denied { write } for pid=4443 comm="syz.1.312" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.595040][ T4449] loop0: detected capacity change from 0 to 128 [ 46.600840][ T29] audit: type=1400 audit(1746314040.505:853): avc: denied { add_name } for pid=4443 comm="syz.1.312" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.656821][ T4451] EXT4-fs: Ignoring removed oldalloc option [ 46.664286][ T4451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.665901][ T4455] sd 0:0:1:0: device reset [ 46.675878][ T4449] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.695963][ T4451] EXT4-fs (loop4): 1 truncate cleaned up [ 46.760042][ T4434] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 46.767971][ T4434] netlink: 'syz.0.307': attribute type 2 has an invalid length. [ 46.768598][ T4466] loop1: detected capacity change from 0 to 2048 [ 46.783712][ T4464] sd 0:0:1:0: device reset [ 46.795237][ T4466] EXT4-fs: inline encryption not supported [ 46.817256][ T4466] EXT4-fs: Ignoring removed i_version option [ 46.835992][ T4470] loop4: detected capacity change from 0 to 1024 [ 46.836035][ T4468] loop2: detected capacity change from 0 to 2048 [ 46.850801][ T4468] EXT4-fs: inline encryption not supported [ 46.851859][ T4470] EXT4-fs: Ignoring removed oldalloc option [ 46.863076][ T4470] EXT4-fs: Ignoring removed orlov option [ 46.871701][ T4470] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 46.872913][ T4468] EXT4-fs: Ignoring removed i_version option [ 46.888174][ T4466] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.913495][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.915052][ T4468] FAULT_INJECTION: forcing a failure. [ 46.915052][ T4468] name failslab, interval 1, probability 0, space 0, times 0 [ 46.925771][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.925771][ T37] [ 46.925785][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 46.925798][ T37] EXT4-fs (loop1): Free/Dirty block details [ 46.938461][ T4468] CPU: 0 UID: 0 PID: 4468 Comm: syz.2.319 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 46.938547][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.938559][ T4468] Call Trace: [ 46.938565][ T4468] [ 46.938571][ T4468] __dump_stack+0x1d/0x30 [ 46.938590][ T4468] dump_stack_lvl+0xe8/0x140 [ 46.938610][ T4468] dump_stack+0x15/0x1b [ 46.938628][ T4468] should_fail_ex+0x265/0x280 [ 46.938667][ T4468] ? ext4_expand_extra_isize_ea+0x777/0x11f0 [ 46.938696][ T4468] should_failslab+0x8c/0xb0 [ 46.938750][ T4468] __kmalloc_cache_noprof+0x4c/0x320 [ 46.938775][ T4468] ext4_expand_extra_isize_ea+0x777/0x11f0 [ 46.938861][ T4468] ? errseq_check+0x2c/0x50 [ 46.938887][ T4468] __ext4_expand_extra_isize+0x246/0x280 [ 46.938926][ T4468] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 46.938964][ T4468] ext4_dirty_inode+0x92/0xc0 [ 46.939105][ T4468] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 46.939138][ T4468] __mark_inode_dirty+0x15c/0x760 [ 46.939227][ T4468] ? file_modified_flags+0x30f/0x350 [ 46.939330][ T4468] file_modified_flags+0x324/0x350 [ 46.939366][ T4468] file_modified+0x17/0x20 [ 46.939470][ T4468] ext4_buffered_write_iter+0x1d0/0x3c0 [ 46.939503][ T4468] ext4_file_write_iter+0x383/0xf00 [ 46.939533][ T4468] ? copy_from_kernel_nofault+0x15a/0x200 [ 46.939589][ T4468] ? avc_policy_seqno+0x15/0x30 [ 46.939623][ T4468] ? selinux_file_permission+0x213/0x360 [ 46.939658][ T4468] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 46.939724][ T4468] vfs_write+0x49d/0x8d0 [ 46.939748][ T4468] ? bpf_trace_run2+0x124/0x1c0 [ 46.939782][ T4468] __x64_sys_pwrite64+0xfd/0x150 [ 46.939840][ T4468] x64_sys_call+0xe45/0x2fb0 [ 46.939885][ T4468] do_syscall_64+0xd0/0x1a0 [ 46.939912][ T4468] ? clear_bhb_loop+0x25/0x80 [ 46.939946][ T4468] ? clear_bhb_loop+0x25/0x80 [ 46.939973][ T4468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.940000][ T4468] RIP: 0033:0x7f325c0fe969 [ 46.940098][ T4468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.940120][ T4468] RSP: 002b:00007f325a767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 46.940146][ T4468] RAX: ffffffffffffffda RBX: 00007f325c325fa0 RCX: 00007f325c0fe969 [ 46.940163][ T4468] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000005 [ 46.940179][ T4468] RBP: 00007f325a767090 R08: 0000000000000000 R09: 0000000000000000 [ 46.940255][ T4468] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 46.940270][ T4468] R13: 0000000000000000 R14: 00007f325c325fa0 R15: 00007ffe59adc5e8 [ 46.940294][ T4468] [ 47.220282][ T37] EXT4-fs (loop1): free_blocks=2415919104 [ 47.226030][ T37] EXT4-fs (loop1): dirty_blocks=16 [ 47.231307][ T37] EXT4-fs (loop1): Block reservation details [ 47.237282][ T37] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 47.243532][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 47.255822][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.255822][ T37] [ 47.300859][ T4480] netlink: 27 bytes leftover after parsing attributes in process `syz.0.322'. [ 47.317902][ T4478] loop1: detected capacity change from 0 to 512 [ 47.326418][ T1098] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.343778][ T1098] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.343873][ T1098] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.343873][ T1098] [ 47.343945][ T1098] EXT4-fs (loop2): Total free blocks count 0 [ 47.344023][ T1098] EXT4-fs (loop2): Free/Dirty block details [ 47.344035][ T1098] EXT4-fs (loop2): free_blocks=2415919104 [ 47.344101][ T1098] EXT4-fs (loop2): dirty_blocks=16 [ 47.344113][ T1098] EXT4-fs (loop2): Block reservation details [ 47.344124][ T1098] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 47.347475][ T1098] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 47.413783][ T1098] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.413783][ T1098] [ 47.437616][ T4484] loop4: detected capacity change from 0 to 2048 [ 47.486401][ T4478] vlan2: entered allmulticast mode [ 47.512189][ T4487] Falling back ldisc for ttyS3. [ 47.544047][ T4504] sd 0:0:1:0: device reset [ 47.548550][ T4507] loop4: detected capacity change from 0 to 512 [ 47.557651][ T4507] EXT4-fs: Ignoring removed oldalloc option [ 47.569491][ T4507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.584267][ T4507] EXT4-fs (loop4): 1 truncate cleaned up [ 47.594313][ T4487] loop0: detected capacity change from 0 to 2048 [ 47.821161][ T4551] loop1: detected capacity change from 0 to 512 [ 47.890375][ T4554] loop0: detected capacity change from 0 to 512 [ 47.897384][ T4554] EXT4-fs: Ignoring removed oldalloc option [ 47.912701][ T4554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.915255][ T4551] vlan2: entered allmulticast mode [ 47.930972][ T4554] EXT4-fs (loop0): 1 truncate cleaned up [ 48.034845][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 48.046614][ T4567] loop1: detected capacity change from 0 to 512 [ 48.090517][ T4567] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.295986][ T4587] loop1: detected capacity change from 0 to 1024 [ 48.304278][ T4587] EXT4-fs: Ignoring removed oldalloc option [ 48.312562][ T4585] loop2: detected capacity change from 0 to 512 [ 48.319394][ T4587] EXT4-fs: Ignoring removed orlov option [ 48.341387][ T4587] EXT4-fs (loop1): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 48.364440][ T4589] loop0: detected capacity change from 0 to 128 [ 48.407751][ T4585] vlan2: entered allmulticast mode [ 48.425545][ T4594] loop1: detected capacity change from 0 to 512 [ 48.455383][ T4596] loop0: detected capacity change from 0 to 512 [ 48.497649][ T4602] loop4: detected capacity change from 0 to 512 [ 48.521116][ T4594] vlan2: entered allmulticast mode [ 48.531740][ T4602] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.549733][ T4606] vlan2: entered allmulticast mode [ 48.570259][ T4607] loop2: detected capacity change from 0 to 2048 [ 48.607040][ T4317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.618937][ T4317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.631501][ T4317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.643552][ T4317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.710699][ T4615] loop3: detected capacity change from 0 to 512 [ 48.723781][ T4615] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.737769][ T4630] sd 0:0:1:0: device reset [ 48.754487][ T4615] ucma_write: process 113 (syz.3.364) changed security contexts after opening file descriptor, this is not allowed. [ 48.812107][ T4640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.879829][ T4642] loop3: detected capacity change from 0 to 128 [ 48.962661][ T4645] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.031033][ T4645] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.064975][ T4651] loop1: detected capacity change from 0 to 128 [ 49.100943][ T4645] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.103818][ T4653] FAULT_INJECTION: forcing a failure. [ 49.103818][ T4653] name failslab, interval 1, probability 0, space 0, times 0 [ 49.123905][ T4653] CPU: 0 UID: 0 PID: 4653 Comm: syz.1.376 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 49.123978][ T4653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.123989][ T4653] Call Trace: [ 49.123994][ T4653] [ 49.124000][ T4653] __dump_stack+0x1d/0x30 [ 49.124018][ T4653] dump_stack_lvl+0xe8/0x140 [ 49.124037][ T4653] dump_stack+0x15/0x1b [ 49.124052][ T4653] should_fail_ex+0x265/0x280 [ 49.124154][ T4653] should_failslab+0x8c/0xb0 [ 49.124190][ T4653] kmem_cache_alloc_noprof+0x50/0x310 [ 49.124351][ T4653] ? getname_flags+0x80/0x3b0 [ 49.124382][ T4653] getname_flags+0x80/0x3b0 [ 49.124422][ T4653] __se_sys_move_mount+0x1d7/0x440 [ 49.124475][ T4653] __x64_sys_move_mount+0x67/0x80 [ 49.124551][ T4653] x64_sys_call+0x1f00/0x2fb0 [ 49.124623][ T4653] do_syscall_64+0xd0/0x1a0 [ 49.124648][ T4653] ? clear_bhb_loop+0x25/0x80 [ 49.124669][ T4653] ? clear_bhb_loop+0x25/0x80 [ 49.124689][ T4653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.124759][ T4653] RIP: 0033:0x7f283252e969 [ 49.124774][ T4653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.124794][ T4653] RSP: 002b:00007f2830b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 49.124858][ T4653] RAX: ffffffffffffffda RBX: 00007f2832755fa0 RCX: 00007f283252e969 [ 49.124871][ T4653] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: ffffffffffffffff [ 49.124883][ T4653] RBP: 00007f2830b97090 R08: 0000000000000000 R09: 0000000000000000 [ 49.124893][ T4653] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 49.124914][ T4653] R13: 0000000000000000 R14: 00007f2832755fa0 R15: 00007fffcda70a38 [ 49.124975][ T4653] [ 49.332789][ T4645] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.368280][ T4659] loop4: detected capacity change from 0 to 1024 [ 49.379910][ T4659] EXT4-fs: Ignoring removed oldalloc option [ 49.389788][ T4659] EXT4-fs: Ignoring removed orlov option [ 49.395642][ T4660] loop2: detected capacity change from 0 to 2048 [ 49.406034][ T4659] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 49.488515][ T4676] __nla_validate_parse: 3 callbacks suppressed [ 49.488531][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.505560][ T4676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.536708][ T4676] bridge_slave_0: left promiscuous mode [ 49.542415][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.550190][ T4674] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 49.561639][ T4676] bridge_slave_1: left allmulticast mode [ 49.567293][ T4676] bridge_slave_1: left promiscuous mode [ 49.573098][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.583270][ T4676] bond0: (slave bond_slave_0): Releasing backup interface [ 49.593259][ T4676] bond0: (slave bond_slave_1): Releasing backup interface [ 49.605871][ T4676] team0: Port device team_slave_0 removed [ 49.616067][ T4676] team0: Port device team_slave_1 removed [ 49.627222][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.634724][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.646487][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.654177][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.783880][ T4695] loop0: detected capacity change from 0 to 4096 [ 49.801755][ T4695] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #15: comm syz.0.390: corrupted inode contents [ 49.818812][ T4695] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #15: comm syz.0.390: mark_inode_dirty error [ 49.831405][ T4695] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #15: comm syz.0.390: corrupted inode contents [ 49.843651][ T4695] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.390: mark_inode_dirty error [ 49.855435][ T4695] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #15: comm syz.0.390: corrupted inode contents [ 49.870908][ T4695] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.390: mark_inode_dirty error [ 49.882921][ T4695] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #15: comm syz.0.390: corrupted inode contents [ 49.896526][ T4695] EXT4-fs error (device loop0): ext4_truncate:4255: inode #15: comm syz.0.390: mark_inode_dirty error [ 49.928490][ T4695] EXT4-fs error (device loop0) in ext4_setattr:5628: Corrupt filesystem [ 50.004239][ T4702] loop2: detected capacity change from 0 to 8192 [ 50.027046][ T4704] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 50.050029][ T3296] loop2: p1 p2 < > p3 p4 < p5 > [ 50.054990][ T3296] loop2: partition table partially beyond EOD, truncated [ 50.063604][ T3296] loop2: p1 size 100663296 extends beyond EOD, truncated [ 50.073544][ T4698] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #15: comm ó0õ:JþQ°óa:­»Èj: corrupted inode contents [ 50.119032][ T3296] loop2: p2 start 591104 is beyond EOD, truncated [ 50.125501][ T3296] loop2: p3 start 33572980 is beyond EOD, truncated [ 50.159686][ T3296] loop2: p5 size 100663296 extends beyond EOD, truncated [ 50.170160][ T4695] SELinux: syz.0.390 (4695) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.735351][ T4727] loop4: detected capacity change from 0 to 2048 [ 50.843434][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 50.855174][ T4702] loop2: p1 p2 < > p3 p4 < p5 > [ 50.860161][ T4702] loop2: partition table partially beyond EOD, truncated [ 50.867389][ T4702] loop2: p1 size 100663296 extends beyond EOD, truncated [ 50.875006][ T4702] loop2: p2 start 591104 is beyond EOD, truncated [ 50.881548][ T4702] loop2: p3 start 33572980 is beyond EOD, truncated [ 50.888639][ T4702] loop2: p5 size 100663296 extends beyond EOD, truncated [ 50.939502][ T4711] Falling back ldisc for ttyS3. [ 50.959055][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 50.997100][ T4732] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.043416][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.073263][ T4735] loop4: detected capacity change from 0 to 512 [ 51.088198][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.101928][ T4735] EXT4-fs: Ignoring removed oldalloc option [ 51.134519][ T4735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.150081][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.180556][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.215528][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.241055][ T4735] EXT4-fs (loop4): 1 truncate cleaned up [ 51.257854][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.285062][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.303161][ T3310] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 51.370394][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 51.389368][ T4758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.400'. [ 51.399864][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 51.399879][ T29] audit: type=1400 audit(1746314045.385:1103): avc: denied { write } for pid=4756 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.431783][ T29] audit: type=1400 audit(1746314045.385:1104): avc: denied { read } for pid=4756 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.499147][ T4761] loop4: detected capacity change from 0 to 512 [ 51.533208][ T4761] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.538576][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 51.555269][ T4765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.403'. [ 51.565439][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.599067][ T4768] loop4: detected capacity change from 0 to 512 [ 51.611423][ T4768] EXT4-fs: Ignoring removed oldalloc option [ 51.640740][ T4768] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.670918][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.687225][ T29] audit: type=1400 audit(1746314045.665:1105): avc: denied { mounton } for pid=4770 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.715705][ T29] audit: type=1400 audit(1746314045.695:1106): avc: denied { bind } for pid=4771 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.722463][ T4768] EXT4-fs (loop4): 1 truncate cleaned up [ 51.737943][ T29] audit: type=1400 audit(1746314045.725:1107): avc: denied { create } for pid=4771 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.761303][ T29] audit: type=1400 audit(1746314045.725:1108): avc: denied { setopt } for pid=4771 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.780898][ T29] audit: type=1400 audit(1746314045.725:1109): avc: denied { setopt } for pid=4771 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.802929][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.815153][ T29] audit: type=1400 audit(1746314045.785:1110): avc: denied { ioctl } for pid=4771 comm="syz.1.407" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.815490][ T4773] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.840587][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.868162][ T29] audit: type=1400 audit(1746314045.845:1111): avc: denied { create } for pid=4779 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.887572][ T29] audit: type=1400 audit(1746314045.845:1112): avc: denied { setopt } for pid=4779 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.908604][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.933741][ T4785] loop4: detected capacity change from 0 to 512 [ 51.942150][ T4785] EXT4-fs: Ignoring removed oldalloc option [ 51.942680][ T4783] pim6reg: entered allmulticast mode [ 51.962897][ T4773] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.972773][ T4785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.983421][ T4780] pim6reg: left allmulticast mode [ 51.983967][ T4785] EXT4-fs (loop4): 1 truncate cleaned up [ 52.002192][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.028606][ T4794] loop4: detected capacity change from 0 to 2048 [ 52.060019][ T3296] Alternate GPT is invalid, using primary GPT. [ 52.066343][ T3296] loop4: p1 p2 p3 [ 52.075945][ T4796] sd 0:0:1:0: device reset [ 52.086406][ T4794] Alternate GPT is invalid, using primary GPT. [ 52.092692][ T4794] loop4: p1 p2 p3 [ 52.101931][ T4773] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.151076][ T4770] chnl_net:caif_netlink_parms(): no params data found [ 52.160792][ T4802] loop2: detected capacity change from 0 to 512 [ 52.173870][ T4773] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.177947][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.196108][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 52.198864][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.236881][ T4802] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.269953][ T4804] loop4: detected capacity change from 0 to 512 [ 52.277830][ T4804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.290853][ T37] team0: left allmulticast mode [ 52.295824][ T37] bridge0: port 1(team0) entered disabled state [ 52.330629][ T4804] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.348076][ T4804] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 52.369282][ T4804] netlink: 'syz.4.415': attribute type 17 has an invalid length. [ 52.377131][ T4804] netlink: 'syz.4.415': attribute type 41 has an invalid length. [ 52.384955][ T4804] netlink: 152 bytes leftover after parsing attributes in process `syz.4.415'. [ 52.431040][ T37] bond0 (unregistering): Released all slaves [ 52.477611][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.484729][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.492248][ T4770] bridge_slave_0: entered allmulticast mode [ 52.498687][ T4770] bridge_slave_0: entered promiscuous mode [ 52.515845][ T37] hsr_slave_0: left promiscuous mode [ 52.525838][ T4835] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 52.534552][ T37] hsr_slave_1: left promiscuous mode [ 52.545449][ T37] veth1_macvtap: left promiscuous mode [ 52.552563][ T37] veth0_macvtap: left promiscuous mode [ 52.558114][ T37] veth1_vlan: left promiscuous mode [ 52.563673][ T37] veth0_vlan: left promiscuous mode [ 52.647640][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.654865][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.662162][ T4770] bridge_slave_1: entered allmulticast mode [ 52.668571][ T4770] bridge_slave_1: entered promiscuous mode [ 52.689092][ T4770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.701088][ T4841] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 52.708821][ T4841] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 52.718709][ T4773] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.728502][ T4770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.741118][ T4773] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.762816][ T4773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.772131][ T4770] team0: Port device team_slave_0 added [ 52.778731][ T4770] team0: Port device team_slave_1 added [ 52.794346][ T4773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.817175][ T4770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.824168][ T4770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.850239][ T4770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.866479][ T4770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.873460][ T4770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.882195][ T4857] loop4: detected capacity change from 0 to 512 [ 52.899468][ T4770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.946674][ T4770] hsr_slave_0: entered promiscuous mode [ 52.947926][ T4857] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.956071][ T4770] hsr_slave_1: entered promiscuous mode [ 52.968867][ T4770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.976556][ T4770] Cannot create hsr debugfs directory [ 53.027845][ T4873] sd 0:0:1:0: device reset [ 53.088760][ T4875] loop4: detected capacity change from 0 to 128 [ 53.112034][ T37] IPVS: stop unused estimator thread 0... [ 53.146709][ T4770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.158870][ T4770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.165978][ T4881] Falling back ldisc for ttyS3. [ 53.173918][ T4770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.184074][ T4770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.241341][ T4883] loop2: detected capacity change from 0 to 2048 [ 53.272599][ T4770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.284310][ T4770] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.320219][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.327302][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.345951][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.353055][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.376964][ T4770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.387541][ T4770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.504334][ T4770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.555347][ T4910] loop2: detected capacity change from 0 to 128 [ 53.557282][ T4925] loop1: detected capacity change from 0 to 512 [ 53.621832][ T4925] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.650104][ T4645] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.683985][ T4645] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.705703][ T4645] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.733153][ T4645] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.775815][ T4957] loop4: detected capacity change from 0 to 512 [ 53.836379][ T4770] veth0_vlan: entered promiscuous mode [ 53.855044][ T4770] veth1_vlan: entered promiscuous mode [ 53.878765][ T4770] veth0_macvtap: entered promiscuous mode [ 53.886295][ T4770] veth1_macvtap: entered promiscuous mode [ 53.896806][ T4770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.906587][ T4973] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 53.924188][ T4770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.950500][ T4770] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.959296][ T4770] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.968185][ T4770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.977071][ T4770] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.182544][ T5000] FAULT_INJECTION: forcing a failure. [ 54.182544][ T5000] name failslab, interval 1, probability 0, space 0, times 0 [ 54.196529][ T5000] CPU: 0 UID: 0 PID: 5000 Comm: syz.2.447 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 54.196602][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.196615][ T5000] Call Trace: [ 54.196620][ T5000] [ 54.196625][ T5000] __dump_stack+0x1d/0x30 [ 54.196642][ T5000] dump_stack_lvl+0xe8/0x140 [ 54.196658][ T5000] dump_stack+0x15/0x1b [ 54.196674][ T5000] should_fail_ex+0x265/0x280 [ 54.196700][ T5000] ? __se_sys_mount+0xef/0x2e0 [ 54.196720][ T5000] should_failslab+0x8c/0xb0 [ 54.196770][ T5000] __kmalloc_cache_noprof+0x4c/0x320 [ 54.196795][ T5000] ? memdup_user+0x99/0xd0 [ 54.196810][ T5000] __se_sys_mount+0xef/0x2e0 [ 54.196828][ T5000] ? fput+0x8f/0xc0 [ 54.196919][ T5000] ? ksys_write+0x16e/0x1a0 [ 54.196979][ T5000] __x64_sys_mount+0x67/0x80 [ 54.197014][ T5000] x64_sys_call+0xd36/0x2fb0 [ 54.197034][ T5000] do_syscall_64+0xd0/0x1a0 [ 54.197131][ T5000] ? clear_bhb_loop+0x25/0x80 [ 54.197159][ T5000] ? clear_bhb_loop+0x25/0x80 [ 54.197188][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.197207][ T5000] RIP: 0033:0x7f325c0fe969 [ 54.197254][ T5000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.197268][ T5000] RSP: 002b:00007f325a767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.197282][ T5000] RAX: ffffffffffffffda RBX: 00007f325c325fa0 RCX: 00007f325c0fe969 [ 54.197292][ T5000] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 54.197303][ T5000] RBP: 00007f325a767090 R08: 0000200000000400 R09: 0000000000000000 [ 54.197372][ T5000] R10: 0000000000800002 R11: 0000000000000246 R12: 0000000000000001 [ 54.197382][ T5000] R13: 0000000000000000 R14: 00007f325c325fa0 R15: 00007ffe59adc5e8 [ 54.197397][ T5000] [ 54.235668][ T5013] serio: Serial port ptm0 [ 54.526733][ T5024] bond1: entered promiscuous mode [ 54.531888][ T5024] bond1: entered allmulticast mode [ 54.537488][ T5024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.549107][ T5024] bond1 (unregistering): Released all slaves [ 54.676101][ T5045] loop1: detected capacity change from 0 to 128 [ 54.712722][ T5052] loop4: detected capacity change from 0 to 1024 [ 54.747005][ T5052] EXT4-fs: Ignoring removed oldalloc option [ 54.769607][ T5052] EXT4-fs: Ignoring removed orlov option [ 54.798889][ T5052] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 54.805198][ T5057] loop1: detected capacity change from 0 to 512 [ 54.875081][ T5057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 54.886274][ T5057] System zones: 0-2, 18-18, 34-34 [ 54.892949][ T5060] SELinux: ebitmap: truncated map [ 54.904763][ T5057] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.456: bg 0: block 248: padding at end of block bitmap is not set [ 54.913299][ T5060] SELinux: failed to load policy [ 54.925215][ T5057] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.456: Failed to acquire dquot type 1 [ 54.937598][ T5057] EXT4-fs (loop1): 1 truncate cleaned up [ 54.953887][ T5057] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.961441][ T5075] __nla_validate_parse: 3 callbacks suppressed [ 54.961460][ T5075] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 55.035000][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 55.046593][ T5079] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 55.166312][ T5093] loop3: detected capacity change from 0 to 128 [ 55.173579][ T5093] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 55.187123][ T5093] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 55.214407][ T5093] process 'syz.3.466' launched '/dev/fd/7' with NULL argv: empty string added [ 55.226882][ T5098] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 55.234414][ T5098] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.265883][ T5102] loop1: detected capacity change from 0 to 512 [ 55.272962][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 55.284975][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 55.294350][ T5103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.468'. [ 55.302994][ T5107] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 55.358250][ T5097] loop4: detected capacity change from 0 to 512 [ 55.382415][ T5112] loop5: detected capacity change from 0 to 512 [ 55.384937][ T5097] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.415936][ T5102] vlan2: entered allmulticast mode [ 55.457286][ T5115] pimreg: entered allmulticast mode [ 55.463012][ T5109] pimreg: left allmulticast mode [ 55.508970][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 55.540680][ T5109] loop2: detected capacity change from 0 to 128 [ 55.560404][ T5124] loop3: detected capacity change from 0 to 256 [ 55.567877][ T5127] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.583734][ T5109] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.606766][ T5125] serio: Serial port ptm0 [ 55.612980][ T5127] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.634459][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.639099][ T5134] sd 0:0:1:0: device reset [ 55.643324][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.671054][ T5127] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.711440][ T5127] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.819942][ T5141] Falling back ldisc for ttyS3. [ 55.889580][ T5142] loop5: detected capacity change from 0 to 2048 [ 55.896885][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 55.905981][ T5150] netlink: 32 bytes leftover after parsing attributes in process `syz.3.484'. [ 55.986032][ T5153] pim6reg: entered allmulticast mode [ 55.995119][ T5155] loop3: detected capacity change from 0 to 512 [ 56.017709][ T1051] IPVS: starting estimator thread 0... [ 56.043113][ T5153] loop5: detected capacity change from 0 to 128 [ 56.079105][ T5152] pim6reg: left allmulticast mode [ 56.107455][ T5157] vlan2: entered allmulticast mode [ 56.119378][ T5156] IPVS: using max 2352 ests per chain, 117600 per kthread [ 56.160920][ T5161] loop5: detected capacity change from 0 to 512 [ 56.196334][ T5166] sd 0:0:1:0: device reset [ 56.201707][ T5161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 56.209857][ T5161] System zones: 0-2, 18-18, 34-34 [ 56.216162][ T5161] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.488: bg 0: block 248: padding at end of block bitmap is not set [ 56.235048][ T5161] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.488: Failed to acquire dquot type 1 [ 56.246874][ T5161] EXT4-fs (loop5): 1 truncate cleaned up [ 56.253019][ T5161] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.433074][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 56.433086][ T29] audit: type=1400 audit(1746314050.415:1496): avc: denied { module_request } for pid=5176 comm="syz.4.492" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.461655][ T29] audit: type=1400 audit(1746314050.425:1497): avc: denied { sys_module } for pid=5176 comm="syz.4.492" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.498786][ T5181] loop4: detected capacity change from 0 to 128 [ 56.596767][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 56.605736][ T5187] netlink: 32 bytes leftover after parsing attributes in process `syz.4.496'. [ 56.675643][ T29] audit: type=1400 audit(1746314050.655:1498): avc: denied { write } for pid=5191 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.695042][ T29] audit: type=1400 audit(1746314050.655:1499): avc: denied { connect } for pid=5191 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.714613][ T29] audit: type=1400 audit(1746314050.655:1500): avc: denied { name_connect } for pid=5191 comm="syz.4.498" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.735990][ T5196] sd 0:0:1:0: device reset [ 56.741458][ T29] audit: type=1400 audit(1746314050.685:1501): avc: denied { name_bind } for pid=5193 comm="syz.4.499" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.763208][ T29] audit: type=1400 audit(1746314050.685:1502): avc: denied { node_bind } for pid=5193 comm="syz.4.499" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.785320][ T29] audit: type=1326 audit(1746314050.715:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 56.807654][ T5200] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.808697][ T29] audit: type=1326 audit(1746314050.715:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe70277d2d0 code=0x7ffc0000 [ 56.815997][ T5200] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.846785][ T29] audit: type=1326 audit(1746314050.715:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 56.946891][ T5210] loop3: detected capacity change from 0 to 128 [ 56.958801][ T5208] loop4: detected capacity change from 0 to 128 [ 56.996424][ T5127] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.013942][ T5127] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.042981][ T5127] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.055792][ T5127] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057712][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.071810][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.079564][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.145646][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.153647][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.161436][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.169166][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.176938][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.184745][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.191586][ T5222] sd 0:0:1:0: device reset [ 57.192564][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.204759][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.212550][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.220437][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.228235][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.238427][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.246224][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.254148][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.261910][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.269690][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.277504][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.285398][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.293221][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.301051][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.308802][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.316563][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.324393][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.332259][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.340068][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.347857][ T3442] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 57.358894][ T3442] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 57.375841][ T5229] loop3: detected capacity change from 0 to 512 [ 57.386686][ T5227] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.394113][ T5227] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.421644][ T5233] loop5: detected capacity change from 0 to 512 [ 57.446489][ T5235] loop4: detected capacity change from 0 to 512 [ 57.468423][ T5233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 57.482137][ T5233] System zones: 0-2, 18-18, 34-34 [ 57.488233][ T5233] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.517: bg 0: block 248: padding at end of block bitmap is not set [ 57.502429][ T5229] vlan2: entered allmulticast mode [ 57.509461][ T5233] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.517: Failed to acquire dquot type 1 [ 57.521499][ T5233] EXT4-fs (loop5): 1 truncate cleaned up [ 57.527565][ T5233] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.586398][ T5235] vlan2: entered allmulticast mode [ 57.634487][ T5247] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.726322][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.734898][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.788186][ T5265] loop3: detected capacity change from 0 to 1024 [ 57.790323][ T5247] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.795018][ T5265] EXT4-fs: Ignoring removed oldalloc option [ 57.827436][ T5265] EXT4-fs: Ignoring removed orlov option [ 57.839615][ T5265] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 57.858523][ T5267] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 57.909085][ T5247] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.929515][ T5270] Falling back ldisc for ttyS3. [ 57.982512][ T5247] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.993305][ T5270] loop2: detected capacity change from 0 to 2048 [ 58.038753][ T5282] serio: Serial port ptm0 [ 58.050907][ T5247] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.064212][ T5247] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.074435][ T5278] Falling back ldisc for ttyS3. [ 58.075704][ T5247] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.092412][ T5247] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.135569][ T5291] loop2: detected capacity change from 0 to 512 [ 58.155181][ T5293] pimreg: entered allmulticast mode [ 58.166927][ T5286] loop4: detected capacity change from 0 to 2048 [ 58.178177][ T5287] pimreg: left allmulticast mode [ 58.231742][ T5291] vlan2: entered allmulticast mode [ 58.266255][ T5293] loop1: detected capacity change from 0 to 128 [ 58.280582][ T5293] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.769594][ T5323] Falling back ldisc for ttyS3. [ 58.844195][ T5324] loop4: detected capacity change from 0 to 2048 [ 59.010902][ T5327] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 59.023541][ T5330] loop3: detected capacity change from 0 to 128 [ 59.042592][ T5335] loop5: detected capacity change from 0 to 512 [ 59.124323][ T5339] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.157479][ T5336] loop1: detected capacity change from 0 to 512 [ 59.165750][ T5339] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.177570][ T5336] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 59.197776][ T5336] Zero length message leads to an empty skb [ 59.221669][ T5339] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.245446][ T5335] vlan2: entered allmulticast mode [ 59.291250][ T5339] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.346131][ T5339] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.371949][ T5339] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.403683][ T5339] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.436671][ T5339] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.451645][ T5353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.497117][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.510662][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.532265][ T5353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.569461][ T5355] Falling back ldisc for ttyS3. [ 59.591030][ T5353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.632827][ T5355] loop3: detected capacity change from 0 to 2048 [ 59.661637][ T5353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.748993][ T5353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.765701][ T5353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.794391][ T5353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.806265][ T5353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.903076][ T5400] loop5: detected capacity change from 0 to 1024 [ 59.914311][ T5400] EXT4-fs: Ignoring removed oldalloc option [ 59.929459][ T5397] Falling back ldisc for ttyS3. [ 59.939690][ T5400] EXT4-fs: Ignoring removed orlov option [ 59.950841][ T5400] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 60.016993][ T5397] loop4: detected capacity change from 0 to 2048 [ 60.052577][ T5411] loop1: detected capacity change from 0 to 128 [ 60.105607][ T5436] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.146247][ T5438] pim6reg: entered allmulticast mode [ 60.161035][ T5436] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.187472][ T5438] loop4: detected capacity change from 0 to 128 [ 60.194125][ T5441] pim6reg: entered allmulticast mode [ 60.214168][ T5441] loop1: detected capacity change from 0 to 128 [ 60.224380][ T5436] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.251376][ T5437] pim6reg: left allmulticast mode [ 60.264934][ T5440] pim6reg: left allmulticast mode [ 60.280206][ T5436] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.317831][ T5444] sd 0:0:1:0: device reset [ 60.428815][ T5454] loop2: detected capacity change from 0 to 128 [ 60.484634][ T5458] sd 0:0:1:0: device reset [ 60.579064][ T5469] __nla_validate_parse: 2 callbacks suppressed [ 60.579081][ T5469] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 60.619445][ T5466] Falling back ldisc for ttyS3. [ 60.626553][ T5475] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 60.638440][ T5474] qrtr: Invalid version 0 [ 60.661068][ T5474] sd 0:0:1:0: device reset [ 60.672672][ T5466] loop4: detected capacity change from 0 to 2048 [ 60.839058][ T5487] loop3: detected capacity change from 0 to 2048 [ 60.860874][ T5489] loop1: detected capacity change from 0 to 512 [ 60.873236][ T5489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 60.892434][ T5489] System zones: 0-2, 18-18, 34-34 [ 60.901775][ T5487] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.902550][ T5489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.592: bg 0: block 248: padding at end of block bitmap is not set [ 60.933955][ T5489] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.592: Failed to acquire dquot type 1 [ 60.946204][ T5489] EXT4-fs (loop1): 1 truncate cleaned up [ 60.953359][ T5487] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 60.953375][ T5489] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.976117][ T5487] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.976117][ T5487] [ 60.985949][ T5487] EXT4-fs (loop3): Total free blocks count 0 [ 60.992068][ T5487] EXT4-fs (loop3): Free/Dirty block details [ 60.998005][ T5487] EXT4-fs (loop3): free_blocks=2415919104 [ 61.003745][ T5487] EXT4-fs (loop3): dirty_blocks=48 [ 61.008977][ T5487] EXT4-fs (loop3): Block reservation details [ 61.014969][ T5487] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 61.268421][ T5502] pimreg: entered allmulticast mode [ 61.279076][ T5500] pimreg: left allmulticast mode [ 61.391411][ T5502] loop1: detected capacity change from 0 to 128 [ 61.410224][ T5502] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.438493][ T5507] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 61.440596][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 61.440612][ T29] audit: type=1400 audit(1746314055.415:1827): avc: denied { create } for pid=5499 comm="syz.1.594" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.473617][ T29] audit: type=1400 audit(1746314055.425:1828): avc: denied { remove_name } for pid=5499 comm="syz.1.594" name="control" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.496329][ T29] audit: type=1400 audit(1746314055.425:1829): avc: denied { rmdir } for pid=5499 comm="syz.1.594" name="control" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.603968][ T29] audit: type=1400 audit(1746314055.585:1830): avc: denied { create } for pid=5509 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.737794][ T5483] syz.3.589 (5483) used greatest stack depth: 7032 bytes left [ 61.763244][ T5515] qrtr: Invalid version 0 [ 61.775636][ T5515] sd 0:0:1:0: device reset [ 61.780149][ T29] audit: type=1326 audit(1746314055.755:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325c0fe969 code=0x7ffc0000 [ 61.803590][ T29] audit: type=1326 audit(1746314055.755:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f325c0fd2d0 code=0x7ffc0000 [ 61.826961][ T29] audit: type=1326 audit(1746314055.755:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325c0fe969 code=0x7ffc0000 [ 61.850449][ T29] audit: type=1326 audit(1746314055.755:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f325c0fe969 code=0x7ffc0000 [ 61.877398][ T29] audit: type=1326 audit(1746314055.855:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325c0fe969 code=0x7ffc0000 [ 61.883054][ T5436] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.900744][ T29] audit: type=1326 audit(1746314055.855:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325c0fe969 code=0x7ffc0000 [ 61.935742][ T5436] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.953334][ T5517] loop3: detected capacity change from 0 to 128 [ 61.959048][ T5436] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.972580][ T5436] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.296301][ T5538] loop5: detected capacity change from 0 to 512 [ 62.303277][ T5538] EXT4-fs: Ignoring removed oldalloc option [ 62.311931][ T5538] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.325194][ T5538] EXT4-fs (loop5): 1 truncate cleaned up [ 62.366146][ T5544] loop5: detected capacity change from 0 to 164 [ 62.378463][ T5544] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.411780][ T5547] bond1: entered promiscuous mode [ 62.416961][ T5547] bond1: entered allmulticast mode [ 62.422996][ T5547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.440873][ T5547] bond1 (unregistering): Released all slaves [ 62.553629][ T5553] loop5: detected capacity change from 0 to 512 [ 62.576545][ T5555] loop2: detected capacity change from 0 to 512 [ 62.590382][ T5555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 62.598457][ T5555] System zones: 0-2, 18-18, 34-34 [ 62.604262][ T5555] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.612: bg 0: block 248: padding at end of block bitmap is not set [ 62.618810][ T5555] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.612: Failed to acquire dquot type 1 [ 62.630613][ T5555] EXT4-fs (loop2): 1 truncate cleaned up [ 62.636661][ T5555] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.665249][ T5553] vlan2: entered allmulticast mode [ 62.735345][ T5564] loop2: detected capacity change from 0 to 512 [ 62.742189][ T5564] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.760931][ T5564] ext4 filesystem being mounted at /133/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.785129][ T5564] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.615: corrupted xattr block 32: bad e_name length [ 62.813139][ T5564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 62.822250][ T5564] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.615: corrupted xattr block 32: bad e_name length [ 62.836221][ T5564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 62.851163][ T5570] sd 0:0:1:0: device reset [ 62.865554][ T5568] loop5: detected capacity change from 0 to 128 [ 62.938416][ T5574] loop2: detected capacity change from 0 to 1024 [ 62.963703][ T5574] EXT4-fs: Ignoring removed oldalloc option [ 62.987518][ T5574] EXT4-fs: Ignoring removed orlov option [ 63.007352][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 63.016338][ T5582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.623'. [ 63.026018][ T5580] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 63.046148][ T5574] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 63.068794][ T5579] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 63.142367][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 63.152453][ T5591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 63.165297][ T5590] loop1: detected capacity change from 0 to 512 [ 63.280616][ T5598] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 63.297560][ T5601] pim6reg: entered allmulticast mode [ 63.307455][ T5590] vlan2: entered allmulticast mode [ 63.332318][ T5601] loop5: detected capacity change from 0 to 128 [ 63.376564][ T5608] loop2: detected capacity change from 0 to 512 [ 63.404931][ T5608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 63.414734][ T5608] System zones: 0-2, 18-18, 34-34 [ 63.423474][ T5608] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.632: bg 0: block 248: padding at end of block bitmap is not set [ 63.438121][ T5608] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.632: Failed to acquire dquot type 1 [ 63.450803][ T5608] EXT4-fs (loop2): 1 truncate cleaned up [ 63.456826][ T5608] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.511789][ T5616] bond1: entered promiscuous mode [ 63.516828][ T5616] bond1: entered allmulticast mode [ 63.522198][ T5616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.538337][ T5616] bond1 (unregistering): Released all slaves [ 63.640839][ T5624] pim6reg: entered allmulticast mode [ 63.657960][ T5629] serio: Serial port ptm0 [ 63.702478][ T5624] loop1: detected capacity change from 0 to 128 [ 63.712440][ T5633] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 63.719911][ T5633] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.785720][ T5638] loop4: detected capacity change from 0 to 1024 [ 63.792732][ T5638] EXT4-fs: Ignoring removed oldalloc option [ 63.804619][ T5638] EXT4-fs: Ignoring removed orlov option [ 63.812966][ T5638] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 63.823204][ T5642] loop1: detected capacity change from 0 to 512 [ 63.841099][ T5642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 63.849203][ T5642] System zones: 0-2, 18-18, 34-34 [ 63.854941][ T5642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.645: bg 0: block 248: padding at end of block bitmap is not set [ 63.871356][ T5642] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.645: Failed to acquire dquot type 1 [ 63.874765][ T5640] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 63.889982][ T5640] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.897967][ T5642] EXT4-fs (loop1): 1 truncate cleaned up [ 63.904328][ T5642] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.930085][ T5649] loop4: detected capacity change from 0 to 512 [ 64.022509][ T5653] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.030070][ T5653] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.032192][ T5649] vlan2: entered allmulticast mode [ 64.082249][ T5660] loop1: detected capacity change from 0 to 128 [ 64.097270][ T5655] loop3: detected capacity change from 0 to 512 [ 64.104895][ T5655] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 64.211323][ T5662] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 64.229208][ T5665] sd 0:0:1:0: device reset [ 64.330227][ T5669] loop5: detected capacity change from 0 to 512 [ 64.341387][ T5669] EXT4-fs: Ignoring removed oldalloc option [ 64.356538][ T5669] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.373379][ T5675] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 64.374326][ T5669] EXT4-fs (loop5): 1 truncate cleaned up [ 64.410435][ T5674] Falling back ldisc for ttyS3. [ 64.447260][ T5682] unsupported nla_type 52263 [ 64.478194][ T5685] loop1: detected capacity change from 0 to 2048 [ 64.495044][ T5687] loop4: detected capacity change from 0 to 1024 [ 64.501861][ T5687] EXT4-fs: Ignoring removed oldalloc option [ 64.507981][ T5687] EXT4-fs: Ignoring removed orlov option [ 64.508961][ T5684] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.521227][ T5684] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.524184][ T5687] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 64.555351][ T5689] sd 0:0:1:0: device reset [ 64.609028][ T5695] loop5: detected capacity change from 0 to 164 [ 64.622086][ T5695] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.693325][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 64.710298][ T5701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 64.722049][ T5703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.669'. [ 64.780296][ T5707] Falling back ldisc for ttyS3. [ 64.804489][ T5709] loop1: detected capacity change from 0 to 2048 [ 64.857559][ T5712] loop5: detected capacity change from 0 to 2048 [ 64.911449][ T5715] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.918932][ T5715] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.995314][ T5711] loop3: detected capacity change from 0 to 512 [ 65.018283][ T5732] sd 0:0:1:0: device reset [ 65.051310][ T5711] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 65.192783][ T5751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 65.227396][ T5763] loop2: detected capacity change from 0 to 164 [ 65.249232][ T5763] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.321695][ T5762] loop5: detected capacity change from 0 to 512 [ 65.341746][ T5762] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 65.642570][ T5708] syz.1.671 (5708) used greatest stack depth: 6016 bytes left [ 65.907790][ T5850] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.915417][ T5850] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.970257][ T5838] Falling back ldisc for ttyS3. [ 65.992582][ T5838] loop1: detected capacity change from 0 to 2048 [ 66.003562][ T5858] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.027678][ T5860] loop3: detected capacity change from 0 to 2048 [ 66.052295][ T5858] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.086262][ T5862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.113809][ T5862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.204802][ T5858] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.226609][ T5872] sd 0:0:1:0: device reset [ 66.300993][ T5858] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.344477][ T5875] loop1: detected capacity change from 0 to 128 [ 66.367635][ T5890] loop5: detected capacity change from 0 to 512 [ 66.392036][ T5890] EXT4-fs: Ignoring removed oldalloc option [ 66.420664][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.432543][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.444334][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456031][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.475189][ T5890] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.502612][ T5897] Falling back ldisc for ttyS3. [ 66.520471][ T5890] EXT4-fs (loop5): 1 truncate cleaned up [ 66.530260][ T5890] EXT4-fs mount: 93 callbacks suppressed [ 66.530272][ T5890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.550405][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 66.550420][ T29] audit: type=1400 audit(1746314060.525:2373): avc: denied { mount } for pid=5889 comm="syz.5.703" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.579165][ T29] audit: type=1400 audit(1746314060.555:2374): avc: denied { read write } for pid=5889 comm="syz.5.703" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.601728][ T29] audit: type=1400 audit(1746314060.555:2375): avc: denied { open } for pid=5889 comm="syz.5.703" path="/49/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.634483][ T5903] Falling back ldisc for ttyS3. [ 66.661843][ T5909] loop1: detected capacity change from 0 to 2048 [ 66.670870][ T29] audit: type=1400 audit(1746314060.615:2376): avc: denied { unmount } for pid=4770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.690572][ T29] audit: type=1400 audit(1746314060.635:2377): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.714066][ T4770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.770040][ T5910] loop4: detected capacity change from 0 to 2048 [ 66.783058][ T29] audit: type=1400 audit(1746314060.765:2378): avc: denied { create } for pid=5911 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.846027][ T5914] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 66.859574][ T5916] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.869251][ T29] audit: type=1400 audit(1746314060.845:2379): avc: denied { bind } for pid=5915 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.889607][ T29] audit: type=1400 audit(1746314060.845:2380): avc: denied { create } for pid=5915 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.909191][ T29] audit: type=1400 audit(1746314060.845:2381): avc: denied { setopt } for pid=5915 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.914753][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.928750][ T29] audit: type=1400 audit(1746314060.845:2382): avc: denied { setopt } for pid=5915 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.958783][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.998513][ T5920] loop4: detected capacity change from 0 to 1024 [ 67.028980][ T5920] EXT4-fs: Ignoring removed oldalloc option [ 67.036754][ T5916] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.046777][ T5920] EXT4-fs: Ignoring removed orlov option [ 67.057026][ T5920] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 67.090829][ T5920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.106435][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.117841][ T5916] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.143545][ T5926] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 67.156177][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.157289][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.714'. [ 67.174389][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.5.714'. [ 67.212269][ T5930] bridge_slave_0: left promiscuous mode [ 67.218001][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.234247][ T5930] bridge_slave_1: left allmulticast mode [ 67.239941][ T5930] bridge_slave_1: left promiscuous mode [ 67.245699][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.255415][ T5930] bond0: (slave bond_slave_0): Releasing backup interface [ 67.266511][ T5930] bond0: (slave bond_slave_1): Releasing backup interface [ 67.275443][ T5934] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.282903][ T5934] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.296015][ T5930] team0: Port device team_slave_0 removed [ 67.313632][ T5930] team0: Port device team_slave_1 removed [ 67.331548][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.338962][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.345590][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 67.356268][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.363843][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.389486][ T5939] sd 0:0:1:0: device reset [ 67.422362][ T5935] bond1: entered promiscuous mode [ 67.427446][ T5935] bond1: entered allmulticast mode [ 67.433290][ T5935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.452269][ T5946] loop5: detected capacity change from 0 to 512 [ 67.466156][ T5935] bond1 (unregistering): Released all slaves [ 67.476092][ T5948] loop2: detected capacity change from 0 to 512 [ 67.490760][ T5916] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.495068][ T5946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 67.503976][ T5948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 67.509132][ T5946] System zones: 0-2, 18-18, 34-34 [ 67.522254][ T5948] System zones: 0-2, 18-18, 34-34 [ 67.530285][ T5946] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.719: bg 0: block 248: padding at end of block bitmap is not set [ 67.545991][ T5948] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.721: bg 0: block 248: padding at end of block bitmap is not set [ 67.561936][ T5948] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.721: Failed to acquire dquot type 1 [ 67.562022][ T5946] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.719: Failed to acquire dquot type 1 [ 67.584856][ T5948] EXT4-fs (loop2): 1 truncate cleaned up [ 67.591670][ T5948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.604260][ T5948] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.606971][ T5953] loop4: detected capacity change from 0 to 2048 [ 67.623755][ T5946] EXT4-fs (loop5): 1 truncate cleaned up [ 67.628693][ T5916] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.629928][ T5946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.651370][ T5946] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.672289][ T5955] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.679744][ T5955] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.679903][ T5916] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.701667][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.712915][ T5916] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.754064][ T4770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.773292][ T5967] loop3: detected capacity change from 0 to 512 [ 67.787418][ T5916] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.802621][ T5967] EXT4-fs: Ignoring removed oldalloc option [ 67.808961][ T5967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.841745][ T5967] EXT4-fs (loop3): 1 truncate cleaned up [ 67.856918][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.889121][ T5977] loop2: detected capacity change from 0 to 2048 [ 67.908414][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.930844][ T5976] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.938245][ T5976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.061668][ T5977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.080282][ T5995] loop3: detected capacity change from 0 to 1024 [ 68.089111][ T6003] loop5: detected capacity change from 0 to 512 [ 68.095950][ T5995] EXT4-fs: Ignoring removed oldalloc option [ 68.102775][ T5995] EXT4-fs: Ignoring removed orlov option [ 68.114862][ T5995] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 68.151624][ T6003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 68.166561][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.182927][ T6003] System zones: 0-2, 18-18, 34-34 [ 68.193420][ T6003] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.733: bg 0: block 248: padding at end of block bitmap is not set [ 68.250302][ T6018] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.257776][ T6018] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.268090][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.277909][ T6003] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.733: Failed to acquire dquot type 1 [ 68.299094][ T6003] EXT4-fs (loop5): 1 truncate cleaned up [ 68.316167][ T6003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.364141][ T6003] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.389363][ T4770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.451962][ T6021] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 68.508649][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 68.652659][ T6029] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.701234][ T6029] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.720186][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.736832][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.744266][ T6040] loop1: detected capacity change from 0 to 128 [ 68.758844][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.788307][ T6029] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.834928][ T6046] bond1: entered promiscuous mode [ 68.840206][ T6046] bond1: entered allmulticast mode [ 68.859141][ T6046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.871144][ T6057] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 68.871140][ T6053] loop4: detected capacity change from 0 to 512 [ 68.890679][ T6046] bond1 (unregistering): Released all slaves [ 68.900710][ T6029] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.900936][ T6053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 68.918656][ T6053] System zones: 0-2, 18-18, 34-34 [ 68.936187][ T6053] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.748: bg 0: block 248: padding at end of block bitmap is not set [ 68.968070][ T6053] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.748: Failed to acquire dquot type 1 [ 68.982897][ T6053] EXT4-fs (loop4): 1 truncate cleaned up [ 68.988966][ T6053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.995772][ T6056] loop1: detected capacity change from 0 to 128 [ 69.002823][ T6053] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.024319][ T6029] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.035658][ T6029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.045995][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.047415][ T6029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.066326][ T6029] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.116511][ T6073] pim6reg: entered allmulticast mode [ 69.132729][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 69.148383][ T6073] loop2: detected capacity change from 0 to 128 [ 69.289742][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.759'. [ 69.298733][ T6089] netlink: 32 bytes leftover after parsing attributes in process `syz.5.759'. [ 69.381548][ T6096] Falling back ldisc for ttyS3. [ 69.391081][ T6098] loop2: detected capacity change from 0 to 512 [ 69.420919][ T6098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 69.428960][ T6098] System zones: 0-2, 18-18, 34-34 [ 69.434563][ T6100] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 69.447486][ T6098] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.763: bg 0: block 248: padding at end of block bitmap is not set [ 69.467119][ T6104] loop4: detected capacity change from 0 to 2048 [ 69.468012][ T6098] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.763: Failed to acquire dquot type 1 [ 69.483272][ T6105] bond1: entered promiscuous mode [ 69.489783][ T6105] bond1: entered allmulticast mode [ 69.490230][ T6098] EXT4-fs (loop2): 1 truncate cleaned up [ 69.495417][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.502258][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.519796][ T6098] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.538349][ T6105] bond1 (unregistering): Released all slaves [ 69.566855][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.653240][ T6119] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 69.739982][ T6117] Falling back ldisc for ttyS3. [ 69.741540][ T6137] loop5: detected capacity change from 0 to 512 [ 69.760222][ T6135] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.809361][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.818792][ T6135] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.829582][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.837803][ T6139] loop2: detected capacity change from 0 to 2048 [ 69.860176][ T6146] loop3: detected capacity change from 0 to 128 [ 69.920866][ T6135] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.945964][ T6155] vlan2: entered allmulticast mode [ 69.989726][ T6135] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.070557][ T6135] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084699][ T6135] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.116660][ T6135] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.128098][ T6135] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.150606][ T6175] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 70.274125][ T6177] loop2: detected capacity change from 0 to 512 [ 70.281921][ T6177] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 70.377828][ T6182] pimreg: entered allmulticast mode [ 70.385677][ T6180] pimreg: left allmulticast mode [ 70.489970][ T6180] loop3: detected capacity change from 0 to 128 [ 70.500027][ T6180] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.514938][ T6180] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.535793][ T6180] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 70.543474][ T6180] netlink: 'syz.3.784': attribute type 2 has an invalid length. [ 70.662490][ T6195] sd 0:0:1:0: device reset [ 70.674145][ T6197] sd 0:0:1:0: device reset [ 70.726700][ T6203] sd 0:0:1:0: device reset [ 70.939567][ T6217] loop1: detected capacity change from 0 to 512 [ 70.994070][ T6217] vlan2: entered allmulticast mode [ 71.171592][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.203006][ T6232] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.213231][ T6229] loop2: detected capacity change from 0 to 128 [ 71.244103][ T6231] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.363669][ T6244] loop1: detected capacity change from 0 to 512 [ 71.382914][ T6244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 71.389005][ T6246] bond1: entered promiscuous mode [ 71.396195][ T6246] bond1: entered allmulticast mode [ 71.396739][ T6244] System zones: 0-2, 18-18, 34-34 [ 71.401668][ T6246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.416132][ T6244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.809: bg 0: block 248: padding at end of block bitmap is not set [ 71.430625][ T6244] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.809: Failed to acquire dquot type 1 [ 71.443243][ T6246] bond1 (unregistering): Released all slaves [ 71.454966][ T6244] EXT4-fs (loop1): 1 truncate cleaned up [ 71.461102][ T6244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.478100][ T6244] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.516538][ T6255] loop4: detected capacity change from 0 to 512 [ 71.545127][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.558418][ T6255] vlan2: entered allmulticast mode [ 71.619841][ T6260] Falling back ldisc for ttyS3. [ 71.684794][ T6267] loop1: detected capacity change from 0 to 2048 [ 71.736903][ T6273] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.839569][ T6282] sd 0:0:1:0: device reset [ 71.843783][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 71.843800][ T29] audit: type=1326 audit(1746314065.815:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 71.873591][ T29] audit: type=1326 audit(1746314065.815:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe70277d2d0 code=0x7ffc0000 [ 71.896963][ T29] audit: type=1326 audit(1746314065.815:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 71.896991][ T29] audit: type=1326 audit(1746314065.825:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 71.902245][ T29] audit: type=1326 audit(1746314065.825:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 71.945273][ T6280] Falling back ldisc for ttyS3. [ 71.968487][ T29] audit: type=1326 audit(1746314065.825:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70277e969 code=0x7ffc0000 [ 72.030614][ T6287] bond1: entered promiscuous mode [ 72.035712][ T6287] bond1: entered allmulticast mode [ 72.068755][ T6287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.086003][ T6284] loop2: detected capacity change from 0 to 2048 [ 72.106875][ T6287] bond1 (unregistering): Released all slaves [ 72.201641][ T6297] serio: Serial port ptm0 [ 72.274282][ T29] audit: type=1400 audit(1746314066.255:2493): avc: denied { mac_admin } for pid=6295 comm="syz.4.829" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.295300][ T29] audit: type=1400 audit(1746314066.255:2494): avc: denied { relabelto } for pid=6295 comm="syz.4.829" name="syz4" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 72.321807][ T29] audit: type=1400 audit(1746314066.255:2495): avc: denied { associate } for pid=6295 comm="syz.4.829" name="syz4" dev="cgroup2" ino=75 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0" [ 72.358023][ T29] audit: type=1400 audit(1746314066.335:2496): avc: denied { allowed } for pid=6295 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.834463][ T6290] syz.5.826 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 72.848669][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.5.826 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 72.848697][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 72.848710][ T6290] Call Trace: [ 72.848717][ T6290] [ 72.848725][ T6290] __dump_stack+0x1d/0x30 [ 72.848749][ T6290] dump_stack_lvl+0xe8/0x140 [ 72.848777][ T6290] dump_stack+0x15/0x1b [ 72.848823][ T6290] dump_header+0x81/0x220 [ 72.848857][ T6290] oom_kill_process+0x334/0x3f0 [ 72.848883][ T6290] out_of_memory+0x979/0xb80 [ 72.848974][ T6290] ? css_next_descendant_pre+0x138/0x160 [ 72.849035][ T6290] mem_cgroup_out_of_memory+0x13d/0x190 [ 72.849068][ T6290] try_charge_memcg+0x5e2/0x870 [ 72.849179][ T6290] obj_cgroup_charge_pages+0xb7/0x1a0 [ 72.849202][ T6290] __memcg_kmem_charge_page+0x9f/0x170 [ 72.849225][ T6290] __alloc_frozen_pages_noprof+0x188/0x360 [ 72.849256][ T6290] alloc_pages_mpol+0xb3/0x250 [ 72.849349][ T6290] alloc_pages_noprof+0x90/0x130 [ 72.849437][ T6290] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 72.849481][ T6290] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 72.849513][ T6290] ? ip_set_alloc+0x1f/0x30 [ 72.849542][ T6290] ? ip_set_alloc+0x1f/0x30 [ 72.849627][ T6290] ? __kmalloc_cache_noprof+0x189/0x320 [ 72.849666][ T6290] ip_set_alloc+0x1f/0x30 [ 72.849687][ T6290] hash_netiface_create+0x282/0x740 [ 72.849714][ T6290] ? __pfx_hash_netiface_create+0x10/0x10 [ 72.849741][ T6290] ip_set_create+0x3c9/0x960 [ 72.849864][ T6290] ? __nla_parse+0x40/0x60 [ 72.849971][ T6290] nfnetlink_rcv_msg+0x4c3/0x590 [ 72.850149][ T6290] netlink_rcv_skb+0x120/0x220 [ 72.850187][ T6290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 72.850222][ T6290] nfnetlink_rcv+0x16b/0x1690 [ 72.850253][ T6290] ? __kfree_skb+0x109/0x150 [ 72.850315][ T6290] ? nlmon_xmit+0x4f/0x60 [ 72.850332][ T6290] ? consume_skb+0x49/0x150 [ 72.850378][ T6290] ? nlmon_xmit+0x4f/0x60 [ 72.850401][ T6290] ? dev_hard_start_xmit+0x39e/0x3d0 [ 72.850443][ T6290] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 72.850563][ T6290] ? __dev_queue_xmit+0x182/0x1fb0 [ 72.850704][ T6290] ? ref_tracker_free+0x37d/0x3e0 [ 72.850749][ T6290] ? __netlink_deliver_tap+0x4dc/0x500 [ 72.850821][ T6290] netlink_unicast+0x59e/0x670 [ 72.850857][ T6290] netlink_sendmsg+0x58b/0x6b0 [ 72.850981][ T6290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.851037][ T6290] __sock_sendmsg+0x142/0x180 [ 72.851067][ T6290] ____sys_sendmsg+0x31e/0x4e0 [ 72.851087][ T6290] ___sys_sendmsg+0x17b/0x1d0 [ 72.851116][ T6290] __x64_sys_sendmsg+0xd4/0x160 [ 72.851252][ T6290] x64_sys_call+0x2999/0x2fb0 [ 72.851332][ T6290] do_syscall_64+0xd0/0x1a0 [ 72.851350][ T6290] ? clear_bhb_loop+0x25/0x80 [ 72.851368][ T6290] ? clear_bhb_loop+0x25/0x80 [ 72.851388][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.851457][ T6290] RIP: 0033:0x7f53e852e969 [ 72.851475][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.851491][ T6290] RSP: 002b:00007f53e6b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.851514][ T6290] RAX: ffffffffffffffda RBX: 00007f53e8755fa0 RCX: 00007f53e852e969 [ 72.851529][ T6290] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000e [ 72.851543][ T6290] RBP: 00007f53e85b0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 72.851556][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.851589][ T6290] R13: 0000000000000000 R14: 00007f53e8755fa0 R15: 00007ffeb120cc68 [ 72.851669][ T6290] [ 73.195648][ T6290] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 73.202457][ T6290] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 73.210385][ T6290] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 73.217683][ T6290] Memory cgroup stats for /syz5: [ 73.217833][ T6290] cache 0 [ 73.225739][ T6290] rss 8192 [ 73.228758][ T6290] shmem 0 [ 73.231693][ T6290] mapped_file 0 [ 73.235215][ T6290] dirty 0 [ 73.238136][ T6290] writeback 0 [ 73.241422][ T6290] workingset_refault_anon 21 [ 73.245995][ T6290] workingset_refault_file 0 [ 73.250509][ T6290] swap 274432 [ 73.253874][ T6290] swapcached 4096 [ 73.257488][ T6290] pgpgin 23258 [ 73.260860][ T6290] pgpgout 23256 [ 73.264323][ T6290] pgfault 40373 [ 73.267848][ T6290] pgmajfault 7 [ 73.271214][ T6290] inactive_anon 0 [ 73.274964][ T6290] active_anon 8192 [ 73.278733][ T6290] inactive_file 0 [ 73.282363][ T6290] active_file 0 [ 73.285803][ T6290] unevictable 0 [ 73.289355][ T6290] hierarchical_memory_limit 314572800 [ 73.294740][ T6290] hierarchical_memsw_limit 9223372036854771712 [ 73.300948][ T6290] total_cache 0 [ 73.304446][ T6290] total_rss 8192 [ 73.307998][ T6290] total_shmem 0 [ 73.311479][ T6290] total_mapped_file 0 [ 73.315497][ T6290] total_dirty 0 [ 73.318987][ T6290] total_writeback 0 [ 73.322802][ T6290] total_workingset_refault_anon 21 [ 73.327958][ T6290] total_workingset_refault_file 0 [ 73.333040][ T6290] total_swap 274432 [ 73.336829][ T6290] total_swapcached 4096 [ 73.340978][ T6290] total_pgpgin 23258 [ 73.344908][ T6290] total_pgpgout 23256 [ 73.348988][ T6290] total_pgfault 40373 [ 73.352984][ T6290] total_pgmajfault 7 [ 73.356958][ T6290] total_inactive_anon 0 [ 73.361178][ T6290] total_active_anon 8192 [ 73.365402][ T6290] total_inactive_file 0 [ 73.369557][ T6290] total_active_file 0 [ 73.373535][ T6290] total_unevictable 0 [ 73.377513][ T6290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.826,pid=6289,uid=0 [ 73.392080][ T6290] Memory cgroup out of memory: Killed process 6289 (syz.5.826) total-vm:93748kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 73.473146][ T6314] sd 0:0:1:0: device reset [ 73.572477][ T6318] loop4: detected capacity change from 0 to 164 [ 73.595388][ T6318] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.682989][ T6324] __nla_validate_parse: 7 callbacks suppressed [ 73.683005][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 73.700409][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.840'. [ 73.757995][ T6327] loop2: detected capacity change from 0 to 512 [ 73.787878][ T6332] loop1: detected capacity change from 0 to 512 [ 73.788549][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 73.807568][ T6333] netlink: 32 bytes leftover after parsing attributes in process `syz.3.842'. [ 73.845994][ T6327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 73.854511][ T6327] System zones: 0-2, 18-18, 34-34 [ 73.865223][ T6327] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.841: bg 0: block 248: padding at end of block bitmap is not set [ 73.884402][ T6327] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.841: Failed to acquire dquot type 1 [ 73.891402][ T6341] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 73.902936][ T6341] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.911981][ T6327] EXT4-fs (loop2): 1 truncate cleaned up [ 73.917877][ T6327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.931054][ T6327] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.957033][ T6342] vlan2: entered allmulticast mode [ 73.962575][ T6329] loop5: detected capacity change from 0 to 512 [ 73.990541][ T6329] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 73.991414][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.032821][ T6344] bond1: entered promiscuous mode [ 74.037948][ T6344] bond1: entered allmulticast mode [ 74.043326][ T6344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.053187][ T6344] bond1 (unregistering): Released all slaves [ 74.178086][ T6357] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 74.219527][ T6355] Falling back ldisc for ttyS3. [ 74.285684][ T6358] loop3: detected capacity change from 0 to 2048 [ 74.416670][ T6367] loop4: detected capacity change from 0 to 2048 [ 74.433924][ T6367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.454757][ T6367] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.489403][ T6367] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 74.501887][ T6367] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.501887][ T6367] [ 74.511620][ T6367] EXT4-fs (loop4): Total free blocks count 0 [ 74.517599][ T6367] EXT4-fs (loop4): Free/Dirty block details [ 74.523527][ T6367] EXT4-fs (loop4): free_blocks=2415919104 [ 74.529384][ T6367] EXT4-fs (loop4): dirty_blocks=48 [ 74.534547][ T6367] EXT4-fs (loop4): Block reservation details [ 74.540552][ T6367] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 74.698137][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'. [ 74.707989][ T6375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.857'. [ 74.844381][ T6389] loop3: detected capacity change from 0 to 2048 [ 74.957503][ T6395] loop5: detected capacity change from 0 to 512 [ 74.971722][ T6395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 74.980396][ T6395] System zones: 0-2, 18-18, 34-34 [ 74.986292][ T6395] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.866: bg 0: block 248: padding at end of block bitmap is not set [ 75.001957][ T6395] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.866: Failed to acquire dquot type 1 [ 75.013935][ T6395] EXT4-fs (loop5): 1 truncate cleaned up [ 75.020913][ T6395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.033504][ T6395] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.055938][ T4770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.069063][ T6393] loop3: detected capacity change from 0 to 512 [ 75.076365][ T6393] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 75.306260][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.483954][ T6413] loop2: detected capacity change from 0 to 128 [ 75.534227][ T6415] loop4: detected capacity change from 0 to 128 [ 75.649953][ T6417] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 75.725222][ T6423] loop4: detected capacity change from 0 to 128 [ 75.860731][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 75.946326][ T6440] loop1: detected capacity change from 0 to 128 [ 76.019518][ T6445] Falling back ldisc for ttyS3. [ 76.024451][ T6437] loop3: detected capacity change from 0 to 512 [ 76.031460][ T6437] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 76.089145][ T6449] loop2: detected capacity change from 0 to 2048 [ 76.104383][ T3007] ================================================================== [ 76.112475][ T3007] BUG: KCSAN: data-race in drop_nlink / generic_fillattr [ 76.119513][ T3007] [ 76.121839][ T3007] write to 0xffff8881356b20c0 of 4 bytes by task 3296 on cpu 1: [ 76.129465][ T3007] drop_nlink+0x3d/0xa0 [ 76.133624][ T3007] shmem_unlink+0x155/0x170 [ 76.138133][ T3007] shmem_rename2+0x1a1/0x290 [ 76.142726][ T3007] vfs_rename+0x7d6/0xa20 [ 76.147053][ T3007] do_renameat2+0x764/0xab0 [ 76.151556][ T3007] __x64_sys_rename+0x58/0x70 [ 76.156233][ T3007] x64_sys_call+0x2aee/0x2fb0 [ 76.160915][ T3007] do_syscall_64+0xd0/0x1a0 [ 76.165431][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.171320][ T3007] [ 76.173636][ T3007] read to 0xffff8881356b20c0 of 4 bytes by task 3007 on cpu 0: [ 76.181189][ T3007] generic_fillattr+0xfb/0x340 [ 76.185955][ T3007] shmem_getattr+0x181/0x200 [ 76.190551][ T3007] vfs_getattr_nosec+0x143/0x1e0 [ 76.195520][ T3007] vfs_fstatat+0x11d/0x160 [ 76.199947][ T3007] __se_sys_newfstatat+0x55/0x260 [ 76.205000][ T3007] __x64_sys_newfstatat+0x55/0x70 [ 76.210035][ T3007] x64_sys_call+0x2c22/0x2fb0 [ 76.214716][ T3007] do_syscall_64+0xd0/0x1a0 [ 76.219214][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.225100][ T3007] [ 76.227423][ T3007] value changed: 0x00000001 -> 0x00000000 [ 76.233128][ T3007] [ 76.235442][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 76.241593][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 76.253576][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 76.263627][ T3007] ==================================================================