last executing test programs: 7.534485496s ago: executing program 0 (id=3267): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) r1 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027b57000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xef3e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffff5e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x80, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 6.740689498s ago: executing program 0 (id=3273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x1566, &(0x7f0000000200)={0x0, 0x80004661, 0x1, 0x6, 0x288}, 0x0, 0x0) stat(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYBLOB, @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r2, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 6.667335s ago: executing program 0 (id=3274): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800) fgetxattr(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379736ad59b3c78a4eacddfb486cf656d2ece00"], &(0x7f00000003c0)=""/139, 0x8b) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006081}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000080)=0x2, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000300)={0x800000, 0x1, 0x84}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mq_timedreceive(r6, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x5547, 0xd073, 0x2, 0x5, 0x80000000, 0x0, 0x5, 0x6, r7}, 0x20) 6.031032619s ago: executing program 0 (id=3281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x1566, &(0x7f0000000200)={0x0, 0x80004661, 0x1, 0x6, 0x288}, 0x0, 0x0) stat(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB, @ANYRES64, @ANYBLOB, @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r2, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 5.984939039s ago: executing program 0 (id=3282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6e65874a74696c735f657865635f743a73302073746166665f7500"], 0x2d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x7b1a4d61, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a9"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x18) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r11, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$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") 5.505157677s ago: executing program 0 (id=3286): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/232, 0xe8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a30000000000800"], 0x558}}, 0x40) open(&(0x7f0000000480)='./bus\x00', 0x1050c1, 0x170) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@empty, @in6=@private0, 0x4e24, 0x1, 0x4e20, 0xc, 0xa, 0xa0, 0x60, 0x29}, {0x8000, 0x6, 0x1, 0xfffffffffffffff7, 0x8, 0x4, 0x4, 0x101}, {0x80000001, 0xa5, 0x46b, 0x6}, 0x1, 0x6e6bbd, 0x2}, {{@in=@multicast1, 0x4d5, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x3, 0x2, 0xff, 0x1, 0x10001, 0x10001}}, 0xe8) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) 2.490052312s ago: executing program 4 (id=3324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000485010000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fa, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.036080509s ago: executing program 2 (id=3327): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000698000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0xa1889800, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000000000000000006bc5aad7eb940000000000bc63627416c50b2a9235ae016bb48951cd2851bc7679d954b4ca8bb73470940c1318e451eab7daa97dfc82ab4c9caa5b69a6ee14afa92ca9a33144d82f607d8814912e54609b2bbe44ea3536a553435ede2b5a423219df4a6c531ac2c7646422ecb4ac2b0364a4ac7624ae0fc0bf39d07e00ba4cd72b3d2656ae54ec90864d40567a66ad74fa6c157820e3bfae977ccfd235fcae48a92566cddabc39e39b2715f2787499bfd3b22280363b8bd4a68007"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") 2.035159949s ago: executing program 4 (id=3328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000001800000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100020000000010000000000000", @ANYRES32=0x0, @ANYBLOB="000000000111040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189000, 0x82) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x2, 0x8, 0x700, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000002b80)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x516, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@tclass={{0x14, 0x29, 0x43, 0x7ff}}], 0x18}}], 0x1, 0x810) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) open(&(0x7f0000000240)='./file2\x00', 0x800, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.099741453s ago: executing program 4 (id=3335): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @initdev}, &(0x7f0000000080)=0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x1f000008}, 0x4800) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379736ad59b3c78a4eacddfb486cf656d2ece00"], &(0x7f00000003c0)=""/139, 0x8b) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006081}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000300)={0x800000, 0x1, 0x84}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x10, 0x5}, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x3e}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x5547, 0xd073, 0x2, 0x5, 0x80000000, 0x0, 0x5, 0x6, r6}, 0x20) 1.074306203s ago: executing program 2 (id=3338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000485010000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fa, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 993.242635ms ago: executing program 3 (id=3339): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xef3e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffff5e}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x80, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 910.520416ms ago: executing program 3 (id=3340): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400000008000f28, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e840ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fa, 0x1, 0x8003}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r0) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044010}, 0x4004011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_io_uring_setup(0x5198, &(0x7f0000000400)={0x0, 0x334e, 0x101, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x108, &(0x7f0000000180)=0x2, 0x0, 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200680600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a010000090780000003df344dd00800000000700000001ffffea0100002d0400000008fe06e2d4c3d9080a010c000000473502051600000004000000030000000b0000000400000003fe06e2d4c3d902040200fe06e2d4c3d90000007830fdb64309679a0a50681edc6c04c078cb74d3c2f07b41c8a4b0"], 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400000000000000000000140b", @ANYRES32=0x0, @ANYBLOB="7b13000000000000240012800c0001006d6163766c616e001400028006000200000000000800010000000000"], 0x44}}, 0x44180) mknodat$loop(0xffffffffffffff9c, 0x0, 0x4000, 0x1) 906.319336ms ago: executing program 1 (id=3341): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file2\x00', 0x4000, &(0x7f0000000500)=ANY=[], 0xfd, 0x1e7, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x10) 893.035456ms ago: executing program 2 (id=3342): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe243, 0x400, 0x1, 0x8b9}, &(0x7f0000000840)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x600}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x1b20, 0x6513, 0x0, 0x0, 0x0) 846.032957ms ago: executing program 1 (id=3343): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x7ffffffffffffff6, 0x80000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) gettid() syz_io_uring_setup(0x1566, &(0x7f0000000200)={0x0, 0x80004661, 0x1, 0x6, 0x288}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400400000000000000000ffff5b96bb05e75db31a0034589cd7440bc37317d243350adf75c2a98476568786c53c3f0d858f09", @ANYRES32=0x0, @ANYBLOB="08910400000000002000128009000100766c616e00000000100002800c000200160000001700000014000300766c616e3000"/60], 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x3) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1}, 0x1c}}, 0x0) 839.077167ms ago: executing program 2 (id=3344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r2, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000095}, 0x20000000) 834.558847ms ago: executing program 3 (id=3345): munmap(&(0x7f000069b000/0x2000)=nil, 0x2000) mremap(&(0x7f0000916000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00008b9000/0x2000)=nil) 794.789888ms ago: executing program 1 (id=3346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r7 = dup3(r5, r4, 0x80000) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r4}]) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 794.128818ms ago: executing program 3 (id=3347): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @initdev}, &(0x7f0000000080)=0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800) fgetxattr(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379736ad59b3c78a4eacddfb486cf656d2ece00"], &(0x7f00000003c0)=""/139, 0x8b) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006081}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000080)=0x2, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000300)={0x800000, 0x1, 0x84}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mq_timedreceive(r6, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x5547, 0xd073, 0x2, 0x5, 0x80000000, 0x0, 0x5, 0x6, r7}, 0x20) 791.721628ms ago: executing program 2 (id=3348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x18, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x40}}, 0x0) 723.816259ms ago: executing program 2 (id=3349): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000698000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0xa1889800, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000000000000000006bc5aad7eb940000000000bc63627416c50b2a9235ae016bb48951cd2851bc7679d954b4ca8bb73470940c1318e451eab7daa97dfc82ab4c9caa5b69a6ee14afa92ca9a33144d82f607d8814912e54609b2bbe44ea3536a553435ede2b5a423219df4a6c531ac2c7646422ecb4ac2b0364a4ac7624ae0fc0bf39d07e00ba4cd72b3d2656ae54ec90864d40567a66ad74fa6c157820e3bfae977ccfd235fcae48a92566cddabc39e39b2715f2787499bfd3b22280363b8bd4a68007d0faf4f4"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") 664.491629ms ago: executing program 1 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100100086dd600000000000000000aafe8000000000000000000000000000aa3c000000000000000000fffd"], 0x0) 647.34454ms ago: executing program 1 (id=3351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6e65874a74696c735f657865635f743a73302073746166665f7500"], 0x2d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x7b1a4d61, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a9"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x18) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r11, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$eJzs3c9rHFUcAPDv22yStmlNKoLWHgwUbEFNmlhRRLDFevPgj4KngjFJS+m2DckKtlZsof4H+gcI3gQRj0WkqBev3gT/gFIs0ubibWU2s8nW7ibZdrOTdj8fmO7MvN2872T59r15eTMTQN8az/4pReyLiIUUMdpUVo68cHzlfXfvXJ5dvnN5NkWt9sE/KVK+r/H+lL+O5B/eERF//JLiyYH76126eOnsTKUyv5hvT1bPLUwuXbz00plzM6fnT8+fn556deqVIy9PHznclePcExG/TRwvXzv11v4fZr/d+8VP311PcTR25+XNx9Et4zG++jtplv1eX+t2ZQUZyI+n+StO5QIDoiON728wIp6O0RiItS9vNL58r9DggC1VSxE1oE8l+Q99qtEPyM5/G0uxPRKgV24fWxkAuJtWxvaWV/O/vDI2GDvqYwO7llM0D+ukiOjGyFxWx8LzaTRbonkcbqgLPxxY15WrEfFMq/Y/1XNzrD6Kn+V/6Z78L0XEu/lrtv/9B6x//H/b+h/QO53nf2048rz/qCn/P37A+uU/AAAAAAAAdM+NYxHxYqu//5VW5/9Ei/k/IxFxtAv1b/z3v9KtLlQDtHD7WMQbEdGY+7fclP+5sYF8a099PsBgOnWmMn84Ip6IiEMxOJxtT933k9eufB3f//tgu/qb5/9lS1Z/Yy5gHset8vC9n5mbqc487HEDEbevRjxbbpX/abX9Ty3a/6ztX9hkHbXjb/7armzj/Ae2Su2biIMt2/+19jutf3+OyXp/YLLRK7jfZyev/9iufvkPxcna/13r5/9Yar5fz1LndXz+918Pkf+t+/9D6UT9ljONy4Q+LVeri1MRQ+mde/fPVKuL053HDI+jRj7UX6dW8v/Qgdbn/+v1/3dGxJVN1nni57evtSvT/kNxsvyf66j973zlwIdf/9uu/s21/0fqbfqhfI/xP1jfZhO06DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FFUiojdkUoTq+ul0sRExEhEPBW7SpULS9UXTl345PxcVlZ//n+p8aTf0ZXt1Hj+/1jT9vTadq3x+M69EfHVwM56+cTshcpcwccOAAAAAAAAAAAAAAAAAAAA28VIm+v/MzcHio4O2HLlDd8x3JM4gN7bOP+Bx5X8h/4l/6F/yX/oX/If+tfm83/HlsYB9J72H/qX/If+NVD7/mTRMQAAAAAAAF2z97kbf6aIuPL6zvqSGcrLBguNDNhqR4sOACiMW/xA/+pk6l9KWxgI0HPO8aHf3YyNmvb2F/7pFAAAAAAAAAAAAABArxzc5/p/6FelogMACtP++n93BoDHnUf/QP9yjg+4/h8AAAAAAAAAAAAAtr+li5fOzlQq84sPujL8cB9/FFYaM5y3SzzbbaUc2yKMR2AlUhcyrkcrBf/HBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPovAAD//xXJ9Vw=") 587.897981ms ago: executing program 3 (id=3352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000485010000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071107d000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fa, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 558.780011ms ago: executing program 1 (id=3353): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xaa, 0x2, 0x8, 0x20, @loopback, @remote, 0x0, 0x87, 0xe, 0xb5}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) socket$inet6(0xa, 0x3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x66) socket(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)) 220.511426ms ago: executing program 4 (id=3354): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe243, 0x400, 0x1, 0x8b9}, &(0x7f0000000840)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x600}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x1b20, 0x6513, 0x0, 0x0, 0x0) 48.492679ms ago: executing program 4 (id=3355): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file2\x00', 0x4000, &(0x7f0000000500)=ANY=[], 0xfd, 0x1e7, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x10) 10.15972ms ago: executing program 3 (id=3356): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x7ffffffffffffff6, 0x80000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) gettid() syz_io_uring_setup(0x1566, &(0x7f0000000200)={0x0, 0x80004661, 0x1, 0x6, 0x288}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400400000000000000000ffff5b96bb05e75db31a0034589cd7440bc37317d243350adf75c2a98476568786c53c3f0d858f09", @ANYRES32=0x0, @ANYBLOB="08910400000000002000128009000100766c616e00000000100002800c000200160000001700000014000300766c616e3000"/60], 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x3) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=3357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r1, 0x9, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) kernel console output (not intermixed with test programs): g attributes in process `syz.2.2902'. [ 360.559536][T13800] SELinux: syz.2.2903 (13800) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 360.596620][T13523] veth0_vlan: entered promiscuous mode [ 360.609284][T13523] veth1_vlan: entered promiscuous mode [ 360.636353][T13523] veth0_macvtap: entered promiscuous mode [ 360.660422][T13806] lo speed is unknown, defaulting to 1000 [ 360.666781][T13806] lo speed is unknown, defaulting to 1000 [ 360.741200][T13523] veth1_macvtap: entered promiscuous mode [ 360.761896][T13523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.914696][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 360.914713][ T29] audit: type=1400 audit(1752369512.411:11237): avc: denied { map_create } for pid=13805 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 360.940244][ T29] audit: type=1400 audit(1752369512.411:11238): avc: denied { perfmon } for pid=13805 comm="syz.3.2904" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 360.961405][ T29] audit: type=1400 audit(1752369512.411:11239): avc: denied { map_read map_write } for pid=13805 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 360.981468][ T29] audit: type=1400 audit(1752369512.411:11240): avc: denied { prog_load } for pid=13805 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 361.000757][ T29] audit: type=1400 audit(1752369512.411:11241): avc: denied { bpf } for pid=13805 comm="syz.3.2904" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.021595][ T29] audit: type=1400 audit(1752369512.411:11242): avc: denied { execmem } for pid=13805 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 361.227810][T13807] loop2: detected capacity change from 0 to 1024 [ 361.253119][T13810] lo speed is unknown, defaulting to 1000 [ 361.259606][T13810] lo speed is unknown, defaulting to 1000 [ 361.434129][T13523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.480885][ T29] audit: type=1400 audit(1752369512.831:11243): avc: denied { read write } for pid=13799 comm="syz.2.2903" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.505164][ T29] audit: type=1400 audit(1752369512.841:11244): avc: denied { open } for pid=13799 comm="syz.2.2903" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.529338][ T29] audit: type=1400 audit(1752369512.841:11245): avc: denied { ioctl } for pid=13799 comm="syz.2.2903" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.555115][ T29] audit: type=1400 audit(1752369512.841:11246): avc: denied { mounton } for pid=13799 comm="syz.2.2903" path="/550/file0" dev="tmpfs" ino=3063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 361.568387][T13523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.586648][T13523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.595372][T13523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.604126][T13523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.827488][T13814] lo speed is unknown, defaulting to 1000 [ 361.834108][T13814] lo speed is unknown, defaulting to 1000 [ 361.918417][T13820] lo speed is unknown, defaulting to 1000 [ 361.924619][T13820] lo speed is unknown, defaulting to 1000 [ 361.967611][T13821] loop3: detected capacity change from 0 to 1024 [ 361.974746][T13821] EXT4-fs: Ignoring removed nobh option [ 361.980412][T13821] EXT4-fs: Ignoring removed bh option [ 362.279928][T13807] EXT4-fs (loop2): orphan cleanup on readonly fs [ 362.700560][T13807] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2903: Failed to acquire dquot type 0 [ 362.731466][T13821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.752175][T13807] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 362.767296][T13807] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.2903: corrupted inode contents [ 362.784830][T13807] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #13: comm syz.2.2903: mark_inode_dirty error [ 362.796604][T13807] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.2903: corrupted inode contents [ 362.810005][T13807] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2903: mark_inode_dirty error [ 362.826801][T13807] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.2903: corrupted inode contents [ 362.850477][T13807] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 362.859509][T13807] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.2903: corrupted inode contents [ 362.871866][T13807] EXT4-fs error (device loop2): ext4_truncate:4597: inode #13: comm syz.2.2903: mark_inode_dirty error [ 362.884625][T13807] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 362.912634][T13807] EXT4-fs (loop2): 1 truncate cleaned up [ 362.920356][T13807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.953683][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.964758][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.053112][T13841] netlink: 'syz.2.2912': attribute type 12 has an invalid length. [ 363.165062][T13858] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 363.196404][T13858] loop3: detected capacity change from 0 to 128 [ 363.206916][T13859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2920'. [ 363.276755][T13870] loop1: detected capacity change from 0 to 128 [ 363.295653][T13870] EXT4-fs: Ignoring removed nobh option [ 363.324329][T13852] lo speed is unknown, defaulting to 1000 [ 363.335205][T13870] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.347922][T13852] lo speed is unknown, defaulting to 1000 [ 363.357209][T13870] ext4 filesystem being mounted at /580/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.451534][T13852] chnl_net:caif_netlink_parms(): no params data found [ 363.471666][T13871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.513590][T13852] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.520846][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.531687][T13852] bridge_slave_0: entered allmulticast mode [ 363.540238][T13852] bridge_slave_0: entered promiscuous mode [ 363.547364][T13852] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.554599][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.574291][T13852] bridge_slave_1: entered allmulticast mode [ 363.580884][T13852] bridge_slave_1: entered promiscuous mode [ 363.595404][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.624453][T13852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.641744][T13852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.657062][T13891] SELinux: syz.2.2929 (13891) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 363.670795][T13893] loop3: detected capacity change from 0 to 256 [ 363.685007][T13852] team0: Port device team_slave_0 added [ 363.691982][T13852] team0: Port device team_slave_1 added [ 363.700771][T13891] loop2: detected capacity change from 0 to 512 [ 363.717760][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'. [ 363.738880][T13891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.751631][T13891] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.763011][T13852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.770099][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.796175][T13852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.848312][T13852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.855386][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.881411][T13852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.912395][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.925388][T13852] hsr_slave_0: entered promiscuous mode [ 363.932067][T13852] hsr_slave_1: entered promiscuous mode [ 363.932384][T13852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.978530][T13852] Cannot create hsr debugfs directory [ 364.044080][T13910] SELinux: failed to load policy [ 364.051000][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2939'. [ 364.092806][T13920] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 364.098823][T13910] lo speed is unknown, defaulting to 1000 [ 364.105031][T13920] SELinux: failed to load policy [ 364.113952][T13910] lo speed is unknown, defaulting to 1000 [ 364.148617][T13920] lo speed is unknown, defaulting to 1000 [ 364.156513][T13920] lo speed is unknown, defaulting to 1000 [ 364.246614][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 364.289387][T13922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 364.353326][T13936] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 364.481674][T13954] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 364.489215][T13852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.491563][T13954] SELinux: failed to load policy [ 364.506293][T13852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.531541][T13957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'. [ 364.536089][T13852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.559846][T13852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.584147][T13955] loop2: detected capacity change from 0 to 8192 [ 364.617522][T13954] lo speed is unknown, defaulting to 1000 [ 364.631287][T13954] lo speed is unknown, defaulting to 1000 [ 364.645457][T13962] siw: device registration error -23 [ 364.761758][T13852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.776065][T13852] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.786355][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.793500][ T7744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.815086][T13852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.825515][T13852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.862447][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.869759][ T7744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.872043][T13976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 364.920737][T13987] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 364.940714][T13987] SELinux: failed to load policy [ 364.957664][T13985] loop1: detected capacity change from 0 to 8192 [ 364.984068][T13852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.028052][T13987] lo speed is unknown, defaulting to 1000 [ 365.034200][T13987] lo speed is unknown, defaulting to 1000 [ 365.212299][T13852] veth0_vlan: entered promiscuous mode [ 365.222316][T13852] veth1_vlan: entered promiscuous mode [ 365.238179][T13852] veth0_macvtap: entered promiscuous mode [ 365.244464][T14012] loop3: detected capacity change from 0 to 8192 [ 365.246035][T13852] veth1_macvtap: entered promiscuous mode [ 365.282209][T13852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.300285][T14015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 365.308850][T13852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.344600][T13852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.353424][T13852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.362301][T13852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.371064][T13852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.436042][T14022] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 365.494657][T14026] SELinux: failed to load policy [ 365.513890][T14026] lo speed is unknown, defaulting to 1000 [ 365.520316][T14026] lo speed is unknown, defaulting to 1000 [ 365.872536][T14040] loop2: detected capacity change from 0 to 128 [ 365.889540][T14042] FAULT_INJECTION: forcing a failure. [ 365.889540][T14042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.902772][T14042] CPU: 0 UID: 0 PID: 14042 Comm: syz.1.2970 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 365.902841][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.902856][T14042] Call Trace: [ 365.902863][T14042] [ 365.902873][T14042] __dump_stack+0x1d/0x30 [ 365.902897][T14042] dump_stack_lvl+0xe8/0x140 [ 365.902915][T14042] dump_stack+0x15/0x1b [ 365.903003][T14042] should_fail_ex+0x265/0x280 [ 365.903082][T14042] should_fail+0xb/0x20 [ 365.903113][T14042] should_fail_usercopy+0x1a/0x20 [ 365.903144][T14042] _copy_from_iter+0xcf/0xe40 [ 365.903241][T14042] ? __build_skb_around+0x1a0/0x200 [ 365.903328][T14042] ? __alloc_skb+0x223/0x320 [ 365.903356][T14042] netlink_sendmsg+0x471/0x6b0 [ 365.903414][T14042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.903433][T14042] __sock_sendmsg+0x145/0x180 [ 365.903455][T14042] ____sys_sendmsg+0x31e/0x4e0 [ 365.903488][T14042] ___sys_sendmsg+0x17b/0x1d0 [ 365.903524][T14042] ? trace_reschedule_exit+0xd/0xc0 [ 365.903628][T14042] __x64_sys_sendmsg+0xd4/0x160 [ 365.903665][T14042] x64_sys_call+0x2999/0x2fb0 [ 365.903687][T14042] do_syscall_64+0xd2/0x200 [ 365.903730][T14042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 365.903754][T14042] ? clear_bhb_loop+0x40/0x90 [ 365.903773][T14042] ? clear_bhb_loop+0x40/0x90 [ 365.903800][T14042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.903884][T14042] RIP: 0033:0x7fa12b06e929 [ 365.903897][T14042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.903919][T14042] RSP: 002b:00007fa1296d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.903953][T14042] RAX: ffffffffffffffda RBX: 00007fa12b295fa0 RCX: 00007fa12b06e929 [ 365.904021][T14042] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 365.904035][T14042] RBP: 00007fa1296d7090 R08: 0000000000000000 R09: 0000000000000000 [ 365.904050][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.904064][T14042] R13: 0000000000000000 R14: 00007fa12b295fa0 R15: 00007ffdb70e1208 [ 365.904083][T14042] [ 365.904923][T14040] EXT4-fs: Ignoring removed nobh option [ 366.131713][T14040] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.144312][T14040] ext4 filesystem being mounted at /565/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.273089][T14050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 366.347339][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.403941][T14052] SELinux: failed to load policy [ 366.455630][T14061] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 366.471240][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 366.471256][ T29] audit: type=1400 audit(1752369518.081:11594): avc: denied { read write } for pid=14060 comm="syz.3.2979" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 366.501156][ T29] audit: type=1400 audit(1752369518.081:11595): avc: denied { open } for pid=14060 comm="syz.3.2979" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 366.504723][T14064] SELinux: syz.4.2980 (14064) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 366.541146][T14061] SELinux: failed to load policy [ 366.556024][ T29] audit: type=1326 audit(1752369518.141:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.579767][ T29] audit: type=1326 audit(1752369518.141:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.603636][ T29] audit: type=1326 audit(1752369518.151:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.627464][ T29] audit: type=1326 audit(1752369518.151:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.633131][ T3415] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 366.651371][ T29] audit: type=1326 audit(1752369518.151:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.651408][ T29] audit: type=1326 audit(1752369518.151:11601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.651455][ T29] audit: type=1326 audit(1752369518.151:11602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.659086][ T3415] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 366.682717][ T29] audit: type=1326 audit(1752369518.151:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12b06e929 code=0x7ffc0000 [ 366.706343][ T3415] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 366.732017][T14069] loop4: detected capacity change from 0 to 1024 [ 366.740239][T14065] loop1: detected capacity change from 0 to 8192 [ 366.837717][T14069] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.846909][T14069] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2980: Failed to acquire dquot type 0 [ 366.848191][ T3415] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 366.873349][T14061] lo speed is unknown, defaulting to 1000 [ 366.886929][T14069] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 366.925291][T14069] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.2980: corrupted inode contents [ 366.948934][T14061] lo speed is unknown, defaulting to 1000 [ 366.964728][T14074] fido_id[14074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.982625][T14069] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.2980: mark_inode_dirty error [ 366.996930][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2982'. [ 367.043972][T14069] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.2980: corrupted inode contents [ 367.099761][T14069] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2980: mark_inode_dirty error [ 367.136611][T14069] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.2980: corrupted inode contents [ 367.175423][T14069] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 367.191192][T14069] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.2980: corrupted inode contents [ 367.212384][T14069] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.2980: mark_inode_dirty error [ 367.248485][T14069] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 367.263195][T14069] EXT4-fs (loop4): 1 truncate cleaned up [ 367.273235][T14069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.361708][T13852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.377725][T14113] SELinux: failed to load policy [ 367.395340][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2994'. [ 367.428932][T14120] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 367.439310][T14120] SELinux: failed to load policy [ 367.459740][T14092] lo speed is unknown, defaulting to 1000 [ 367.480626][T14092] lo speed is unknown, defaulting to 1000 [ 367.483437][T14120] lo speed is unknown, defaulting to 1000 [ 367.494168][T14120] lo speed is unknown, defaulting to 1000 [ 367.549211][T14128] FAULT_INJECTION: forcing a failure. [ 367.549211][T14128] name failslab, interval 1, probability 0, space 0, times 0 [ 367.561960][T14128] CPU: 0 UID: 0 PID: 14128 Comm: syz.1.2998 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 367.561996][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.562013][T14128] Call Trace: [ 367.562021][T14128] [ 367.562035][T14128] __dump_stack+0x1d/0x30 [ 367.562178][T14128] dump_stack_lvl+0xe8/0x140 [ 367.562215][T14128] dump_stack+0x15/0x1b [ 367.562235][T14128] should_fail_ex+0x265/0x280 [ 367.562271][T14128] should_failslab+0x8c/0xb0 [ 367.562297][T14128] kmem_cache_alloc_node_noprof+0x57/0x320 [ 367.562343][T14128] ? __alloc_skb+0x101/0x320 [ 367.562445][T14128] __alloc_skb+0x101/0x320 [ 367.562476][T14128] ? audit_log_start+0x365/0x6c0 [ 367.562588][T14128] audit_log_start+0x380/0x6c0 [ 367.562628][T14128] audit_seccomp+0x48/0x100 [ 367.562658][T14128] ? __seccomp_filter+0x68c/0x10d0 [ 367.562764][T14128] __seccomp_filter+0x69d/0x10d0 [ 367.562792][T14128] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 367.562896][T14128] ? vfs_write+0x75e/0x8e0 [ 367.562930][T14128] ? __rcu_read_unlock+0x4f/0x70 [ 367.562957][T14128] ? __fget_files+0x184/0x1c0 [ 367.562983][T14128] __secure_computing+0x82/0x150 [ 367.563097][T14128] syscall_trace_enter+0xcf/0x1e0 [ 367.563125][T14128] do_syscall_64+0xac/0x200 [ 367.563142][T14128] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 367.563168][T14128] ? clear_bhb_loop+0x40/0x90 [ 367.563257][T14128] ? clear_bhb_loop+0x40/0x90 [ 367.563279][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.563311][T14128] RIP: 0033:0x7fa12b06e929 [ 367.563328][T14128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.563429][T14128] RSP: 002b:00007fa1296d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 367.563453][T14128] RAX: ffffffffffffffda RBX: 00007fa12b295fa0 RCX: 00007fa12b06e929 [ 367.563469][T14128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004207 [ 367.563483][T14128] RBP: 00007fa1296d7090 R08: 0000000000000000 R09: 0000000000000000 [ 367.563517][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.563533][T14128] R13: 0000000000000000 R14: 00007fa12b295fa0 R15: 00007ffdb70e1208 [ 367.563556][T14128] [ 367.634013][T14092] chnl_net:caif_netlink_parms(): no params data found [ 367.861600][ T10] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 367.869268][ T10] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 367.876765][ T10] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 367.891500][ T10] hid-generic 0003:0004:0000.0017: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 367.929737][T14144] fido_id[14144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.943902][T14143] loop1: detected capacity change from 0 to 8192 [ 368.010849][T14151] SELinux: syz.4.3003 (14151) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 368.028052][T14092] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.035256][T14092] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.043168][T14092] bridge_slave_0: entered allmulticast mode [ 368.054079][T14092] bridge_slave_0: entered promiscuous mode [ 368.062121][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.069306][T14092] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.082861][T14092] bridge_slave_1: entered allmulticast mode [ 368.087913][T14153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3004'. [ 368.090056][T14092] bridge_slave_1: entered promiscuous mode [ 368.104846][T14151] loop4: detected capacity change from 0 to 1024 [ 368.121209][T14092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.139526][T14151] EXT4-fs (loop4): orphan cleanup on readonly fs [ 368.151585][T14092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.159150][T14151] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3003: Failed to acquire dquot type 0 [ 368.191187][T14092] team0: Port device team_slave_0 added [ 368.199403][T14151] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 368.217028][T14092] team0: Port device team_slave_1 added [ 368.219144][T14151] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3003: corrupted inode contents [ 368.262991][T14092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.270035][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.296069][T14092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.302816][T14162] SELinux: failed to load policy [ 368.311662][T14151] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.3003: mark_inode_dirty error [ 368.324655][T14151] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3003: corrupted inode contents [ 368.337614][T14151] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3003: mark_inode_dirty error [ 368.337778][T14092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.355979][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.357725][T14151] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3003: corrupted inode contents [ 368.382406][T14092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.399124][T14151] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 368.452900][T14151] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3003: corrupted inode contents [ 368.472324][T14092] hsr_slave_0: entered promiscuous mode [ 368.478720][T14092] hsr_slave_1: entered promiscuous mode [ 368.484731][T14151] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.3003: mark_inode_dirty error [ 368.498069][T14092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.505896][T14151] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 368.515658][T14092] Cannot create hsr debugfs directory [ 368.523257][T14151] EXT4-fs (loop4): 1 truncate cleaned up [ 368.536160][T14162] lo speed is unknown, defaulting to 1000 [ 368.551429][T14162] lo speed is unknown, defaulting to 1000 [ 368.678722][T14171] lo speed is unknown, defaulting to 1000 [ 368.685376][T14171] lo speed is unknown, defaulting to 1000 [ 368.749990][T14171] loop2: detected capacity change from 0 to 1024 [ 368.757287][T14171] EXT4-fs: Ignoring removed nobh option [ 368.762862][T14171] EXT4-fs: Ignoring removed bh option [ 368.815287][T14170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.822786][T14170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.933173][T14170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.940789][T14170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.953285][ T3407] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 368.960790][ T3407] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 368.968247][ T3407] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 368.981092][ T3407] hid-generic 0003:0004:0000.0018: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 369.036136][T14179] fido_id[14179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 369.070393][T14181] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 369.080374][ T7775] team0: left allmulticast mode [ 369.085683][T14181] SELinux: failed to load policy [ 369.091178][ T7775] team_slave_0: left allmulticast mode [ 369.096672][ T7775] team_slave_1: left allmulticast mode [ 369.102299][ T7775] team0: left promiscuous mode [ 369.107751][ T7775] team_slave_0: left promiscuous mode [ 369.113269][ T7775] team_slave_1: left promiscuous mode [ 369.119094][ T7775] bridge0: port 3(team0) entered disabled state [ 369.127604][ T7775] bridge_slave_1: left allmulticast mode [ 369.133288][ T7775] bridge_slave_1: left promiscuous mode [ 369.138979][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.150572][ T7775] bridge_slave_0: left allmulticast mode [ 369.156271][ T7775] bridge_slave_0: left promiscuous mode [ 369.162255][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.200091][T14183] SELinux: failed to load policy [ 369.230032][ T7775] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.239359][ T7775] bond_slave_0: left promiscuous mode [ 369.245399][ T7775] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.255744][ T7775] bond_slave_1: left promiscuous mode [ 369.261524][ T7775] $Hÿ (unregistering): Released all slaves [ 369.291016][T14183] lo speed is unknown, defaulting to 1000 [ 369.323721][T14183] lo speed is unknown, defaulting to 1000 [ 369.323736][T14181] lo speed is unknown, defaulting to 1000 [ 369.403490][T14181] lo speed is unknown, defaulting to 1000 [ 369.446896][ T7775] hsr_slave_0: left promiscuous mode [ 369.456137][ T7775] hsr_slave_1: left promiscuous mode [ 369.517909][ T7775] team0 (unregistering): Port device team_slave_1 removed [ 369.524799][T14205] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 369.534557][ T7775] team0 (unregistering): Port device team_slave_0 removed [ 369.718388][T14092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.721931][T14226] loop2: detected capacity change from 0 to 512 [ 369.727536][T14092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.745505][T14092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.759850][T14092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.776051][T14226] serio: Serial port ptm0 [ 369.794589][T14237] SELinux: syz.1.3021 (14237) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 369.817285][T14092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.832766][T14092] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.832885][ T7775] IPVS: stop unused estimator thread 0... [ 369.846903][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.854038][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.867826][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.874958][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.896682][T14237] loop1: detected capacity change from 0 to 1024 [ 369.932166][T14237] EXT4-fs (loop1): orphan cleanup on readonly fs [ 369.948400][T14237] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3021: Failed to acquire dquot type 0 [ 369.963503][T14237] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 369.980367][T14237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.3021: corrupted inode contents [ 369.992807][T14237] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #13: comm syz.1.3021: mark_inode_dirty error [ 370.045000][T14237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.3021: corrupted inode contents [ 370.066783][T14237] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.3021: mark_inode_dirty error [ 370.079024][T14237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.3021: corrupted inode contents [ 370.092345][T14237] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 370.101915][T14237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.3021: corrupted inode contents [ 370.115759][T14237] EXT4-fs error (device loop1): ext4_truncate:4597: inode #13: comm syz.1.3021: mark_inode_dirty error [ 370.130070][T14237] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 370.140055][T14237] EXT4-fs (loop1): 1 truncate cleaned up [ 370.166879][T14092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.208982][T14255] xt_ecn: cannot match TCP bits for non-tcp packets [ 370.288536][T14258] lo speed is unknown, defaulting to 1000 [ 370.294831][T14258] lo speed is unknown, defaulting to 1000 [ 370.652099][T14092] veth0_vlan: entered promiscuous mode [ 370.678734][T14266] lo speed is unknown, defaulting to 1000 [ 370.685153][T14266] lo speed is unknown, defaulting to 1000 [ 370.745645][T14092] veth1_vlan: entered promiscuous mode [ 370.778636][T14092] veth0_macvtap: entered promiscuous mode [ 370.803247][T14092] veth1_macvtap: entered promiscuous mode [ 370.826329][T14092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.082311][T14274] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3028'. [ 371.102019][T14274] siw: device registration error -23 [ 371.154013][T14092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.155117][T14092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.155152][T14092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.155244][T14092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.155274][T14092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.177055][T14281] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 371.222018][T14281] SELinux: failed to load policy [ 371.245829][T14279] loop1: detected capacity change from 0 to 8192 [ 371.297620][T14281] lo speed is unknown, defaulting to 1000 [ 371.316612][T14281] lo speed is unknown, defaulting to 1000 [ 371.479462][T14286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.514486][T14293] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 371.518279][T14287] lo speed is unknown, defaulting to 1000 [ 371.524001][T14293] loop2: detected capacity change from 0 to 128 [ 371.545018][T14287] lo speed is unknown, defaulting to 1000 [ 371.567749][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 371.567764][ T29] audit: type=1400 audit(1752369523.181:12064): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 371.577223][T14295] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 371.594361][ T29] audit: type=1400 audit(1752369523.181:12065): avc: denied { create } for pid=14294 comm="syz.3.3034" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 371.685996][ T29] audit: type=1400 audit(1752369523.291:12066): avc: denied { unlink } for pid=14092 comm="syz-executor" name="file0" dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 371.798819][ T29] audit: type=1326 audit(1752369523.381:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 371.822553][ T29] audit: type=1326 audit(1752369523.381:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 371.846234][ T29] audit: type=1326 audit(1752369523.381:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 371.869937][ T29] audit: type=1326 audit(1752369523.381:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 371.893629][ T29] audit: type=1326 audit(1752369523.381:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 371.896307][T14309] loop3: detected capacity change from 0 to 8192 [ 371.917328][ T29] audit: type=1326 audit(1752369523.381:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 371.917367][ T29] audit: type=1326 audit(1752369523.381:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252866e929 code=0x7ffc0000 [ 372.337023][T14313] siw: device registration error -23 [ 372.352964][T14313] lo speed is unknown, defaulting to 1000 [ 372.359124][T14313] lo speed is unknown, defaulting to 1000 [ 372.511956][T14308] lo speed is unknown, defaulting to 1000 [ 372.518292][T14308] lo speed is unknown, defaulting to 1000 [ 372.775112][T14317] loop2: detected capacity change from 0 to 1024 [ 372.816515][T14317] EXT4-fs: Ignoring removed nobh option [ 372.822287][T14317] EXT4-fs: Ignoring removed bh option [ 372.893430][T14317] ext4: Unknown parameter 'fsuuid' [ 372.993558][T14329] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 373.071324][T14336] lo speed is unknown, defaulting to 1000 [ 373.078020][T14336] lo speed is unknown, defaulting to 1000 [ 373.149859][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 373.181425][T14329] loop4: detected capacity change from 0 to 128 [ 373.518823][T14343] loop4: detected capacity change from 0 to 2048 [ 373.526776][T14345] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 373.555793][T14323] lo speed is unknown, defaulting to 1000 [ 373.566478][T14343] IPv4: Oversized IP packet from 127.202.26.0 [ 373.572003][T14348] lo speed is unknown, defaulting to 1000 [ 373.575596][T14352] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 373.578697][T14323] lo speed is unknown, defaulting to 1000 [ 373.594061][T14352] SELinux: failed to load policy [ 373.594941][T14348] lo speed is unknown, defaulting to 1000 [ 373.735988][T14362] SELinux: failed to load policy [ 373.780375][T14357] lo speed is unknown, defaulting to 1000 [ 373.786451][T14357] lo speed is unknown, defaulting to 1000 [ 373.824424][T14323] chnl_net:caif_netlink_parms(): no params data found [ 373.853347][T14365] loop3: detected capacity change from 0 to 8192 [ 373.971673][T14362] lo speed is unknown, defaulting to 1000 [ 373.977115][T14373] netlink: 'syz.3.3055': attribute type 27 has an invalid length. [ 374.018538][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.025942][T14373] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.072460][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.082869][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.116828][T14373] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.125996][T14373] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.134928][T14373] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.143941][T14373] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.175614][T14362] lo speed is unknown, defaulting to 1000 [ 374.213977][T14375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.223993][T14375] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.251576][T14375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.443939][ T3505] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 374.451484][ T3505] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 374.458938][ T3505] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 374.462103][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.473468][T14323] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.481875][ T3505] hid-generic 0003:0004:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 374.503849][T14323] bridge_slave_0: entered allmulticast mode [ 374.534254][T14386] siw: device registration error -23 [ 374.650896][T14323] bridge_slave_0: entered promiscuous mode [ 374.668078][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.675232][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.698161][T14389] loop3: detected capacity change from 0 to 764 [ 374.711084][T14385] fido_id[14385]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 374.760045][T14323] bridge_slave_1: entered allmulticast mode [ 374.778455][T14389] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 374.792725][T14323] bridge_slave_1: entered promiscuous mode [ 374.845274][T14386] lo speed is unknown, defaulting to 1000 [ 374.851487][T14386] lo speed is unknown, defaulting to 1000 [ 375.111982][T14395] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 375.114105][T14323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.151336][T14397] loop2: detected capacity change from 0 to 512 [ 375.162860][T14323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.191013][T14397] serio: Serial port ptm0 [ 375.206509][T14323] team0: Port device team_slave_0 added [ 375.259128][T14323] team0: Port device team_slave_1 added [ 375.355193][T14409] loop4: detected capacity change from 0 to 8192 [ 375.366592][T14412] loop3: detected capacity change from 0 to 512 [ 375.383829][T14323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.390988][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.417130][T14323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.444553][T14323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.451678][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.454512][T14412] serio: Serial port ptm0 [ 375.478407][T14323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.533408][T14414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3067'. [ 375.554804][T14323] hsr_slave_0: entered promiscuous mode [ 375.561309][T14323] hsr_slave_1: entered promiscuous mode [ 375.567458][T14323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.572197][T14092] EXT4-fs unmount: 13 callbacks suppressed [ 375.572217][T14092] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 375.575093][T14323] Cannot create hsr debugfs directory [ 375.598816][T14414] siw: device registration error -23 [ 375.657235][T14423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3069'. [ 375.673235][T14423] siw: device registration error -23 [ 375.728469][T14434] xt_hashlimit: max too large, truncated to 1048576 [ 375.926548][T14323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.938672][T14323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.950807][T14323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.961639][T14323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.020056][T14323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.038603][T14323] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.049283][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.056382][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.068813][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.075945][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.219335][T14323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.346662][T14323] veth0_vlan: entered promiscuous mode [ 376.355701][T14323] veth1_vlan: entered promiscuous mode [ 376.377832][T14460] loop2: detected capacity change from 0 to 2048 [ 376.378097][T14323] veth0_macvtap: entered promiscuous mode [ 376.394784][T14323] veth1_macvtap: entered promiscuous mode [ 376.408713][T14323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.422429][T14323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.439969][T14460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.455130][T14323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.463909][T14323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.472774][T14323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.481551][T14323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.550514][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.662971][T14468] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3081'. [ 376.680259][T14468] siw: device registration error -23 [ 376.734551][T14476] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3082'. [ 376.760706][T14476] siw: device registration error -23 [ 376.866549][T14480] lo speed is unknown, defaulting to 1000 [ 376.872892][T14480] lo speed is unknown, defaulting to 1000 [ 377.191590][T14486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 377.311529][T14490] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 377.324672][T14490] SELinux: failed to load policy [ 377.567875][T14496] lo speed is unknown, defaulting to 1000 [ 377.574952][T14496] lo speed is unknown, defaulting to 1000 [ 377.958890][T14497] lo speed is unknown, defaulting to 1000 [ 377.965378][T14499] loop2: detected capacity change from 0 to 1024 [ 377.972231][T14497] lo speed is unknown, defaulting to 1000 [ 377.987501][T14499] EXT4-fs: Ignoring removed nobh option [ 377.993178][T14499] EXT4-fs: Ignoring removed bh option [ 378.061392][T14499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.074644][T14510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3093'. [ 378.147929][T14510] siw: device registration error -23 [ 378.162700][T14518] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3094'. [ 378.228931][T14523] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 378.245750][T14518] siw: device registration error -23 [ 378.270188][T14523] SELinux: failed to load policy [ 378.334907][T14523] lo speed is unknown, defaulting to 1000 [ 378.619017][T14536] lo speed is unknown, defaulting to 1000 [ 378.648204][T14523] lo speed is unknown, defaulting to 1000 [ 378.764316][T14536] lo speed is unknown, defaulting to 1000 [ 379.201355][T14545] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 379.233333][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 379.233347][ T29] audit: type=1400 audit(1752369530.841:12163): avc: denied { create } for pid=14546 comm="syz.0.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 379.237392][T14545] SELinux: failed to load policy [ 379.282044][ T29] audit: type=1400 audit(1752369530.881:12164): avc: denied { setopt } for pid=14546 comm="syz.0.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 379.492447][T14557] lo speed is unknown, defaulting to 1000 [ 379.499330][T14557] lo speed is unknown, defaulting to 1000 [ 379.774034][T14562] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3108'. [ 379.839174][T14562] siw: device registration error -23 [ 379.993788][T14564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3109'. [ 380.028784][T14564] siw: device registration error -23 [ 380.158441][T14570] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 380.189862][T14572] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 380.234493][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.272956][T14578] loop4: detected capacity change from 0 to 512 [ 380.291148][T14580] loop1: detected capacity change from 0 to 512 [ 380.302177][T14580] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.317459][T14578] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.333139][T14576] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 380.342192][T14576] loop3: detected capacity change from 0 to 128 [ 380.396654][T14580] serio: Serial port ptm0 [ 380.436111][T13852] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 380.499060][T14589] siw: device registration error -23 [ 380.512887][T14589] lo speed is unknown, defaulting to 1000 [ 380.513402][T14589] lo speed is unknown, defaulting to 1000 [ 380.822876][T14323] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 381.193857][T14595] lo speed is unknown, defaulting to 1000 [ 381.194119][T14595] lo speed is unknown, defaulting to 1000 [ 381.451217][T14598] serio: Serial port ptm0 [ 381.536285][T14593] loop2: detected capacity change from 0 to 8192 [ 381.636575][T14601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3121'. [ 381.664218][T14601] siw: device registration error -23 [ 381.805996][T14611] lo speed is unknown, defaulting to 1000 [ 381.813335][T14611] lo speed is unknown, defaulting to 1000 [ 381.931151][T14607] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 382.074355][ T3380] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 382.081920][ T3380] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 382.089429][ T3380] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 382.157381][T14616] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 382.169369][T14616] loop4: detected capacity change from 0 to 128 [ 382.178732][ T3380] hid-generic 0003:0004:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 382.259499][T14625] loop1: detected capacity change from 0 to 128 [ 382.287472][T14625] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 382.287501][T14625] FAT-fs (loop1): Filesystem has been set read-only [ 382.287517][T14625] bio_check_eod: 218 callbacks suppressed [ 382.287531][T14625] syz.1.3132: attempt to access beyond end of device [ 382.287531][T14625] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 382.287635][T14625] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 382.287657][T14625] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 382.289769][T14625] syz.1.3132: attempt to access beyond end of device [ 382.289769][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.289898][T14625] syz.1.3132: attempt to access beyond end of device [ 382.289898][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.289983][T14625] syz.1.3132: attempt to access beyond end of device [ 382.289983][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.290031][T14625] syz.1.3132: attempt to access beyond end of device [ 382.290031][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.290073][T14625] syz.1.3132: attempt to access beyond end of device [ 382.290073][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.290168][T14625] syz.1.3132: attempt to access beyond end of device [ 382.290168][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.290214][T14625] syz.1.3132: attempt to access beyond end of device [ 382.290214][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.290259][T14625] syz.1.3132: attempt to access beyond end of device [ 382.290259][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.290381][T14625] syz.1.3132: attempt to access beyond end of device [ 382.290381][T14625] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.343883][ T29] audit: type=1400 audit(1752369533.941:12165): avc: denied { read } for pid=14624 comm="syz.1.3132" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 382.343920][ T29] audit: type=1400 audit(1752369533.941:12166): avc: denied { open } for pid=14624 comm="syz.1.3132" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 382.345286][T14627] Buffer I/O error on dev loop1, logical block 2065, async page read [ 382.364081][T14620] fido_id[14620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 382.383993][T14627] Buffer I/O error on dev loop1, logical block 2066, async page read [ 382.389902][T14621] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 382.401676][T14627] Buffer I/O error on dev loop1, logical block 2067, async page read [ 382.474593][T14621] SELinux: failed to load policy [ 382.537112][T14627] Buffer I/O error on dev loop1, logical block 2068, async page read [ 382.591254][T14627] Buffer I/O error on dev loop1, logical block 2069, async page read [ 382.591279][T14627] Buffer I/O error on dev loop1, logical block 2070, async page read [ 382.591376][T14627] Buffer I/O error on dev loop1, logical block 2071, async page read [ 382.591397][T14627] Buffer I/O error on dev loop1, logical block 2072, async page read [ 382.591437][T14627] Buffer I/O error on dev loop1, logical block 2065, async page read [ 382.591457][T14627] Buffer I/O error on dev loop1, logical block 2066, async page read [ 382.659546][T14621] lo speed is unknown, defaulting to 1000 [ 382.659844][T14621] lo speed is unknown, defaulting to 1000 [ 382.767585][T14636] lo speed is unknown, defaulting to 1000 [ 382.768067][T14636] lo speed is unknown, defaulting to 1000 [ 383.271416][T14641] loop4: detected capacity change from 0 to 512 [ 383.306510][ T29] audit: type=1400 audit(1752369534.911:12167): avc: denied { create } for pid=14642 comm="syz.1.3135" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.311952][T14641] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.360604][ T29] audit: type=1400 audit(1752369534.961:12168): avc: denied { write } for pid=14642 comm="syz.1.3135" name="file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.383619][ T29] audit: type=1400 audit(1752369534.961:12169): avc: denied { open } for pid=14642 comm="syz.1.3135" path="/9/file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.406267][ T29] audit: type=1400 audit(1752369534.971:12170): avc: denied { ioctl } for pid=14642 comm="syz.1.3135" path="/9/file0" dev="tmpfs" ino=67 ioctlcmd=0x5403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.446871][T14641] serio: Serial port ptm0 [ 383.506534][ T29] audit: type=1400 audit(1752369535.091:12171): avc: denied { unlink } for pid=14323 comm="syz-executor" name="file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.532370][T13852] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 383.535400][T14650] netlink: 'syz.1.3136': attribute type 27 has an invalid length. [ 383.575760][ T29] audit: type=1400 audit(1752369535.181:12172): avc: denied { ioctl } for pid=14651 comm="syz.0.3139" path="/dev/vsock" dev="devtmpfs" ino=257 ioctlcmd=0x7b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.600002][T14654] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 383.623694][T14656] netlink: 'syz.4.3138': attribute type 27 has an invalid length. [ 383.625227][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.638762][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.676564][T14660] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 383.687257][T14660] SELinux: failed to load policy [ 383.701923][T14650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.712304][T14650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.750898][T14650] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.759893][T14650] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.769063][T14650] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.778183][T14650] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.822633][T14657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.830982][T14657] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.842642][T14657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.883758][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.891055][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.965698][T14656] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.975006][T14656] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.984231][T14656] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.993482][T14656] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.053400][T14661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.085602][T14661] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.104380][T14661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.167530][T14659] lo speed is unknown, defaulting to 1000 [ 384.184782][ T4006] syz_tun (unregistering): left allmulticast mode [ 384.209363][T14660] lo speed is unknown, defaulting to 1000 [ 384.221072][T14663] lo speed is unknown, defaulting to 1000 [ 384.237132][T14659] lo speed is unknown, defaulting to 1000 [ 384.267802][T14660] lo speed is unknown, defaulting to 1000 [ 384.279210][T14663] lo speed is unknown, defaulting to 1000 [ 384.350429][T14675] lo speed is unknown, defaulting to 1000 [ 384.371540][T14675] lo speed is unknown, defaulting to 1000 [ 384.381895][T14689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.389608][ T29] audit: type=1400 audit(1752369535.991:12173): avc: denied { ioctl } for pid=14688 comm="syz.1.3144" path="socket:[47146]" dev="sockfs" ino=47146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.419541][T14689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.462530][T14691] lo speed is unknown, defaulting to 1000 [ 384.476934][T14691] lo speed is unknown, defaulting to 1000 [ 384.499688][T14693] bridge0: port 3(team0) entered blocking state [ 384.506063][T14693] bridge0: port 3(team0) entered disabled state [ 384.513638][T14693] team0: entered allmulticast mode [ 384.519058][T14693] team_slave_0: entered allmulticast mode [ 384.524806][T14693] team_slave_1: entered allmulticast mode [ 384.532278][T14693] team0: entered promiscuous mode [ 384.537555][T14693] team_slave_0: entered promiscuous mode [ 384.543449][T14693] team_slave_1: entered promiscuous mode [ 384.549676][T14693] bridge0: port 3(team0) entered blocking state [ 384.556015][T14693] bridge0: port 3(team0) entered forwarding state [ 384.615962][ T7775] team0: left allmulticast mode [ 384.621249][ T7775] team_slave_0: left allmulticast mode [ 384.622786][ T29] audit: type=1400 audit(1752369536.211:12174): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 384.626729][ T7775] team_slave_1: left allmulticast mode [ 384.653401][ T7775] team0: left promiscuous mode [ 384.658337][ T7775] team_slave_0: left promiscuous mode [ 384.663858][ T7775] team_slave_1: left promiscuous mode [ 384.669564][ T7775] bridge0: port 3(team0) entered disabled state [ 384.678092][ T7775] bridge_slave_1: left allmulticast mode [ 384.683877][ T7775] bridge_slave_1: left promiscuous mode [ 384.689668][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.697876][ T7775] bridge_slave_0: left allmulticast mode [ 384.703546][ T7775] bridge_slave_0: left promiscuous mode [ 384.709323][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.722438][T14705] SELinux: syz.4.3148 (14705) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 384.753739][T14705] loop4: detected capacity change from 0 to 1024 [ 384.760287][ T29] audit: type=1400 audit(1752369536.361:12175): avc: denied { read write } for pid=14704 comm="syz.4.3148" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.784835][ T29] audit: type=1400 audit(1752369536.361:12176): avc: denied { open } for pid=14704 comm="syz.4.3148" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.809130][ T29] audit: type=1400 audit(1752369536.361:12177): avc: denied { ioctl } for pid=14704 comm="syz.4.3148" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.811386][T14705] EXT4-fs (loop4): orphan cleanup on readonly fs [ 384.838226][ T29] audit: type=1400 audit(1752369536.401:12178): avc: denied { mounton } for pid=14704 comm="syz.4.3148" path="/40/file0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 384.843117][T14705] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 384.866623][ T29] audit: type=1400 audit(1752369536.471:12179): avc: denied { prog_load } for pid=14706 comm="syz.0.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.873058][T14705] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 384.892248][ T29] audit: type=1400 audit(1752369536.471:12180): avc: denied { bpf } for pid=14706 comm="syz.0.3149" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.901632][T14705] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3148: Failed to acquire dquot type 0 [ 384.937920][T14705] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 384.953530][T14705] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3148: corrupted inode contents [ 384.965937][ T7775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.965892][T14705] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.3148: mark_inode_dirty error [ 384.986202][T14705] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3148: corrupted inode contents [ 384.998367][T14705] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3148: mark_inode_dirty error [ 384.998408][ T7775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.018501][T14705] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3148: corrupted inode contents [ 385.018668][ T7775] bond0 (unregistering): Released all slaves [ 385.031986][T14705] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 385.045219][T14705] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3148: corrupted inode contents [ 385.061847][T14675] chnl_net:caif_netlink_parms(): no params data found [ 385.079576][T14703] bridge0: port 3(team0) entered blocking state [ 385.085930][T14703] bridge0: port 3(team0) entered disabled state [ 385.095196][T14705] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.3148: mark_inode_dirty error [ 385.106612][T14703] team0: entered allmulticast mode [ 385.117131][T14705] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 385.126255][T14703] team_slave_0: entered allmulticast mode [ 385.132179][T14703] team_slave_1: entered allmulticast mode [ 385.140028][T14705] EXT4-fs (loop4): 1 truncate cleaned up [ 385.147257][T14703] team0: entered promiscuous mode [ 385.153395][T14705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.168270][T14703] team_slave_0: entered promiscuous mode [ 385.174067][T14703] team_slave_1: entered promiscuous mode [ 385.183485][T14700] lo speed is unknown, defaulting to 1000 [ 385.245419][T13852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.261628][T14700] lo speed is unknown, defaulting to 1000 [ 385.275065][T14726] SELinux: failed to load policy [ 385.319156][T14675] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.326569][T14675] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.334221][T14675] bridge_slave_0: entered allmulticast mode [ 385.340919][T14675] bridge_slave_0: entered promiscuous mode [ 385.351172][ T7775] hsr_slave_0: left promiscuous mode [ 385.357507][ T7775] hsr_slave_1: left promiscuous mode [ 385.400944][ T7775] team0 (unregistering): Port device team_slave_1 removed [ 385.413164][ T7775] team0 (unregistering): Port device team_slave_0 removed [ 385.454338][T14675] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.461632][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.469670][T14675] bridge_slave_1: entered allmulticast mode [ 385.476387][T14675] bridge_slave_1: entered promiscuous mode [ 385.483130][ T36] lo speed is unknown, defaulting to 1000 [ 385.488954][ T36] infiniband syz2: ib_query_port failed (-19) [ 385.516429][T14755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 385.532559][T14726] lo speed is unknown, defaulting to 1000 [ 385.558754][T14675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.572896][T14675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.609089][T14675] team0: Port device team_slave_0 added [ 385.620972][T14675] team0: Port device team_slave_1 added [ 385.626940][T14761] syz_tun: entered allmulticast mode [ 385.660770][T14675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.667827][T14675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.693922][T14675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.708809][T14675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.715882][T14675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.742096][T14675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.794059][T14675] hsr_slave_0: entered promiscuous mode [ 385.800694][T14675] hsr_slave_1: entered promiscuous mode [ 385.806740][T14675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.814417][T14675] Cannot create hsr debugfs directory [ 385.852560][ T7775] IPVS: stop unused estimator thread 0... [ 385.951300][T14779] loop1: detected capacity change from 0 to 8192 [ 386.037202][T14794] loop3: detected capacity change from 0 to 512 [ 386.110266][T14794] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.128049][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 386.340632][T14092] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 386.418231][T14756] syz_tun: left allmulticast mode [ 386.552795][T14675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.668254][T14817] SELinux: failed to load policy [ 386.891310][T14823] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3164'. [ 386.925913][T14823] netlink: 'syz.1.3164': attribute type 1 has an invalid length. [ 386.933768][T14823] netlink: 'syz.1.3164': attribute type 2 has an invalid length. [ 386.941555][T14823] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3164'. [ 387.072368][T14816] lo speed is unknown, defaulting to 1000 [ 387.121809][T14675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.141675][T14675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.154536][T14817] lo speed is unknown, defaulting to 1000 [ 387.160620][T14675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.165217][T14832] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 387.180546][T14832] SELinux: failed to load policy [ 387.246698][T14841] lo speed is unknown, defaulting to 1000 [ 387.252566][T14841] lo speed is unknown, defaulting to 1000 [ 387.258549][T14841] lo speed is unknown, defaulting to 1000 [ 387.275612][T14841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 387.388606][T14852] loop4: detected capacity change from 0 to 128 [ 387.399417][T14832] lo speed is unknown, defaulting to 1000 [ 387.423785][T14841] lo speed is unknown, defaulting to 1000 [ 387.451099][T14841] lo speed is unknown, defaulting to 1000 [ 387.521985][T14841] lo speed is unknown, defaulting to 1000 [ 387.522369][T14841] lo speed is unknown, defaulting to 1000 [ 387.522831][T14841] lo speed is unknown, defaulting to 1000 [ 387.523046][T14841] lo speed is unknown, defaulting to 1000 [ 387.535816][T14675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.550226][T14866] 9pnet_fd: Insufficient options for proto=fd [ 387.552057][T14675] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.552545][T14841] lo speed is unknown, defaulting to 1000 [ 387.558820][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.558861][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.562748][T14841] lo speed is unknown, defaulting to 1000 [ 387.563246][T14841] lo speed is unknown, defaulting to 1000 [ 387.563609][T14841] lo speed is unknown, defaulting to 1000 [ 387.563941][T14841] lo speed is unknown, defaulting to 1000 [ 387.642305][T14849] lo speed is unknown, defaulting to 1000 [ 387.655078][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.655115][ T7754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.730555][T14675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.730584][T14675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.945002][T14675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.065614][T14895] loop4: detected capacity change from 0 to 8192 [ 388.072858][T14906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3174'. [ 388.098391][T14906] siw: device registration error -23 [ 388.181293][T14675] veth0_vlan: entered promiscuous mode [ 388.219121][T14675] veth1_vlan: entered promiscuous mode [ 388.248467][T14675] veth0_macvtap: entered promiscuous mode [ 388.258234][T14675] veth1_macvtap: entered promiscuous mode [ 388.301926][T14932] SELinux: failed to load policy [ 388.312116][T14675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.335733][T14938] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 388.352901][T14675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.357913][T14938] SELinux: failed to load policy [ 388.375664][T14932] lo speed is unknown, defaulting to 1000 [ 388.377999][T14675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.390310][T14675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.399151][T14675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.407954][T14675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.479497][T14932] lo speed is unknown, defaulting to 1000 [ 388.503361][T14947] lo speed is unknown, defaulting to 1000 [ 388.512634][T14957] netlink: 'syz.0.3184': attribute type 27 has an invalid length. [ 388.527596][T14947] lo speed is unknown, defaulting to 1000 [ 388.566153][T14951] loop3: detected capacity change from 0 to 8192 [ 388.650281][T14957] bridge0: port 3(team0) entered disabled state [ 388.656749][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.664118][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.719542][T14957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.730007][T14957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.763211][T14957] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.772252][T14957] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.781248][T14957] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.790205][T14957] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.860866][T14964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.869208][T14964] bridge0: port 3(team0) entered blocking state [ 388.875516][T14964] bridge0: port 3(team0) entered forwarding state [ 388.882269][T14964] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.892116][T14964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.910387][ T10] lo speed is unknown, defaulting to 1000 [ 388.916299][ T7761] bridge0: port 3(team0) entered disabled state [ 388.932994][ T36] lo speed is unknown, defaulting to 1000 [ 389.028260][ T10] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 389.035770][ T10] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 389.043282][ T10] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 389.067158][ T10] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 389.082172][T14992] loop3: detected capacity change from 0 to 8192 [ 389.128006][T14995] netlink: 'syz.1.3188': attribute type 27 has an invalid length. [ 389.155916][T14993] fido_id[14993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 389.306700][T15005] lo speed is unknown, defaulting to 1000 [ 389.317388][T15005] lo speed is unknown, defaulting to 1000 [ 389.351687][T15007] loop4: detected capacity change from 0 to 512 [ 389.357754][T15009] netlink: 'syz.2.3193': attribute type 27 has an invalid length. [ 389.410249][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 389.410267][ T29] audit: type=1326 audit(1752369541.021:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a3ca1d3df code=0x7ffc0000 [ 389.441960][T15007] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.471335][T15014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.486905][ T29] audit: type=1326 audit(1752369541.081:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0a3ca1e9b7 code=0x7ffc0000 [ 389.513689][T15016] SELinux: syz.1.3195 (15016) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 389.517071][ T29] audit: type=1326 audit(1752369541.101:12457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a3ca1d290 code=0x7ffc0000 [ 389.551118][ T29] audit: type=1326 audit(1752369541.101:12458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a3ca1d58a code=0x7ffc0000 [ 389.574664][ T29] audit: type=1326 audit(1752369541.121:12459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3ca1e929 code=0x7ffc0000 [ 389.598459][ T29] audit: type=1326 audit(1752369541.121:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3ca1e929 code=0x7ffc0000 [ 389.623768][ T29] audit: type=1326 audit(1752369541.151:12461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a3ca1e929 code=0x7ffc0000 [ 389.647544][ T29] audit: type=1326 audit(1752369541.151:12462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3ca1e929 code=0x7ffc0000 [ 389.671245][ T29] audit: type=1326 audit(1752369541.151:12463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3ca1e929 code=0x7ffc0000 [ 389.694925][ T29] audit: type=1326 audit(1752369541.151:12464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.0.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a3ca1e929 code=0x7ffc0000 [ 389.726701][T15009] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.734151][T15009] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.784297][T15009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.802436][T15009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.962922][T15009] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.972036][T15009] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.981108][T15009] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.990394][T15009] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.003098][T15029] FAULT_INJECTION: forcing a failure. [ 390.003098][T15029] name failslab, interval 1, probability 0, space 0, times 0 [ 390.015822][T15029] CPU: 1 UID: 0 PID: 15029 Comm: syz.0.3197 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 390.015855][T15029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.015884][T15029] Call Trace: [ 390.015891][T15029] [ 390.015898][T15029] __dump_stack+0x1d/0x30 [ 390.015921][T15029] dump_stack_lvl+0xe8/0x140 [ 390.015944][T15029] dump_stack+0x15/0x1b [ 390.015963][T15029] should_fail_ex+0x265/0x280 [ 390.015997][T15029] should_failslab+0x8c/0xb0 [ 390.016116][T15029] kmem_cache_alloc_node_noprof+0x57/0x320 [ 390.016143][T15029] ? __alloc_skb+0x101/0x320 [ 390.016172][T15029] __alloc_skb+0x101/0x320 [ 390.016267][T15029] netlink_alloc_large_skb+0xba/0xf0 [ 390.016329][T15029] netlink_sendmsg+0x3cf/0x6b0 [ 390.016355][T15029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.016375][T15029] __sock_sendmsg+0x145/0x180 [ 390.016398][T15029] ____sys_sendmsg+0x31e/0x4e0 [ 390.016510][T15029] ___sys_sendmsg+0x17b/0x1d0 [ 390.016604][T15029] __x64_sys_sendmsg+0xd4/0x160 [ 390.016646][T15029] x64_sys_call+0x2999/0x2fb0 [ 390.016672][T15029] do_syscall_64+0xd2/0x200 [ 390.016694][T15029] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 390.016718][T15029] ? clear_bhb_loop+0x40/0x90 [ 390.016760][T15029] ? clear_bhb_loop+0x40/0x90 [ 390.016787][T15029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.016808][T15029] RIP: 0033:0x7f0a3ca1e929 [ 390.016884][T15029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.016902][T15029] RSP: 002b:00007f0a3b045038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.016919][T15029] RAX: ffffffffffffffda RBX: 00007f0a3cc46160 RCX: 00007f0a3ca1e929 [ 390.017012][T15029] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 390.017028][T15029] RBP: 00007f0a3b045090 R08: 0000000000000000 R09: 0000000000000000 [ 390.017044][T15029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.017060][T15029] R13: 0000000000000000 R14: 00007f0a3cc46160 R15: 00007ffe04dc0fb8 [ 390.017083][T15029] [ 390.258116][ T3415] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 390.265659][ T3415] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 390.273252][ T3415] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 390.305957][T15014] lo speed is unknown, defaulting to 1000 [ 390.313758][T15014] lo speed is unknown, defaulting to 1000 [ 390.319886][ T3415] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 390.357105][T13852] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 390.374163][T15032] fido_id[15032]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.408190][T15034] SELinux: failed to load policy [ 390.467963][T15040] SELinux: syz.4.3203 (15040) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 390.541645][T15043] loop4: detected capacity change from 0 to 1024 [ 390.565361][T15034] lo speed is unknown, defaulting to 1000 [ 390.571662][T15034] lo speed is unknown, defaulting to 1000 [ 390.581903][T15043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 390.592084][T15043] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3203: Failed to acquire dquot type 0 [ 390.608350][T15043] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 390.623109][T15043] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3203: corrupted inode contents [ 390.636471][T15043] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.3203: mark_inode_dirty error [ 390.649326][T15043] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3203: corrupted inode contents [ 390.661527][T15043] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3203: mark_inode_dirty error [ 390.674181][T15043] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3203: corrupted inode contents [ 390.694000][T15047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3204'. [ 390.712828][T15049] netlink: 'syz.0.3205': attribute type 27 has an invalid length. [ 390.717226][T15043] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 390.730503][T15043] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3203: corrupted inode contents [ 390.742779][T15043] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.3203: mark_inode_dirty error [ 390.751480][T15047] siw: device registration error -23 [ 390.755299][T15043] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 390.778829][T15043] EXT4-fs (loop4): 1 truncate cleaned up [ 390.785290][T15043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.798244][T15053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.825497][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3206'. [ 390.836250][T13852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.867138][ T10] lo speed is unknown, defaulting to 1000 [ 390.872910][ T10] syz2: Port: 1 Link DOWN [ 390.910414][T15053] lo speed is unknown, defaulting to 1000 [ 390.916645][T15053] lo speed is unknown, defaulting to 1000 [ 390.953898][T15061] SELinux: failed to load policy [ 391.034407][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3210'. [ 391.039120][T15061] lo speed is unknown, defaulting to 1000 [ 391.051435][T15061] lo speed is unknown, defaulting to 1000 [ 391.065988][T15063] loop4: detected capacity change from 0 to 8192 [ 391.114953][T15071] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 391.141316][T15071] loop2: detected capacity change from 0 to 128 [ 391.196125][T15074] lo speed is unknown, defaulting to 1000 [ 391.202505][T15074] lo speed is unknown, defaulting to 1000 [ 391.381829][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3216'. [ 391.458015][T15087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3217'. [ 391.469022][T15087] siw: device registration error -23 [ 391.494593][T15089] SELinux: syz.3.3218 (15089) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 391.533431][T15089] loop3: detected capacity change from 0 to 1024 [ 391.724123][T15089] EXT4-fs (loop3): orphan cleanup on readonly fs [ 391.743578][T15089] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3218: Failed to acquire dquot type 0 [ 391.782684][T15093] SELinux: failed to load policy [ 391.784594][T15089] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 391.804474][T15089] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3218: corrupted inode contents [ 391.827321][T15089] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.3218: mark_inode_dirty error [ 391.844151][T15089] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3218: corrupted inode contents [ 391.845296][T15093] lo speed is unknown, defaulting to 1000 [ 391.858199][T15089] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3218: mark_inode_dirty error [ 391.863417][T15093] lo speed is unknown, defaulting to 1000 [ 391.873675][T15089] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3218: corrupted inode contents [ 391.893183][T15089] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 391.902290][T15089] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3218: corrupted inode contents [ 391.915918][T15089] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.3218: mark_inode_dirty error [ 391.929162][T15089] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 391.940585][T15089] EXT4-fs (loop3): 1 truncate cleaned up [ 391.949677][T15089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.980077][T14092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.019141][T15106] netlink: 'syz.4.3222': attribute type 27 has an invalid length. [ 392.056291][T15110] loop3: detected capacity change from 0 to 512 [ 392.068421][T15110] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.115671][T14092] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 392.116178][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.141919][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.152638][T15112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.183397][T15106] lo speed is unknown, defaulting to 1000 [ 392.192024][T15106] lo speed is unknown, defaulting to 1000 [ 392.196895][T15114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.314855][T15114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.315670][T15120] SELinux: failed to load policy [ 392.352329][T15120] lo speed is unknown, defaulting to 1000 [ 392.362812][T15120] lo speed is unknown, defaulting to 1000 [ 392.373444][T15125] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3228'. [ 392.412274][T15125] siw: device registration error -23 [ 392.463610][T15130] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 392.529609][T15139] loop3: detected capacity change from 0 to 512 [ 392.540415][T15143] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 392.557986][T15139] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.579943][T15143] SELinux: failed to load policy [ 392.594108][T15142] loop2: detected capacity change from 0 to 8192 [ 392.607310][T15146] lo speed is unknown, defaulting to 1000 [ 392.613674][T14092] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 392.636907][T15146] lo speed is unknown, defaulting to 1000 [ 392.663850][T15148] bridge0: port 3(team0) entered blocking state [ 392.670248][T15148] bridge0: port 3(team0) entered disabled state [ 392.678206][T15148] team0: entered allmulticast mode [ 392.690018][T15148] team_slave_0: entered allmulticast mode [ 392.695999][T15148] team_slave_1: entered allmulticast mode [ 392.702823][T15148] team0: entered promiscuous mode [ 392.708163][T15148] team_slave_0: entered promiscuous mode [ 392.714173][T15148] team_slave_1: entered promiscuous mode [ 392.751674][T15143] lo speed is unknown, defaulting to 1000 [ 392.762744][T15143] lo speed is unknown, defaulting to 1000 [ 392.895430][ T3505] hid-generic 0003:0004:0000.001D: unknown main item tag 0x0 [ 392.902969][ T3505] hid-generic 0003:0004:0000.001D: unknown main item tag 0x0 [ 392.910516][ T3505] hid-generic 0003:0004:0000.001D: unknown main item tag 0x0 [ 392.919604][ T3505] hid-generic 0003:0004:0000.001D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 392.955252][T15167] fido_id[15167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 393.156476][T15180] lo speed is unknown, defaulting to 1000 [ 393.162862][T15180] lo speed is unknown, defaulting to 1000 [ 393.286019][T15181] SELinux: syz.0.3246 (15181) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 393.326577][T15183] loop4: detected capacity change from 0 to 512 [ 393.449761][T15183] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.581120][T13852] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 393.626770][T15188] lo speed is unknown, defaulting to 1000 [ 393.633511][T15188] lo speed is unknown, defaulting to 1000 [ 393.972454][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3251'. [ 394.105618][T15199] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 394.121377][T15199] SELinux: failed to load policy [ 394.134264][T15202] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3253'. [ 394.156714][T15202] siw: device registration error -23 [ 394.221805][T15216] SELinux: syz.0.3259 (15216) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 394.229154][T15212] lo speed is unknown, defaulting to 1000 [ 394.247438][T15212] lo speed is unknown, defaulting to 1000 [ 394.256424][T15217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 394.293089][T15219] netlink: 'syz.0.3260': attribute type 27 has an invalid length. [ 394.315546][T15222] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 394.352353][T15222] SELinux: failed to load policy [ 394.371322][T15220] loop4: detected capacity change from 0 to 8192 [ 394.397967][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.416994][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.426912][T15223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.452384][T15222] lo speed is unknown, defaulting to 1000 [ 394.461458][ T3505] lo speed is unknown, defaulting to 1000 [ 394.467275][ T3505] syz2: Port: 1 Link ACTIVE [ 394.478140][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 394.478218][ T29] audit: type=1400 audit(1752369546.011:13028): avc: denied { execmem } for pid=15225 comm="syz.3.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 394.514203][ T29] audit: type=1400 audit(1752369546.121:13029): avc: denied { module_request } for pid=15221 comm="syz.2.3261" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 394.538250][ T29] audit: type=1400 audit(1752369546.141:13030): avc: denied { create } for pid=15231 comm="syz.1.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.560753][T15222] lo speed is unknown, defaulting to 1000 [ 394.581729][ T29] audit: type=1400 audit(1752369546.171:13031): avc: denied { write } for pid=15231 comm="syz.1.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.602462][ T29] audit: type=1400 audit(1752369546.171:13032): avc: denied { read } for pid=15231 comm="syz.1.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.635949][T15234] lo speed is unknown, defaulting to 1000 [ 394.694436][T15234] lo speed is unknown, defaulting to 1000 [ 394.899967][T15241] FAULT_INJECTION: forcing a failure. [ 394.899967][T15241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.913125][T15241] CPU: 1 UID: 0 PID: 15241 Comm: syz.0.3264 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 394.913160][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.913257][T15241] Call Trace: [ 394.913266][T15241] [ 394.913275][T15241] __dump_stack+0x1d/0x30 [ 394.913301][T15241] dump_stack_lvl+0xe8/0x140 [ 394.913325][T15241] dump_stack+0x15/0x1b [ 394.913351][T15241] should_fail_ex+0x265/0x280 [ 394.913395][T15241] should_fail+0xb/0x20 [ 394.913418][T15241] should_fail_usercopy+0x1a/0x20 [ 394.913456][T15241] _copy_to_user+0x20/0xa0 [ 394.913565][T15241] simple_read_from_buffer+0xb5/0x130 [ 394.913618][T15241] proc_fail_nth_read+0x100/0x140 [ 394.913652][T15241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.913757][T15241] vfs_read+0x19d/0x6f0 [ 394.913791][T15241] ? __cond_resched+0x4e/0x90 [ 394.913823][T15241] ksys_read+0xda/0x1a0 [ 394.913880][T15241] __x64_sys_read+0x40/0x50 [ 394.913964][T15241] x64_sys_call+0x2d77/0x2fb0 [ 394.913988][T15241] do_syscall_64+0xd2/0x200 [ 394.914008][T15241] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 394.914090][T15241] ? clear_bhb_loop+0x40/0x90 [ 394.914123][T15241] ? clear_bhb_loop+0x40/0x90 [ 394.914163][T15241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.914182][T15241] RIP: 0033:0x7f0a3ca1d33c [ 394.914200][T15241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 394.914221][T15241] RSP: 002b:00007f0a3b087030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.914242][T15241] RAX: ffffffffffffffda RBX: 00007f0a3cc45fa0 RCX: 00007f0a3ca1d33c [ 394.914311][T15241] RDX: 000000000000000f RSI: 00007f0a3b0870a0 RDI: 0000000000000005 [ 394.914321][T15241] RBP: 00007f0a3b087090 R08: 0000000000000000 R09: 0000000000000000 [ 394.914364][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.914376][T15241] R13: 0000000000000000 R14: 00007f0a3cc45fa0 R15: 00007ffe04dc0fb8 [ 394.914393][T15241] [ 395.062004][ T29] audit: type=1400 audit(1752369546.361:13033): avc: denied { getopt } for pid=15213 comm="syz.4.3258" lport=49579 faddr=fe88::5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.139556][ T29] audit: type=1400 audit(1752369546.361:13034): avc: denied { setopt } for pid=15213 comm="syz.4.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.159342][ T29] audit: type=1400 audit(1752369546.451:13035): avc: denied { sys_module } for pid=15221 comm="syz.2.3261" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 395.248033][ T29] audit: type=1400 audit(1752369546.811:13036): avc: denied { create } for pid=15247 comm="syz.0.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.267750][ T29] audit: type=1400 audit(1752369546.821:13037): avc: denied { setopt } for pid=15247 comm="syz.0.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.343821][T15254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.356598][T15254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.369273][T15256] SELinux: syz.2.3270 (15256) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 395.420850][T15262] netlink: 'syz.4.3268': attribute type 27 has an invalid length. [ 395.436261][T15256] loop2: detected capacity change from 0 to 1024 [ 395.466569][T15256] EXT4-fs (loop2): orphan cleanup on readonly fs [ 395.496148][T15256] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3270: Failed to acquire dquot type 0 [ 395.508038][T15256] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 395.523476][T15256] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.3270: corrupted inode contents [ 395.553560][T15256] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #13: comm syz.2.3270: mark_inode_dirty error [ 395.558480][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.565550][T15256] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.3270: corrupted inode contents [ 395.575026][T15264] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.629501][T15256] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3270: mark_inode_dirty error [ 395.646123][T15267] siw: device registration error -23 [ 395.668016][T15256] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.3270: corrupted inode contents [ 395.681924][T15256] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 395.692161][T15256] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.3270: corrupted inode contents [ 395.721818][T15268] loop3: detected capacity change from 0 to 1024 [ 395.729238][T15268] EXT4-fs: Ignoring removed nobh option [ 395.734854][T15268] EXT4-fs: Ignoring removed bh option [ 395.744232][T15264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.780700][T15267] lo speed is unknown, defaulting to 1000 [ 395.787137][T15267] lo speed is unknown, defaulting to 1000 [ 395.876006][T15268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.026441][T15256] EXT4-fs error (device loop2): ext4_truncate:4597: inode #13: comm syz.2.3270: mark_inode_dirty error [ 396.072276][T15256] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 396.102645][T15256] EXT4-fs (loop2): 1 truncate cleaned up [ 396.129320][T15256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.148333][T15282] FAULT_INJECTION: forcing a failure. [ 396.148333][T15282] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 396.161891][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.4.3276 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 396.161923][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.161938][T15282] Call Trace: [ 396.161945][T15282] [ 396.161955][T15282] __dump_stack+0x1d/0x30 [ 396.161988][T15282] dump_stack_lvl+0xe8/0x140 [ 396.162008][T15282] dump_stack+0x15/0x1b [ 396.162023][T15282] should_fail_ex+0x265/0x280 [ 396.162055][T15282] should_fail_alloc_page+0xf2/0x100 [ 396.162107][T15282] __alloc_frozen_pages_noprof+0xff/0x360 [ 396.162150][T15282] __alloc_pages_noprof+0x9/0x20 [ 396.162185][T15282] ___kmalloc_large_node+0x73/0x140 [ 396.162261][T15282] __kmalloc_large_node_noprof+0x16/0xa0 [ 396.162317][T15282] __kmalloc_noprof+0x2ab/0x3e0 [ 396.162360][T15282] ? iovec_from_user+0x84/0x210 [ 396.162392][T15282] iovec_from_user+0x84/0x210 [ 396.162416][T15282] ? process_vm_rw+0x137/0x950 [ 396.162460][T15282] process_vm_rw+0x15b/0x950 [ 396.162483][T15282] ? _parse_integer+0x27/0x40 [ 396.162591][T15282] ? kstrtoull+0x111/0x140 [ 396.162636][T15282] ? __fget_files+0x184/0x1c0 [ 396.162656][T15282] ? fput+0x8f/0xc0 [ 396.162679][T15282] __x64_sys_process_vm_writev+0x78/0x90 [ 396.162787][T15282] x64_sys_call+0xe80/0x2fb0 [ 396.162888][T15282] do_syscall_64+0xd2/0x200 [ 396.162911][T15282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 396.162982][T15282] ? clear_bhb_loop+0x40/0x90 [ 396.163009][T15282] ? clear_bhb_loop+0x40/0x90 [ 396.163035][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.163055][T15282] RIP: 0033:0x7f6bba89e929 [ 396.163127][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.163151][T15282] RSP: 002b:00007f6bb8f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 396.163169][T15282] RAX: ffffffffffffffda RBX: 00007f6bbaac5fa0 RCX: 00007f6bba89e929 [ 396.163181][T15282] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000000bb [ 396.163193][T15282] RBP: 00007f6bb8f07090 R08: 000000000000023a R09: 0000000000000000 [ 396.163205][T15282] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 396.163271][T15282] R13: 0000000000000000 R14: 00007f6bbaac5fa0 R15: 00007ffc23eebe18 [ 396.163295][T15282] [ 396.416008][T15283] syz_tun: entered allmulticast mode [ 396.422159][T14675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.516054][T14092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.576373][T15299] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 396.595576][T15295] loop4: detected capacity change from 0 to 8192 [ 396.611477][T15299] SELinux: failed to load policy [ 396.673022][T15299] lo speed is unknown, defaulting to 1000 [ 396.679571][T15299] lo speed is unknown, defaulting to 1000 [ 396.783820][T15308] siw: device registration error -23 [ 396.803407][T15308] lo speed is unknown, defaulting to 1000 [ 396.809924][T15308] lo speed is unknown, defaulting to 1000 [ 396.871992][T15308] loop3: detected capacity change from 0 to 1024 [ 396.879129][T15308] EXT4-fs: Ignoring removed nobh option [ 396.884732][T15308] EXT4-fs: Ignoring removed bh option [ 396.944314][T15314] SELinux: syz.0.3282 (15314) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 396.965766][T15308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.038298][T15279] syz_tun: left allmulticast mode [ 397.255326][T15320] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 397.265511][T15320] loop2: detected capacity change from 0 to 128 [ 397.354317][T15325] lo speed is unknown, defaulting to 1000 [ 397.360797][T15325] lo speed is unknown, defaulting to 1000 [ 397.446773][T15322] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.3286'. [ 397.496051][ T36] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 397.503550][ T36] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 397.511014][ T36] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 397.528982][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3286'. [ 397.543144][T15329] netlink: 'syz.0.3286': attribute type 1 has an invalid length. [ 397.643159][ T36] hid-generic 0003:0004:0000.001E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 397.688810][T15331] fido_id[15331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 397.766464][T14092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.784755][T15329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.829972][T15337] loop2: detected capacity change from 0 to 128 [ 397.860555][T15339] loop2: detected capacity change from 0 to 512 [ 397.871021][T15339] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.887630][T15339] serio: Serial port ptm0 [ 397.959938][T15349] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 397.969988][T15349] SELinux: failed to load policy [ 397.979662][T14675] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 398.005012][T15349] lo speed is unknown, defaulting to 1000 [ 398.012364][T15349] lo speed is unknown, defaulting to 1000 [ 398.095841][T15355] SELinux: syz.1.3296 (15355) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 398.177079][T15359] lo speed is unknown, defaulting to 1000 [ 398.183440][T15359] lo speed is unknown, defaulting to 1000 [ 398.447861][T15363] FAULT_INJECTION: forcing a failure. [ 398.447861][T15363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.461044][T15363] CPU: 0 UID: 0 PID: 15363 Comm: syz.1.3298 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 398.461102][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.461123][T15363] Call Trace: [ 398.461131][T15363] [ 398.461139][T15363] __dump_stack+0x1d/0x30 [ 398.461174][T15363] dump_stack_lvl+0xe8/0x140 [ 398.461194][T15363] dump_stack+0x15/0x1b [ 398.461283][T15363] should_fail_ex+0x265/0x280 [ 398.461317][T15363] should_fail+0xb/0x20 [ 398.461412][T15363] should_fail_usercopy+0x1a/0x20 [ 398.461439][T15363] _copy_from_user+0x1c/0xb0 [ 398.461472][T15363] proc_ioctl_default+0x43/0xa0 [ 398.461508][T15363] usbdev_ioctl+0xe97/0x1710 [ 398.461593][T15363] ? __pfx_usbdev_ioctl+0x10/0x10 [ 398.461624][T15363] __se_sys_ioctl+0xcb/0x140 [ 398.461656][T15363] __x64_sys_ioctl+0x43/0x50 [ 398.461703][T15363] x64_sys_call+0x19a8/0x2fb0 [ 398.461732][T15363] do_syscall_64+0xd2/0x200 [ 398.461752][T15363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 398.461777][T15363] ? clear_bhb_loop+0x40/0x90 [ 398.461802][T15363] ? clear_bhb_loop+0x40/0x90 [ 398.461826][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.461900][T15363] RIP: 0033:0x7f70b3d4e929 [ 398.461913][T15363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.461932][T15363] RSP: 002b:00007f70b23b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.461952][T15363] RAX: ffffffffffffffda RBX: 00007f70b3f75fa0 RCX: 00007f70b3d4e929 [ 398.461963][T15363] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005 [ 398.462043][T15363] RBP: 00007f70b23b7090 R08: 0000000000000000 R09: 0000000000000000 [ 398.462053][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.462064][T15363] R13: 0000000000000000 R14: 00007f70b3f75fa0 R15: 00007fff7597fef8 [ 398.462130][T15363] [ 398.694953][T15368] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 398.712382][T15370] SELinux: syz.4.3301 (15370) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 398.731509][T15372] loop2: detected capacity change from 0 to 128 [ 398.753618][T15370] loop4: detected capacity change from 0 to 1024 [ 398.820849][T15370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 398.828528][T15370] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3301: Failed to acquire dquot type 0 [ 398.845138][T15382] netlink: 'syz.3.3306': attribute type 27 has an invalid length. [ 398.849457][T15376] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 398.854102][T15370] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 398.881295][T15370] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3301: corrupted inode contents [ 398.896759][T15370] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.3301: mark_inode_dirty error [ 398.913733][T15370] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3301: corrupted inode contents [ 398.933121][T15383] $Hÿ: renamed from bond0 [ 398.939508][T15383] $Hÿ: entered promiscuous mode [ 398.944626][T15383] bond_slave_0: entered promiscuous mode [ 398.950546][T15383] bond_slave_1: entered promiscuous mode [ 398.967730][T15370] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3301: mark_inode_dirty error [ 398.984454][T15385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.992600][T15370] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3301: corrupted inode contents [ 399.006228][T15385] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.017941][T15370] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 399.030076][T15370] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.3301: corrupted inode contents [ 399.043828][T15370] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.3301: mark_inode_dirty error [ 399.057376][T15385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.076252][T15370] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 399.085625][T15370] EXT4-fs (loop4): 1 truncate cleaned up [ 399.091830][T15370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.159634][T15395] loop3: detected capacity change from 0 to 1024 [ 399.166631][T13852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.212863][T15403] loop2: detected capacity change from 0 to 256 [ 399.212984][T15395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.220043][T15400] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 399.341497][T14092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.538627][T15419] lo speed is unknown, defaulting to 1000 [ 399.545582][T15419] lo speed is unknown, defaulting to 1000 [ 399.609684][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 399.609698][ T29] audit: type=1400 audit(1752369551.221:13356): avc: denied { append } for pid=15409 comm="syz.4.3318" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 399.703861][ T29] audit: type=1400 audit(1752369551.301:13357): avc: denied { tracepoint } for pid=15410 comm="syz.3.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 399.724058][ T29] audit: type=1400 audit(1752369551.301:13358): avc: denied { mounton } for pid=15410 comm="syz.3.3316" path="/68/file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.896252][ T29] audit: type=1400 audit(1752369551.361:13359): avc: denied { write } for pid=15410 comm="syz.3.3316" name="file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.918902][ T29] audit: type=1400 audit(1752369551.361:13360): avc: denied { open } for pid=15410 comm="syz.3.3316" path="/68/file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.928098][T15424] netlink: 'syz.3.3320': attribute type 27 has an invalid length. [ 399.974330][T15418] loop2: detected capacity change from 0 to 8192 [ 399.989425][T15424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.998877][T15424] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.009615][T15424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.032153][ T29] audit: type=1400 audit(1752369551.641:13361): avc: denied { setopt } for pid=15415 comm="syz.2.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.079966][T15427] SELinux: syz.3.3321 (15427) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 400.108626][ T29] audit: type=1400 audit(1752369551.721:13362): avc: denied { read write } for pid=15426 comm="syz.3.3321" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 400.112559][T15427] loop3: detected capacity change from 0 to 1024 [ 400.132900][ T29] audit: type=1400 audit(1752369551.721:13363): avc: denied { open } for pid=15426 comm="syz.3.3321" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 400.132979][ T29] audit: type=1400 audit(1752369551.721:13364): avc: denied { ioctl } for pid=15426 comm="syz.3.3321" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 400.190600][ T29] audit: type=1400 audit(1752369551.761:13365): avc: denied { mounton } for pid=15426 comm="syz.3.3321" path="/70/file0" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 400.214069][T15427] EXT4-fs (loop3): orphan cleanup on readonly fs [ 400.221208][T15427] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3321: Failed to acquire dquot type 0 [ 400.233914][T15427] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 400.274494][T15427] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3321: corrupted inode contents [ 400.288304][T15427] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.3321: mark_inode_dirty error [ 400.301264][T15427] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3321: corrupted inode contents [ 400.313537][T15427] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3321: mark_inode_dirty error [ 400.326217][T15427] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3321: corrupted inode contents [ 400.339619][T15427] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 400.348545][T15427] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.3321: corrupted inode contents [ 400.367958][T15434] loop4: detected capacity change from 0 to 512 [ 400.376671][T15427] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.3321: mark_inode_dirty error [ 400.388723][T15427] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 400.398212][T15427] EXT4-fs (loop3): 1 truncate cleaned up [ 400.404356][T15427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.446461][T15434] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.479529][T15437] siw: device registration error -23 [ 400.498507][T15437] lo speed is unknown, defaulting to 1000 [ 400.505186][T15437] lo speed is unknown, defaulting to 1000 [ 400.610127][T15434] serio: Serial port ptm0 [ 400.620041][T14092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.725076][T13852] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 401.010107][T15445] siw: device registration error -23 [ 401.030931][T15445] lo speed is unknown, defaulting to 1000 [ 401.037307][T15445] lo speed is unknown, defaulting to 1000 [ 401.128174][T15445] loop2: detected capacity change from 0 to 1024 [ 401.135180][T15445] EXT4-fs: Ignoring removed nobh option [ 401.140780][T15445] EXT4-fs: Ignoring removed bh option [ 401.239087][T15445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.396898][T15453] loop4: detected capacity change from 0 to 4096 [ 401.412735][T15453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.448100][T15460] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3332'. [ 401.452904][T15450] EXT4-fs (loop4): shut down requested (2) [ 401.464277][T15450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3328'. [ 401.476618][T15450] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 401.485597][ T10] IPVS: starting estimator thread 0... [ 401.487122][T15450] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 401.492041][T15460] siw: device registration error -23 [ 401.510586][T15450] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 401.525730][T15462] loop3: detected capacity change from 0 to 8192 [ 401.533792][T15453] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 401.545304][T15465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3333'. [ 401.556095][T15465] siw: device registration error -23 [ 401.561602][T15450] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 401.572006][T15450] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 401.597064][T15463] IPVS: using max 1824 ests per chain, 91200 per kthread [ 401.608602][T13852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.685694][T14675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.714089][T15475] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 401.724649][T15475] loop3: detected capacity change from 0 to 128 [ 401.734037][T15477] loop2: detected capacity change from 0 to 512 [ 401.734142][T15478] SELinux: syz.1.3336 (15478) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 401.769604][T15477] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.784746][T15477] serio: Serial port ptm0 [ 401.799521][T15479] loop4: detected capacity change from 0 to 8192 [ 401.866474][T14675] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 401.926331][T15491] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3343'. [ 401.946302][T15491] siw: device registration error -23 [ 402.028485][T15499] loop3: detected capacity change from 0 to 8192 [ 402.118913][T15508] SELinux: syz.1.3351 (15508) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 402.213946][T15513] siw: device registration error -23 [ 402.233519][T15513] lo speed is unknown, defaulting to 1000 [ 402.239874][T15513] lo speed is unknown, defaulting to 1000 [ 402.305434][T15513] loop2: detected capacity change from 0 to 1024 [ 402.312699][T15513] EXT4-fs: Ignoring removed nobh option [ 402.318308][T15513] EXT4-fs: Ignoring removed bh option [ 402.344556][T15512] loop3: detected capacity change from 0 to 512 [ 402.399194][T15515] SELinux: failed to load policy [ 402.442191][T15515] lo speed is unknown, defaulting to 1000 [ 402.448947][T15515] lo speed is unknown, defaulting to 1000 [ 402.617758][T15512] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.634369][T15513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.671074][T15510] serio: Serial port ptm0 [ 402.721552][T15529] loop4: detected capacity change from 0 to 256 [ 402.749526][T14092] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 402.780081][ T3295] ================================================================== [ 402.788216][ T3295] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 402.795367][ T3295] [ 402.797710][ T3295] write to 0xffff888105221264 of 4 bytes by task 3297 on cpu 1: [ 402.805362][ T3295] shmem_symlink+0x387/0x3d0 [ 402.809987][ T3295] vfs_symlink+0xd4/0x1e0 [ 402.814354][ T3295] do_symlinkat+0xc7/0x3c0 [ 402.818799][ T3295] __x64_sys_symlink+0x50/0x60 [ 402.823596][ T3295] x64_sys_call+0x2d8d/0x2fb0 [ 402.828305][ T3295] do_syscall_64+0xd2/0x200 [ 402.832827][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.838801][ T3295] [ 402.841135][ T3295] read to 0xffff888105221264 of 4 bytes by task 3295 on cpu 0: [ 402.848699][ T3295] fill_mg_cmtime+0x5b/0x260 [ 402.853312][ T3295] generic_fillattr+0x24a/0x340 [ 402.858195][ T3295] shmem_getattr+0x181/0x200 [ 402.862808][ T3295] vfs_getattr_nosec+0x146/0x1e0 [ 402.867767][ T3295] vfs_statx+0x113/0x390 [ 402.872038][ T3295] vfs_fstatat+0x115/0x170 [ 402.876482][ T3295] __se_sys_newfstatat+0x55/0x260 [ 402.881531][ T3295] __x64_sys_newfstatat+0x55/0x70 [ 402.886575][ T3295] x64_sys_call+0x2c22/0x2fb0 [ 402.891271][ T3295] do_syscall_64+0xd2/0x200 [ 402.895784][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.901690][ T3295] [ 402.904022][ T3295] value changed: 0x1768c975 -> 0x17a5e93a [ 402.909744][ T3295] [ 402.912076][ T3295] Reported by Kernel Concurrency Sanitizer on: [ 402.918238][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 402.930241][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.940325][ T3295] ================================================================== [ 402.963610][T15532] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3356'. [ 402.973610][T15532] siw: device registration error -23 [ 403.058086][T14675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.