last executing test programs: 3.34665447s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="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", @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfefffffe) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746eee54e76906aaf123eb0bcda9427430616d653d6c6f7765722c757466383d212c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697864642c757466383d312c004845160000000000"], 0x3, 0x2b0, &(0x7f0000000440)="$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") r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r4 = dup(r3) ioctl$GIO_UNISCRNMAP(r4, 0x43403d0e, &(0x7f0000000080)=""/96) read(r2, 0x0, 0x0) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x24) 3.250183821s ago: executing program 3 (id=357): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000700)={[{@bsdgroups}, {@prjquota}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x303}, &(0x7f0000000300)=0x0, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='mem_connect\x00', r1, 0x0, 0x7}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x0, 0x3ec0) connect$unix(r4, &(0x7f0000000940)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0x7020}, {0xffffffffffffffff, 0x8001}], 0x2, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x41) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c000140000000000000010108000440000000013c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000ed"], 0xf4}}, 0x0) ioctl$EVIOCGREP(r8, 0x80084503, &(0x7f0000000100)=""/104) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000880)) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) 3.154175162s ago: executing program 1 (id=358): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.983539795s ago: executing program 1 (id=362): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x6}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8600}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000000c0)={[0x5]}, 0x8) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@nobarrier}, {@acl}, {@auto_da_alloc}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@jqfmt_vfsold}, {@abort}]}, 0xee, 0x281, &(0x7f0000000a00)="$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") r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f00000000c0)=""/3, &(0x7f0000000100)=0xffffffffffffff5c) mknod$loop(0x0, 0x1, 0x1) getuid() perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xaa, 0x2, 0x8, 0x20, @loopback, @remote, 0x0, 0x87, 0xe, 0xb5}}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$eJzs3EtPE10YwPGnV9oSaBdv3jevieFEN7qZQHWtNAYSYxMJUuMlMRlgqk3HlnQaTI3xsnJr/BAuCEt2JMoXYONON27csTFxIQtjTedCoQwgbWkR/r+EzMOc88ycc1qa5zS0G3fePC7mLS2vVyUYUxIQEdkUSUlQPAH3GLTjqGz3Ui4Ofv909tbdezcy2ezEtFKTmZlLaaXU8Mj7J8/ibrfVAVlPPdj4lv66/u/6/xu/Zh4VLFWwVKlcVbqaLX+p6rOmoeYLVlFTaso0dMtQhZJlVJz2stOeN8sLCzWll+aHEgsVw7KUXqqpolFT1bKqVmoq9FAvlJSmaWooIThIbml6Ws+0mTzX5cHgiFQqGT0kIvFdLbmlvgwIAAD0VWv9HxTVzfp/+dxadfD2yrBb/69G/er/y5+da+2o/2Mi4lv/e/f3rf/1w9X/uyui06Wj+h/Hw0h016lAM2w0VjJ6wv37tb26vzxqB9T/AAAAAAAAAAAAAAAAAAAAAAD8DTbr9WS9Xk96R+9nQERiIuL97pMaEpGrfRgyuqiDxx8nQPODe+FhEfP1Ym4x5xzdDmsiYooho5KUn/bzwdWIvU8eqYaUfDBfOPkD7suDSCYvBTt/TJIRaeaH3HjyenZiTDma+Y1jRBLb89OSlH9a7+/kp33zo3Lh/LZ8TZLycU7KYsq8fe9m/vMxpa7dzLbkx+1+AAAAAACcBJraktq5/3X275q2V7uTv7W/bn1/INTcX4/67s/Dcibc37kDAAAAAHBaWLWnRd00jco+QVwO7tN+ED6iK3sz/NMs738Zjm6m+wTezXc0xdyTnVw54rcsgUMsyx5BUNrJGmnMRnW6Yt7bRnv1kanx3j+CdvDf23c/ureYV1ZiB8y0/SC0/xMg0rMXIAAAAAA90yz6vTPj/R0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnUC++Ha3fcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOi98BAAD//xPfAEw=") bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) 2.963236265s ago: executing program 4 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x44}}, 0x0) 2.836172567s ago: executing program 4 (id=366): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) readlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/90, 0x5a) 2.502491562s ago: executing program 0 (id=367): open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5) r2 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x162861913622d20}, 0x48085) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) request_key(&(0x7f0000000980)='asymmetric\x00', &(0x7f0000001180)={'syz', 0x0}, &(0x7f00000011c0)=')[\xce(*\x00', 0xfffffffffffffffc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000010000000000000020fb03d1bc328cdd4f3e2867a804f81dffffffffffffffffe069cea504160136aee7fee97b7663dc764604a1da3c81a82a24bfc7099c98e715b13a3a9f9fe457ee4eb160b402ddbab6fb0b957b585080e498a2a1b55b52542b3410f189decf7a29c344971d2d381ee6ea06d3e066f3db8c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b00010014616373656300002a00028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x8000) 2.501254712s ago: executing program 4 (id=368): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = creat(&(0x7f0000000100)='\x00', 0x1) mkdirat(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x120) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2d, 'io'}, {0x2d, 'hugetlb'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'io'}, {0x2d, 'rlimit'}, {0xa74a72a15bf275ec, 'cpuset'}, {0x6, 'net'}, {0x2d, 'hugetlb'}]}, 0x4a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x9, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xfffffeff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x800, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) bind$l2tp6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xffff}}}}}}, 0x0) 2.364900424s ago: executing program 3 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, 0x0, 0x80) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) unshare(0x62040200) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mprotect(&(0x7f0000af5000/0x2000)=nil, 0x2000, 0x1) request_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.230610697s ago: executing program 2 (id=370): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) 2.078724779s ago: executing program 0 (id=371): rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1.809829423s ago: executing program 4 (id=372): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) truncate(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x2000, 0x4000) 1.768795233s ago: executing program 2 (id=373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.502476327s ago: executing program 1 (id=374): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.465674388s ago: executing program 3 (id=375): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000000000"], 0x50) 1.32798747s ago: executing program 3 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x44}}, 0x0) 1.32472493s ago: executing program 0 (id=377): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_lt={'uid<', r0}}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="83194673ff30eca0ce19eeacdd97f3f8", 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/209, 0x128) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$tipc(r4, &(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e32546", 0x5d, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) syz_clone3(0x0, 0x0) 1.208091422s ago: executing program 3 (id=378): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400020005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000002000000, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x58, 0xffffffffffffffff}, './file0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'kmem_cache_free\x00'}, {0x20, '@'}, {0x20, '-,'}, {0x20, 'blkio.\x04\x00\x00\x00io_wait_time_recursive\x00'}, {0x20, '7'}, {0x20, '@%'}, {}, {0x20, '\x05\x00\x00\x00\xe4\x17O_\x11\xbd\x1cP\x03~f\x88\n\xd0T\xd5\xbcu\x9f;\x04?\x14h\x06\xea\x06i\xc1\xba\xd1\xb0\xc7\xb3#\xcc\t\xa1V\xaa\x1cNO\xe0W46s\x1bZ,\x99\x06\xd3\xe8~\xaf{\xd3\x979\xa5\x8e\x1c\x95\x96\x84\x1b)xM)\xbf\xf8\xc0\xbb\x99\xb4\x06\x81\x7f\xef\xbc\xc1\x97\x02\xb6\xe3}\xb5\xcaPbj\xfc\xba;\t\x13\xdbq\x8f(`\xb06\xf1K\x13zA\xaf\x81!\xf1dWY\xda;\xdfI\xd4\xb1\x99%{\x146D\x9a;\x8d\x7f\x00\"d[\xda\xc8\x8cP\xdd\xe6z\x03\xf5\x84\x1b\xf27i\xf8%\xe7\x8e\x0evh(\xe0}\x9e9\xc2/\xf8\xb9\x98\xd8\x8d4}\x93;c\xf2C\x1b\xa7ex\xca\xed#\xba\xb1\x8e\x180\v\x99y3:\x93\xa9\xb9|i\xae j\x8b\x8e\x91\xa3\x1e\x04'}, {0x20, '+.\''}]}, 0x123) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300004796ad85afc7366d1ffe5de3f58ea6bb7b45a7b858b900e7bfcf16095afe74360a5cb458ff807328f4db7a297d3ec6f8affbbf2c8852d8af9b813c3e9d20a5b6701fa0d14b1818dd5d0be0e48e2f2701dc8dec61c24c617325338a86db95e21d08d9bb5cb57737ae1dec6c2e800fe687001d30e1ed0502399f2b6a52a900444f58903770cbc542fab03170a26146fe7516aef09fc7ed3c9a3fdddaa2643704fdba57973dfcc0a5ab6d4ff4041a9ea5356a90485a077655f44010e20c421b24342df75af84e77490b35fda3399a", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000097"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 1.060021894s ago: executing program 1 (id=379): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = creat(&(0x7f0000000100)='\x00', 0x1) mkdirat(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x120) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2d, 'io'}, {0x2d, 'hugetlb'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x2d, 'io'}, {0x2d, 'rlimit'}, {0xa74a72a15bf275ec, 'cpuset'}, {0x6, 'net'}, {0x2d, 'hugetlb'}]}, 0x4a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x9, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xfffffeff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x800, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) bind$l2tp6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xffff}}}}}}, 0x0) 882.700717ms ago: executing program 4 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x0, 0x0, 0x0, 0xffffffff}, {0x3, 0x4, 0x20, 0x1000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 859.135327ms ago: executing program 2 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2004400d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) 830.065367ms ago: executing program 0 (id=382): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_lt={'uid<', r0}}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="83194673ff30eca0ce19eeacdd97f3f8", 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/209, 0x128) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$tipc(r5, &(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e32546", 0x5d, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) tkill(r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) syz_clone3(0x0, 0x0) 529.451712ms ago: executing program 0 (id=383): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) (fail_nth: 12) 278.621566ms ago: executing program 3 (id=384): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x6}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8600}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000000c0)={[0x5]}, 0x8) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@nobarrier}, {@acl}, {@auto_da_alloc}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@jqfmt_vfsold}, {@abort}]}, 0xee, 0x281, &(0x7f0000000a00)="$eJzs3T1oJGUcB+D/7IdJTJCojSB+gIhoIMRCEGy0UQhICCKCChERK0mEmGCXtdLCQmuVVDZB7IxXHteEaw6uzd2lyDVXXLjiwhV3xR67sxv2Npuv3dndkHke2MzMzrwfS/b37rvFvBtAbk1GxPsRUYyIqYgoR0TSesGr6WOycbg+trUQUa1+ci+pX5cep5rlxiOiEhHvRpSa51Y3v9h9sP3RG7+ulF//e/PzsUG9vojRg7293Z2P9/+a+/m/2bdXC43nJhrb1teRpaTDc6Uk4rl+NHZOJKVjTw/wf89x5n/890Yt989HxGv1/Jej0Ijsb8tPXSnHW38eVfb3u9dfHGRfgexVq+XaZ2ClCuROoT4HTgrTEZHuFwrT0+kc/mYxie+Wln+Y+nZpZfGbjsNHceADFtCLpNL4EvbhpZH/x9vyf6eY5v9U3ulzT4G+mIjY+XR+41Ztf9+nOOTDS+mmlv+pr9beDPmH3JF/yC/5h/ySf7gAusxuW/5/yrhXwDnWmv+RYXcGGCjzf7jAys2dSsfT8g8Xwy9dTODlH/KrLf/uyYQcac0/AJAv1ZFh34EMDMuwxx8AAAAAAAAAAAAAAAAAAOCw9bGtheZjUG1e/SNi74OIKD3ZfrqcYbH+e8QRo/W/T99PapcdSNJiPfnylR4r6NE/Gd99PXfGdSCfuZ1t+2d17eX+1Nv2YxZHrm23thhRqV08Uyodfv8njfffiY6s/9kTCpa/Pl0DWUnajt/7LLu617oo82gju/a7Mbsdcbk2/sx0Gv8K8UJ923n8mWhdYrlL3z/ssQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5nEAAAD//42Qavk=") r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f00000000c0)=""/3, &(0x7f0000000100)=0xffffffffffffff5c) mknod$loop(0x0, 0x1, 0x1) getuid() perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xaa, 0x2, 0x8, 0x20, @loopback, @remote, 0x0, 0x87, 0xe, 0xb5}}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) 192.829157ms ago: executing program 0 (id=385): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f0000000280)={[{@errors_remount}, {@commit={'commit', 0x3d, 0x5}}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@orlov}, {@dioread_nolock}]}, 0x1, 0x7a1, &(0x7f0000001f00)="$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") chdir(&(0x7f0000000480)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x80003) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r9, &(0x7f00000015c0)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x9e, @empty, 0xfff}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)="ca3aac2d7503677990281b89dbe868f4efad385490f7bb8f6ea15019f5b34777d854474cbd6dbc754ed693d416fc5ec47a90402c763383916d208328ba42431d1aed01a2910299bfd2053f705ba6f0413b6550362e1f18eff0ed182b36116ca6b125c45d8502c63b29592a2a2c3304976764d814c86dc8c0b36511d6f209d887fe330818fde367ca", 0x88}, {&(0x7f0000000580)="396d00671d299f81de45", 0xa}], 0x2, &(0x7f00000008c0)=[@rthdrdstopts={{0xa8, 0x29, 0x37, {0x0, 0x11, '\x00', [@generic={0x8, 0x70, "82029bc8886238582b358aa56f5afbb8caf7e32188deffc7229baacd6ad7812e8debaa7d2a780e15f9b9382942cc8cd7780a54fc0be4a05f2c63b902d404255295d59775c226fe921d265da5591d5dd58fa2ebc1f6a426065e033f29bfac61019571697f94d0e33db612a67e22fe1e00"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}], 0xa8}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x37a6dd06, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000009c0)="cc473d43490f378ea936b9495351ed5255b2020a076c380e9b849b1be2fc23ddd261f588b03af4c3fb6484aa1336a63bb65362122c5a2a6a5f8266dc071bf01099ad63a1d5a65eab09bd0620ec3243ec022f31d4dd8725a2069c2f10cfd3bd80bbdad0faab2a0990b6ea607867aa84d7396a5b2e0d07f590f9915ef23cbd21035b059bbe89216c856e289901aad3305dec64015ee3a3dc1c0e89525a33f4e80b164f45820aa0d44f8871", 0xaa}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="140000000000000029000000340000000f000000000000001400000000000000290000000b0000000000000000000000200100000000000029000000370000001d200000000000000401ff04010308ad6c84227c63377e9341a44a2dac53d09b86a5aa64ddd54f1a353e3d0367bb3af2391846e6461f701d33e1e30adc5cd8fef846165b2c40add00508eab6365238f378b5d740adb91b1cf72cb20b74f4024848b1101e4976b305edead071192fe37034b815a2cec515dd076d57c674d203bea7cf234ac4903fe62d82799e346bd93c4aea7c536fc3b10d8658ec1721a54090073ec01269928f85fa4b2ca19c6b45f507208f977f9a75c45196923f7a07480000000210a8000100000000000000000000000000000000070000000000000007000000000000000d0000000000000007000000000000000600000000000000010000000000000004010100000000000014000000000000002900000008000000f8ffffff000000001400000000000000290000003e00000000000000000000780000000000000029000000360000005e0b000900000000000000ff0502000004018105028000000100c910fc0100000000000000000000000000010738000000000c4f7029800000000000000008000000000000004000000000000000ffffffffffffffff0000008000000000090000000000000000001400000000000000290000003e000000020000000000000000"], 0x210}}, {{&(0x7f0000000d00)={0xa, 0x4e20, 0x7, @mcast2, 0x7ff}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000d40)="cfbdca442a55dd35c746141d2916e178516e5d862371cc88d5c2140ff5933dcd40c2196310915f594f3040c42b2221bd354665f17b83fc66956067a979b234c63ebb51c92764c2ed6ae40c2a1b9af6fee51392f8bf27056e", 0x58}, {&(0x7f0000001680)="91ef672894b3609514f4d1197b8d5e30777e277123fb1a79d6721c34dd8d0174e84f82b73a74153fc7c1b842e7ca9c35dba5ce4b92e6ce2f94f77174152b72ecc28fd5aecaa76b024bac165beb649e8ab7327377fa391565314040c4533576eefd45caa0aced5562f32269bf2a036b6425951be095b85a463fa1471a28857767627869b11659c2ef74fec4b8870a8b76d57487d7cd33e50d518c816b0f7428e8fde6d5a17a1053b2643efbf5bc429222212615aaaee6e8174db8fb9b6a4eed668fdbf738", 0xc4}, {&(0x7f0000000ec0)="b8fe3f638f0e2702db0db58cc5cd", 0xe}, {&(0x7f0000000f00)="5cde1190c29cd44e527889763c416b33e94b53db4bf4159679d19b618f54028c549858367f2a37c06ea3b4fa3fe5bb8f24f9c07a39c539da2a740c7b6bbb9858646d1b6ce1e83a21ceee37b63e3adab68ba074229ebdd149d2f77c09de1a37d5e9da915d54f8bc957252f3ca89c34e8a30843cf1096202ceff5b33fff145215d8b2e0087a07f17", 0x87}, {&(0x7f0000000fc0)="a15982b112b935b786baf3c336123364f94dd5b9dfb24abbec28033ecb664eb23f3369e005f07301f92b950607a6206d3b656f8c67d9d61fb73c010f8c8ba1080041ec26abc9f34f701ef25b1b23ce8dff745896879610343d679798cc35c3292dcd198fb58c2f26bb57068487bc4b1d9d22072a5cdde46e060dbfff3d3c6c6f68b1dca6a90aaaf68fd9a0b25e5be9d3e3d0464dd9674c6309ebdedea889ed3d81ed8be824bf5699c3ae14b4f27ed58ccccadbb7362aecab1d3146c29bfcee3a6aa0b939fb5a71c87eaccc3b386a62921a5ad7fc70201b7c1bf81e055231b17b712e3da459f226b201f6204162a1", 0xee}, {&(0x7f00000010c0)="8ec188a8621d294463f678b33a90904a9b2886f882f29f23d1a01c0c7646b66cc9cba6ad2d320c2aa3efd05038861cb47c05102df5f1117ca46aeb09689c2a580e7ffbc62da734426a9faa317993e2fc11133933d2db22cbce97ec742a15583b73b9e760c02e248fb1e346909211", 0x6e}, {&(0x7f0000001140)="140584ddf90357a626c29c379ae8bf48aeaf4810d36fc803722e0aff24ae96b47cca1ad0dca9268e17ce7466246a563e5356b6fdbc0e358ace5df4f17d0bfaf87bf533c17e9a1c0587492d96ef7d187826fb60649a54bed10ece4692c3e1f00b3cea7035694f3b2c59499da9b27bff3775a4c0573982584049a0898ae3eb08569b422f596c6e5867ec349ccc034cdd00823f31ae8b7fe980205702d1455696ad737c18cd5cdea37e293052ddaf9d0cb656c0de5cf00e0b04badb3ddb647e6cab03a65c38cda72fc960c1", 0xca}, {&(0x7f0000001240)="032593973ce617cf836ed09c26807bba8ff5e2d1ce86f7b2e3254ccda17930d5c7e2ee563597bf01dca96c4daf02b4", 0x2f}, {&(0x7f0000001280)="be25cba19678b5df83741a58c4f70b1aa983f4b7cf98e62b5ae5f228eae9d91c2828b39fbb11cc9a5d0979d52a6c5f130640e3a3f1f093e5279ea35a166f25ac4365fe1fa94c2c2d27e5ea80c37f7d7f538f028b44f6bb01b49d537ff0c01c4a3208db88908b56acc456958a92b06104f83698c754a3705cfa2c96850a191a2cdbdd1fae6a4ec85bf9f2a8fb735ec7bb4fa375aa7cbd7659374695bd8909843a68e8a6ff88474e2dfd3513d6d75d11217264", 0xb2}], 0x9, &(0x7f0000001400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb6}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x30, {0x3, 0xa, 0x5, 0x4, [0x7, 0xbb, 0x5, 0x2c92, 0x1]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x2, 0x85, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x1e}]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x73, 0x19, '\x00', [@ra={0x5, 0x2, 0xa}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x5, [0x0, 0x3, 0x100000000]}}, @jumbo, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7c, 0x1ff, [0x6, 0xc1, 0x6, 0x6, 0x5, 0x4, 0x3]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0xc0, [0x7, 0x0, 0x7, 0xffffffffffffffff, 0x4]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r10}}}], 0x1b8}}], 0x3, 0x20000040) 174.289717ms ago: executing program 2 (id=386): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000000000"], 0x50) 130.537888ms ago: executing program 2 (id=387): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e23, 0xfffffffd, @empty}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4}, r3}}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e23, 0xfffffffd, @empty}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4}, r3}}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) (async) 104.340389ms ago: executing program 1 (id=388): syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000004400260004000000"}, {0x18, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x29}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sys_enter\x00', r7, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.989949ms ago: executing program 2 (id=389): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=390): recvmsg(0xffffffffffffffff, 0x0, 0x1c0) bpf$MAP_CREATE(0x0, 0x0, 0xcb3cd937a85ed670) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000002fba4357f1af454404000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0xd0, 0x3b8, 0x3b8, 0x270, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x1ff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa2"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 28.542987][ T3295] cgroup: Unknown subsys name 'net' [ 28.548452][ T29] audit: type=1400 audit(1752337683.456:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.571182][ T29] audit: type=1400 audit(1752337683.456:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.593450][ T29] audit: type=1400 audit(1752337683.456:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.712302][ T3295] cgroup: Unknown subsys name 'cpuset' [ 28.718432][ T3295] cgroup: Unknown subsys name 'rlimit' [ 28.859334][ T29] audit: type=1400 audit(1752337683.766:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.884235][ T29] audit: type=1400 audit(1752337683.766:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.904778][ T29] audit: type=1400 audit(1752337683.766:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.925212][ T29] audit: type=1400 audit(1752337683.766:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.932910][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.945511][ T29] audit: type=1400 audit(1752337683.776:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.978938][ T29] audit: type=1400 audit(1752337683.776:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.002176][ T29] audit: type=1400 audit(1752337683.866:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.031628][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.014932][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 31.044482][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 31.085347][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 31.110455][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 31.152042][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.159118][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.166317][ T3304] bridge_slave_0: entered allmulticast mode [ 31.172794][ T3304] bridge_slave_0: entered promiscuous mode [ 31.190100][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.197299][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.204445][ T3304] bridge_slave_1: entered allmulticast mode [ 31.210852][ T3304] bridge_slave_1: entered promiscuous mode [ 31.237549][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.244658][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.251902][ T3305] bridge_slave_0: entered allmulticast mode [ 31.258386][ T3305] bridge_slave_0: entered promiscuous mode [ 31.276320][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.287469][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.294582][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.301708][ T3307] bridge_slave_0: entered allmulticast mode [ 31.308292][ T3307] bridge_slave_0: entered promiscuous mode [ 31.314693][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.321755][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.328937][ T3305] bridge_slave_1: entered allmulticast mode [ 31.335423][ T3305] bridge_slave_1: entered promiscuous mode [ 31.342600][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.356467][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.363591][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.370679][ T3307] bridge_slave_1: entered allmulticast mode [ 31.377240][ T3307] bridge_slave_1: entered promiscuous mode [ 31.394011][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.439218][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.449618][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.461352][ T3304] team0: Port device team_slave_0 added [ 31.467936][ T3304] team0: Port device team_slave_1 added [ 31.473723][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.480834][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.487949][ T3310] bridge_slave_0: entered allmulticast mode [ 31.494308][ T3310] bridge_slave_0: entered promiscuous mode [ 31.501711][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.511992][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.533466][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.540570][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.547733][ T3310] bridge_slave_1: entered allmulticast mode [ 31.554089][ T3310] bridge_slave_1: entered promiscuous mode [ 31.580458][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.587434][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.613509][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.629451][ T3307] team0: Port device team_slave_0 added [ 31.635838][ T3305] team0: Port device team_slave_0 added [ 31.642014][ T3307] team0: Port device team_slave_1 added [ 31.657380][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.664417][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.690444][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.716499][ T3305] team0: Port device team_slave_1 added [ 31.727190][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.734354][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.741560][ T3313] bridge_slave_0: entered allmulticast mode [ 31.747862][ T3313] bridge_slave_0: entered promiscuous mode [ 31.756503][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.763761][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.770874][ T3313] bridge_slave_1: entered allmulticast mode [ 31.777338][ T3313] bridge_slave_1: entered promiscuous mode [ 31.784703][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.794104][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.801062][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.827084][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.849911][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.863799][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.870751][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.896687][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.910130][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.917125][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.943213][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.969347][ T3310] team0: Port device team_slave_0 added [ 31.975592][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.982574][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.008619][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.024904][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.035793][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.045507][ T3310] team0: Port device team_slave_1 added [ 32.061182][ T3304] hsr_slave_0: entered promiscuous mode [ 32.067258][ T3304] hsr_slave_1: entered promiscuous mode [ 32.103390][ T3307] hsr_slave_0: entered promiscuous mode [ 32.109411][ T3307] hsr_slave_1: entered promiscuous mode [ 32.115275][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.122880][ T3307] Cannot create hsr debugfs directory [ 32.128781][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.135786][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.161775][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.174321][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.181361][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.207316][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.225789][ T3313] team0: Port device team_slave_0 added [ 32.232601][ T3313] team0: Port device team_slave_1 added [ 32.271221][ T3305] hsr_slave_0: entered promiscuous mode [ 32.277298][ T3305] hsr_slave_1: entered promiscuous mode [ 32.283153][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.290709][ T3305] Cannot create hsr debugfs directory [ 32.310039][ T3310] hsr_slave_0: entered promiscuous mode [ 32.316116][ T3310] hsr_slave_1: entered promiscuous mode [ 32.322199][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.329762][ T3310] Cannot create hsr debugfs directory [ 32.339894][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.346978][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.373088][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.398199][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.405261][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.431246][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.515107][ T3313] hsr_slave_0: entered promiscuous mode [ 32.521186][ T3313] hsr_slave_1: entered promiscuous mode [ 32.527056][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.534672][ T3313] Cannot create hsr debugfs directory [ 32.635570][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.644628][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.655255][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.666235][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.691078][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.700537][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.709603][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.718052][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.762551][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.773376][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.791515][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.798815][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.807613][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.824113][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.848622][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.857943][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.866803][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.876184][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.884313][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.896472][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.903615][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.913622][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.929672][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.936803][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.946432][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.953578][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.977592][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.987991][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.005571][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.012702][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.039071][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.062533][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.072567][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.081081][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.096672][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.123721][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.146644][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.166475][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.185650][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.198634][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.213091][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.222668][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.229840][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.253896][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.261015][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.273590][ T2308] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.280714][ T2308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.299725][ T3304] veth0_vlan: entered promiscuous mode [ 33.308467][ T2308] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.315551][ T2308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.339805][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.347288][ T3304] veth1_vlan: entered promiscuous mode [ 33.370311][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.386649][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.393750][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.422105][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.429188][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.473453][ T3304] veth0_macvtap: entered promiscuous mode [ 33.501384][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.522696][ T3304] veth1_macvtap: entered promiscuous mode [ 33.544583][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.555633][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.583876][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.600416][ T3307] veth0_vlan: entered promiscuous mode [ 33.613504][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.623590][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.632450][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.641173][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.649924][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.668203][ T3307] veth1_vlan: entered promiscuous mode [ 33.697431][ T3310] veth0_vlan: entered promiscuous mode [ 33.711233][ T3310] veth1_vlan: entered promiscuous mode [ 33.723021][ T3305] veth0_vlan: entered promiscuous mode [ 33.731102][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.731114][ T29] audit: type=1400 audit(1752337688.636:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.6O3ArL/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.756505][ T3307] veth0_macvtap: entered promiscuous mode [ 33.761380][ T29] audit: type=1400 audit(1752337688.636:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.770487][ T3307] veth1_macvtap: entered promiscuous mode [ 33.788970][ T29] audit: type=1400 audit(1752337688.636:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.6O3ArL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.804172][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.819771][ T29] audit: type=1400 audit(1752337688.636:84): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.820548][ T29] audit: type=1400 audit(1752337688.646:85): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.6O3ArL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.831934][ T3310] veth0_macvtap: entered promiscuous mode [ 33.848832][ T29] audit: type=1400 audit(1752337688.646:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.6O3ArL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.891425][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.908467][ T29] audit: type=1400 audit(1752337688.656:87): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.926455][ T3305] veth1_vlan: entered promiscuous mode [ 33.944363][ T29] audit: type=1400 audit(1752337688.856:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.957706][ T3310] veth1_macvtap: entered promiscuous mode [ 33.967121][ T29] audit: type=1400 audit(1752337688.856:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.980125][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.010349][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.019234][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.028175][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.036947][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.047155][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.054952][ T3305] veth0_macvtap: entered promiscuous mode [ 34.076838][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.094684][ T3305] veth1_macvtap: entered promiscuous mode [ 34.111254][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.120115][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.128913][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.137687][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.147163][ T29] audit: type=1400 audit(1752337689.026:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.192102][ T3313] veth0_vlan: entered promiscuous mode [ 34.205209][ T3313] veth1_vlan: entered promiscuous mode [ 34.226974][ T3313] veth0_macvtap: entered promiscuous mode [ 34.243528][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.257649][ T3313] veth1_macvtap: entered promiscuous mode [ 34.285566][ T3479] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6'. [ 34.294486][ T3479] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 34.322306][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.336410][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.353408][ T3479] vlan2: entered allmulticast mode [ 34.364771][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.372948][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.381710][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.390610][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.399484][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.417372][ T3484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7'. [ 34.426138][ T3484] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7'. [ 34.435506][ T3481] loop1: detected capacity change from 0 to 8192 [ 34.449604][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.458563][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.467283][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.476031][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.495916][ T3485] syz.4.7 uses obsolete (PF_INET,SOCK_PACKET) [ 34.620457][ T3491] loop4: detected capacity change from 0 to 2048 [ 34.633260][ T3494] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.659728][ T3491] ext4: Unknown parameter 'func' [ 34.686983][ T3491] loop4: detected capacity change from 0 to 128 [ 34.750274][ T3479] syz.0.6 (3479) used greatest stack depth: 10952 bytes left [ 34.795933][ T3496] loop3: detected capacity change from 0 to 2048 [ 34.814880][ T3496] EXT4-fs: Ignoring removed orlov option [ 34.838733][ T3501] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8'. [ 34.879534][ T3503] loop2: detected capacity change from 0 to 512 [ 34.886379][ T3503] EXT4-fs: Ignoring removed oldalloc option [ 34.940663][ T3503] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3: Parent and EA inode have the same ino 15 [ 34.956713][ T3503] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.969860][ T3503] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3: Parent and EA inode have the same ino 15 [ 34.986084][ T3503] EXT4-fs (loop2): 1 orphan inode deleted [ 34.992683][ T3503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.144207][ T3496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.520479][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.553919][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.835689][ T3528] hub 9-0:1.0: USB hub found [ 35.840431][ T3528] hub 9-0:1.0: 8 ports detected [ 35.970903][ T3529] random: crng reseeded on system resumption [ 36.300732][ T3535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17'. [ 36.301710][ T3534] loop2: detected capacity change from 0 to 1024 [ 36.343762][ T3534] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.354886][ T3534] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.374477][ T3534] JBD2: no valid journal superblock found [ 36.380237][ T3534] EXT4-fs (loop2): Could not load journal inode [ 36.625195][ T3542] loop3: detected capacity change from 0 to 8192 [ 36.959353][ T3557] netlink: 'syz.1.23': attribute type 39 has an invalid length. [ 36.996930][ T3554] loop3: detected capacity change from 0 to 8192 [ 37.046690][ T3558] loop1: detected capacity change from 0 to 512 [ 37.065098][ T3558] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.23: Failed to acquire dquot type 1 [ 37.087678][ T3558] EXT4-fs (loop1): 1 truncate cleaned up [ 37.093831][ T3558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.123342][ T3558] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.226668][ T3571] loop7: detected capacity change from 0 to 16384 [ 37.301161][ T3574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.365295][ T3563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 37.382338][ T3578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29'. [ 37.440549][ T3583] loop2: detected capacity change from 0 to 2048 [ 37.449770][ T3583] EXT4-fs: Ignoring removed orlov option [ 37.460203][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.486067][ T3591] loop4: detected capacity change from 0 to 128 [ 37.492831][ T3591] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.504711][ T3590] loop3: detected capacity change from 0 to 8192 [ 37.509151][ T3591] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.729944][ T3600] SELinux: policydb version 0 does not match my version range 15-34 [ 37.738238][ T3600] SELinux: failed to load policy [ 38.265936][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.305687][ T3605] loop2: detected capacity change from 0 to 2048 [ 38.314600][ T3605] ext4: Unknown parameter 'func' [ 38.330275][ T3605] loop2: detected capacity change from 0 to 128 [ 38.352338][ T3602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.367310][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.367481][ T3602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.413154][ T3614] 9pnet: Could not find request transport: U [ 38.430959][ T3602] loop9: detected capacity change from 0 to 7 [ 38.441050][ T3625] netlink: 10 bytes leftover after parsing attributes in process `syz.2.36'. [ 38.453226][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.477122][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.485243][ T3298] loop9: unable to read partition table [ 38.493893][ T3602] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.501863][ T3602] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.509763][ T3602] loop9: unable to read partition table [ 38.516923][ T3602] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 38.516923][ T3602] ) failed (rc=-5) [ 38.530819][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.538882][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.547341][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.555488][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.565775][ T3636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40'. [ 38.578970][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.610407][ T3640] loop3: detected capacity change from 0 to 256 [ 38.630182][ T3645] loop1: detected capacity change from 0 to 164 [ 38.636860][ T3645] iso9660: Unknown parameter 'ethtool' [ 38.822359][ T3649] loop4: detected capacity change from 0 to 512 [ 38.839258][ T3649] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.853101][ T3649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.866267][ T3649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.922410][ T3649] EXT4-fs (loop4): 1 truncate cleaned up [ 38.938592][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.994770][ T3649] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.004383][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 39.004398][ T29] audit: type=1400 audit(1752337693.916:361): avc: denied { relabelto } for pid=3648 comm="syz.4.44" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 39.040146][ T3649] ipip0: entered promiscuous mode [ 39.083627][ T29] audit: type=1400 audit(1752337693.996:362): avc: denied { write } for pid=3648 comm="syz.4.44" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.118194][ T29] audit: type=1400 audit(1752337693.996:363): avc: denied { setattr } for pid=3648 comm="syz.4.44" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.209713][ T29] audit: type=1400 audit(1752337694.116:364): avc: denied { add_name } for pid=3648 comm="syz.4.44" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 39.236544][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.246946][ T3658] loop0: detected capacity change from 0 to 128 [ 39.253676][ T3658] journal_path: Lookup failure for './bus' [ 39.259607][ T3658] EXT4-fs: error: could not find journal device path [ 39.271889][ T29] audit: type=1326 audit(1752337694.176:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 39.295262][ T29] audit: type=1326 audit(1752337694.176:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 39.318388][ T29] audit: type=1326 audit(1752337694.176:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 39.341612][ T29] audit: type=1326 audit(1752337694.176:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 39.365502][ T29] audit: type=1326 audit(1752337694.176:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 39.388802][ T29] audit: type=1326 audit(1752337694.176:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 39.562011][ C0] hrtimer: interrupt took 47462 ns [ 39.576658][ T3658] loop0: detected capacity change from 0 to 128 [ 39.631349][ T3658] syz.0.45: attempt to access beyond end of device [ 39.631349][ T3658] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 39.652826][ T3658] syz.0.45: attempt to access beyond end of device [ 39.652826][ T3658] loop0: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 39.667095][ T3658] syz.0.45: attempt to access beyond end of device [ 39.667095][ T3658] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 39.682776][ T3658] syz.0.45: attempt to access beyond end of device [ 39.682776][ T3658] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 39.697299][ T3658] syz.0.45: attempt to access beyond end of device [ 39.697299][ T3658] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 39.714127][ T3658] syz.0.45: attempt to access beyond end of device [ 39.714127][ T3658] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 39.728761][ T3658] syz.0.45: attempt to access beyond end of device [ 39.728761][ T3658] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 39.744170][ T3658] syz.0.45: attempt to access beyond end of device [ 39.744170][ T3658] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 39.757932][ T3658] syz.0.45: attempt to access beyond end of device [ 39.757932][ T3658] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 39.991147][ T3672] atomic_op ffff88811ba3b528 conn xmit_atomic 0000000000000000 [ 40.001816][ T3671] loop7: detected capacity change from 16384 to 0 [ 40.242977][ T3686] loop7: detected capacity change from 0 to 16384 [ 40.294195][ T3693] random: crng reseeded on system resumption [ 40.317092][ T3697] loop3: detected capacity change from 0 to 1024 [ 40.378114][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.433126][ T3703] 9pnet: Could not find request transport: U [ 40.447959][ T3704] atomic_op ffff88811951d528 conn xmit_atomic 0000000000000000 [ 40.501757][ T3696] loop7: detected capacity change from 16384 to 0 [ 40.508465][ C0] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 0 [ 40.617949][ T3713] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 40.630611][ T3714] loop1: detected capacity change from 0 to 128 [ 40.650989][ T3714] journal_path: Lookup failure for './bus' [ 40.656869][ T3714] EXT4-fs: error: could not find journal device path [ 40.746900][ T3717] loop0: detected capacity change from 0 to 512 [ 40.788831][ T3717] journal_path: Non-blockdev passed as './bus' [ 40.795061][ T3717] EXT4-fs: error: could not find journal device path [ 41.130921][ T51] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.157538][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 41.170102][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.170102][ T51] [ 41.179911][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 41.186205][ T51] EXT4-fs (loop3): Free/Dirty block details [ 41.192136][ T51] EXT4-fs (loop3): free_blocks=68451041280 [ 41.197963][ T51] EXT4-fs (loop3): dirty_blocks=16384 [ 41.203423][ T51] EXT4-fs (loop3): Block reservation details [ 41.209425][ T51] EXT4-fs (loop3): i_reserved_data_blocks=1024 [ 41.272555][ T3737] loop0: detected capacity change from 0 to 512 [ 41.279333][ T3737] EXT4-fs: Ignoring removed oldalloc option [ 41.319843][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 41.344702][ T3737] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.66: Parent and EA inode have the same ino 15 [ 41.362172][ T3737] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.66: Parent and EA inode have the same ino 15 [ 41.374875][ T3737] EXT4-fs (loop0): 1 orphan inode deleted [ 41.381437][ T3737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.634054][ T3748] loop1: detected capacity change from 0 to 2048 [ 41.642402][ T3744] loop2: detected capacity change from 0 to 512 [ 41.649661][ T3748] EXT4-fs: Ignoring removed orlov option [ 41.655521][ T3744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.674676][ T3744] EXT4-fs (loop2): 1 truncate cleaned up [ 41.684819][ T3752] netlink: 132 bytes leftover after parsing attributes in process `syz.4.73'. [ 41.694355][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.713082][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.733132][ T2995] udevd[2995]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 41.746100][ T3744] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 41.765558][ T3744] random: crng reseeded on system resumption [ 41.769217][ T3756] Zero length message leads to an empty skb [ 41.799365][ T3761] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.77'. [ 41.824234][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.889688][ T3761] loop4: detected capacity change from 0 to 8192 [ 41.916557][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.932169][ T3761] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.939435][ T3761] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.946928][ T3761] bridge0: entered allmulticast mode [ 41.950545][ T3770] loop7: detected capacity change from 0 to 16384 [ 41.977685][ T3761] bridge_slave_1: left allmulticast mode [ 41.983448][ T3761] bridge_slave_1: left promiscuous mode [ 41.989087][ T3761] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.007818][ T3761] bridge_slave_0: left allmulticast mode [ 42.013754][ T3761] bridge_slave_0: left promiscuous mode [ 42.019469][ T3761] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.082771][ T3766] smc: net device bond0 applied user defined pnetid SYZ2 [ 42.090164][ T3766] smc: net device bond0 erased user defined pnetid SYZ2 [ 42.126224][ T3777] atomic_op ffff88811bab2128 conn xmit_atomic 0000000000000000 [ 42.128940][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.142369][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.151721][ T3772] loop7: detected capacity change from 16384 to 0 [ 42.158307][ C0] I/O error, dev loop7, sector 12040 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 42.204613][ T3781] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 42.236056][ T3782] loop3: detected capacity change from 0 to 128 [ 42.242763][ T3782] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.255005][ T3782] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.313923][ T3791] loop0: detected capacity change from 0 to 512 [ 42.320582][ T3791] EXT4-fs: Ignoring removed oldalloc option [ 42.332484][ T3791] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.87: Parent and EA inode have the same ino 15 [ 42.347552][ T3791] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.87: Parent and EA inode have the same ino 15 [ 42.360034][ T3791] EXT4-fs (loop0): 1 orphan inode deleted [ 42.366465][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.387931][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.444105][ T3794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.88'. [ 42.466204][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.519778][ T3798] loop1: detected capacity change from 0 to 8192 [ 42.585439][ T3802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.92'. [ 42.695186][ T3807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.94'. [ 42.705836][ T3807] syz.1.94 (3807) used greatest stack depth: 10840 bytes left [ 42.735761][ T3810] @: renamed from vlan0 (while UP) [ 42.979745][ T3821] loop2: detected capacity change from 0 to 1024 [ 43.137153][ T3827] loop7: detected capacity change from 0 to 16384 [ 43.166219][ T3821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.267346][ T3837] loop4: detected capacity change from 0 to 1024 [ 43.276180][ T3837] ======================================================= [ 43.276180][ T3837] WARNING: The mand mount option has been deprecated and [ 43.276180][ T3837] and is ignored by this kernel. Remove the mand [ 43.276180][ T3837] option from the mount to silence this warning. [ 43.276180][ T3837] ======================================================= [ 43.328751][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.346749][ T3832] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.358648][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.368294][ T3837] ext4: Unknown parameter 'func' [ 43.431033][ T3845] random: crng reseeded on system resumption [ 43.470199][ T51] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.486042][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.498639][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.498639][ T51] [ 43.508449][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 43.514492][ T51] EXT4-fs (loop2): Free/Dirty block details [ 43.520484][ T51] EXT4-fs (loop2): free_blocks=68451041280 [ 43.526441][ T51] EXT4-fs (loop2): dirty_blocks=5536 [ 43.531852][ T51] EXT4-fs (loop2): Block reservation details [ 43.537884][ T51] EXT4-fs (loop2): i_reserved_data_blocks=346 [ 43.559383][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 43.597745][ T3856] loop0: detected capacity change from 0 to 1024 [ 43.626304][ T3856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.722677][ T3849] smc: net device bond0 applied user defined pnetid SYZ2 [ 43.729971][ T3849] smc: net device bond0 erased user defined pnetid SYZ2 [ 43.776076][ T3873] FAULT_INJECTION: forcing a failure. [ 43.776076][ T3873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.789225][ T3873] CPU: 1 UID: 0 PID: 3873 Comm: syz.1.116 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 43.789254][ T3873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.789267][ T3873] Call Trace: [ 43.789273][ T3873] [ 43.789280][ T3873] __dump_stack+0x1d/0x30 [ 43.789378][ T3873] dump_stack_lvl+0xe8/0x140 [ 43.789395][ T3873] dump_stack+0x15/0x1b [ 43.789408][ T3873] should_fail_ex+0x265/0x280 [ 43.789436][ T3873] should_fail+0xb/0x20 [ 43.789463][ T3873] should_fail_usercopy+0x1a/0x20 [ 43.789524][ T3875] loop4: detected capacity change from 0 to 2048 [ 43.789506][ T3873] _copy_from_user+0x1c/0xb0 [ 43.789565][ T3873] __ia32_sys_rt_sigreturn+0x128/0x350 [ 43.789605][ T3873] x64_sys_call+0x2e8a/0x2fb0 [ 43.789713][ T3873] do_syscall_64+0xd2/0x200 [ 43.789734][ T3873] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.789764][ T3873] ? clear_bhb_loop+0x40/0x90 [ 43.789793][ T3873] ? clear_bhb_loop+0x40/0x90 [ 43.789818][ T3873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.789842][ T3873] RIP: 0033:0x7f382d2bab19 [ 43.789864][ T3873] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 43.789885][ T3873] RSP: 002b:00007f382b986a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 43.789932][ T3873] RAX: ffffffffffffffda RBX: 00007f382d545fa0 RCX: 00007f382d2bab19 [ 43.789946][ T3873] RDX: 00007f382b986a80 RSI: 00007f382b986bb0 RDI: 0000000000000021 [ 43.789961][ T3873] RBP: 00007f382b987090 R08: 0000000000000000 R09: 0000000000000000 [ 43.789974][ T3873] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 43.790067][ T3873] R13: 0000000000000000 R14: 00007f382d545fa0 R15: 00007ffcb9e83028 [ 43.790088][ T3873] [ 43.973670][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.974337][ T3875] ext4: Unknown parameter 'func' [ 44.024211][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 44.024239][ T29] audit: type=1400 audit(1752337698.936:530): avc: denied { create } for pid=3879 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 44.079157][ T29] audit: type=1326 audit(1752337698.966:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.102399][ T29] audit: type=1326 audit(1752337698.976:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff248fe963 code=0x7ffc0000 [ 44.114450][ T3885] loop0: detected capacity change from 0 to 1024 [ 44.125498][ T29] audit: type=1326 audit(1752337698.976:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff248fe963 code=0x7ffc0000 [ 44.125527][ T29] audit: type=1326 audit(1752337698.976:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.178223][ T29] audit: type=1326 audit(1752337698.976:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.205204][ T29] audit: type=1326 audit(1752337699.116:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.228649][ T29] audit: type=1326 audit(1752337699.116:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.231750][ T3886] loop4: detected capacity change from 0 to 128 [ 44.251891][ T29] audit: type=1326 audit(1752337699.116:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.282730][ T3883] loop1: detected capacity change from 0 to 8192 [ 44.300811][ T29] audit: type=1326 audit(1752337699.206:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 44.326720][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.329931][ T3880] SELinux: syz.1.120 (3880) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 44.361007][ T3880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'. [ 44.389643][ T3310] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 44.397605][ T3310] FAT-fs (loop1): Filesystem has been set read-only [ 44.400869][ T3886] netlink: 10 bytes leftover after parsing attributes in process `syz.4.117'. [ 44.474427][ T3895] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 44.567651][ T51] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 44.583068][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 44.595667][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.595667][ T51] [ 44.605399][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 44.611465][ T51] EXT4-fs (loop0): Free/Dirty block details [ 44.617432][ T51] EXT4-fs (loop0): free_blocks=68451041280 [ 44.623372][ T51] EXT4-fs (loop0): dirty_blocks=2368 [ 44.628736][ T51] EXT4-fs (loop0): Block reservation details [ 44.634751][ T51] EXT4-fs (loop0): i_reserved_data_blocks=148 [ 44.657205][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 307 with error 28 [ 44.891899][ T3931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.921056][ T3931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.773879][ T3948] loop2: detected capacity change from 0 to 1024 [ 45.786026][ T3944] loop3: detected capacity change from 0 to 8192 [ 45.792569][ T3948] ext4: Unknown parameter 'func' [ 45.804408][ T3949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.135'. [ 45.850732][ T3956] loop0: detected capacity change from 0 to 1024 [ 45.868152][ T3956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.921400][ T3963] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 45.966059][ T3966] loop2: detected capacity change from 0 to 2048 [ 45.973081][ T3966] ext4: Unknown parameter 'func' [ 45.984289][ T3966] loop2: detected capacity change from 0 to 128 [ 45.996736][ T3969] loop3: detected capacity change from 0 to 512 [ 46.003584][ T3969] EXT4-fs: Ignoring removed oldalloc option [ 46.007871][ T3964] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.024203][ T3969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.141: Parent and EA inode have the same ino 15 [ 46.040457][ T3969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.141: Parent and EA inode have the same ino 15 [ 46.054242][ T3969] EXT4-fs (loop3): 1 orphan inode deleted [ 46.058025][ T3971] netlink: 10 bytes leftover after parsing attributes in process `syz.2.140'. [ 46.060616][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.093079][ T37] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 46.108075][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1771 with error 28 [ 46.108838][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.120537][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.120537][ T37] [ 46.120560][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 46.145371][ T37] EXT4-fs (loop0): Free/Dirty block details [ 46.151269][ T37] EXT4-fs (loop0): free_blocks=68451041280 [ 46.157154][ T37] EXT4-fs (loop0): dirty_blocks=1776 [ 46.162464][ T37] EXT4-fs (loop0): Block reservation details [ 46.168489][ T37] EXT4-fs (loop0): i_reserved_data_blocks=111 [ 46.183944][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.300160][ T3983] 9pnet: Could not find request transport: U [ 46.388121][ T3987] loop3: detected capacity change from 0 to 512 [ 46.394954][ T3987] EXT4-fs: Ignoring removed oldalloc option [ 46.527775][ T3987] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.143: Parent and EA inode have the same ino 15 [ 46.543781][ T3987] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.143: Parent and EA inode have the same ino 15 [ 46.558773][ T3987] EXT4-fs (loop3): 1 orphan inode deleted [ 46.565462][ T3987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.624038][ T3993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.148'. [ 46.686257][ T3994] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 46.702893][ T3993] IPVS: stopping master sync thread 3994 ... [ 46.844081][ T3996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.149'. [ 46.918945][ T4007] loop4: detected capacity change from 0 to 1024 [ 46.937286][ T4011] FAULT_INJECTION: forcing a failure. [ 46.937286][ T4011] name failslab, interval 1, probability 0, space 0, times 1 [ 46.949957][ T4011] CPU: 1 UID: 0 PID: 4011 Comm: syz.2.155 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 46.950052][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.950063][ T4011] Call Trace: [ 46.950068][ T4011] [ 46.950074][ T4011] __dump_stack+0x1d/0x30 [ 46.950097][ T4011] dump_stack_lvl+0xe8/0x140 [ 46.950114][ T4011] dump_stack+0x15/0x1b [ 46.950129][ T4011] should_fail_ex+0x265/0x280 [ 46.950206][ T4011] should_failslab+0x8c/0xb0 [ 46.950229][ T4011] kmem_cache_alloc_node_noprof+0x57/0x320 [ 46.950257][ T4011] ? __alloc_skb+0x101/0x320 [ 46.950288][ T4011] __alloc_skb+0x101/0x320 [ 46.950318][ T4011] pfkey_sendmsg+0xd7/0x900 [ 46.950383][ T4011] ? avc_has_perm+0xd3/0x150 [ 46.950412][ T4011] ? selinux_socket_sendmsg+0x175/0x1b0 [ 46.950505][ T4011] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 46.950532][ T4011] __sock_sendmsg+0x145/0x180 [ 46.950553][ T4011] ____sys_sendmsg+0x31e/0x4e0 [ 46.950584][ T4011] ___sys_sendmsg+0x17b/0x1d0 [ 46.950667][ T4011] __x64_sys_sendmsg+0xd4/0x160 [ 46.950701][ T4011] x64_sys_call+0x2999/0x2fb0 [ 46.950723][ T4011] do_syscall_64+0xd2/0x200 [ 46.950812][ T4011] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.950838][ T4011] ? clear_bhb_loop+0x40/0x90 [ 46.950859][ T4011] ? clear_bhb_loop+0x40/0x90 [ 46.950920][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.950993][ T4011] RIP: 0033:0x7f9ccfece929 [ 46.951008][ T4011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.951026][ T4011] RSP: 002b:00007f9cce537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.951111][ T4011] RAX: ffffffffffffffda RBX: 00007f9cd00f5fa0 RCX: 00007f9ccfece929 [ 46.951123][ T4011] RDX: 0000000000040080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 46.951135][ T4011] RBP: 00007f9cce537090 R08: 0000000000000000 R09: 0000000000000000 [ 46.951147][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.951159][ T4011] R13: 0000000000000000 R14: 00007f9cd00f5fa0 R15: 00007fff15d90e88 [ 46.951198][ T4011] [ 47.213182][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.226213][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.243789][ T4016] 9pnet_fd: Insufficient options for proto=fd [ 47.288667][ T4022] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.325150][ T4026] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 47.345149][ T3379] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 47.352621][ T3379] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 47.360015][ T3379] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 47.369360][ T3379] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 47.392338][ T4024] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 47.506364][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.534066][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.546636][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.546636][ T12] [ 47.556395][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 47.562546][ T12] EXT4-fs (loop4): Free/Dirty block details [ 47.568511][ T12] EXT4-fs (loop4): free_blocks=68451041280 [ 47.574329][ T12] EXT4-fs (loop4): dirty_blocks=3088 [ 47.579605][ T12] EXT4-fs (loop4): Block reservation details [ 47.585648][ T12] EXT4-fs (loop4): i_reserved_data_blocks=193 [ 47.610236][ T2308] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1035 with error 28 [ 47.670473][ T4051] loop4: detected capacity change from 0 to 512 [ 47.687992][ T4051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.700662][ T4051] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.795333][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.881418][ T4058] loop4: detected capacity change from 0 to 1024 [ 47.888232][ T4058] ext4: Unknown parameter 'func' [ 48.029962][ T4065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 48.040222][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 48.080105][ T4071] loop2: detected capacity change from 0 to 1024 [ 48.095014][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.162644][ T4079] loop0: detected capacity change from 0 to 2048 [ 48.174127][ T4079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.190784][ T4079] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.181: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 48.207896][ T4079] EXT4-fs (loop0): Remounting filesystem read-only [ 48.225285][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.257213][ T4080] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 48.287967][ T4084] loop3: detected capacity change from 0 to 8192 [ 48.351060][ T4089] loop0: detected capacity change from 0 to 8192 [ 48.376274][ T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 48.391576][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.404092][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.404092][ T37] [ 48.413770][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 48.419835][ T37] EXT4-fs (loop2): Free/Dirty block details [ 48.425749][ T37] EXT4-fs (loop2): free_blocks=68451041280 [ 48.431580][ T37] EXT4-fs (loop2): dirty_blocks=3552 [ 48.436882][ T37] EXT4-fs (loop2): Block reservation details [ 48.442965][ T37] EXT4-fs (loop2): i_reserved_data_blocks=222 [ 48.457815][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1492 with error 28 [ 48.541896][ T4105] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 48.573925][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 48.589423][ T4109] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 48.621218][ T4113] loop4: detected capacity change from 0 to 1024 [ 48.631245][ T4113] ext4: Unknown parameter 'func' [ 48.733811][ T4129] netlink: 'syz.1.198': attribute type 39 has an invalid length. [ 48.744296][ T4124] 9pnet: Could not find request transport: U [ 48.765661][ T4129] loop1: detected capacity change from 0 to 512 [ 48.786229][ T4133] netlink: 'syz.0.199': attribute type 39 has an invalid length. [ 48.795427][ T4129] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.198: Failed to acquire dquot type 1 [ 48.804477][ T4138] loop2: detected capacity change from 0 to 512 [ 48.810177][ T4129] EXT4-fs (loop1): 1 truncate cleaned up [ 48.819659][ T4129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.833554][ T4129] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.843884][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.844068][ T4138] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.873710][ T4142] loop0: detected capacity change from 0 to 512 [ 48.896086][ T4142] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.199: Failed to acquire dquot type 1 [ 48.909211][ T4142] EXT4-fs (loop0): 1 truncate cleaned up [ 48.918651][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.931827][ T4142] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.950186][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.961416][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.537586][ T4157] loop2: detected capacity change from 0 to 512 [ 49.544465][ T4157] EXT4-fs: Ignoring removed oldalloc option [ 49.951031][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.971315][ T4157] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.204: Parent and EA inode have the same ino 15 [ 49.987842][ T4157] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.204: Parent and EA inode have the same ino 15 [ 50.001445][ T4157] EXT4-fs (loop2): 1 orphan inode deleted [ 50.007756][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.077977][ T4151] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.094783][ T4151] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.140890][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 50.140903][ T29] audit: type=1400 audit(1752337705.046:832): avc: denied { shutdown } for pid=4172 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.168123][ T4173] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 50.174661][ T4173] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.182472][ T4173] vhci_hcd vhci_hcd.0: Device attached [ 50.219804][ T29] audit: type=1400 audit(1752337705.056:833): avc: denied { write } for pid=4172 comm="syz.4.209" lport=35207 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.244007][ T29] audit: type=1400 audit(1752337705.056:834): avc: denied { getopt } for pid=4172 comm="syz.4.209" lport=35207 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.333417][ T4179] random: crng reseeded on system resumption [ 50.359176][ T4160] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.367000][ T4160] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.473755][ T4182] loop1: detected capacity change from 0 to 2048 [ 50.486997][ T4182] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.493498][ T4182] EXT4-fs: Ignoring removed i_version option [ 50.512437][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.524367][ T4182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.591663][ T3386] usb 10-1: SetAddress Request (2) to port 0 [ 50.598816][ T3386] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 50.640750][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.754044][ T29] audit: type=1326 audit(1752337705.666:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.779912][ T4193] netlink: 'syz.1.214': attribute type 39 has an invalid length. [ 50.792124][ T4193] loop1: detected capacity change from 0 to 512 [ 50.799336][ T29] audit: type=1326 audit(1752337705.686:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.822609][ T29] audit: type=1326 audit(1752337705.686:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.845878][ T29] audit: type=1326 audit(1752337705.686:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.869289][ T29] audit: type=1326 audit(1752337705.686:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.890465][ T4200] loop2: detected capacity change from 0 to 2048 [ 50.892556][ T29] audit: type=1326 audit(1752337705.686:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.900874][ T4200] ext4: Unknown parameter 'func' [ 50.922442][ T29] audit: type=1326 audit(1752337705.686:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccfece929 code=0x7ffc0000 [ 50.931165][ T4193] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.214: Failed to acquire dquot type 1 [ 50.964281][ T4193] EXT4-fs (loop1): 1 truncate cleaned up [ 50.970378][ T4193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.004790][ T4200] loop2: detected capacity change from 0 to 128 [ 51.014158][ T4193] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.054024][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.186655][ T4214] netlink: 10 bytes leftover after parsing attributes in process `syz.2.217'. [ 51.674991][ T4219] loop0: detected capacity change from 0 to 512 [ 51.683615][ T4219] EXT4-fs: Ignoring removed oldalloc option [ 52.242035][ T4207] smc: net device bond0 applied user defined pnetid SYZ2 [ 52.249405][ T4207] smc: net device bond0 erased user defined pnetid SYZ2 [ 52.551586][ T4176] vhci_hcd: sendmsg failed!, ret=-104 for 48 [ 52.563646][ T12] vhci_hcd: stop threads [ 52.567969][ T12] vhci_hcd: release socket [ 52.572561][ T12] vhci_hcd: disconnect device [ 52.586202][ T4219] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.221: Parent and EA inode have the same ino 15 [ 52.602809][ T4219] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.221: Parent and EA inode have the same ino 15 [ 52.616901][ T4219] EXT4-fs (loop0): 1 orphan inode deleted [ 52.623740][ T4219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.729519][ T4224] bond1: entered promiscuous mode [ 52.734660][ T4224] bond1: entered allmulticast mode [ 52.743898][ T4233] loop1: detected capacity change from 0 to 128 [ 52.753304][ T4233] journal_path: Lookup failure for './bus' [ 52.759156][ T4233] EXT4-fs: error: could not find journal device path [ 52.773036][ T4224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.810324][ T4224] bond1 (unregistering): Released all slaves [ 52.852402][ T4240] tmpfs: Unknown parameter 'hug' [ 52.858620][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 52.887049][ T4240] loop2: detected capacity change from 0 to 4096 [ 52.901095][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.910326][ T4232] loop3: detected capacity change from 0 to 512 [ 52.918177][ T4240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.918982][ T4232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.948405][ T4248] netlink: 168 bytes leftover after parsing attributes in process `syz.4.229'. [ 52.972905][ T4240] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.227: corrupted inode contents [ 52.987468][ T4240] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.227: mark_inode_dirty error [ 52.999796][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.014468][ T4232] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.017392][ T4240] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.227: corrupted inode contents [ 53.027403][ T4246] loop1: detected capacity change from 0 to 128 [ 53.099061][ T4240] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.227: mark_inode_dirty error [ 53.151487][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.159206][ T4240] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.227: corrupted inode contents [ 53.165421][ T4262] netlink: 'syz.4.231': attribute type 39 has an invalid length. [ 53.175981][ T4240] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.227: mark_inode_dirty error [ 53.196645][ T4240] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.227: corrupted inode contents [ 53.230579][ T4265] loop4: detected capacity change from 0 to 512 [ 53.245282][ T4240] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.227: mark_inode_dirty error [ 53.316251][ T4266] random: crng reseeded on system resumption [ 53.354546][ T4240] EXT4-fs error (device loop2): ext4_evict_inode:265: comm syz.2.227: couldn't truncate inode 15 (err -117) [ 53.541039][ T4265] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.231: Failed to acquire dquot type 1 [ 53.908525][ T4272] loop3: detected capacity change from 0 to 512 [ 53.915470][ T4272] EXT4-fs: Ignoring removed oldalloc option [ 53.993237][ T4265] EXT4-fs (loop4): 1 truncate cleaned up [ 53.999516][ T4265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.064555][ T4272] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.233: Parent and EA inode have the same ino 15 [ 54.082143][ T4272] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.233: Parent and EA inode have the same ino 15 [ 54.098758][ T4272] EXT4-fs (loop3): 1 orphan inode deleted [ 54.105301][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.235094][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.256123][ T4265] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.304334][ T4280] loop1: detected capacity change from 0 to 2048 [ 54.318173][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.337662][ T4274] smc: net device bond0 applied user defined pnetid SYZ2 [ 54.348118][ T4280] EXT4-fs: Ignoring removed orlov option [ 54.392147][ T4277] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.417840][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 54.431363][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.443657][ T4286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 54.453914][ T4280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.822395][ T4305] loop4: detected capacity change from 0 to 8192 [ 55.588407][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.691715][ T3386] usb 10-1: device descriptor read/8, error -110 [ 55.715228][ T4314] loop0: detected capacity change from 0 to 2048 [ 55.750901][ T4314] EXT4-fs: Ignoring removed orlov option [ 55.759257][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.805965][ T3386] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 55.814409][ T4312] 9pnet: Could not find request transport: U [ 55.831616][ T3386] usb 10-1: enqueue for inactive port 0 [ 55.839386][ T3386] usb 10-1: enqueue for inactive port 0 [ 55.845273][ T3386] usb 10-1: enqueue for inactive port 0 [ 56.115600][ T4334] loop4: detected capacity change from 0 to 512 [ 56.122860][ T4334] EXT4-fs: Ignoring removed oldalloc option [ 56.747716][ T4323] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.755091][ T4323] smc: net device bond0 erased user defined pnetid SYZ2 [ 56.791290][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.847285][ T4334] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.250: Parent and EA inode have the same ino 15 [ 57.861435][ T4334] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.250: Parent and EA inode have the same ino 15 [ 57.876836][ T4334] EXT4-fs (loop4): 1 orphan inode deleted [ 57.883210][ T4334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.976270][ T4354] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 58.099741][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 58.099757][ T29] audit: type=1326 audit(1752337713.006:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.139973][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.150101][ T29] audit: type=1326 audit(1752337713.046:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.173447][ T29] audit: type=1326 audit(1752337713.046:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.196887][ T29] audit: type=1326 audit(1752337713.046:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.220132][ T29] audit: type=1326 audit(1752337713.046:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.243510][ T29] audit: type=1326 audit(1752337713.046:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.266837][ T29] audit: type=1326 audit(1752337713.046:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 58.290404][ T29] audit: type=1326 audit(1752337713.046:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.313720][ T29] audit: type=1326 audit(1752337713.046:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.336988][ T29] audit: type=1326 audit(1752337713.046:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 58.337269][ T3386] usb usb10-port1: attempt power cycle [ 58.543948][ T4372] loop4: detected capacity change from 0 to 128 [ 58.551033][ T4372] journal_path: Lookup failure for './bus' [ 58.556908][ T4372] EXT4-fs: error: could not find journal device path [ 58.754598][ T4376] loop4: detected capacity change from 0 to 128 [ 58.913734][ T4379] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 58.955074][ T4381] loop0: detected capacity change from 0 to 2048 [ 58.961789][ T4381] EXT4-fs: Ignoring removed orlov option [ 58.987823][ T4387] loop2: detected capacity change from 0 to 128 [ 59.003825][ T4387] journal_path: Lookup failure for './bus' [ 59.009672][ T4387] EXT4-fs: error: could not find journal device path [ 59.126527][ T4387] loop2: detected capacity change from 0 to 128 [ 59.131647][ T4388] loop7: detected capacity change from 16384 to 0 [ 59.176184][ T4384] atomic_op ffff88811952a928 conn xmit_atomic 0000000000000000 [ 59.221811][ T4397] loop1: detected capacity change from 0 to 1024 [ 59.352397][ T4400] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 59.395693][ T4403] loop4: detected capacity change from 0 to 128 [ 59.402279][ T4403] journal_path: Lookup failure for './bus' [ 59.408086][ T4403] EXT4-fs: error: could not find journal device path [ 59.460540][ T37] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.476796][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 59.489289][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.489289][ T37] [ 59.498990][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 59.505051][ T37] EXT4-fs (loop1): Free/Dirty block details [ 59.510990][ T37] EXT4-fs (loop1): free_blocks=68451041280 [ 59.516879][ T37] EXT4-fs (loop1): dirty_blocks=3104 [ 59.518346][ T4403] loop4: detected capacity change from 0 to 128 [ 59.522190][ T37] EXT4-fs (loop1): Block reservation details [ 59.522210][ T37] EXT4-fs (loop1): i_reserved_data_blocks=194 [ 59.531970][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1047 with error 28 [ 59.554066][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.554066][ T37] [ 59.675282][ T4415] loop1: detected capacity change from 0 to 2048 [ 59.682114][ T4415] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.688598][ T4415] EXT4-fs: Ignoring removed i_version option [ 59.736684][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 59.746181][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 59.764530][ T4422] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 1, id = 0 [ 59.776314][ T4421] Invalid ELF header magic: != ELF [ 59.830233][ T4428] loop0: detected capacity change from 0 to 512 [ 59.836831][ T4428] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 59.945407][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 59.957029][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 60.058326][ T4445] random: crng reseeded on system resumption [ 60.129468][ T4447] loop0: detected capacity change from 0 to 2048 [ 60.137234][ T4447] ext4: Unknown parameter 'func' [ 60.169511][ T4447] loop0: detected capacity change from 0 to 128 [ 60.222870][ T4441] smc: net device bond0 applied user defined pnetid SYZ2 [ 60.311972][ T3386] usb usb10-port1: unable to enumerate USB device [ 60.460624][ T4455] loop3: detected capacity change from 0 to 2048 [ 60.467524][ T4455] EXT4-fs: Ignoring removed orlov option [ 60.489876][ T4457] loop4: detected capacity change from 0 to 8192 [ 60.665655][ T4464] 9pnet: Could not find request transport: U [ 60.691432][ T4469] FAULT_INJECTION: forcing a failure. [ 60.691432][ T4469] name failslab, interval 1, probability 0, space 0, times 0 [ 60.704244][ T4469] CPU: 1 UID: 0 PID: 4469 Comm: syz.1.288 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 60.704274][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.704288][ T4469] Call Trace: [ 60.704294][ T4469] [ 60.704302][ T4469] __dump_stack+0x1d/0x30 [ 60.704336][ T4469] dump_stack_lvl+0xe8/0x140 [ 60.704357][ T4469] dump_stack+0x15/0x1b [ 60.704407][ T4469] should_fail_ex+0x265/0x280 [ 60.704439][ T4469] should_failslab+0x8c/0xb0 [ 60.704481][ T4469] __kmalloc_noprof+0xa5/0x3e0 [ 60.704509][ T4469] ? bpf_test_init+0xa9/0x160 [ 60.704594][ T4469] bpf_test_init+0xa9/0x160 [ 60.704620][ T4469] bpf_prog_test_run_skb+0x144/0xbd0 [ 60.704697][ T4469] ? __rcu_read_unlock+0x4f/0x70 [ 60.704716][ T4469] ? __fget_files+0x184/0x1c0 [ 60.704751][ T4469] ? __rcu_read_unlock+0x4f/0x70 [ 60.704772][ T4469] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 60.704797][ T4469] bpf_prog_test_run+0x22a/0x390 [ 60.704835][ T4469] __sys_bpf+0x3dc/0x790 [ 60.704876][ T4469] __x64_sys_bpf+0x41/0x50 [ 60.704906][ T4469] x64_sys_call+0x2478/0x2fb0 [ 60.705004][ T4469] do_syscall_64+0xd2/0x200 [ 60.705024][ T4469] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.705054][ T4469] ? clear_bhb_loop+0x40/0x90 [ 60.705124][ T4469] ? clear_bhb_loop+0x40/0x90 [ 60.705226][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.705337][ T4469] RIP: 0033:0x7f382d31e929 [ 60.705355][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.705501][ T4469] RSP: 002b:00007f382b987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.705595][ T4469] RAX: ffffffffffffffda RBX: 00007f382d545fa0 RCX: 00007f382d31e929 [ 60.705606][ T4469] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 60.705619][ T4469] RBP: 00007f382b987090 R08: 0000000000000000 R09: 0000000000000000 [ 60.705633][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.705647][ T4469] R13: 0000000000000000 R14: 00007f382d545fa0 R15: 00007ffcb9e83028 [ 60.705672][ T4469] [ 60.758489][ T4471] loop2: detected capacity change from 0 to 128 [ 60.825240][ T4477] loop1: detected capacity change from 0 to 2048 [ 60.825478][ T4477] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.825504][ T4477] EXT4-fs: Ignoring removed i_version option [ 60.826589][ T4471] syz.2.289: attempt to access beyond end of device [ 60.826589][ T4471] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 60.966648][ T4471] syz.2.289: attempt to access beyond end of device [ 60.966648][ T4471] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 60.980521][ T4471] syz.2.289: attempt to access beyond end of device [ 60.980521][ T4471] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 60.993880][ T4471] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 61.002927][ T4471] syz.2.289: attempt to access beyond end of device [ 61.002927][ T4471] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 61.016316][ T4471] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 61.025372][ T4471] syz.2.289: attempt to access beyond end of device [ 61.025372][ T4471] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 61.038685][ T4471] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 61.047341][ T4471] syz.2.289: attempt to access beyond end of device [ 61.047341][ T4471] loop2: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 61.060693][ T4471] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 61.075008][ T4471] syz.2.289: attempt to access beyond end of device [ 61.075008][ T4471] loop2: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 61.088461][ T4471] Buffer I/O error on dev loop2, logical block 146, lost async page write [ 61.111283][ T4471] syz.2.289: attempt to access beyond end of device [ 61.111283][ T4471] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 61.125136][ T4471] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 61.132884][ T4487] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 61.140527][ T4471] syz.2.289: attempt to access beyond end of device [ 61.140527][ T4471] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 61.155402][ T4471] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 61.155825][ T4490] loop1: detected capacity change from 0 to 512 [ 61.156339][ T4471] syz.2.289: attempt to access beyond end of device [ 61.156339][ T4471] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 61.156368][ T4471] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 61.156501][ T4471] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 61.156517][ T4471] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 61.163280][ T4490] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.281233][ T4500] 9pnet: Could not find request transport: U [ 61.328137][ T4508] Invalid ELF header magic: != ELF [ 61.336096][ T4490] syz.1.295 (4490) used greatest stack depth: 10224 bytes left [ 61.347168][ T4511] loop4: detected capacity change from 0 to 128 [ 61.354025][ T4511] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.368134][ T4511] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.870876][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.880149][ T4516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.918102][ T4518] loop1: detected capacity change from 0 to 2048 [ 61.925098][ T4518] ext4: Unknown parameter 'func' [ 61.937827][ T4518] loop1: detected capacity change from 0 to 128 [ 61.978505][ T4520] netlink: 'syz.0.304': attribute type 39 has an invalid length. [ 61.990604][ T4520] loop0: detected capacity change from 0 to 512 [ 62.005337][ T4520] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.304: Failed to acquire dquot type 1 [ 62.005563][ T4523] netlink: 10 bytes leftover after parsing attributes in process `syz.1.303'. [ 62.017133][ T4520] EXT4-fs (loop0): 1 truncate cleaned up [ 62.033065][ T4520] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.208356][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 62.237046][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 62.249776][ T4537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.257784][ T4537] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 62.272749][ T4537] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 62.320859][ T4537] bond1 (unregistering): Released all slaves [ 62.335675][ T4545] loop0: detected capacity change from 0 to 512 [ 62.342612][ T4545] EXT4-fs: Ignoring removed oldalloc option [ 62.373884][ T4545] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.307: Parent and EA inode have the same ino 15 [ 62.393568][ T4545] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.307: Parent and EA inode have the same ino 15 [ 62.410499][ T4545] EXT4-fs (loop0): 1 orphan inode deleted [ 62.561939][ T4542] smc: net device bond0 erased user defined pnetid SYZ2 [ 62.708258][ T4557] loop2: detected capacity change from 0 to 1024 [ 62.722175][ T4555] loop3: detected capacity change from 0 to 2048 [ 62.730340][ T4555] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.736885][ T4555] EXT4-fs: Ignoring removed i_version option [ 62.856506][ T4566] netlink: 'syz.1.317': attribute type 39 has an invalid length. [ 62.884851][ T4566] loop1: detected capacity change from 0 to 512 [ 62.885201][ T4568] 9pnet: Could not find request transport: U [ 62.906825][ T4564] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 62.927427][ T4573] loop3: detected capacity change from 0 to 1024 [ 62.935786][ T4573] ext4: Unknown parameter 'func' [ 62.949888][ T4566] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.317: Failed to acquire dquot type 1 [ 62.972209][ T4566] EXT4-fs (loop1): 1 truncate cleaned up [ 62.978223][ T4566] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.077859][ T415] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.094834][ T415] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 63.107399][ T415] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.107399][ T415] [ 63.117190][ T415] EXT4-fs (loop2): Total free blocks count 0 [ 63.123251][ T415] EXT4-fs (loop2): Free/Dirty block details [ 63.129244][ T415] EXT4-fs (loop2): free_blocks=68451041280 [ 63.135136][ T415] EXT4-fs (loop2): dirty_blocks=2256 [ 63.140471][ T415] EXT4-fs (loop2): Block reservation details [ 63.146571][ T415] EXT4-fs (loop2): i_reserved_data_blocks=141 [ 63.158856][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 63.158866][ T29] audit: type=1326 audit(1752337718.036:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 63.188428][ T29] audit: type=1326 audit(1752337718.036:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 63.223759][ T415] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 191 with error 28 [ 63.236459][ T415] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.236459][ T415] [ 63.268870][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 63.354514][ T4583] random: crng reseeded on system resumption [ 63.529370][ T4594] loop2: detected capacity change from 0 to 512 [ 63.614472][ T4594] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.326: corrupted in-inode xattr: invalid ea_ino [ 63.648896][ T4602] loop1: detected capacity change from 0 to 2048 [ 63.655782][ T4594] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.326: couldn't read orphan inode 15 (err -117) [ 63.669737][ T4602] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.676277][ T4602] EXT4-fs: Ignoring removed i_version option [ 63.763826][ T29] audit: type=1400 audit(1752337718.656:1244): avc: denied { name_bind } for pid=4591 comm="syz.2.326" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.812363][ T4609] loop3: detected capacity change from 0 to 512 [ 63.846469][ T4609] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.911778][ T4611] 9pnet: Could not find request transport: U [ 63.942500][ T29] audit: type=1326 audit(1752337718.856:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 63.964275][ T4617] syzkaller0: entered promiscuous mode [ 63.968215][ T29] audit: type=1326 audit(1752337718.876:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 63.971281][ T4617] syzkaller0: entered allmulticast mode [ 63.994568][ T29] audit: type=1326 audit(1752337718.876:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 63.994630][ T29] audit: type=1326 audit(1752337718.876:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 64.005215][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.023598][ T29] audit: type=1326 audit(1752337718.876:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 64.053685][ T4619] netlink: 'syz.2.334': attribute type 39 has an invalid length. [ 64.055331][ T29] audit: type=1326 audit(1752337718.876:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 64.080712][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.086434][ T29] audit: type=1326 audit(1752337718.876:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c1cde929 code=0x7ffc0000 [ 64.115567][ T4620] loop2: detected capacity change from 0 to 512 [ 64.157965][ T4621] FAULT_INJECTION: forcing a failure. [ 64.157965][ T4621] name failslab, interval 1, probability 0, space 0, times 0 [ 64.170772][ T4621] CPU: 1 UID: 0 PID: 4621 Comm: syz.4.333 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 64.170840][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.170855][ T4621] Call Trace: [ 64.170862][ T4621] [ 64.170870][ T4621] __dump_stack+0x1d/0x30 [ 64.170934][ T4621] dump_stack_lvl+0xe8/0x140 [ 64.170959][ T4621] dump_stack+0x15/0x1b [ 64.170979][ T4621] should_fail_ex+0x265/0x280 [ 64.171044][ T4621] should_failslab+0x8c/0xb0 [ 64.171079][ T4621] kmem_cache_alloc_noprof+0x50/0x310 [ 64.171108][ T4621] ? skb_clone+0x151/0x1f0 [ 64.171128][ T4621] skb_clone+0x151/0x1f0 [ 64.171185][ T4621] __netlink_deliver_tap+0x2c9/0x500 [ 64.171247][ T4621] netlink_unicast+0x653/0x680 [ 64.171281][ T4621] netlink_sendmsg+0x58b/0x6b0 [ 64.171354][ T4621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.171372][ T4621] __sock_sendmsg+0x145/0x180 [ 64.171397][ T4621] ____sys_sendmsg+0x31e/0x4e0 [ 64.171510][ T4621] ___sys_sendmsg+0x17b/0x1d0 [ 64.171590][ T4621] __x64_sys_sendmsg+0xd4/0x160 [ 64.171661][ T4621] x64_sys_call+0x2999/0x2fb0 [ 64.171685][ T4621] do_syscall_64+0xd2/0x200 [ 64.171704][ T4621] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.171790][ T4621] ? clear_bhb_loop+0x40/0x90 [ 64.171816][ T4621] ? clear_bhb_loop+0x40/0x90 [ 64.171841][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.171864][ T4621] RIP: 0033:0x7eff248fe929 [ 64.171881][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.171919][ T4621] RSP: 002b:00007eff22f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.172073][ T4621] RAX: ffffffffffffffda RBX: 00007eff24b26080 RCX: 00007eff248fe929 [ 64.172084][ T4621] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 64.172119][ T4621] RBP: 00007eff22f46090 R08: 0000000000000000 R09: 0000000000000000 [ 64.172133][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.172147][ T4621] R13: 0000000000000000 R14: 00007eff24b26080 R15: 00007ffe07322cd8 [ 64.172164][ T4621] [ 64.388627][ T4609] netlink: zone id is out of range [ 64.394020][ T4609] netlink: zone id is out of range [ 64.399341][ T4609] netlink: zone id is out of range [ 64.404560][ T4609] netlink: zone id is out of range [ 64.409694][ T4609] netlink: zone id is out of range [ 64.414921][ T4609] netlink: zone id is out of range [ 64.420033][ T4609] netlink: zone id is out of range [ 64.425155][ T4609] netlink: zone id is out of range [ 64.430274][ T4609] netlink: zone id is out of range [ 64.435582][ T4609] netlink: zone id is out of range [ 64.469850][ T4626] loop0: detected capacity change from 0 to 8192 [ 64.475126][ T4620] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.334: Failed to acquire dquot type 1 [ 64.496342][ T4620] EXT4-fs (loop2): 1 truncate cleaned up [ 64.505652][ T4620] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.545057][ T4633] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 64.557464][ T4633] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 64.570289][ T4633] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 64.629077][ T4641] loop4: detected capacity change from 0 to 1024 [ 64.687733][ T4649] loop0: detected capacity change from 0 to 2048 [ 64.695767][ T4649] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.702228][ T4649] EXT4-fs: Ignoring removed i_version option [ 64.739395][ T4653] FAULT_INJECTION: forcing a failure. [ 64.739395][ T4653] name failslab, interval 1, probability 0, space 0, times 0 [ 64.752233][ T4653] CPU: 1 UID: 0 PID: 4653 Comm: syz.2.343 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 64.752261][ T4653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.752273][ T4653] Call Trace: [ 64.752280][ T4653] [ 64.752313][ T4653] __dump_stack+0x1d/0x30 [ 64.752334][ T4653] dump_stack_lvl+0xe8/0x140 [ 64.752354][ T4653] dump_stack+0x15/0x1b [ 64.752411][ T4653] should_fail_ex+0x265/0x280 [ 64.752441][ T4653] should_failslab+0x8c/0xb0 [ 64.752463][ T4653] __kmalloc_noprof+0xa5/0x3e0 [ 64.752523][ T4653] ? nla_strdup+0x78/0xc0 [ 64.752560][ T4653] nla_strdup+0x78/0xc0 [ 64.752596][ T4653] nf_tables_newchain+0x1145/0x17d0 [ 64.752636][ T4653] ? __account_obj_stock+0x211/0x350 [ 64.752663][ T4653] ? should_fail_ex+0xdb/0x280 [ 64.752712][ T4653] ? __nla_parse+0x40/0x60 [ 64.752749][ T4653] nfnetlink_rcv+0xb96/0x1690 [ 64.753042][ T4653] netlink_unicast+0x5a5/0x680 [ 64.753083][ T4653] netlink_sendmsg+0x58b/0x6b0 [ 64.753121][ T4653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.753141][ T4653] __sock_sendmsg+0x145/0x180 [ 64.753165][ T4653] ____sys_sendmsg+0x31e/0x4e0 [ 64.753199][ T4653] ___sys_sendmsg+0x17b/0x1d0 [ 64.753297][ T4653] __x64_sys_sendmsg+0xd4/0x160 [ 64.753352][ T4653] x64_sys_call+0x2999/0x2fb0 [ 64.753450][ T4653] do_syscall_64+0xd2/0x200 [ 64.753471][ T4653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.753526][ T4653] ? clear_bhb_loop+0x40/0x90 [ 64.753550][ T4653] ? clear_bhb_loop+0x40/0x90 [ 64.753570][ T4653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.753658][ T4653] RIP: 0033:0x7f9ccfece929 [ 64.753672][ T4653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.753706][ T4653] RSP: 002b:00007f9cce537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.753728][ T4653] RAX: ffffffffffffffda RBX: 00007f9cd00f5fa0 RCX: 00007f9ccfece929 [ 64.753743][ T4653] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 64.753758][ T4653] RBP: 00007f9cce537090 R08: 0000000000000000 R09: 0000000000000000 [ 64.753773][ T4653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.753867][ T4653] R13: 0000000000000000 R14: 00007f9cd00f5fa0 R15: 00007fff15d90e88 [ 64.753892][ T4653] [ 64.764088][ T4654] 9pnet: Could not find request transport: U [ 65.224491][ T4676] hub 6-0:1.0: USB hub found [ 65.295833][ T4678] loop4: detected capacity change from 0 to 512 [ 65.302663][ T4678] EXT4-fs: Ignoring removed oldalloc option [ 65.840620][ T4676] hub 6-0:1.0: 8 ports detected [ 66.080172][ T4674] loop0: detected capacity change from 0 to 8192 [ 66.129261][ T4685] netlink: 'syz.2.354': attribute type 39 has an invalid length. [ 66.144325][ T4687] loop1: detected capacity change from 0 to 128 [ 66.165032][ T4685] loop2: detected capacity change from 0 to 512 [ 66.172881][ T4687] vfat: Unknown parameter 'shortnîTçiªñ#ë Í©Bt0ame' [ 66.200399][ T4678] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.349: Parent and EA inode have the same ino 15 [ 66.215963][ T4678] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.349: Parent and EA inode have the same ino 15 [ 66.228679][ T4678] EXT4-fs (loop4): 1 orphan inode deleted [ 66.265676][ T4685] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.354: Failed to acquire dquot type 1 [ 66.277306][ T4697] loop3: detected capacity change from 0 to 2048 [ 66.284371][ T4697] ext4: Unknown parameter 'func' [ 66.297702][ T4697] loop3: detected capacity change from 0 to 128 [ 66.299234][ T4685] EXT4-fs (loop2): 1 truncate cleaned up [ 66.316811][ T4685] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.346042][ T4699] loop1: detected capacity change from 0 to 2048 [ 66.352877][ T4699] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.359347][ T4699] EXT4-fs: Ignoring removed i_version option [ 66.376525][ T4702] __nla_validate_parse: 3 callbacks suppressed [ 66.376539][ T4702] netlink: 10 bytes leftover after parsing attributes in process `syz.3.357'. [ 66.472194][ T4708] 9pnet: Could not find request transport: U [ 66.529465][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 66.541461][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 66.553471][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 66.587692][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 66.716224][ T4724] loop1: detected capacity change from 0 to 128 [ 66.723462][ T4724] journal_path: Lookup failure for './bus' [ 66.729344][ T4724] EXT4-fs: error: could not find journal device path [ 66.856813][ T4726] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.864541][ T4726] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.024981][ T4733] loop1: detected capacity change from 0 to 128 [ 67.033750][ T4736] capability: warning: `syz.0.367' uses deprecated v2 capabilities in a way that may be insecure [ 67.056966][ T4738] loop4: detected capacity change from 0 to 1024 [ 67.102340][ T4738] EXT4-fs mount: 40 callbacks suppressed [ 67.102428][ T4738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.273422][ T4724] bio_check_eod: 4 callbacks suppressed [ 67.273442][ T4724] syz.1.362: attempt to access beyond end of device [ 67.273442][ T4724] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 67.297751][ T4724] syz.1.362: attempt to access beyond end of device [ 67.297751][ T4724] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 67.311555][ T4724] syz.1.362: attempt to access beyond end of device [ 67.311555][ T4724] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 67.402301][ T4755] random: crng reseeded on system resumption [ 67.434347][ T4724] syz.1.362: attempt to access beyond end of device [ 67.434347][ T4724] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 67.500082][ T4746] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 67.578698][ T4724] syz.1.362: attempt to access beyond end of device [ 67.578698][ T4724] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 67.607978][ T4754] loop0: detected capacity change from 0 to 8192 [ 67.623233][ T4749] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.638512][ T4749] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.663786][ T4724] syz.1.362: attempt to access beyond end of device [ 67.663786][ T4724] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 67.696231][ T52] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.749094][ T4724] syz.1.362: attempt to access beyond end of device [ 67.749094][ T4724] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 67.775709][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 67.788337][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.788337][ T52] [ 67.798007][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 67.804151][ T52] EXT4-fs (loop4): Free/Dirty block details [ 67.810079][ T52] EXT4-fs (loop4): free_blocks=68451041280 [ 67.810042][ T4724] syz.1.362: attempt to access beyond end of device [ 67.810042][ T4724] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 67.815992][ T52] EXT4-fs (loop4): dirty_blocks=2464 [ 67.829348][ T4724] syz.1.362: attempt to access beyond end of device [ 67.829348][ T4724] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 67.834683][ T52] EXT4-fs (loop4): Block reservation details [ 67.854003][ T52] EXT4-fs (loop4): i_reserved_data_blocks=154 [ 67.961189][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 399 with error 28 [ 68.145278][ T4767] loop4: detected capacity change from 0 to 512 [ 68.155933][ T4764] loop1: detected capacity change from 0 to 2048 [ 68.187076][ T4764] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.193657][ T4764] EXT4-fs: Ignoring removed i_version option [ 68.207331][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 68.221320][ T4771] loop0: detected capacity change from 0 to 1024 [ 68.230109][ T4767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.245028][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 68.257260][ T4764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.270898][ T4771] ext4: Unknown parameter 'func' [ 68.297228][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 68.297238][ T29] audit: type=1326 audit(1752337723.206:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c236e929 code=0x7ffc0000 [ 68.327001][ T29] audit: type=1326 audit(1752337723.206:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85c236e929 code=0x7ffc0000 [ 68.350346][ T29] audit: type=1326 audit(1752337723.206:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c236e929 code=0x7ffc0000 [ 68.373812][ T29] audit: type=1326 audit(1752337723.206:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85c236e929 code=0x7ffc0000 [ 68.393714][ T4767] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.397165][ T29] audit: type=1326 audit(1752337723.206:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c236e929 code=0x7ffc0000 [ 68.439199][ T29] audit: type=1326 audit(1752337723.336:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 68.462894][ T29] audit: type=1326 audit(1752337723.336:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 68.486452][ T29] audit: type=1326 audit(1752337723.336:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 68.510069][ T29] audit: type=1326 audit(1752337723.336:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 68.533579][ T29] audit: type=1326 audit(1752337723.336:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff248fe929 code=0x7ffc0000 [ 68.563374][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.574990][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.652861][ T4787] loop1: detected capacity change from 0 to 1024 [ 68.676778][ T4787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.706483][ T4794] loop0: detected capacity change from 0 to 1024 [ 68.713308][ T4794] ext4: Unknown parameter 'func' [ 68.852459][ T4796] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 68.984881][ T4804] FAULT_INJECTION: forcing a failure. [ 68.984881][ T4804] name failslab, interval 1, probability 0, space 0, times 0 [ 68.997666][ T4804] CPU: 0 UID: 0 PID: 4804 Comm: syz.0.383 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 68.997694][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.997705][ T4804] Call Trace: [ 68.997712][ T4804] [ 68.997720][ T4804] __dump_stack+0x1d/0x30 [ 68.997742][ T4804] dump_stack_lvl+0xe8/0x140 [ 68.997763][ T4804] dump_stack+0x15/0x1b [ 68.997841][ T4804] should_fail_ex+0x265/0x280 [ 68.997874][ T4804] should_failslab+0x8c/0xb0 [ 68.997897][ T4804] kmem_cache_alloc_noprof+0x50/0x310 [ 68.997927][ T4804] ? audit_log_start+0x365/0x6c0 [ 68.998000][ T4804] audit_log_start+0x365/0x6c0 [ 68.998032][ T4804] ? asymmetric_key_hex_to_key_id+0x5f/0xe0 [ 68.998067][ T4804] audit_seccomp+0x48/0x100 [ 68.998091][ T4804] ? __seccomp_filter+0x68c/0x10d0 [ 68.998115][ T4804] __seccomp_filter+0x69d/0x10d0 [ 68.998146][ T4804] ? _raw_spin_unlock+0x26/0x50 [ 68.998175][ T4804] __secure_computing+0x82/0x150 [ 68.998192][ T4804] syscall_trace_enter+0xcf/0x1e0 [ 68.998216][ T4804] do_syscall_64+0xac/0x200 [ 68.998234][ T4804] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.998289][ T4804] ? clear_bhb_loop+0x40/0x90 [ 68.998308][ T4804] ? clear_bhb_loop+0x40/0x90 [ 68.998331][ T4804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.998411][ T4804] RIP: 0033:0x7f85c236d33c [ 68.998423][ T4804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.998439][ T4804] RSP: 002b:00007f85c09d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.998453][ T4804] RAX: ffffffffffffffda RBX: 00007f85c2595fa0 RCX: 00007f85c236d33c [ 68.998463][ T4804] RDX: 000000000000000f RSI: 00007f85c09d70a0 RDI: 0000000000000004 [ 68.998473][ T4804] RBP: 00007f85c09d7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.998486][ T4804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.998496][ T4804] R13: 0000000000000000 R14: 00007f85c2595fa0 R15: 00007ffee4de5d08 [ 68.998541][ T4804] [ 69.265156][ T4808] loop0: detected capacity change from 0 to 2048 [ 69.272044][ T4808] EXT4-fs: Ignoring removed orlov option [ 69.284275][ T4810] loop3: detected capacity change from 0 to 128 [ 69.290961][ T4810] journal_path: Lookup failure for './bus' [ 69.296280][ T4808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.296854][ T4810] EXT4-fs: error: could not find journal device path [ 69.378775][ T4815] netlink: 'syz.2.387': attribute type 3 has an invalid length. [ 69.412058][ T52] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 69.429561][ T4823] loop2: detected capacity change from 0 to 2048 [ 69.435531][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 612 with error 28 [ 69.448376][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.448376][ T52] [ 69.458088][ T52] EXT4-fs (loop1): Total free blocks count 0 [ 69.464121][ T52] EXT4-fs (loop1): Free/Dirty block details [ 69.465233][ T4810] loop3: detected capacity change from 0 to 128 [ 69.470030][ T52] EXT4-fs (loop1): free_blocks=68451041280 [ 69.470048][ T52] EXT4-fs (loop1): dirty_blocks=624 [ 69.470062][ T52] EXT4-fs (loop1): Block reservation details [ 69.470075][ T52] EXT4-fs (loop1): i_reserved_data_blocks=39 [ 69.489703][ T4823] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.506708][ T4823] EXT4-fs: Ignoring removed i_version option [ 69.512348][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.516207][ T4827] netlink: 'syz.4.390': attribute type 39 has an invalid length. [ 69.534931][ T4827] loop4: detected capacity change from 0 to 512 [ 69.544460][ T3310] ================================================================== [ 69.549588][ T4823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.552565][ T3310] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 69.572304][ T3310] [ 69.574643][ T3310] read-write to 0xffff888237c26f10 of 8 bytes by task 4810 on cpu 0: [ 69.582730][ T3310] find_get_block_common+0x4f0/0x960 [ 69.588055][ T3310] bdev_getblk+0x59/0x3d0 [ 69.592421][ T3310] __breadahead+0x29/0x170 [ 69.596874][ T3310] fat_get_entry+0x3d5/0x5d0 [ 69.601509][ T3310] fat_subdirs+0x59/0x190 [ 69.605863][ T3310] fat_read_root+0x316/0x360 [ 69.610484][ T3310] fat_fill_super+0x15bf/0x1ce0 [ 69.615364][ T3310] vfat_fill_super+0x24/0x30 [ 69.619995][ T3310] get_tree_bdev_flags+0x28e/0x300 [ 69.625158][ T3310] get_tree_bdev+0x1f/0x30 [ 69.629610][ T3310] vfat_get_tree+0x1c/0x30 [ 69.634097][ T3310] vfs_get_tree+0x57/0x1d0 [ 69.638551][ T3310] do_new_mount+0x207/0x680 [ 69.643078][ T3310] path_mount+0x4a4/0xb20 [ 69.647440][ T3310] __se_sys_mount+0x28f/0x2e0 [ 69.652155][ T3310] __x64_sys_mount+0x67/0x80 [ 69.656769][ T3310] x64_sys_call+0xd36/0x2fb0 [ 69.661381][ T3310] do_syscall_64+0xd2/0x200 [ 69.665907][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.671824][ T3310] [ 69.672413][ T4810] syz.3.384: attempt to access beyond end of device [ 69.672413][ T4810] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 69.674149][ T3310] read to 0xffff888237c26f10 of 8 bytes by task 3310 on cpu 1: [ 69.674169][ T3310] has_bh_in_lru+0x35/0x1f0 [ 69.674203][ T3310] smp_call_function_many_cond+0x38c/0xbf0 [ 69.674225][ T3310] on_each_cpu_cond_mask+0x3c/0x80 [ 69.674246][ T3310] invalidate_bh_lrus+0x2a/0x30 [ 69.674277][ T3310] blkdev_flush_mapping+0x9a/0x1a0 [ 69.674298][ T3310] bdev_release+0x2bf/0x3d0 [ 69.674319][ T3310] blkdev_release+0x15/0x20 [ 69.674340][ T3310] __fput+0x298/0x650 [ 69.674364][ T3310] ____fput+0x1c/0x30 [ 69.674388][ T3310] task_work_run+0x131/0x1a0 [ 69.674411][ T3310] exit_to_user_mode_loop+0xe4/0x100 [ 69.674436][ T3310] do_syscall_64+0x1d6/0x200 [ 69.674454][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.674473][ T3310] [ 69.674477][ T3310] value changed: 0x0000000000000000 -> 0xffff88810c05e7b8 [ 69.674489][ T3310] [ 69.674493][ T3310] Reported by Kernel Concurrency Sanitizer on: [ 69.674505][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(voluntary) [ 69.674544][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.674558][ T3310] ================================================================== [ 69.691043][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.390: Failed to acquire dquot type 1 [ 69.819821][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.830829][ T4827] EXT4-fs (loop4): 1 truncate cleaned up [ 69.837832][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.860781][ T4827] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.882741][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.891264][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.891926][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.111792][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.