last executing test programs: 3.056989144s ago: executing program 4 (id=552): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 2.993647045s ago: executing program 4 (id=553): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, r0, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) mknod$loop(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x40, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x4, 0x0, 0x1e}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4000) unshare(0x20060400) mknod$loop(&(0x7f0000000900)='./cgroup.cpu/cpuset.cpus\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000011114110629bd70004b00130000000000000000002f3bfb8d03c954ba601597f2725c20b099bade47ddc4d4d39210eb3a91200b937704b96fdcbb30b84e712e0c6ddf3764dadb2c4e75c17d51e9dbffc3829ab12f97d8a66f80eb933f9a9485f4ad268c242cb479be1092f594e4be50dc4b8048bd585c24b326292f67db663e5ef56c203b71e20bbf74468a37aa2474241b77eb85f7f409044cbf76ed56aa86618d5a6fa4791281786007dce41e64"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x2004c004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000002f2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002640)={[0x2]}, 0x8) r5 = dup2(r2, r2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x69, 0x7bb9, 0x8, 0x700000000000000}) accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) 2.993149655s ago: executing program 4 (id=554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd4f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x4000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r9, 0x1, 0x3, &(0x7f0000000380)=[{}, {}, {}], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3a155000) io_submit(r9, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r12) setregid(0x0, r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 1.867396322s ago: executing program 2 (id=568): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000440)=""/148, &(0x7f0000000100)=0x94) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3, {[@ssrr={0x89, 0x17, 0xfe, [@broadcast, @empty, @multicast2, @local, @multicast2]}]}}}}}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv2(r5, &(0x7f0000001400)=[{&(0x7f0000001140)=""/216, 0xd8}], 0x1, 0x7, 0xceb0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r4, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.798944203s ago: executing program 3 (id=569): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6da7, r0, &(0x7f00000041c0)="ef2d4334e42d59", 0x7, 0x10000, 0x0, 0x2}]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x5, 0x44, @remote, @loopback, 0x7800, 0x8, 0x80000000, 0x7a}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7c7add4ec6541d20, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000080e00009a171a0eb9ba6500508207913a80f42fe777459eacccf06c19d7008ad287a13176c1314c24e9e973ede512603f4320272350d45685e6d573d09c0cee8bc649f2cf1e137f635010ff3513288c8eedbcbabc5f79df8563eedf5f263853b6bfc876edef802a9046510c6728e495cf9e729d328a06a4d2803d9bed51dd3ac686406e898137b718de43965db63cf2877d693ab82ef1a9e5c55adde8fab882451cbd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000787e10ab912ff12fd32300000096662f1832759a72f5fefb25bcc127159576148d947b87fc64ce346041b9e969c13d2fe344654f396f8c66d05438ffddb417c3f7ed81d0817b69756beec2d8073ea344fc96cd05f46fb380255b01eb72e4b50d000000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e4ffffb604000000000000850000000100000095183ff1d96eafa75f7bef85a8815c2d2e25a4f272dc4c7841e39174f1c31284ed6deb5043a3210b157ff9c579719c9e38db9bbeabce6760ea0a67fd215447f511f704e12c92ed30c11b2cf73283c01903a20017be449660021a7f49e3f4b7c1d1b83f8a7e482279f553531af648a39069b47c68240d09325d27d88520ceef3a373cdd3af52fbae65cb151b886e1e5106ac387dd13f58a9d9bf6643e7c804d5aae378c3923ead1ff53a3276ca88acc52"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711285000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000300)={'\x00', 0xa2, 0x0, 0x401}) 1.745445614s ago: executing program 4 (id=570): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6da7, r0, &(0x7f00000041c0)="ef2d4334e42d59", 0x7, 0x10000, 0x0, 0x2}]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x5, 0x44, @remote, @loopback, 0x7800, 0x8, 0x80000000, 0x7a}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7c7add4ec6541d20, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000080e00009a171a0eb9ba6500508207913a80f42fe777459eacccf06c19d7008ad287a13176c1314c24e9e973ede512603f4320272350d45685e6d573d09c0cee8bc649f2cf1e137f635010ff3513288c8eedbcbabc5f79df8563eedf5f263853b6bfc876edef802a9046510c6728e495cf9e729d328a06a4d2803d9bed51dd3ac686406e898137b718de43965db63cf2877d693ab82ef1a9e5c55adde8fab882451cbd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000787e10ab912ff12fd32300000096662f1832759a72f5fefb25bcc127159576148d947b87fc64ce346041b9e969c13d2fe344654f396f8c66d05438ffddb417c3f7ed81d0817b69756beec2d8073ea344fc96cd05f46fb380255b01eb72e4b50d000000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e4ffffb604000000000000850000000100000095183ff1d96eafa75f7bef85a8815c2d2e25a4f272dc4c7841e39174f1c31284ed6deb5043a3210b157ff9c579719c9e38db9bbeabce6760ea0a67fd215447f511f704e12c92ed30c11b2cf73283c01903a20017be449660021a7f49e3f4b7c1d1b83f8a7e482279f553531af648a39069b47c68240d09325d27d88520ceef3a373cdd3af52fbae65cb151b886e1e5106ac387dd13f58a9d9bf6643e7c804d5aae378c3923ead1ff53a3276ca88acc52"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711285000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000300)={'\x00', 0xa2, 0x0, 0x401}) 1.483897927s ago: executing program 1 (id=572): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100009c00000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0) 1.425279348s ago: executing program 2 (id=573): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000700)={'\x00', 0xffffffd6, 0x0, 0x10001}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x0, 0x3}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x10, 0x20, 0xa, 0x7, {{0x7, 0x4, 0x2, 0x34, 0x1c, 0x65, 0x0, 0x0, 0x17, 0x0, @loopback, @local, {[@lsrr={0x83, 0x7, 0x40, [@broadcast]}]}}}}}) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8, 0xf, 0x100, 0x8000000000000000, 0x200, r10}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="48010000", @ANYRES16, @ANYBLOB="080029bd7000fcdbdf25010000006000018008000100", @ANYRES32=r6, @ANYBLOB="0830b072008d4eabb3a9c4896613000300020000001400020076657468315f6d61637674617000000008000300010000001400020065727370616e30000000000000000000140002006970365f7674693000000000000000000800030000000000040003000400030004000300440001801400020077673200000000000000000000000000080003000200000008000100b7bac7f79f2c2a6fc51edf4a8c3cf1b0c855b4e91f3bc358b34586bf804f1cf39fceee360839cf36a67af6d9de22a97437fa167c80d0c420a380476b54fca6e9bb7b50cc1c1c", @ANYRES32=r8, @ANYBLOB="0800030003000000140002006272696467655f736c6176655f300000700002802c0001800800010007000000080001000300000008000100000000000800010002000000080001000100000014000180080001000800000008000100080000002c000180080001000200000008000100060000000800010005000000080001000200000008000100050000000c00018008000100", @ANYRES32=r10, @ANYBLOB="0400030004000300"], 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 1.391624389s ago: executing program 1 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write(r0, &(0x7f0000000000)="8234887f8b669f5b2913a75096414f", 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, 0x0, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @empty}, &(0x7f0000000280)=0xc) 1.310386261s ago: executing program 2 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x9403, 0x0, 0x230, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {0xff}, 'erspan0\x00', {}, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 1.197390132s ago: executing program 2 (id=577): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) io_uring_setup(0x177d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r5 = dup(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x121) ftruncate(r9, 0xee72) sendfile(r5, r9, 0x0, 0x8000fffffffe) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r10}, 0x10) r11 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r11, 0x0) 1.035578545s ago: executing program 3 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb}) 894.094947ms ago: executing program 3 (id=581): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504580072f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) 893.382297ms ago: executing program 1 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'team_slave_1\x00', 0x0}) socket(0x29, 0xa, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x114, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0x2, 0xd033, 0x10000, 0x8000}, {0x7, 0x7fff, 0x0, 0x40}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x5, 0x9, 0x2}, {0x8, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x10001, 0x7, 0xc841, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x40, 0x40, 0x3, 0x5}, {0x1, 0x800, 0xc2e0, 0x5}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 793.591448ms ago: executing program 3 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x8000001}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044880}, 0x80) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 779.529898ms ago: executing program 4 (id=584): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1, 0x0) ftruncate(r0, 0x280000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107842, 0x0) r1 = io_uring_setup(0x3d67, &(0x7f0000000000)={0x0, 0xef3f, 0x2, 0x3, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009", 0x1b}], 0x1}, 0xe000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) syz_clone(0x6a10e9c0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x21, 0x80000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000003e8bc220fd267f854bdbdf25017c00000c0003800800340080000000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) futex(0x0, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) 685.46448ms ago: executing program 3 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0x12, 0x800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="2328020000000000140012800b0001006d6163736563000004000280080029001aa00600"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) mq_unlink(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000140)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x200000, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 616.974421ms ago: executing program 1 (id=586): bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) r0 = socket$nl_rdma(0x10, 0x3, 0x14) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4040081) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) close(r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) creat(0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xfc}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc842bc9}}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) socket(0x80000000000000a, 0x2, 0x0) 612.932411ms ago: executing program 0 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'team_slave_1\x00', 0x0}) socket(0x29, 0xa, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x114, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0x2, 0xd033, 0x10000, 0x8000}, {0x7, 0x7fff, 0x0, 0x40}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x5, 0x9, 0x2}, {0x8, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x10001, 0x7, 0xc841, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x2, 0x8, 0x8, 0x201}, {0x1, 0x800, 0xc2e0, 0x5}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 587.111911ms ago: executing program 3 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000080)=@raw=[@func, @call={0x85, 0x0, 0x0, 0xc5}, @exit], &(0x7f0000000240)='syzkaller\x00', 0xfffffffd, 0x39, &(0x7f00000002c0)=""/57, 0x41000, 0x8b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x5, 0x7, 0x90}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) recvmsg(r2, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x2) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r9 = syz_io_uring_setup(0x69a1, &(0x7f0000000400)={0x0, 0x79b0, 0x13190, 0x3, 0x400246}, &(0x7f0000000080)=0x0, &(0x7f00000006c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, 0x0, 0x1, 0x8, 0x1, {0x0, r12}}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd=r0, 0xffffffff, &(0x7f0000000500)="ba4558363e0541c23cdd54477c8e29c29a54c2d97a10616ca98f34276a3cedd7f3ca89ef57376c1ad806acb87f89eb09cb9bb26c219bb6484f2289bff7d2b8c61083b69b4853f9eaef5a6b68ba9e9d5ccf788f419eb9a2b97500cc26ca3c945af3dab0479dd353acb648696c03a62d8de05f9b345f7aa69875b41aaf4bb198c670ae11a8fb9d8f71a62b49d98f2a4147300d7bfdf1b4336339f14e33e4484ff6ea8ac8f3e877fc", 0xa7, 0x10, 0x1, {0x0, r12}}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='afs_folio_dirty\x00', r0}, 0x18) r13 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x8919, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r14, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) fcntl$notify(r6, 0x402, 0x40000013) connect$inet(r14, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 506.170113ms ago: executing program 4 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000840000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00y\t\x00\x00!\x00\x00\x00\x00\x00\x00\b\x00 \x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="0906", 0x2}], 0x1, 0x10001, 0x81, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x20, &(0x7f0000000dc0)={&(0x7f0000000cc0)=""/247, 0xf7, 0x0, &(0x7f00000005c0)=""/64, 0x40}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x14, 0x11, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x54}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='syzkaller\x00', 0xa, 0x7b, &(0x7f00000004c0)=""/123, 0x41000, 0x20, '\x00', r4, @fallback, r5, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x7, 0x5}, 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001ed) fallocate(r7, 0x3, 0x9, 0x10000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x20}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a3000"], 0x122}}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@version_9p2000}]}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000400)="eace7db92c9a", 0x0}, 0x20) 505.741423ms ago: executing program 0 (id=589): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, r0, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) mknod$loop(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x40, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x4, 0x0, 0x1e}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4000) unshare(0x20060400) mknod$loop(&(0x7f0000000900)='./cgroup.cpu/cpuset.cpus\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000011114110629bd70004b00130000000000000000002f3bfb8d03c954ba601597f2725c20b099bade47ddc4d4d39210eb3a91200b937704b96fdcbb30b84e712e0c6ddf3764dadb2c4e75c17d51e9dbffc3829ab12f97d8a66f80eb933f9a9485f4ad268c242cb479be1092f594e4be50dc4b8048bd585c24b326292f67db663e5ef56c203b71e20bbf74468a37aa2474241b77eb85f7f409044cbf76ed56aa86618d5a6fa4791281786007dce41e64"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x2004c004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000002f2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002640)={[0x2]}, 0x8) r5 = dup2(r2, r2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x69, 0x7bb9, 0x8, 0x700000000000000}) accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) 426.651144ms ago: executing program 0 (id=590): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 349.852595ms ago: executing program 2 (id=591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000002000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 343.677495ms ago: executing program 1 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x7d}, 'port0\x00', 0xe7, 0x90801, 0x0, 0x8000006, 0x4658, 0x7, 0x8, 0x0, 0x6}) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000004007b8a190001000000bfa200000000000007021600fbffffff4fa5b703000000000000b70400000000000085000000c30000", @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) (async) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000018000280100003800c0001800800010000000000040001000c00018008000100", @ANYRES32=r6], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) (rerun: 64) mq_timedsend(r7, &(0x7f00000001c0)="5afb6e8779132d258e75f8f5ea005a5b55bd996820ce1d850a9596657a4a2c693c55f45e4350bd0407cccdc58d3462d3df1968b0ce7c8ee9d596a8dc4965f9c6e83ba71d69efb148263aff1241dfe486d233ea3ce4c9cc5740404912912c3bb04b5212f9c0616845e3d49f2de93b2ab06a00af94134d60a6cfa43672303be1655365e9c5da3a3d4b75b4703462146a6b25b4282c2e4b2875bf994238c82e826e228a19eb798bac2e6325d017fdf361c4b977842e40ac318d07f484d33302c50bb1f18279eabb408c414724ec18c5d131549abf80afa954ee38", 0xd9, 0x1c9, &(0x7f0000000300)={r8, r9+60000000}) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000010080001000100000e"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) (async, rerun: 32) close(r11) (async, rerun: 32) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r12) 305.696115ms ago: executing program 0 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write(r0, &(0x7f0000000000)="8234887f8b669f5b2913a75096414f", 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, 0x0, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @empty}, &(0x7f0000000280)=0xc) 189.346347ms ago: executing program 1 (id=594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000080)=@raw=[@func, @call={0x85, 0x0, 0x0, 0xc5}, @exit], &(0x7f0000000240)='syzkaller\x00', 0xfffffffd, 0x39, &(0x7f00000002c0)=""/57, 0x41000, 0x8b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x5, 0x7, 0x90}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) recvmsg(r2, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x2) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r9 = syz_io_uring_setup(0x69a1, &(0x7f0000000400)={0x0, 0x79b0, 0x13190, 0x3, 0x400246}, &(0x7f0000000080)=0x0, &(0x7f00000006c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, 0x0, 0x1, 0x8, 0x1, {0x0, r12}}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd=r0, 0xffffffff, &(0x7f0000000500)="ba4558363e0541c23cdd54477c8e29c29a54c2d97a10616ca98f34276a3cedd7f3ca89ef57376c1ad806acb87f89eb09cb9bb26c219bb6484f2289bff7d2b8c61083b69b4853f9eaef5a6b68ba9e9d5ccf788f419eb9a2b97500cc26ca3c945af3dab0479dd353acb648696c03a62d8de05f9b345f7aa69875b41aaf4bb198c670ae11a8fb9d8f71a62b49d98f2a4147300d7bfdf1b4336339f14e33e4484ff6ea8ac8f3e877fc", 0xa7, 0x10, 0x1, {0x0, r12}}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='afs_folio_dirty\x00', r0}, 0x18) r13 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x8919, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r14, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) fcntl$notify(r6, 0x402, 0x40000013) connect$inet(r14, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 188.015977ms ago: executing program 2 (id=595): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@auto_da_alloc}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e1, &(0x7f0000000000)=0x7) 132.463158ms ago: executing program 0 (id=597): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x543f}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f0085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x1b00}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4884}, 0x4000000) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setgroups(0x0, 0x0) 0s ago: executing program 0 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32=r0, @ANYRES64, @ANYRES64=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="9800000000000000000000000000000018110000", @ANYRESHEX=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$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") r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x68f}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0x8}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000", @ANYRES32], 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigpending(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 41.721186][ T3547] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, [ 41.796122][ T3594] EXT4-fs (loop3): mount failed [ 41.796398][ T3547] free 0, pa_free 4 [ 41.955259][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.970760][ T3613] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.001202][ T3619] loop1: detected capacity change from 0 to 512 [ 42.023588][ T3613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 42.032665][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 42.041887][ T3613] vxcan0: entered promiscuous mode [ 42.047297][ T3613] vxcan0: entered allmulticast mode [ 42.138208][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.164941][ T3619] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.189507][ T3619] random: crng reseeded on system resumption [ 42.255457][ T3646] loop4: detected capacity change from 0 to 512 [ 42.278878][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.355919][ T3646] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.382959][ T3650] loop3: detected capacity change from 0 to 1024 [ 42.447076][ T3650] EXT4-fs: Ignoring removed nobh option [ 42.453240][ T3650] EXT4-fs: Ignoring removed bh option [ 42.478143][ T3646] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.55: corrupted inode contents [ 42.586903][ T3646] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.55: mark_inode_dirty error [ 42.607315][ T3646] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.55: corrupted inode contents [ 42.619971][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.638101][ T3650] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 42.658570][ T3650] EXT4-fs (loop3): Remounting filesystem read-only [ 42.666524][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.687723][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.836278][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.864739][ T3672] loop3: detected capacity change from 0 to 512 [ 42.876743][ T3672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.890222][ T3672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.956388][ T3672] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.990659][ T3672] EXT4-fs (loop3): 1 truncate cleaned up [ 43.007347][ T3672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.024368][ T3679] pim6reg: entered allmulticast mode [ 43.048747][ T3679] pim6reg: left allmulticast mode [ 43.054313][ T3672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.114607][ T3686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.132687][ T3687] loop1: detected capacity change from 0 to 1024 [ 43.142621][ T3687] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.176994][ T3687] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.186623][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.195299][ T3687] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.220927][ T3686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.229192][ T3687] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set [ 43.262489][ T3687] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 43.274643][ T3687] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 43.287786][ T3687] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.302807][ T3687] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 43.314240][ T3687] EXT4-fs (loop1): 1 orphan inode deleted [ 43.321310][ T3686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.333689][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.380668][ T3686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.393953][ T3679] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.65: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 43.435843][ T3698] loop3: detected capacity change from 0 to 164 [ 43.452404][ T3687] +}[@ (3687) used greatest stack depth: 9344 bytes left [ 43.457491][ T3686] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.470276][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.480810][ T3686] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.492816][ T3686] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.505289][ T3686] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.567452][ T3700] loop3: detected capacity change from 0 to 128 [ 43.588317][ T3700] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 43.608413][ T3700] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.676015][ T3710] loop1: detected capacity change from 0 to 2048 [ 43.729649][ T3693] netlink: 'syz.0.67': attribute type 4 has an invalid length. [ 43.739616][ T3693] bond_slave_1: default FDB implementation only supports local addresses [ 43.762047][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.804633][ T3296] loop1: p1 < > p4 [ 43.811660][ T3296] loop1: p4 size 8388608 extends beyond EOD, truncated [ 43.853562][ T3710] loop1: p1 < > p4 [ 43.858882][ T3710] loop1: p4 size 8388608 extends beyond EOD, truncated [ 43.956520][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 43.971577][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.218931][ T3746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.271849][ T3746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.351969][ T3746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.411187][ T3746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.461528][ T3749] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.495173][ T3746] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.528426][ T3746] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.550373][ T3746] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.562917][ T3749] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.584834][ T3746] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.608332][ T3749] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.668546][ T3749] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.735127][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 44.735146][ T29] audit: type=1400 audit(1751137284.746:320): avc: denied { create } for pid=3761 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.792701][ T29] audit: type=1400 audit(1751137284.756:321): avc: denied { setopt } for pid=3761 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.840967][ T3771] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 44.897103][ T3778] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 44.897307][ T3771] team0: Port device dummy0 added [ 44.915019][ T3778] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.936837][ T29] audit: type=1400 audit(1751137284.956:322): avc: denied { create } for pid=3779 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 44.987317][ T3778] team0: Failed to send options change via netlink (err -105) [ 45.019615][ T3778] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.041128][ T3778] team0: Port device dummy0 removed [ 45.049715][ T3778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.101867][ T3786] FAULT_INJECTION: forcing a failure. [ 45.101867][ T3786] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.117594][ T3786] CPU: 1 UID: 0 PID: 3786 Comm: syz.3.99 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 45.117622][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.117634][ T3786] Call Trace: [ 45.117676][ T3786] [ 45.117685][ T3786] __dump_stack+0x1d/0x30 [ 45.117711][ T3786] dump_stack_lvl+0xe8/0x140 [ 45.117735][ T3786] dump_stack+0x15/0x1b [ 45.117833][ T3786] should_fail_ex+0x265/0x280 [ 45.117873][ T3786] should_fail+0xb/0x20 [ 45.117988][ T3786] should_fail_usercopy+0x1a/0x20 [ 45.118029][ T3786] _copy_from_user+0x1c/0xb0 [ 45.118055][ T3786] memdup_user+0x5e/0xd0 [ 45.118169][ T3786] strndup_user+0x68/0xb0 [ 45.118193][ T3786] __se_sys_mount+0x8e/0x2e0 [ 45.118221][ T3786] __x64_sys_mount+0x67/0x80 [ 45.118238][ T3786] x64_sys_call+0xd36/0x2fb0 [ 45.118265][ T3786] do_syscall_64+0xd2/0x200 [ 45.118288][ T3786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.118348][ T3786] ? clear_bhb_loop+0x40/0x90 [ 45.118373][ T3786] ? clear_bhb_loop+0x40/0x90 [ 45.118400][ T3786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.118426][ T3786] RIP: 0033:0x7ffa8f9ae929 [ 45.118464][ T3786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.118481][ T3786] RSP: 002b:00007ffa8e017038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.118505][ T3786] RAX: ffffffffffffffda RBX: 00007ffa8fbd5fa0 RCX: 00007ffa8f9ae929 [ 45.118520][ T3786] RDX: 00002000000002c0 RSI: 0000200000000040 RDI: 0000200000000100 [ 45.118535][ T3786] RBP: 00007ffa8e017090 R08: 0000200000000300 R09: 0000000000000000 [ 45.118600][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.118612][ T3786] R13: 0000000000000000 R14: 00007ffa8fbd5fa0 R15: 00007ffeed274d88 [ 45.118634][ T3786] [ 45.146801][ T3777] veth1_to_bridge: entered promiscuous mode [ 45.175611][ T29] audit: type=1400 audit(1751137284.956:323): avc: denied { setopt } for pid=3779 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 45.177562][ T3777] veth1_to_bridge: entered allmulticast mode [ 45.182605][ T29] audit: type=1400 audit(1751137285.036:324): avc: denied { mounton } for pid=3781 comm="syz.3.93" path="/23/bus" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.349557][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.417871][ T3795] __nla_validate_parse: 9 callbacks suppressed [ 45.417891][ T3795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 45.434607][ T29] audit: type=1400 audit(1751137285.326:325): avc: denied { create } for pid=3788 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.454057][ T29] audit: type=1400 audit(1751137285.396:326): avc: denied { bind } for pid=3791 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.473305][ T29] audit: type=1400 audit(1751137285.406:327): avc: denied { write } for pid=3788 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.520178][ T3799] loop0: detected capacity change from 0 to 128 [ 45.548856][ T3799] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.561728][ T3799] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.591421][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.865884][ T29] audit: type=1400 audit(1751137285.876:328): avc: denied { setcheckreqprot } for pid=3803 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.470664][ T29] audit: type=1400 audit(1751137286.486:329): avc: denied { read } for pid=3809 comm="syz.1.106" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.523849][ T3811] loop1: detected capacity change from 0 to 512 [ 46.549704][ T3811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.576167][ T3811] EXT4-fs (loop1): 1 truncate cleaned up [ 46.585008][ T3811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.629934][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a120000: rx timeout, send abort [ 47.135312][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 47.144185][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a120000: abort rx timeout. Force session deactivation [ 47.174985][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 47.184686][ T3822] FAULT_INJECTION: forcing a failure. [ 47.184686][ T3822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.197879][ T3822] CPU: 1 UID: 0 PID: 3822 Comm: syz.0.111 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 47.197931][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.197947][ T3822] Call Trace: [ 47.197954][ T3822] [ 47.197963][ T3822] __dump_stack+0x1d/0x30 [ 47.197989][ T3822] dump_stack_lvl+0xe8/0x140 [ 47.198088][ T3822] dump_stack+0x15/0x1b [ 47.198171][ T3822] should_fail_ex+0x265/0x280 [ 47.198209][ T3822] should_fail+0xb/0x20 [ 47.198244][ T3822] should_fail_usercopy+0x1a/0x20 [ 47.198343][ T3822] _copy_from_iter+0xcf/0xe40 [ 47.198378][ T3822] packet_sendmsg+0x2033/0x3240 [ 47.198474][ T3822] ? __rcu_read_unlock+0x4f/0x70 [ 47.198597][ T3822] ? avc_has_perm+0xd3/0x150 [ 47.198623][ T3822] ? selinux_socket_sendmsg+0x175/0x1b0 [ 47.198682][ T3822] ? __pfx_packet_sendmsg+0x10/0x10 [ 47.198702][ T3822] __sock_sendmsg+0x142/0x180 [ 47.198724][ T3822] __sys_sendto+0x268/0x330 [ 47.198790][ T3822] __x64_sys_sendto+0x76/0x90 [ 47.198904][ T3822] x64_sys_call+0x2eb6/0x2fb0 [ 47.198922][ T3822] do_syscall_64+0xd2/0x200 [ 47.199011][ T3822] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.199034][ T3822] ? clear_bhb_loop+0x40/0x90 [ 47.199052][ T3822] ? clear_bhb_loop+0x40/0x90 [ 47.199071][ T3822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.199105][ T3822] RIP: 0033:0x7f4f590de929 [ 47.199119][ T3822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.199134][ T3822] RSP: 002b:00007f4f57747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 47.199150][ T3822] RAX: ffffffffffffffda RBX: 00007f4f59305fa0 RCX: 00007f4f590de929 [ 47.199161][ T3822] RDX: 000000000000fc13 RSI: 0000200000000800 RDI: 0000000000000003 [ 47.199172][ T3822] RBP: 00007f4f57747090 R08: 0000000000000000 R09: fffffffffffffef0 [ 47.199203][ T3822] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 47.199214][ T3822] R13: 0000000000000000 R14: 00007f4f59305fa0 R15: 00007ffd57cd7ef8 [ 47.199230][ T3822] [ 47.205174][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 47.338860][ T3829] loop0: detected capacity change from 0 to 512 [ 47.432404][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.459372][ T3829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.473847][ T3829] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.524353][ T3837] loop1: detected capacity change from 0 to 128 [ 47.531283][ T3837] vfat: Unknown parameter '0xffffffffffffffff1+' [ 47.556015][ T3837] loop1: detected capacity change from 0 to 1024 [ 47.571052][ T3837] EXT4-fs: Ignoring removed nobh option [ 47.576778][ T3837] EXT4-fs: Ignoring removed bh option [ 47.585739][ T3827] ext4: Unknown parameter 'GPL' [ 47.597954][ T3837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.646966][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.814326][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.839065][ T3845] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.868413][ T3845] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.918065][ T3845] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.968254][ T3845] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.984991][ T3749] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.996770][ T3749] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.008235][ T3749] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.019989][ T3749] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.131250][ T3850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.178279][ T3850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.248864][ T3850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.288343][ T3850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.365462][ T3864] FAULT_INJECTION: forcing a failure. [ 48.365462][ T3864] name failslab, interval 1, probability 0, space 0, times 0 [ 48.378306][ T3864] CPU: 1 UID: 0 PID: 3864 Comm: syz.3.122 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 48.378358][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.378374][ T3864] Call Trace: [ 48.378383][ T3864] [ 48.378471][ T3864] __dump_stack+0x1d/0x30 [ 48.378495][ T3864] dump_stack_lvl+0xe8/0x140 [ 48.378513][ T3864] dump_stack+0x15/0x1b [ 48.378529][ T3864] should_fail_ex+0x265/0x280 [ 48.378641][ T3864] should_failslab+0x8c/0xb0 [ 48.378664][ T3864] kmem_cache_alloc_noprof+0x50/0x310 [ 48.378690][ T3864] ? skb_clone+0x151/0x1f0 [ 48.378737][ T3864] skb_clone+0x151/0x1f0 [ 48.378760][ T3864] __netlink_deliver_tap+0x2c9/0x500 [ 48.378806][ T3864] netlink_unicast+0x64c/0x670 [ 48.378895][ T3864] netlink_sendmsg+0x58b/0x6b0 [ 48.378922][ T3864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.378969][ T3864] __sock_sendmsg+0x142/0x180 [ 48.378999][ T3864] ____sys_sendmsg+0x31e/0x4e0 [ 48.379088][ T3864] ___sys_sendmsg+0x17b/0x1d0 [ 48.379143][ T3864] __x64_sys_sendmsg+0xd4/0x160 [ 48.379202][ T3864] x64_sys_call+0x2999/0x2fb0 [ 48.379230][ T3864] do_syscall_64+0xd2/0x200 [ 48.379252][ T3864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.379286][ T3864] ? clear_bhb_loop+0x40/0x90 [ 48.379312][ T3864] ? clear_bhb_loop+0x40/0x90 [ 48.379403][ T3864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.379428][ T3864] RIP: 0033:0x7ffa8f9ae929 [ 48.379448][ T3864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.379526][ T3864] RSP: 002b:00007ffa8e017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.379549][ T3864] RAX: ffffffffffffffda RBX: 00007ffa8fbd5fa0 RCX: 00007ffa8f9ae929 [ 48.379564][ T3864] RDX: 0000000000040010 RSI: 0000200000000140 RDI: 0000000000000004 [ 48.379578][ T3864] RBP: 00007ffa8e017090 R08: 0000000000000000 R09: 0000000000000000 [ 48.379593][ T3864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.379607][ T3864] R13: 0000000000000000 R14: 00007ffa8fbd5fa0 R15: 00007ffeed274d88 [ 48.379626][ T3864] [ 48.379642][ T3864] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 48.414005][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 48.417912][ T3864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 48.619224][ T3861] hsr_slave_0: left promiscuous mode [ 48.624953][ T3861] hsr_slave_1: left promiscuous mode [ 48.839355][ T3874] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 48.847269][ T3874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.126'. [ 49.055322][ T3891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.066877][ T3891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.086834][ T3891] loop3: detected capacity change from 0 to 256 [ 49.118398][ T3891] loop3: detected capacity change from 0 to 256 [ 49.138377][ T3891] FAT-fs (loop3): Directory bread(block 64) failed [ 49.151592][ T3891] FAT-fs (loop3): Directory bread(block 65) failed [ 49.159987][ T3891] FAT-fs (loop3): Directory bread(block 66) failed [ 49.166775][ T3891] FAT-fs (loop3): Directory bread(block 67) failed [ 49.173430][ T3891] FAT-fs (loop3): Directory bread(block 68) failed [ 49.180219][ T3891] FAT-fs (loop3): Directory bread(block 69) failed [ 49.186969][ T3891] FAT-fs (loop3): Directory bread(block 70) failed [ 49.193595][ T3891] FAT-fs (loop3): Directory bread(block 71) failed [ 49.200379][ T3891] FAT-fs (loop3): Directory bread(block 72) failed [ 49.207020][ T3891] FAT-fs (loop3): Directory bread(block 73) failed [ 49.224133][ T3845] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.228565][ T3891] syz.3.130: attempt to access beyond end of device [ 49.228565][ T3891] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 49.248136][ T3845] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.264263][ T3845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.275760][ T3845] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.411287][ T3896] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 49.422533][ T3896] team0: Port device dummy0 added [ 49.429481][ T3896] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 49.439903][ T3896] team0: Port device dummy0 removed [ 49.448424][ T3896] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.587737][ T3909] loop0: detected capacity change from 0 to 512 [ 49.626560][ T3909] EXT4-fs (loop0): 1 orphan inode deleted [ 49.633011][ T3909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.646857][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 49.659557][ T3909] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.672409][ T3909] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.691566][ T3909] syz_tun: entered allmulticast mode [ 49.698732][ T3908] syz_tun: left allmulticast mode [ 49.721717][ T3916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.767654][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.795567][ T3922] netlink: 128 bytes leftover after parsing attributes in process `syz.3.139'. [ 49.804822][ T3922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.139'. [ 49.828279][ T3916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.877123][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 49.877140][ T29] audit: type=1400 audit(1751137289.896:419): avc: denied { append } for pid=3928 comm="syz.0.144" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.907753][ T3931] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 49.917655][ T3932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.943914][ T3916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.963372][ T3935] capability: warning: `syz.1.145' uses 32-bit capabilities (legacy support in use) [ 49.974730][ T29] audit: type=1400 audit(1751137289.986:420): avc: denied { read } for pid=3934 comm="syz.1.145" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.998359][ T29] audit: type=1400 audit(1751137289.986:421): avc: denied { open } for pid=3934 comm="syz.1.145" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.024033][ T29] audit: type=1400 audit(1751137290.046:422): avc: denied { ioctl } for pid=3934 comm="syz.1.145" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.049757][ T3935] loop1: detected capacity change from 0 to 1024 [ 50.081924][ T3932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.098217][ T3916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.139708][ T3939] loop1: detected capacity change from 0 to 512 [ 50.161660][ T3932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.173347][ T3939] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 50.183588][ T3939] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.198967][ T3939] EXT4-fs (loop1): mount failed [ 50.211483][ T3916] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.234089][ T3932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.264073][ T3916] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.267707][ T3946] loop0: detected capacity change from 0 to 512 [ 50.286148][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.291310][ T3916] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306859][ T3947] hsr_slave_0: left promiscuous mode [ 50.315161][ T3947] hsr_slave_1: left promiscuous mode [ 50.316577][ T3946] EXT4-fs (loop0): 1 orphan inode deleted [ 50.327281][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.328136][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.337182][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 50.352718][ T3946] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.376451][ T3916] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.393001][ T3932] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.402415][ T3946] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.405566][ T3932] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.423712][ T3932] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.436038][ T3932] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.459036][ T3946] syz_tun: entered allmulticast mode [ 50.465355][ T3945] syz_tun: left allmulticast mode [ 50.534237][ T3956] loop4: detected capacity change from 0 to 8192 [ 50.557774][ T3956] loop4: p1 p2 p4 [ 50.562018][ T3956] loop4: p1 start 51379968 is beyond EOD, truncated [ 50.568796][ T3956] loop4: p2 start 4293394690 is beyond EOD, truncated [ 50.575637][ T3956] loop4: p4 size 50331648 extends beyond EOD, truncated [ 50.584454][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.629453][ T3963] netlink: 76 bytes leftover after parsing attributes in process `syz.3.154'. [ 50.670454][ T3970] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 50.670475][ T29] audit: type=1400 audit(1751137290.686:423): avc: denied { bind } for pid=3968 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.704770][ T3970] 9pnet_fd: Insufficient options for proto=fd [ 50.733498][ T3972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 50.768012][ T3972] loop3: detected capacity change from 0 to 512 [ 50.790663][ T3978] tap0: tun_chr_ioctl cmd 1074025681 [ 50.796439][ T3978] tap0: tun_chr_ioctl cmd 1074025680 [ 50.803342][ T3984] tap0: tun_chr_ioctl cmd 1074025673 [ 50.803409][ T3972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.830312][ T3972] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.844007][ T3972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.154: corrupted inode contents [ 50.856357][ T3972] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.154: mark_inode_dirty error [ 50.869326][ T3972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.154: corrupted inode contents [ 50.889570][ T3972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.154: corrupted inode contents [ 50.890048][ T29] audit: type=1400 audit(1751137290.906:424): avc: denied { create } for pid=3962 comm="syz.3.154" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 50.902559][ T3972] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.154: mark_inode_dirty error [ 50.933539][ T3972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.154: corrupted inode contents [ 50.954053][ T3972] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.154: mark_inode_dirty error [ 50.978325][ T3972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.154: corrupted inode contents [ 50.981395][ T3993] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 51.001231][ T3972] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.154: mark_inode_dirty error [ 51.067627][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.114826][ T29] audit: type=1400 audit(1751137291.126:425): avc: denied { connect } for pid=4003 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.145489][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 51.170825][ T4004] team1: entered promiscuous mode [ 51.184617][ T4004] team1: entered allmulticast mode [ 51.203469][ T4010] loop4: detected capacity change from 0 to 512 [ 51.212051][ T29] audit: type=1400 audit(1751137291.236:426): avc: denied { read write } for pid=4003 comm="syz.3.161" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.256107][ T4010] EXT4-fs (loop4): 1 orphan inode deleted [ 51.264276][ T4010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.277132][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 51.291841][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 51.302937][ T4010] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.315349][ T4016] batadv0: entered promiscuous mode [ 51.321571][ T4016] macvtap1: entered promiscuous mode [ 51.322863][ T4010] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.327043][ T4016] macvtap1: entered allmulticast mode [ 51.340753][ T4016] batadv0: entered allmulticast mode [ 51.347309][ T4016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 51.360105][ T4010] syz_tun: entered allmulticast mode [ 51.366662][ T4008] syz_tun: left allmulticast mode [ 51.494609][ T4028] loop3: detected capacity change from 0 to 512 [ 51.511292][ T4028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.529760][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.540326][ T4028] EXT4-fs (loop3): 1 truncate cleaned up [ 51.546428][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.602250][ T4031] netlink: 216 bytes leftover after parsing attributes in process `syz.4.170'. [ 51.613259][ T4031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 51.622931][ T4031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 51.758122][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.858621][ T4042] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 52.008519][ T4049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'. [ 52.037240][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 52.049351][ T4051] macvtap2: entered promiscuous mode [ 52.054812][ T4051] macvtap2: entered allmulticast mode [ 52.061434][ T4051] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 52.117522][ T4055] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.180071][ T4055] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.251944][ T4055] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.285008][ T4062] xt_hashlimit: max too large, truncated to 1048576 [ 52.301647][ T4055] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.450122][ T4072] loop0: detected capacity change from 0 to 512 [ 52.459030][ T4072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.467004][ T3850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.482145][ T3850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.485558][ T4072] EXT4-fs (loop0): 1 truncate cleaned up [ 52.494875][ T3850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.498312][ T4072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.509621][ T3850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.527853][ T4072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.538052][ T4072] netlink: 96 bytes leftover after parsing attributes in process `syz.0.185'. [ 52.558820][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.648679][ T4079] batadv0: entered promiscuous mode [ 52.654110][ T4079] macvtap1: entered promiscuous mode [ 52.659645][ T4079] macvtap1: entered allmulticast mode [ 52.665120][ T4079] batadv0: entered allmulticast mode [ 52.671577][ T4079] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 52.706527][ T4082] loop0: detected capacity change from 0 to 2048 [ 52.723677][ T4082] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 52.733475][ T4082] EXT4-fs (loop0): group descriptors corrupted! [ 52.760766][ T4082] sd 0:0:1:0: device reset [ 52.776511][ T4082] loop0: detected capacity change from 0 to 128 [ 52.923111][ T4100] loop0: detected capacity change from 0 to 512 [ 52.931416][ T4100] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.958564][ T4100] EXT4-fs (loop0): 1 truncate cleaned up [ 52.974736][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.992586][ T4103] loop4: detected capacity change from 0 to 512 [ 53.003011][ T4103] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.197: casefold flag without casefold feature [ 53.024187][ T4100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.047100][ T4103] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.197: couldn't read orphan inode 15 (err -117) [ 53.061276][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.107886][ T4103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.159001][ T4108] macvtap2: entered promiscuous mode [ 53.164493][ T4108] macvtap2: entered allmulticast mode [ 53.172997][ T4108] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 53.258648][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.425914][ T4124] loop0: detected capacity change from 0 to 512 [ 53.439215][ T4124] EXT4-fs: Ignoring removed i_version option [ 53.446311][ T4124] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.458165][ T4124] journal_path: Lookup failure for './file2' [ 53.464919][ T4124] EXT4-fs: error: could not find journal device path [ 53.485878][ T4131] loop1: detected capacity change from 0 to 512 [ 53.521980][ T4131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.548189][ T4131] EXT4-fs (loop1): 1 truncate cleaned up [ 53.554611][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.573879][ T4124] loop0: detected capacity change from 0 to 512 [ 53.585287][ T4131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.615907][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.645364][ T4124] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.680985][ T4124] EXT4-fs (loop0): 1 truncate cleaned up [ 53.693005][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.712168][ T4124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.763737][ T4124] geneve2: entered promiscuous mode [ 53.770935][ T4124] geneve2: entered allmulticast mode [ 53.797251][ T4137] veth0_macvtap: entered allmulticast mode [ 53.824203][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.831807][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.839666][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.847137][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.872512][ T4134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.881981][ T4134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.040184][ T4147] tipc: Started in network mode [ 54.045222][ T4147] tipc: Node identity 7ae6648f78df, cluster identity 4711 [ 54.052513][ T4147] tipc: Enabled bearer , priority 0 [ 54.067516][ T4147] syzkaller0: entered promiscuous mode [ 54.073120][ T4147] syzkaller0: entered allmulticast mode [ 54.223296][ T4161] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 54.255452][ T4148] tipc: Resetting bearer [ 54.262213][ T4174] loop4: detected capacity change from 0 to 512 [ 54.270979][ T4148] tipc: Disabling bearer [ 54.277308][ T4174] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.300736][ T4174] EXT4-fs (loop4): 1 truncate cleaned up [ 54.313329][ T4174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.333847][ T4177] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 54.346063][ T4174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.368606][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.517910][ T4196] team_slave_0: entered promiscuous mode [ 54.523696][ T4196] team_slave_1: entered promiscuous mode [ 54.534622][ T4196] loop1: detected capacity change from 0 to 512 [ 54.594128][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.609990][ T4196] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.638328][ T4204] rdma_op ffff88811a36ad80 conn xmit_rdma 0000000000000000 [ 54.647677][ T4204] loop4: detected capacity change from 0 to 128 [ 54.649741][ T4206] loop0: detected capacity change from 0 to 512 [ 54.662384][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.682860][ T4055] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.720659][ T4208] loop1: detected capacity change from 0 to 512 [ 54.728668][ T4055] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.748601][ T4206] EXT4-fs (loop0): 1 orphan inode deleted [ 54.755177][ T4206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.757858][ T4212] loop4: detected capacity change from 0 to 512 [ 54.774501][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 54.786343][ T4206] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.791203][ T4208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.812399][ T4206] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.822728][ T4208] EXT4-fs (loop1): 1 truncate cleaned up [ 54.827256][ T4055] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.829275][ T4208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.842944][ T4212] EXT4-fs (loop4): 1 orphan inode deleted [ 54.856858][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 54.871854][ T4212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.878608][ T4208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.892665][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 54.892680][ T29] audit: type=1326 audit(1751137294.906:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 54.898130][ T4055] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.898914][ T29] audit: type=1326 audit(1751137294.906:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 54.928122][ T4206] syz_tun: entered allmulticast mode [ 54.930273][ T29] audit: type=1326 audit(1751137294.906:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 54.959141][ T4205] syz_tun: left allmulticast mode [ 54.982041][ T29] audit: type=1326 audit(1751137294.906:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 54.991001][ T4212] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.010372][ T29] audit: type=1326 audit(1751137294.906:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 55.044237][ T29] audit: type=1326 audit(1751137294.906:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 55.067849][ T29] audit: type=1326 audit(1751137294.906:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 55.091154][ T29] audit: type=1326 audit(1751137294.946:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 55.114421][ T29] audit: type=1326 audit(1751137294.946:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 55.137519][ T29] audit: type=1326 audit(1751137294.946:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 55.163902][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.244365][ T4212] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.269859][ T4212] syz_tun: entered allmulticast mode [ 55.291549][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.301373][ T4211] syz_tun: left allmulticast mode [ 55.387328][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.495090][ T4243] loop4: detected capacity change from 0 to 512 [ 55.584711][ T4247] hsr0: entered promiscuous mode [ 55.590694][ T4247] hsr_slave_0: left promiscuous mode [ 55.597674][ T4247] hsr_slave_1: left promiscuous mode [ 55.611120][ T4247] hsr0 (unregistering): left promiscuous mode [ 55.790258][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.797818][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.808387][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.815965][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.831040][ T4257] batadv0 (unregistering): left allmulticast mode [ 56.031340][ T4263] FAULT_INJECTION: forcing a failure. [ 56.031340][ T4263] name failslab, interval 1, probability 0, space 0, times 0 [ 56.044090][ T4263] CPU: 0 UID: 0 PID: 4263 Comm: syz.1.251 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 56.044120][ T4263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.044137][ T4263] Call Trace: [ 56.044145][ T4263] [ 56.044155][ T4263] __dump_stack+0x1d/0x30 [ 56.044181][ T4263] dump_stack_lvl+0xe8/0x140 [ 56.044238][ T4263] dump_stack+0x15/0x1b [ 56.044260][ T4263] should_fail_ex+0x265/0x280 [ 56.044299][ T4263] should_failslab+0x8c/0xb0 [ 56.044324][ T4263] kmem_cache_alloc_noprof+0x50/0x310 [ 56.044381][ T4263] ? skb_clone+0x151/0x1f0 [ 56.044402][ T4263] skb_clone+0x151/0x1f0 [ 56.044420][ T4263] __netlink_deliver_tap+0x2c9/0x500 [ 56.044465][ T4263] netlink_unicast+0x64c/0x670 [ 56.044576][ T4263] netlink_sendmsg+0x58b/0x6b0 [ 56.044598][ T4263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.044643][ T4263] __sock_sendmsg+0x142/0x180 [ 56.044714][ T4263] ____sys_sendmsg+0x31e/0x4e0 [ 56.044758][ T4263] ___sys_sendmsg+0x17b/0x1d0 [ 56.044866][ T4263] __x64_sys_sendmsg+0xd4/0x160 [ 56.044909][ T4263] x64_sys_call+0x2999/0x2fb0 [ 56.044930][ T4263] do_syscall_64+0xd2/0x200 [ 56.044947][ T4263] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.045001][ T4263] ? clear_bhb_loop+0x40/0x90 [ 56.045028][ T4263] ? clear_bhb_loop+0x40/0x90 [ 56.045053][ T4263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.045074][ T4263] RIP: 0033:0x7f4b165de929 [ 56.045091][ T4263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.045113][ T4263] RSP: 002b:00007f4b14c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.045136][ T4263] RAX: ffffffffffffffda RBX: 00007f4b16805fa0 RCX: 00007f4b165de929 [ 56.045151][ T4263] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 56.045166][ T4263] RBP: 00007f4b14c47090 R08: 0000000000000000 R09: 0000000000000000 [ 56.045179][ T4263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.045273][ T4263] R13: 0000000000000000 R14: 00007f4b16805fa0 R15: 00007ffc962d5cb8 [ 56.045292][ T4263] [ 56.045723][ T4263] tipc: Started in network mode [ 56.109621][ T4265] loop3: detected capacity change from 0 to 512 [ 56.111671][ T4263] tipc: Node identity ac14140f, cluster identity 4711 [ 56.157157][ T4265] EXT4-fs (loop3): 1 orphan inode deleted [ 56.161375][ T4263] tipc: New replicast peer: 255.255.255.255 [ 56.175115][ T4265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.176375][ T4263] tipc: Enabled bearer , priority 10 [ 56.182912][ T4265] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.226688][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 56.324853][ T4272] syz_tun: entered allmulticast mode [ 56.343084][ T4265] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.392819][ T4264] syz_tun: left allmulticast mode [ 56.401656][ T4274] __nla_validate_parse: 16 callbacks suppressed [ 56.401674][ T4274] netlink: 256 bytes leftover after parsing attributes in process `syz.1.254'. [ 56.417242][ T4274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.254'. [ 56.506785][ T4280] random: crng reseeded on system resumption [ 56.530680][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.551121][ T4280] team0: Port device dummy0 removed [ 56.574128][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 56.577900][ T4290] capability: warning: `syz.3.260' uses deprecated v2 capabilities in a way that may be insecure [ 56.607832][ T4280] bridge_slave_0: left allmulticast mode [ 56.613736][ T4280] bridge_slave_0: left promiscuous mode [ 56.614049][ T4290] loop3: detected capacity change from 0 to 1024 [ 56.619525][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.632354][ T4290] EXT4-fs: Ignoring removed oldalloc option [ 56.649656][ T4280] bridge_slave_1: left allmulticast mode [ 56.650137][ T4290] EXT4-fs: Ignoring removed orlov option [ 56.655367][ T4280] bridge_slave_1: left promiscuous mode [ 56.662665][ T4290] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.666891][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.688211][ T4280] bond0: (slave bond_slave_0): Releasing backup interface [ 56.688908][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.711196][ T4280] bond0: (slave bond_slave_1): Releasing backup interface [ 56.726147][ T4280] team0: Port device team_slave_0 removed [ 56.734825][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 56.736153][ T4280] team0: Port device team_slave_1 removed [ 57.021138][ T4319] loop0: detected capacity change from 0 to 1024 [ 57.038830][ T4319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.193434][ T4330] loop4: detected capacity change from 0 to 512 [ 57.212989][ T4330] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.258214][ T4330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 57.266521][ T4330] System zones: 0-2, 18-18, 34-34 [ 57.274018][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.286708][ T3404] tipc: Node number set to 2886997007 [ 57.293377][ T4330] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.348931][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.487138][ T4338] hsr0: entered promiscuous mode [ 57.492389][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 57.501575][ T4338] hsr_slave_0: left promiscuous mode [ 57.507614][ T4338] hsr_slave_1: left promiscuous mode [ 57.517873][ T4338] hsr0 (unregistering): left promiscuous mode [ 57.554697][ T4345] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.597277][ T4351] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.640293][ T4345] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.758601][ T4351] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.818042][ T4345] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.831981][ T4351] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.022257][ T4345] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.038363][ T4351] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.146883][ T4363] mmap: syz.0.280 (4363) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.160409][ T4363] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 58.194216][ T4345] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.237329][ T4345] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.302123][ T4351] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.343471][ T4345] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.380386][ T4351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.434358][ T4345] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.482685][ T4351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.529143][ T4351] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.123256][ T4388] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.178121][ T4388] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.238898][ T4388] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.318252][ T4388] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.758487][ T4402] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 59.766768][ T4402] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 59.833973][ T4405] netlink: 'syz.2.296': attribute type 5 has an invalid length. [ 59.851818][ T4408] FAULT_INJECTION: forcing a failure. [ 59.851818][ T4408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.865167][ T4408] CPU: 1 UID: 0 PID: 4408 Comm: syz.0.297 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 59.865339][ T4408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.865358][ T4408] Call Trace: [ 59.865363][ T4408] [ 59.865370][ T4408] __dump_stack+0x1d/0x30 [ 59.865389][ T4408] dump_stack_lvl+0xe8/0x140 [ 59.865406][ T4408] dump_stack+0x15/0x1b [ 59.865447][ T4408] should_fail_ex+0x265/0x280 [ 59.865475][ T4408] should_fail+0xb/0x20 [ 59.865499][ T4408] should_fail_usercopy+0x1a/0x20 [ 59.865584][ T4408] strncpy_from_user+0x25/0x230 [ 59.865607][ T4408] strncpy_from_user_nofault+0x68/0xf0 [ 59.865649][ T4408] bpf_probe_read_compat_str+0xb4/0x130 [ 59.865681][ T4408] bpf_prog_e42f6260c1b72fb3+0x3e/0x44 [ 59.865695][ T4408] bpf_trace_run3+0x10c/0x1d0 [ 59.865716][ T4408] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 59.865759][ T4408] ? audit_log_end+0x1d7/0x1f0 [ 59.865776][ T4408] ? audit_log_end+0x1d7/0x1f0 [ 59.865790][ T4408] kmem_cache_free+0x257/0x300 [ 59.865815][ T4408] audit_log_end+0x1d7/0x1f0 [ 59.865833][ T4408] audit_seccomp+0xdc/0x100 [ 59.865890][ T4408] __seccomp_filter+0x69d/0x10d0 [ 59.865943][ T4408] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.865973][ T4408] ? vfs_write+0x75e/0x8e0 [ 59.866044][ T4408] ? __rcu_read_unlock+0x4f/0x70 [ 59.866063][ T4408] ? __fget_files+0x184/0x1c0 [ 59.866082][ T4408] __secure_computing+0x82/0x150 [ 59.866177][ T4408] syscall_trace_enter+0xcf/0x1e0 [ 59.866198][ T4408] do_syscall_64+0xac/0x200 [ 59.866221][ T4408] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.866255][ T4408] ? clear_bhb_loop+0x40/0x90 [ 59.866287][ T4408] ? clear_bhb_loop+0x40/0x90 [ 59.866306][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.866372][ T4408] RIP: 0033:0x7f4f590de929 [ 59.866385][ T4408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.866399][ T4408] RSP: 002b:00007f4f57747038 EFLAGS: 00000246 ORIG_RAX: 00000000000000da [ 59.866415][ T4408] RAX: ffffffffffffffda RBX: 00007f4f59305fa0 RCX: 00007f4f590de929 [ 59.866426][ T4408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.866436][ T4408] RBP: 00007f4f57747090 R08: 0000000000000000 R09: 0000000000000000 [ 59.866446][ T4408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.866456][ T4408] R13: 0000000000000000 R14: 00007f4f59305fa0 R15: 00007ffd57cd7ef8 [ 59.866509][ T4408] [ 60.113981][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 60.113998][ T29] audit: type=1326 audit(1751137299.886:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4f590dd33c code=0x7ffc0000 [ 60.143483][ T29] audit: type=1326 audit(1751137299.886:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f590dd3df code=0x7ffc0000 [ 60.166715][ T29] audit: type=1326 audit(1751137299.886:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4f590dd58a code=0x7ffc0000 [ 60.189981][ T29] audit: type=1326 audit(1751137299.886:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 60.213350][ T29] audit: type=1326 audit(1751137299.886:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 60.829637][ T29] audit: type=1400 audit(1751137300.846:1260): avc: denied { create } for pid=4423 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 60.866616][ T29] audit: type=1400 audit(1751137300.866:1261): avc: denied { sys_admin } for pid=4423 comm="syz.2.302" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.022705][ T4432] FAULT_INJECTION: forcing a failure. [ 61.022705][ T4432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.035913][ T4432] CPU: 1 UID: 0 PID: 4432 Comm: syz.2.303 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 61.035987][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.035998][ T4432] Call Trace: [ 61.036003][ T4432] [ 61.036066][ T4432] __dump_stack+0x1d/0x30 [ 61.036085][ T4432] dump_stack_lvl+0xe8/0x140 [ 61.036101][ T4432] dump_stack+0x15/0x1b [ 61.036176][ T4432] should_fail_ex+0x265/0x280 [ 61.036256][ T4432] should_fail+0xb/0x20 [ 61.036280][ T4432] should_fail_usercopy+0x1a/0x20 [ 61.036309][ T4432] _copy_to_user+0x20/0xa0 [ 61.036368][ T4432] simple_read_from_buffer+0xb5/0x130 [ 61.036428][ T4432] proc_fail_nth_read+0x100/0x140 [ 61.036532][ T4432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.036616][ T4432] vfs_read+0x1a0/0x6f0 [ 61.036652][ T4432] ? tty_unlock+0x21/0x30 [ 61.036673][ T4432] ? __rcu_read_unlock+0x4f/0x70 [ 61.036695][ T4432] ? __fget_files+0x184/0x1c0 [ 61.036784][ T4432] ksys_read+0xda/0x1a0 [ 61.036826][ T4432] __x64_sys_read+0x40/0x50 [ 61.036884][ T4432] x64_sys_call+0x2d77/0x2fb0 [ 61.036912][ T4432] do_syscall_64+0xd2/0x200 [ 61.036936][ T4432] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.036970][ T4432] ? clear_bhb_loop+0x40/0x90 [ 61.037063][ T4432] ? clear_bhb_loop+0x40/0x90 [ 61.037087][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.037114][ T4432] RIP: 0033:0x7fa3e53ad33c [ 61.037137][ T4432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.037155][ T4432] RSP: 002b:00007fa3e39f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.037235][ T4432] RAX: ffffffffffffffda RBX: 00007fa3e55d6080 RCX: 00007fa3e53ad33c [ 61.037250][ T4432] RDX: 000000000000000f RSI: 00007fa3e39f60a0 RDI: 0000000000000006 [ 61.037262][ T4432] RBP: 00007fa3e39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.037273][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.037335][ T4432] R13: 0000000000000001 R14: 00007fa3e55d6080 R15: 00007ffc569aa1f8 [ 61.037358][ T4432] [ 61.433755][ T29] audit: type=1326 audit(1751137301.446:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 61.443381][ T4438] loop2: detected capacity change from 0 to 1024 [ 61.457301][ T29] audit: type=1326 audit(1751137301.446:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 61.487082][ T29] audit: type=1326 audit(1751137301.446:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 61.518242][ T4438] EXT4-fs: Ignoring removed oldalloc option [ 61.545673][ T4438] EXT4-fs: Ignoring removed orlov option [ 61.555746][ T4438] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 61.597001][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 61.876267][ T4475] loop0: detected capacity change from 0 to 512 [ 61.884212][ T4475] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 62.000160][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 62.091007][ T4492] loop3: detected capacity change from 0 to 128 [ 62.098854][ T4492] vfat: Unknown parameter 'nonumtaS|/il' [ 62.194466][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 62.313698][ T4499] loop3: detected capacity change from 0 to 2048 [ 62.377066][ T4499] loop3: p1 < > p4 [ 62.381521][ T4499] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.391949][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 62.419550][ T4504] FAULT_INJECTION: forcing a failure. [ 62.419550][ T4504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.432744][ T4504] CPU: 1 UID: 0 PID: 4504 Comm: syz.3.328 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 62.432795][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.432840][ T4504] Call Trace: [ 62.432848][ T4504] [ 62.432856][ T4504] __dump_stack+0x1d/0x30 [ 62.432878][ T4504] dump_stack_lvl+0xe8/0x140 [ 62.432934][ T4504] dump_stack+0x15/0x1b [ 62.432950][ T4504] should_fail_ex+0x265/0x280 [ 62.433008][ T4504] should_fail+0xb/0x20 [ 62.433117][ T4504] should_fail_usercopy+0x1a/0x20 [ 62.433221][ T4504] _copy_from_iter+0xcf/0xe40 [ 62.433256][ T4504] ? __build_skb_around+0x1a0/0x200 [ 62.433299][ T4504] ? __alloc_skb+0x223/0x320 [ 62.433331][ T4504] netlink_sendmsg+0x471/0x6b0 [ 62.433355][ T4504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.433374][ T4504] __sock_sendmsg+0x142/0x180 [ 62.433418][ T4504] ____sys_sendmsg+0x31e/0x4e0 [ 62.433456][ T4504] ___sys_sendmsg+0x17b/0x1d0 [ 62.433577][ T4504] __x64_sys_sendmsg+0xd4/0x160 [ 62.433615][ T4504] x64_sys_call+0x2999/0x2fb0 [ 62.433667][ T4504] do_syscall_64+0xd2/0x200 [ 62.433686][ T4504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.433732][ T4504] ? clear_bhb_loop+0x40/0x90 [ 62.433754][ T4504] ? clear_bhb_loop+0x40/0x90 [ 62.433776][ T4504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.433824][ T4504] RIP: 0033:0x7ffa8f9ae929 [ 62.433839][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.433858][ T4504] RSP: 002b:00007ffa8e017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.433877][ T4504] RAX: ffffffffffffffda RBX: 00007ffa8fbd5fa0 RCX: 00007ffa8f9ae929 [ 62.433889][ T4504] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 62.433902][ T4504] RBP: 00007ffa8e017090 R08: 0000000000000000 R09: 0000000000000000 [ 62.433961][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.433973][ T4504] R13: 0000000000000000 R14: 00007ffa8fbd5fa0 R15: 00007ffeed274d88 [ 62.433992][ T4504] [ 62.806029][ T4521] netlink: 156 bytes leftover after parsing attributes in process `syz.3.334'. [ 62.815507][ T4521] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 62.942991][ T4388] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.965316][ T4388] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.989746][ T4388] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.004526][ T4388] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.468629][ T4569] loop4: detected capacity change from 0 to 1024 [ 63.561343][ T4575] loop4: detected capacity change from 0 to 1024 [ 63.580142][ T4575] EXT4-fs: Ignoring removed oldalloc option [ 63.618258][ T4575] EXT4-fs: Ignoring removed orlov option [ 63.625454][ T4575] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.704587][ T4582] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.752232][ T4586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 63.803352][ T4591] loop2: detected capacity change from 0 to 512 [ 63.812325][ T4591] EXT4-fs (loop2): Invalid default hash set in the superblock [ 63.837748][ T4582] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.862098][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 63.878153][ T4592] veth0: entered promiscuous mode [ 63.893175][ T4593] veth0 (unregistering): left promiscuous mode [ 63.927365][ T4582] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.979621][ T4582] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.141138][ T4617] loop0: detected capacity change from 0 to 1024 [ 64.150564][ T4617] EXT4-fs: Ignoring removed oldalloc option [ 64.168391][ T4617] EXT4-fs: Ignoring removed orlov option [ 64.174994][ T4617] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.217505][ T4627] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 64.224233][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.231845][ T4627] vhci_hcd vhci_hcd.0: Device attached [ 64.241585][ T4627] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 64.248252][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.256226][ T4627] vhci_hcd vhci_hcd.0: Device attached [ 64.275885][ T4627] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 64.282651][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.290716][ T4627] vhci_hcd vhci_hcd.0: Device attached [ 64.302866][ T4627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.316571][ T4627] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 64.323237][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.331360][ T4627] vhci_hcd vhci_hcd.0: Device attached [ 64.341836][ T4627] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(26) [ 64.348559][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.357060][ T4627] vhci_hcd vhci_hcd.0: Device attached [ 64.382857][ T4627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.409729][ T4627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.427848][ T4640] vhci_hcd: connection closed [ 64.428297][ T37] vhci_hcd: stop threads [ 64.431120][ T4635] vhci_hcd: connection closed [ 64.433099][ T37] vhci_hcd: release socket [ 64.438921][ T4638] vhci_hcd: connection closed [ 64.442072][ T37] vhci_hcd: disconnect device [ 64.459024][ T4628] vhci_hcd: connection closed [ 64.465270][ T4631] vhci_hcd: connection closed [ 64.478525][ T37] vhci_hcd: stop threads [ 64.487632][ T37] vhci_hcd: release socket [ 64.492087][ T37] vhci_hcd: disconnect device [ 64.496905][ T3388] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 64.504773][ T4629] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 64.627299][ T4647] loop0: detected capacity change from 0 to 512 [ 64.634093][ T4647] EXT4-fs: Ignoring removed i_version option [ 64.640389][ T37] vhci_hcd: stop threads [ 64.642674][ T4647] EXT4-fs (loop0): 1 truncate cleaned up [ 64.644686][ T37] vhci_hcd: release socket [ 64.644704][ T37] vhci_hcd: disconnect device [ 64.644745][ T37] vhci_hcd: stop threads [ 64.644751][ T37] vhci_hcd: release socket [ 64.644760][ T37] vhci_hcd: disconnect device [ 64.673293][ T37] vhci_hcd: stop threads [ 64.677619][ T37] vhci_hcd: release socket [ 64.682058][ T37] vhci_hcd: disconnect device [ 65.138957][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 65.138973][ T29] audit: type=1326 audit(1751137305.156:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.169748][ T29] audit: type=1326 audit(1751137305.176:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.194864][ T29] audit: type=1326 audit(1751137305.206:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.218355][ T29] audit: type=1326 audit(1751137305.206:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.241782][ T29] audit: type=1326 audit(1751137305.206:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.265797][ T29] audit: type=1326 audit(1751137305.276:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.289279][ T29] audit: type=1326 audit(1751137305.276:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.312696][ T29] audit: type=1326 audit(1751137305.276:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.340443][ T4672] loop2: detected capacity change from 0 to 512 [ 65.348464][ T29] audit: type=1326 audit(1751137305.356:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa3e53ae929 code=0x7ffc0000 [ 65.371864][ T29] audit: type=1326 audit(1751137305.356:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3e53ae963 code=0x7ffc0000 [ 65.421578][ T4672] EXT4-fs (loop2): 1 orphan inode deleted [ 65.428143][ T4672] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.436940][ T3335] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 65.450919][ T4672] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.470659][ T4672] syz_tun: entered allmulticast mode [ 65.481941][ T4671] syz_tun: left allmulticast mode [ 65.623721][ T4681] loop2: detected capacity change from 0 to 1024 [ 65.631458][ T4681] EXT4-fs: Ignoring removed orlov option [ 65.637247][ T4681] EXT4-fs: Ignoring removed bh option [ 65.644131][ T4681] EXT4-fs: Ignoring removed bh option [ 65.680560][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.733542][ T4681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.740927][ T4681] IPv6: NLM_F_CREATE should be set when creating new route [ 65.748190][ T4681] IPv6: NLM_F_CREATE should be set when creating new route [ 65.808802][ T3957] IPVS: starting estimator thread 0... [ 65.896663][ T4690] IPVS: using max 2304 ests per chain, 115200 per kthread [ 65.961356][ T4698] loop4: detected capacity change from 0 to 512 [ 65.989508][ T4698] EXT4-fs (loop4): 1 orphan inode deleted [ 65.995902][ T4698] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.007265][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 66.027142][ T4698] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 66.052480][ T4698] syz_tun: entered allmulticast mode [ 66.078399][ T4697] syz_tun: left allmulticast mode [ 66.197436][ T4708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 66.403972][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.411587][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.419155][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.428340][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.435792][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.443255][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.450847][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.458541][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.465967][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.473547][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.481010][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.488457][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.496043][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.504264][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.511753][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.519232][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.526762][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.534195][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.541658][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.549220][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.556676][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.564110][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.571731][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.579215][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.586794][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.594269][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.601714][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.609204][ T2958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.617612][ T2958] hid-generic 0000:0000:0000.0001: hidraw0: HID v54.3f Device [syz0] on syz0 [ 66.653941][ T4731] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.683051][ T4735] loop3: detected capacity change from 0 to 512 [ 66.708763][ T4735] EXT4-fs (loop3): 1 orphan inode deleted [ 66.715194][ T4735] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.727737][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 66.741397][ T4735] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 66.806357][ T4745] loop0: detected capacity change from 0 to 1024 [ 66.814486][ T4745] EXT4-fs: Ignoring removed oldalloc option [ 66.823487][ T4743] syz_tun: entered allmulticast mode [ 66.830683][ T4745] EXT4-fs: Ignoring removed orlov option [ 66.838027][ T4745] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 66.851770][ T4733] syz_tun: left allmulticast mode [ 67.438465][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 67.472249][ T4582] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.491100][ T4582] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.506280][ T4582] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.542119][ T4763] loop4: detected capacity change from 0 to 1024 [ 67.551358][ T4763] EXT4-fs: Ignoring removed orlov option [ 67.557093][ T4763] EXT4-fs: Ignoring removed bh option [ 67.572862][ T4763] EXT4-fs: Ignoring removed bh option [ 67.598980][ T4582] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.686203][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 67.741875][ T4777] loop0: detected capacity change from 0 to 512 [ 67.751645][ T4763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.758915][ T4763] IPv6: NLM_F_CREATE should be set when creating new route [ 67.766164][ T4763] IPv6: NLM_F_CREATE should be set when creating new route [ 67.780001][ T4777] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.796002][ T4777] EXT4-fs (loop0): mount failed [ 67.821304][ T4782] loop2: detected capacity change from 0 to 2048 [ 67.855211][ T4782] netlink: 'syz.2.416': attribute type 20 has an invalid length. [ 67.866377][ T4792] loop0: detected capacity change from 0 to 256 [ 67.922250][ T4797] loop4: detected capacity change from 0 to 512 [ 67.958352][ T4797] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.973276][ T4797] EXT4-fs (loop4): mount failed [ 68.065470][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 68.144213][ T4812] loop0: detected capacity change from 0 to 1024 [ 68.151421][ T4812] EXT4-fs: Ignoring removed oldalloc option [ 68.157541][ T4812] EXT4-fs: Ignoring removed orlov option [ 68.165625][ T4812] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.609929][ T4824] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.669918][ T4824] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.758684][ T4824] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.818297][ T4824] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.017126][ T4838] loop0: detected capacity change from 0 to 1024 [ 69.024172][ T4838] EXT4-fs: Ignoring removed orlov option [ 69.030112][ T4838] EXT4-fs: Ignoring removed bh option [ 69.035775][ T4838] EXT4-fs: Ignoring removed bh option [ 69.046784][ T4840] loop2: detected capacity change from 0 to 512 [ 69.057786][ T4840] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.061124][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 69.074004][ T4840] EXT4-fs (loop2): mount failed [ 69.090417][ T4838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.097697][ T4838] IPv6: NLM_F_CREATE should be set when creating new route [ 69.104930][ T4838] IPv6: NLM_F_CREATE should be set when creating new route [ 69.109855][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.119662][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.127186][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.134871][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.142461][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.149905][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.157378][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.164877][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.172387][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.179878][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.187389][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.194825][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.202297][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.209874][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.217457][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.224894][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.232530][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.240101][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.247562][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.255000][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.262696][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.270165][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.277722][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.285158][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.292660][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.300118][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.307638][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.315092][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.315925][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 69.323007][ T3404] hid-generic 0000:0000:0000.0002: hidraw0: HID v54.3f Device [syz0] on syz0 [ 69.420242][ T4861] loop4: detected capacity change from 0 to 512 [ 69.441127][ T4861] EXT4-fs (loop4): 1 orphan inode deleted [ 69.450399][ T4861] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.466764][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 69.498118][ T4861] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.527304][ T3388] usb 9-1: enqueue for inactive port 0 [ 69.538666][ T4874] loop3: detected capacity change from 0 to 1024 [ 69.539191][ T3388] usb 9-1: enqueue for inactive port 0 [ 69.546018][ T4874] EXT4-fs: Ignoring removed oldalloc option [ 69.556862][ T4874] EXT4-fs: Ignoring removed orlov option [ 69.559676][ T4861] syz_tun: entered allmulticast mode [ 69.568903][ T4874] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.582460][ T4860] syz_tun: left allmulticast mode [ 69.596159][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 69.605449][ T4877] IPVS: Error joining to the multicast group [ 69.656690][ T3388] vhci_hcd: vhci_device speed not set [ 69.835768][ T4890] loop0: detected capacity change from 0 to 1024 [ 69.842684][ T4890] EXT4-fs: Ignoring removed orlov option [ 69.848410][ T4890] EXT4-fs: Ignoring removed bh option [ 69.853958][ T4890] EXT4-fs: Ignoring removed bh option [ 69.868688][ T4890] EXT4-fs mount: 33 callbacks suppressed [ 69.868702][ T4890] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.897673][ T3306] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 69.934085][ T4894] loop0: detected capacity change from 0 to 512 [ 69.941070][ T4894] EXT4-fs: test_dummy_encryption option not supported [ 69.951398][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 70.374149][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.059886][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.067552][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.075072][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.084093][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.091589][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.099098][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.106802][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.114374][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.121806][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.129217][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.136732][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.144232][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.151670][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.159762][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.166841][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 71.167280][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.183599][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.191318][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.198774][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.206189][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.213730][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.221282][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.228723][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.236147][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.243779][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.251242][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.258738][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.266184][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.273690][ T3957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.289709][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 71.289727][ T29] audit: type=1326 audit(1751137311.296:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.326758][ T29] audit: type=1326 audit(1751137311.296:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.350307][ T29] audit: type=1326 audit(1751137311.346:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.374743][ T29] audit: type=1326 audit(1751137311.346:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.398181][ T29] audit: type=1326 audit(1751137311.346:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.423458][ T3957] hid-generic 0000:0000:0000.0003: hidraw0: HID v54.3f Device [syz0] on syz0 [ 71.433544][ T29] audit: type=1326 audit(1751137311.386:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.457724][ T29] audit: type=1326 audit(1751137311.416:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.481641][ T29] audit: type=1326 audit(1751137311.416:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f590de929 code=0x7ffc0000 [ 71.518453][ T4927] loop2: detected capacity change from 0 to 1024 [ 71.526682][ T4927] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 71.554215][ T2958] IPVS: starting estimator thread 0... [ 71.592037][ T29] audit: type=1400 audit(1751137311.606:2114): avc: denied { mount } for pid=4936 comm="syz.3.460" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.615405][ T29] audit: type=1400 audit(1751137311.606:2115): avc: denied { remount } for pid=4936 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.666735][ T4930] IPVS: using max 1968 ests per chain, 98400 per kthread [ 71.736704][ T4953] hsr0: entered promiscuous mode [ 71.742879][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 71.786636][ T4953] hsr_slave_0: left promiscuous mode [ 71.792498][ T4953] hsr_slave_1: left promiscuous mode [ 71.819878][ T4953] hsr0 (unregistering): left promiscuous mode [ 71.971057][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.978729][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.986213][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.994785][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.000313][ T4824] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.002303][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.014623][ T4824] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.017920][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.033619][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.041301][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.048822][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.056240][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.063697][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.068428][ T4824] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.071202][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.087383][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.101216][ T4824] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.120281][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.127828][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.135250][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.142711][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.150210][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.157774][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.165200][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.172662][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.180205][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.187660][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.195083][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.202542][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.209974][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.217453][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.224913][ T2958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.234309][ T2958] hid-generic 0000:0000:0000.0004: hidraw0: HID v54.3f Device [syz0] on syz0 [ 72.352548][ T4985] loop1: detected capacity change from 0 to 512 [ 72.394732][ T4985] EXT4-fs (loop1): 1 orphan inode deleted [ 72.406970][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 72.427076][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.439883][ T4985] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.462185][ T4985] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.477157][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 72.513890][ T4992] bond_slave_0: entered promiscuous mode [ 72.519652][ T4992] bond_slave_1: entered promiscuous mode [ 72.544354][ T4992] macvlan2: entered promiscuous mode [ 72.549984][ T4992] bond0: entered promiscuous mode [ 72.564535][ T4992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.582318][ T4985] syz_tun: entered allmulticast mode [ 72.589670][ T4984] syz_tun: left allmulticast mode [ 72.596067][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 72.687884][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.705242][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.712765][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.720221][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.731982][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.732259][ T5013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.739568][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.757381][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.764840][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.772384][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.779913][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.787383][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.794823][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.802310][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.809856][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.817860][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.825320][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.832854][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.840394][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.847825][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.855232][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.862734][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.870205][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.877676][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.885104][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.892598][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.900037][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.907548][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.914975][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.922429][ T3957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.941325][ T3957] hid-generic 0000:0000:0000.0005: hidraw0: HID v54.3f Device [syz0] on syz0 [ 72.954487][ T5013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.999294][ T5013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.044101][ T5034] loop2: detected capacity change from 0 to 128 [ 73.051484][ T5034] EXT4-fs: Ignoring removed nobh option [ 73.060879][ T5013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.077185][ T5034] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.115995][ T5013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.118538][ T5034] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.139010][ T5013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.163461][ T5013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193372][ T5013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.202256][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 73.212139][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.231845][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 73.271549][ T5052] loop3: detected capacity change from 0 to 512 [ 73.294377][ T5056] loop0: detected capacity change from 0 to 164 [ 73.309087][ T5052] EXT4-fs (loop3): 1 orphan inode deleted [ 73.315674][ T5052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.328855][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 73.341073][ T5052] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.364976][ T5052] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 73.443268][ T5073] bridge_slave_0: left allmulticast mode [ 73.449164][ T5073] bridge_slave_0: left promiscuous mode [ 73.454940][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.465640][ T5073] bridge_slave_1: left allmulticast mode [ 73.471591][ T5073] bridge_slave_1: left promiscuous mode [ 73.477504][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.492291][ T5079] loop1: detected capacity change from 0 to 512 [ 73.498738][ T5076] loop0: detected capacity change from 0 to 1024 [ 73.505473][ T5076] EXT4-fs: Ignoring removed orlov option [ 73.512337][ T5076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.521095][ T5076] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.532608][ T5073] bond0: (slave bond_slave_0): Releasing backup interface [ 73.534184][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.541643][ T5076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 73.561491][ T5073] bond_slave_0: left promiscuous mode [ 73.563759][ T5080] 9p: Unknown Cache mode or invalid value m [ 73.568867][ T5076] System zones: 0-1, 3-12 [ 73.577819][ T5079] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.583844][ T5076] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.509: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.588475][ T5073] bond0: (slave bond_slave_1): Releasing backup interface [ 73.613549][ T5073] bond_slave_1: left promiscuous mode [ 73.621339][ T5076] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.509: Failed to acquire dquot type 0 [ 73.632874][ T5076] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.509: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.647799][ T5073] team0: Port device team_slave_0 removed [ 73.657377][ T5073] team0: Port device team_slave_1 removed [ 73.657590][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.666833][ T5076] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.509: Invalid inode bitmap blk 0 in block_group 0 [ 73.679045][ T31] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.696968][ T5076] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 73.699570][ T5083] syz_tun: entered allmulticast mode [ 73.726443][ T5092] tipc: Started in network mode [ 73.731519][ T5092] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 73.731913][ T5076] EXT4-fs (loop0): 1 orphan inode deleted [ 73.738767][ T5092] tipc: Enabled bearer , priority 8 [ 73.750966][ T5051] syz_tun: left allmulticast mode [ 73.758353][ T5076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.771736][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 73.831969][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.873419][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.893861][ T5104] IPv4: Oversized IP packet from 127.202.26.0 [ 73.917226][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 73.993110][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.517'. [ 74.091230][ T5130] loop1: detected capacity change from 0 to 256 [ 74.136343][ T5130] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.173643][ T5130] FAT-fs (loop1): Directory bread(block 64) failed [ 74.184080][ T5130] FAT-fs (loop1): Directory bread(block 65) failed [ 74.210303][ T5130] FAT-fs (loop1): Directory bread(block 66) failed [ 74.236827][ T5141] loop2: detected capacity change from 0 to 512 [ 74.246448][ T5130] FAT-fs (loop1): Directory bread(block 67) failed [ 74.263831][ T5130] FAT-fs (loop1): Directory bread(block 68) failed [ 74.287681][ T5141] EXT4-fs (loop2): 1 orphan inode deleted [ 74.296145][ T5141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.308747][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 74.326664][ T5130] FAT-fs (loop1): Directory bread(block 69) failed [ 74.333778][ T5130] FAT-fs (loop1): Directory bread(block 70) failed [ 74.347507][ T5141] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.359277][ T5130] FAT-fs (loop1): Directory bread(block 71) failed [ 74.366169][ T5130] FAT-fs (loop1): Directory bread(block 72) failed [ 74.372921][ T5130] FAT-fs (loop1): Directory bread(block 73) failed [ 74.386771][ T5141] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 74.559047][ T5141] syz_tun: entered allmulticast mode [ 74.580452][ T5140] syz_tun: left allmulticast mode [ 74.632881][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.707244][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 74.716186][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 74.740952][ T5156] loop2: detected capacity change from 0 to 128 [ 74.855550][ T5169] loop1: detected capacity change from 0 to 128 [ 74.856692][ T3388] tipc: Node number set to 11578026 [ 74.888955][ T5169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.936905][ T5169] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.990937][ T5172] loop0: detected capacity change from 0 to 764 [ 75.012485][ T5161] syz.2.531: attempt to access beyond end of device [ 75.012485][ T5161] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 75.031242][ T5172] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 75.052758][ T5161] syz.2.531: attempt to access beyond end of device [ 75.052758][ T5161] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 75.072823][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.108850][ T5161] syz.2.531: attempt to access beyond end of device [ 75.108850][ T5161] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 75.109103][ T5183] loop1: detected capacity change from 0 to 512 [ 75.139868][ T5183] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.538: iget: bogus i_mode (0) [ 75.153413][ T5183] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.538: couldn't read orphan inode 17 (err -117) [ 75.178928][ T5183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.211129][ T5191] loop4: detected capacity change from 0 to 512 [ 75.248557][ T5191] EXT4-fs (loop4): 1 orphan inode deleted [ 75.255156][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.269129][ T5191] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.288731][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 75.330156][ T5191] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.368755][ T5191] syz_tun: entered allmulticast mode [ 75.376244][ T5190] syz_tun: left allmulticast mode [ 75.505262][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.006666][ T5216] loop4: detected capacity change from 0 to 128 [ 76.013478][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.016033][ T5216] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.035910][ T5216] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.065588][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.247199][ T5231] netlink: 'syz.1.556': attribute type 10 has an invalid length. [ 76.257684][ T5231] bond0: (slave dummy0): Releasing backup interface [ 76.356902][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 76.356921][ T29] audit: type=1400 audit(1751137316.356:2624): avc: denied { firmware_load } for pid=5225 comm="syz.4.554" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 76.434761][ T5236] loop1: detected capacity change from 0 to 512 [ 76.445146][ T29] audit: type=1326 audit(1751137316.406:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.468586][ T29] audit: type=1326 audit(1751137316.436:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.491980][ T29] audit: type=1326 audit(1751137316.436:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.515367][ T29] audit: type=1326 audit(1751137316.436:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.538799][ T29] audit: type=1326 audit(1751137316.436:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.562145][ T29] audit: type=1326 audit(1751137316.436:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.585488][ T29] audit: type=1326 audit(1751137316.436:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.608899][ T29] audit: type=1326 audit(1751137316.436:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.632366][ T29] audit: type=1326 audit(1751137316.436:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4b165de929 code=0x7ffc0000 [ 76.669981][ T5236] EXT4-fs (loop1): 1 orphan inode deleted [ 76.678275][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.695206][ T3335] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 76.710135][ T5236] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.737725][ T5236] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.755592][ T5236] syz_tun: entered allmulticast mode [ 76.770836][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 76.772671][ T5232] syz_tun: left allmulticast mode [ 76.834899][ T5253] loop0: detected capacity change from 0 to 512 [ 76.843199][ T5253] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.562: iget: bogus i_mode (0) [ 76.854785][ T5253] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.562: couldn't read orphan inode 17 (err -117) [ 76.867078][ T5253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.903852][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.943266][ T5256] netlink: 96 bytes leftover after parsing attributes in process `syz.3.564'. [ 77.033471][ T5265] FAULT_INJECTION: forcing a failure. [ 77.033471][ T5265] name failslab, interval 1, probability 0, space 0, times 0 [ 77.046192][ T5265] CPU: 1 UID: 0 PID: 5265 Comm: syz.1.567 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 77.046241][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.046253][ T5265] Call Trace: [ 77.046259][ T5265] [ 77.046272][ T5265] __dump_stack+0x1d/0x30 [ 77.046310][ T5265] dump_stack_lvl+0xe8/0x140 [ 77.046327][ T5265] dump_stack+0x15/0x1b [ 77.046342][ T5265] should_fail_ex+0x265/0x280 [ 77.046388][ T5265] should_failslab+0x8c/0xb0 [ 77.046408][ T5265] kmem_cache_alloc_node_noprof+0x57/0x320 [ 77.046497][ T5265] ? __alloc_skb+0x101/0x320 [ 77.046526][ T5265] __alloc_skb+0x101/0x320 [ 77.046552][ T5265] netlink_alloc_large_skb+0xba/0xf0 [ 77.046620][ T5265] netlink_sendmsg+0x3cf/0x6b0 [ 77.046647][ T5265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.046671][ T5265] __sock_sendmsg+0x142/0x180 [ 77.046745][ T5265] __sys_sendto+0x268/0x330 [ 77.046859][ T5265] __x64_sys_sendto+0x76/0x90 [ 77.046898][ T5265] x64_sys_call+0x2eb6/0x2fb0 [ 77.046979][ T5265] do_syscall_64+0xd2/0x200 [ 77.047000][ T5265] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.047104][ T5265] ? clear_bhb_loop+0x40/0x90 [ 77.047131][ T5265] ? clear_bhb_loop+0x40/0x90 [ 77.047155][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.047179][ T5265] RIP: 0033:0x7f4b165de929 [ 77.047194][ T5265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.047280][ T5265] RSP: 002b:00007f4b14c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 77.047303][ T5265] RAX: ffffffffffffffda RBX: 00007f4b16805fa0 RCX: 00007f4b165de929 [ 77.047318][ T5265] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 77.047333][ T5265] RBP: 00007f4b14c47090 R08: 0000000000000000 R09: 0000000000000000 [ 77.047345][ T5265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.047356][ T5265] R13: 0000000000000000 R14: 00007f4b16805fa0 R15: 00007ffc962d5cb8 [ 77.047374][ T5265] [ 77.351653][ T5270] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.441741][ T5272] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.603719][ T5270] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.620567][ T5272] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.658641][ T5270] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.700680][ T5290] netlink: 156 bytes leftover after parsing attributes in process `syz.1.572'. [ 77.709937][ T5290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.572'. [ 77.735613][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 77.753693][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.764497][ T5272] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.788678][ T5270] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.793913][ T5298] loop1: detected capacity change from 0 to 512 [ 77.818085][ T5272] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.836527][ T5304] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 77.848974][ T5298] EXT4-fs (loop1): 1 orphan inode deleted [ 77.855227][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.868796][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 77.881829][ T5298] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.913130][ T5270] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.913798][ T5310] loop2: detected capacity change from 0 to 1024 [ 77.927942][ T5270] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.933822][ T5310] EXT4-fs: Ignoring removed oldalloc option [ 77.941975][ T5270] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.954130][ T5270] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.962865][ T5298] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.963682][ T5310] EXT4-fs: Ignoring removed orlov option [ 77.977976][ T5310] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 77.994254][ T5272] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006330][ T5272] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020332][ T5272] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.032796][ T5310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.040420][ T5272] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.050548][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.061106][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.068608][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.091591][ T5298] syz_tun: entered allmulticast mode [ 78.099108][ T5295] syz_tun: left allmulticast mode [ 78.124653][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.132199][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.139664][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.147193][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.154603][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.162133][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.169612][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.177138][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.184542][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.191446][ T5318] hub 8-0:1.0: USB hub found [ 78.191962][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.197605][ T5318] hub 8-0:1.0: 8 ports detected [ 78.227691][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.236550][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.244127][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.251702][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.259159][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.266797][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.274240][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.281749][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.289179][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.296632][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.304063][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.311556][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.319044][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.326482][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.334021][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.341832][ T1043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 78.409651][ T1043] hid-generic 0000:0000:0000.0006: hidraw0: HID v54.3f Device [syz0] on syz0 [ 78.457929][ T5332] loop9: detected capacity change from 0 to 7 [ 78.464274][ T5332] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.473016][ T5332] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.481041][ T5332] loop9: unable to read partition table [ 78.487170][ T5332] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 78.487170][ T5332] ) failed (rc=-5) [ 78.548158][ T5340] loop1: detected capacity change from 0 to 512 [ 78.578824][ T5340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.592231][ T5340] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.653683][ T5351] loop4: detected capacity change from 0 to 1024 [ 78.686398][ T5355] ext4: Unknown parameter 'GPL' [ 78.699105][ T5351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.778579][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.797985][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.860211][ T5360] syz_tun: entered allmulticast mode [ 78.867189][ T5359] syz_tun: left allmulticast mode [ 78.931956][ T5372] loop2: detected capacity change from 0 to 512 [ 78.957043][ T5372] EXT4-fs: Ignoring removed nobh option [ 78.993595][ T5372] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.595: corrupted inode contents [ 79.057477][ T5372] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.595: mark_inode_dirty error [ 79.107227][ T5372] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.595: corrupted inode contents [ 79.137426][ T5372] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.595: mark_inode_dirty error [ 79.153161][ T5372] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.595: Failed to acquire dquot type 0 [ 79.180647][ T5372] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.595: corrupted inode contents [ 79.216982][ T5372] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.595: mark_inode_dirty error [ 79.229242][ T5372] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.595: corrupted inode contents [ 79.264582][ T5372] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.595: mark_inode_dirty error [ 79.290503][ T5372] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.595: corrupted inode contents [ 79.320608][ T5372] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 79.348810][ T5372] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.595: corrupted inode contents [ 79.372118][ T5381] random: crng reseeded on system resumption [ 79.389815][ T3335] ================================================================== [ 79.397957][ T3335] BUG: KCSAN: data-race in prepare_kernel_cred / prepare_kernel_cred [ 79.406070][ T3335] [ 79.408410][ T3335] write to 0xffffffff868610a0 of 4 bytes by task 37 on cpu 1: [ 79.415901][ T3335] prepare_kernel_cred+0xf5/0x680 [ 79.420967][ T3335] _request_firmware+0x446/0xbb0 [ 79.425956][ T3335] __async_dev_cache_fw_image+0x66/0x160 [ 79.431641][ T3335] async_run_entry_fn+0x52/0x180 [ 79.436613][ T3335] process_scheduled_works+0x4ce/0x9d0 [ 79.442116][ T3335] worker_thread+0x582/0x770 [ 79.446739][ T3335] kthread+0x486/0x510 [ 79.447831][ T5372] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.595: mark_inode_dirty error [ 79.450821][ T3335] ret_from_fork+0xda/0x150 [ 79.450848][ T3335] ret_from_fork_asm+0x1a/0x30 [ 79.470028][ T5372] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 79.471076][ T3335] [ 79.471085][ T3335] read to 0xffffffff86860ff8 of 184 bytes by task 3335 on cpu 0: [ 79.490140][ T3335] prepare_kernel_cred+0x114/0x680 [ 79.495284][ T3335] _request_firmware+0x446/0xbb0 [ 79.500275][ T3335] __async_dev_cache_fw_image+0x66/0x160 [ 79.505942][ T3335] async_run_entry_fn+0x52/0x180 [ 79.510905][ T3335] process_scheduled_works+0x4ce/0x9d0 [ 79.516392][ T3335] worker_thread+0x582/0x770 [ 79.521009][ T3335] kthread+0x486/0x510 [ 79.525095][ T3335] ret_from_fork+0xda/0x150 [ 79.529618][ T3335] ret_from_fork_asm+0x1a/0x30 [ 79.534488][ T3335] [ 79.536821][ T3335] Reported by Kernel Concurrency Sanitizer on: [ 79.542981][ T3335] CPU: 0 UID: 0 PID: 3335 Comm: kworker/u8:6 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 79.555592][ T3335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.565671][ T3335] Workqueue: async async_run_entry_fn [ 79.571076][ T3335] ================================================================== [ 79.590995][ T5372] EXT4-fs (loop2): 1 truncate cleaned up [ 79.597241][ T5372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.612283][ T5372] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.908902][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.216105][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.