last executing test programs: 44.4479702s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = open(&(0x7f0000000340)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 44.207990585s ago: executing program 1 (id=8): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="b2c5", 0x2}], 0x1}}], 0x2, 0x8008801) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@random="870e6fef0ec1", @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0xd, 0x24, 0x67, 0x0, 0x4, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x29}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3, "e4895b", 0x7, "996093"}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x23}}], 0x1, 0x0) 44.090104377s ago: executing program 1 (id=12): setrlimit(0x1, 0x0) ftruncate(0xffffffffffffffff, 0x8002007ffb) fsopen(0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x7f000}]) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x10100a, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x0, 0x1, 0x11, "0e36af413bb901527fe4d0ce5d295c3676345a41499dd6aac69c4730251a0ca0ea0000000000000000000c00002000", "038447c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 42.820764221s ago: executing program 1 (id=23): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) 40.262970291s ago: executing program 1 (id=54): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x2, 0xd15, 0x3}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/82, 0x52}], 0x3, &(0x7f0000000580)=""/97, 0x61}, 0x2}], 0x1, 0x2002, &(0x7f0000000600)={0x77359400}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="027fff0a0a000200aaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 40.221235562s ago: executing program 32 (id=54): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x2, 0xd15, 0x3}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/82, 0x52}], 0x3, &(0x7f0000000580)=""/97, 0x61}, 0x2}], 0x1, 0x2002, &(0x7f0000000600)={0x77359400}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="027fff0a0a000200aaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 36.319381807s ago: executing program 4 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="a5074c9a702cfae4714efec92636a9f7c17e4346524a1f801a865b79c6c9880711f7f5420d4922ef647a10277e921e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f0000000040)) 36.317205167s ago: executing program 4 (id=118): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20308}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}}, 0x20044000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x401, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c841}, 0x20000000) 35.747064258s ago: executing program 4 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x321, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}}, 0x4000000) 35.535641682s ago: executing program 4 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 35.059336862s ago: executing program 4 (id=123): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000700)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 34.791320276s ago: executing program 4 (id=126): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@sysvgroups}, {@i_version}]}, 0x4, 0x4f2, &(0x7f0000003480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "972b28549ed5d6735a"}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)) 34.771724147s ago: executing program 33 (id=126): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@sysvgroups}, {@i_version}]}, 0x4, 0x4f2, &(0x7f0000003480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "972b28549ed5d6735a"}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)) 30.947317831s ago: executing program 5 (id=210): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_aout(r1, 0x0, 0x20) write$binfmt_misc(r1, &(0x7f0000000100)="46c6", 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r6, &(0x7f0000000080)="cc", 0x1, 0x200980) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 30.440524911s ago: executing program 5 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 29.501647759s ago: executing program 5 (id=231): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000380)="948b6d931664c79071e43238a2d7bc7f0457697653fc9b6305c3ea178d91cf38e70fda3ba08238100b20ee4583aa0ff9efcd6f43d692e9bd7a2ceb2b95517d992d80adc01ecca9e32ced12da431595e80ede9a509a699b49ee3e8315e5add06b9cfd8057b2e096140ec1800a11171bccaa1cb7b8eda692682af1dace81e8555306232b19f27a706411d8b77fe6e9438e5d63851700c310fbdfb04900e53077f7a8a71a0b844aa0b52209398dcd22fc20bc112c1fa62a90c9d62c8dc97ec0ed777a741fbaa0e992fc8a401878c037eeff0c4aa09d0528cc2cb4207cedfa0bf76ab0a312bc722d91bb8a97a0a906d73109", 0xfffffffffffffd6e, 0x4004051, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 29.4620795s ago: executing program 5 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 29.407283741s ago: executing program 5 (id=233): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x0, 0x46c, &(0x7f0000000e80)="$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") ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r6, &(0x7f00000000c0)={0xa, {0x2, 0x0, 0x69}}, 0xa) 29.298225693s ago: executing program 5 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x2e, 0xb01, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0x8}, {0x9, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x48880}, 0x0) 29.283348413s ago: executing program 34 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x2e, 0xb01, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0x8}, {0x9, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x48880}, 0x0) 6.316694168s ago: executing program 3 (id=532): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000fa, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x72be6c4d655c56ca, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) listen(r4, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8048}, 0x4) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRESHEX=r4, @ANYBLOB="01002cbd7000ffdbdf2504000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) 5.857533566s ago: executing program 3 (id=541): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6gretap0\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x38}}, 0x4000040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0x26}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='damon_aggregated\x00', r6, 0x0, 0x6}, 0x18) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=@getsa={0x1c8, 0x12, 0x100, 0x70bd26, 0x25dfdbfe, {@in=@multicast2, 0x4d2, 0x2, 0x2b}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in=@multicast2}}, @lifetime_val={0x24, 0x9, {0x9, 0x800, 0xec, 0x8000000000000001}}, @coaddr={0x14, 0xe, @in6=@empty}, @algo_auth_trunc={0x14b, 0x14, {{'crct10dif-pclmul\x00'}, 0x7f8, 0xa0, "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"}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x20040011) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x72e, &(0x7f0000001680)="$eJzs3c1uG1UUAOAz05qENpAgAeJHQkUgiqjqNKFV1RVlgWBTEakS2zRKnCjE6YTYLk3URbpiixAIJDbwDmxYgVjzALwCSAiqsigro/FP+mc3DiQ2sr9PGufemXHOPXZ8j+JreQIYWSfymzTi+YiYSyImW/uTiCg0WkcjLjbPu33rxmK+JVGvX/4jaZyT9+Oe++SOR8RORDwXET8VIk6lD8etbG2vLZTLpc1Wf7q6vjFd2do+vbq+sFJaKV29cPbs7Nnz5y5cOLhc33j/g2eL596Z+H5uef7kzK/fJXExJlrH7s3jIDUfk0L+EN7n3cMINkDJoAfAv5K/NI80X+XxTEzGkUYLABhm9bGIOgAwYhL1HwBGTPt9gPba3mGtg3Xz+9sRMd4p/tHWmtl4Yx3y2O3kvpWJJCKm+jlQhtLOzYi4MnXi4b+/5KE12/06cxAD5FD9mM8/FzvNP+nu/BMd5p/x9mcn/qPu89/d+Ee6zH9zPcZ478Va1jX+zYgXjnaKn+zGT7rEv9Jj/B/uLP3d7Vj924jXOtaf5L5Y3T8fMr28Wi6dad52jnGiduPDR+V/rEv8nT3y3+gx/4nPXv555xHxX3/l0c9/p/h5Tfy0x/ifFN76otuxPP5Sl/z3ev6/6TH++Zc+2u7xVAAAAAAAAAAAAAAAAAAAAAAAAAAAABgKaURMRJIWd9tpWiw2r+H9dBxLy1mlemo5q11disa1sqeikLa/anmy2U/y/kzr+/jb/dkH+m9GxFMR8fnY441+cTErLw06eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoOf7A9f//Gmte/x8AGHLjgx4AANB36j8AjJ5e6n+9Xq/3YSgAQJ/4/x8ARo/6DwCjR/0HgNGj/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQZ3OXLuVb/fatG4t5f+naVm0tu3Z6qVRZK67XFouL2eZGcSXLVsql4mK2vtfvK2fZxuxs1K5PV0uV6nRla3t+Patdrc6vri+slOZLhb5kBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7M9HYkrQYEWmjnabFYsQTETEVhWR5tVw6ExFPRsQvY4WxvD8z6EEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAGrbG2vLZTLpU2NIWik/49haAxBY9AzEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTf3Yt+7/OO44c0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYiPS3JCLy7eTkqxMPHn0suTPW+BkRH399+cvrC9Xq5ky+/8/d/dWvWvtnBzF+AGAv7TrdruMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ella3ttoVwubR5iY9A5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwcP4JAAD//2CY0mA=") 5.70805358s ago: executing program 3 (id=543): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) (fail_nth: 4) 5.390021906s ago: executing program 3 (id=545): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x72be6c4d655c56ca, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) listen(r3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8048}, 0x4) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRESHEX=r3, @ANYBLOB="01002cbd7000ffdbdf25040000001400018008000500030000000600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) 5.112227611s ago: executing program 3 (id=553): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f0000000240)={[], [{@audit}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}, {@fowner_eq}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r1, 0x402, 0x8000001f) fcntl$notify(r1, 0x402, 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 4.947275084s ago: executing program 3 (id=557): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, 0x0, &(0x7f00000005c0)=""/155}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) unshare(0x62040200) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 3.959033384s ago: executing program 2 (id=560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x24000000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000880)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@dax_never}, {@grpid}, {@nojournal_checksum}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt}, {@subj_type={'subj_type', 0x3d, '\x92&.:@\x00'}}]}, 0x1, 0x47e, &(0x7f0000000100)="$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") 3.806387016s ago: executing program 2 (id=562): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e25, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4d812bd3e3293ccd2cdbe0c99d9be2ed82cee5c7a496788a0d1f91376f5e2f58198d8f58398e90ab8c4dd2360f6416c32281c62874e99a0a13494074dc720a1ad93ca19cfe3e074989f5ed53eb4abbc78fb3c99cdbb3efa049a28886b571e61084"], 0x18}, 0x40c0) 3.765254727s ago: executing program 2 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) (fail_nth: 4) 3.427232484s ago: executing program 2 (id=564): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x72be6c4d655c56ca, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) listen(r3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8048}, 0x4) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRESHEX=r3, @ANYBLOB="01002cbd7000ffdbdf25040000001400018008000500030000000600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) 3.324488176s ago: executing program 2 (id=566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1PHOUfAPDv7AJ95Qe/Wl+KraLVSHyBQl/swUuNJh40MdFDjScE2mC3xRRMbEMUPeDRNPFuPJr4F3ixXox6MvGqd2NCDBerpzWzO0O3sAssLGztfj7JwPPMM5vn+c7Ms/vMMzsbQMcaTP8kEQcj4teI6Ktm79xgsPrv1vL8xN/L8xNJlMtv/JlUtvtreX4i3zR/3YFqplxep97FtyPGS6Wpq1l+ZO7yeyOz164/N315/OLUxakrY2fPnjp5rOfM2OmWxNmbtnXgw5mjR15568ZrE+dvvPPj12l7D2bltXG0ymB179b1ZKsra7PemnTS1caG0JRiRKSHq7vS//uiGPtWyvri5U/a2jhgR5XLhfKexsULZeAelg7UgU6Uf9Cn17/5sktDj7vC0rmIQhb/rWyplnRV1kd2bbRTl7SDEXF+4Z8v0iV2aB4CAKDWzXMR8Wy98V8hHqjZ7n/ZvaH+iPh/RByKiPsi4nBE3B9R2fbBiHioyfpX3yFZO/4p920psE1Kx38vZPe27hz/5aO/6C9mud5K/N3JhenS1IlsnwxF9540P7pOHd+99Mtnjcpqx3/pktafjwWzdvzRtWqCbnJ8bnw7Mdda+jhioKte/MnKmDeJiCMRMbDFOqaf/upoo7KN419HCwbl5S8jnqoe/4VYFX8uaXh/cvT5M2OnR/ZGaerESH5WrPXTz4uvN6p/W/G3wNLNcuyve/6vxN+f7I2YvXb9UuV+7WzzdSz+9mnDa5qtnv89yZuVdE+27oPxubmroxE9yatr14/dfm2ez7dPz/+h4/X7/6G4vScejoj0JD4WEY9ExKNZ2x+LiMcj4vg68f/w4hPvNh//OrPyLZTGP7nR8Y/a4998onjp+2+ajz+XHv9TldRQtmYz73+bbeB29h0AAAD8VxQq34FPCsMr6UJheLj6Hf7Dsb9Qmpmde+bCzPtXJqvfle+P7kI+09VXMx86ms0N5/mxVfmT2bzx58V9lfzwxExpst3BQ4c70KD/p34vtrt1wI7zvBZ0Lv0fOpf+D51L/4fOpf9D56rX/z9qQzuA3bfB5/++3WoHsPuM/6Fz6f/QufR/6EgNn40vbOuRf4k2Jb7t2d5vNWw+EYW7JOR7JtEddYu6Nv1jFltM7Klb1O53JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA//961uMV") 2.876800504s ago: executing program 7 (id=570): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000ac0)={0x1, 0x8000, 0x8004, 0x2, 0xffff0317, 0x3, 0xffffffff, 0xffffffff}, &(0x7f0000000b00)=0x20) (fail_nth: 4) 1.815151075s ago: executing program 7 (id=573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x24000000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000880)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@dax_never}, {@grpid}, {@nojournal_checksum}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt}, {@subj_type={'subj_type', 0x3d, '\x92&.:@\x00'}}]}, 0x1, 0x47e, &(0x7f0000000100)="$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") 1.370311344s ago: executing program 7 (id=574): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x18) gettid() preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x5c0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 1.173868647s ago: executing program 6 (id=576): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x20, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x103e}, 0x20) 1.079314309s ago: executing program 6 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x10}, @in6={0xa, 0x4e20, 0x3, @loopback, 0x7}, @in={0x2, 0x4e20, @broadcast}], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x201800, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) 1.00531779s ago: executing program 0 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 988.267951ms ago: executing program 0 (id=580): ioprio_set$pid(0x2, 0x0, 0x4007) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x100010, &(0x7f0000000000)={[{@debug}, {@dax_inode}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@noload}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000004000000000a006060", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 853.513313ms ago: executing program 0 (id=581): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000fa, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x72be6c4d655c56ca, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) listen(r4, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8048}, 0x4) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRESHEX=r4, @ANYBLOB="01002cbd7000ffdbdf250400000014000180080005000300000006000100"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) 803.098204ms ago: executing program 2 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x80085502, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) 738.155186ms ago: executing program 6 (id=583): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a060400) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x9, 0x2}, {0xffff, 0xffff}, {0x4, 0x6}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x10, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000000c0)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="97000026040800070000008246"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@journal_checksum}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001840)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0xbc, &(0x7f0000000240)=0x0) r8 = eventfd(0x7dbf) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x4000, r6, 0x0, 0x0, 0x5f3, 0x0, 0x3, r8}]) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000080)=""/109, 0x6d) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fbdbdf250300000050000180140002006d61637365633000000000000000000008000300000000001400020074756e6c30000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX=r7, @ANYBLOB="140002006d6163766c616e310000000000000000140002007663616e30000000000000000000000008000100ff6c16806aa00c8fffd70f14862dcb06efdda9221b764c187f4c6fccba577b28afc1491da4a2afcacb5118c269f9a5bf668fd30aab61d0d0e6765eb7bc7cd6ef73538859484221330121ae758118d834d58ea8d4e68761f6440feeadb439df740a3500e3778e54e361a5f1ffcf99dbc3009be550f50fed834993e8293b1de39a6b0cf3f480578498042468c967d84ee955adaede7362b8bc81fc69ebf8555219c2135ee892ae9cfe23de9ff9ce28481a6197fc9d11", @ANYRES32=r1, @ANYRES32=r1], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4004005) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x343042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x2, 0xe0}]}) r11 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x37, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r12, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0xfe) syz_emit_ethernet(0xc0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000088a8080081000f000800481300aa0068000008029078ac1414aaac14142300890b5bac1e0001ac14141c94040100440cd273bc11fca7035e2d453ede2100000000000000818630000000030003d3000ac64761f2d1d2673d070729f3ba96600209af2953d94752db010dd38fefd39d9a5592c1555f0f0090787f000001fa2ef18bb332656497048d79f0736ea50dd8b8cd56a1f96c5a2cce6241bf4b691b922b800b85a4caaaf07b57579eea31422c7c11039ff200"/203], &(0x7f00000001c0)={0x1, 0x4, [0xaf5, 0xa8a, 0xe9a, 0x619]}) keyctl$read(0xb, r11, 0x0, 0x0) 661.563957ms ago: executing program 0 (id=584): ioprio_set$pid(0x2, 0x0, 0x4007) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x100010, &(0x7f0000000000)={[{@debug}, {@dax_inode}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@noload}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000004000000000a006060", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 407.537432ms ago: executing program 7 (id=585): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd7b) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x0, 0x2, 0x0, 0x0, 0x8, 0x19300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0xb}, 0x100022, 0x3, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x3f, 0xf, @loopback, 0x800003}, 0x1c) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES8=r6, @ANYRES32=r14, @ANYRES32=r12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r15}, 0x10) sendto$inet6(r9, 0x0, 0x2, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x22) 385.700242ms ago: executing program 0 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 178.124477ms ago: executing program 0 (id=587): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) fcntl$setlease(r0, 0x400, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) close(r0) 95.196508ms ago: executing program 7 (id=588): r0 = socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x80000001, 0x3, 0x1, 0x5, 0x94c, 0xa4, 0xff9, 0xc3cfbe86, 0xf69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xff7ffffa, 0x800, 0x6, 0x9, 0x4, 0x407, 0x5, 0x100000, 0x7fffffff, 0x3, 0xd, 0xe, 0x2312, 0x100, 0x8, 0x1c00, 0x7, 0x7, 0xaed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x10, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x256, 0x81, 0x0, 0x5, 0x20006, 0x5, 0x4, 0xb, 0x2, 0xd9a, 0x80000001, 0x4, 0xfffffffd, 0x7, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc60, 0xffffdfff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r6, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="08010e8004"], 0x124}}, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r1, 0x1000, 0x25}, 0x0, &(0x7f0000000940)="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", &(0x7f0000000180)="0802b1c4609b6b43e468781e2b8a32a3441b9a841a20281b61ff55a1d678730c19a7b15d29") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xd}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040804}, 0x400d0) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x0, 0x3b2}, 0x0, 0x0) 94.971208ms ago: executing program 6 (id=589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f", 0x5d}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 93.694218ms ago: executing program 6 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64=r0], 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000459fbb9354682012f000000000000009443"], 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r2, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1124, 0x400, 0x2, 0x1fc}, &(0x7f0000000b00)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r3, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="ac", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB='`\x00\x00'], 0x250}, 0x0, 0x20004014}) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000687b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) open(&(0x7f0000000400)='./file1\x00', 0x145142, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xffa8) 57.371349ms ago: executing program 7 (id=591): socket(0x10, 0x4, 0x0) io_uring_setup(0x31fa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000060, 0x0, 0x0) 0s ago: executing program 6 (id=592): r0 = syz_io_uring_setup(0x3a03, &(0x7f0000000080)={0x0, 0x207734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) (async) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x4) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) unshare(0x22020600) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000140)) (async) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/171, 0xab}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000380)=""/15, 0xf}, {&(0x7f0000000440)=""/250, 0xfa}], 0x4, &(0x7f0000000540)=""/113, 0x71}, 0x40000140) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): adget: couldn't find an available UDC or it's busy [ 32.446910][ T3588] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.463142][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.483567][ T3588] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.38: Failed to acquire dquot type 0 [ 32.504277][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.516438][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.568707][ T3595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40'. [ 32.577801][ T3595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.40'. [ 32.594174][ T3595] Zero length message leads to an empty skb [ 32.711533][ T3603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.790831][ T3603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.522527][ T3616] 9pnet: p9_errstr2errno: server reported unknown error õ1c àÔs0ˆ(ãšäÊz@©AäþbÌÀÁÆB6L‘3µùW2M¯(.´Gwkê‚"“6õ–È(ð [ 33.815804][ T3622] loop3: detected capacity change from 0 to 1024 [ 33.856327][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.871203][ T3628] loop2: detected capacity change from 0 to 7 [ 33.926431][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.950849][ T3622] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.012695][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.058364][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.106022][ T3639] loop0: detected capacity change from 0 to 512 [ 34.117545][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.132547][ T3639] EXT4-fs: Ignoring removed i_version option [ 34.138586][ T3639] EXT4-fs: Ignoring removed nobh option [ 34.148428][ T3639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.161548][ T3639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.184483][ T3639] EXT4-fs (loop0): 1 truncate cleaned up [ 34.195505][ T3639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.294961][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.308427][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.328805][ T3631] chnl_net:caif_netlink_parms(): no params data found [ 34.362669][ T3660] loop0: detected capacity change from 0 to 4096 [ 34.373336][ T3660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.479884][ T3664] loop2: detected capacity change from 0 to 512 [ 34.529151][ T3664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.558528][ T3666] loop3: detected capacity change from 0 to 256 [ 34.574893][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.638329][ T3664] EXT4-fs (loop2): 1 truncate cleaned up [ 34.668280][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.742895][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.754696][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.793926][ T3675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.802556][ T3675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.815445][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.822499][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.823006][ T12] bridge_slave_1: left allmulticast mode [ 34.829682][ T3676] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.834910][ T12] bridge_slave_1: left promiscuous mode [ 34.842035][ T3676] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.847818][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.854126][ T3676] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.868638][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.868833][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.875531][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.892597][ T12] bridge_slave_0: left allmulticast mode [ 34.898382][ T12] bridge_slave_0: left promiscuous mode [ 34.901826][ T3666] FAT-fs (loop3): Directory bread(block 1285) failed [ 34.904449][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.966705][ T3682] loop2: detected capacity change from 0 to 512 [ 34.980070][ T3682] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.70: casefold flag without casefold feature [ 34.994522][ T3682] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.70: couldn't read orphan inode 15 (err -117) [ 35.015021][ T3682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.043298][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.054028][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.063488][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.074510][ T12] bond0 (unregistering): Released all slaves [ 35.092626][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.099757][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.123408][ T3631] bridge_slave_0: entered allmulticast mode [ 35.131419][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 35.131432][ T29] audit: type=1400 audit(1757695378.879:162): avc: denied { search } for pid=3687 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.133777][ T3631] bridge_slave_0: entered promiscuous mode [ 35.169063][ T3689] loop2: detected capacity change from 0 to 512 [ 35.175735][ T3689] EXT4-fs: Ignoring removed i_version option [ 35.181769][ T3689] EXT4-fs: Ignoring removed nobh option [ 35.190056][ T29] audit: type=1400 audit(1757695378.929:163): avc: denied { read open } for pid=3692 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.193145][ T3689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.227315][ T29] audit: type=1400 audit(1757695378.969:164): avc: denied { getattr } for pid=3692 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.254254][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.261445][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.269528][ T3631] bridge_slave_1: entered allmulticast mode [ 35.276034][ T3631] bridge_slave_1: entered promiscuous mode [ 35.282799][ T3689] EXT4-fs (loop2): 1 truncate cleaned up [ 35.295611][ T12] hsr_slave_0: left promiscuous mode [ 35.301351][ T12] hsr_slave_1: left promiscuous mode [ 35.306950][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.314409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.314796][ T3689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.339408][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.346953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.361417][ T3690] loop3: detected capacity change from 0 to 8192 [ 35.375791][ T29] audit: type=1400 audit(1757695379.119:165): avc: denied { name_bind } for pid=3705 comm="syz.0.74" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.397515][ T12] veth1_macvtap: left promiscuous mode [ 35.403168][ T12] veth0_macvtap: left promiscuous mode [ 35.410773][ T12] veth1_vlan: left promiscuous mode [ 35.412659][ T29] audit: type=1400 audit(1757695379.159:166): avc: denied { add_name } for pid=3691 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.419283][ T12] veth0_vlan: left promiscuous mode [ 35.438372][ T29] audit: type=1400 audit(1757695379.159:167): avc: denied { create } for pid=3691 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.465751][ T29] audit: type=1400 audit(1757695379.159:168): avc: denied { write } for pid=3691 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.491770][ T29] audit: type=1400 audit(1757695379.159:169): avc: denied { append } for pid=3691 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.517487][ T29] audit: type=1400 audit(1757695379.219:170): avc: denied { remove_name } for pid=3708 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.540895][ T29] audit: type=1400 audit(1757695379.219:171): avc: denied { unlink } for pid=3708 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1177 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.542062][ T3292] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 35.569167][ T3292] loop3: partition table partially beyond EOD, truncated [ 35.576450][ T3292] loop3: p1 start 100663296 is beyond EOD, truncated [ 35.583170][ T3292] loop3: p2 size 134217732 extends beyond EOD, truncated [ 35.589027][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.592749][ T3292] loop3: p4 size 14876672 extends beyond EOD, truncated [ 35.606686][ T3292] loop3: p5 size 134217732 extends beyond EOD, truncated [ 35.629634][ T3292] loop3: p6 size 14876672 extends beyond EOD, truncated [ 35.639780][ T3690] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 35.645009][ T3690] loop3: partition table partially beyond EOD, truncated [ 35.656074][ T3690] loop3: p1 start 100663296 is beyond EOD, truncated [ 35.662798][ T3690] loop3: p2 size 134217732 extends beyond EOD, truncated [ 35.672322][ T3690] loop3: p4 size 14876672 extends beyond EOD, truncated [ 35.696024][ T3720] capability: warning: `syz.0.79' uses 32-bit capabilities (legacy support in use) [ 35.708787][ T3690] loop3: p5 size 134217732 extends beyond EOD, truncated [ 35.710992][ T3722] loop2: detected capacity change from 0 to 256 [ 35.717268][ T3690] loop3: p6 size 14876672 extends beyond EOD, truncated [ 35.764125][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.787693][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.795382][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.807786][ T3728] loop3: detected capacity change from 0 to 512 [ 35.822025][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.836483][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.843478][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.850541][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.867291][ T12] team0 (unregistering): Port device team_slave_1 removed [ 35.876528][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.878374][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.889426][ T3531] udevd[3531]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.897629][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.905451][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.911647][ T3730] udevd[3730]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 35.921781][ T3728] EXT4-fs (loop3): 1 orphan inode deleted [ 35.931702][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 35.937527][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.948500][ T3722] FAT-fs (loop2): Directory bread(block 1285) failed [ 35.957104][ T3667] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 35.973550][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.977895][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 35.985785][ T12] team0 (unregistering): Port device team_slave_0 removed [ 35.995677][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.002969][ T3730] udevd[3730]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 36.013826][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 36.021190][ T3728] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.103252][ T3631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.125184][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.135221][ T3631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.153516][ T3737] loop2: detected capacity change from 0 to 2048 [ 36.232656][ T3631] team0: Port device team_slave_0 added [ 36.249893][ T3631] team0: Port device team_slave_1 added [ 36.285772][ T3631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.285785][ T3631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.285808][ T3631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.286667][ T3631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.286679][ T3631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.286701][ T3631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.360853][ T3631] hsr_slave_0: entered promiscuous mode [ 36.361288][ T3766] loop3: detected capacity change from 0 to 1024 [ 36.361302][ T3631] hsr_slave_1: entered promiscuous mode [ 36.361521][ T3631] debugfs: 'hsr0' already exists in 'hsr' [ 36.361532][ T3631] Cannot create hsr debugfs directory [ 36.366419][ T3766] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.367747][ T3766] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 36.367832][ T3766] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.367968][ T3766] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.91: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.370640][ T3766] EXT4-fs (loop3): 1 orphan inode deleted [ 36.371107][ T3766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.372356][ T3766] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.91: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 36.373056][ T3763] loop4: detected capacity change from 0 to 2048 [ 36.404067][ T3763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.553625][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.563998][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.583031][ T3787] loop2: detected capacity change from 0 to 128 [ 36.590222][ T3787] vfat: Bad value for 'gid' [ 36.594763][ T3787] vfat: Bad value for 'gid' [ 36.603018][ T3789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.650549][ T3789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.705463][ T3796] loop2: detected capacity change from 0 to 1024 [ 36.727413][ T3631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.736153][ T3796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.760181][ T3631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.779215][ T3631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.780451][ T3807] loop0: detected capacity change from 0 to 256 [ 36.794208][ T3631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.801583][ T3796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.817566][ T3807] FAT-fs (loop0): Directory bread(block 64) failed [ 36.825479][ T3796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.847093][ T3807] FAT-fs (loop0): Directory bread(block 65) failed [ 36.863452][ T3807] FAT-fs (loop0): Directory bread(block 66) failed [ 36.871760][ T3807] FAT-fs (loop0): Directory bread(block 67) failed [ 36.878977][ T3807] FAT-fs (loop0): Directory bread(block 68) failed [ 36.886186][ T3807] FAT-fs (loop0): Directory bread(block 69) failed [ 36.893038][ T3807] FAT-fs (loop0): Directory bread(block 70) failed [ 36.899764][ T3807] FAT-fs (loop0): Directory bread(block 71) failed [ 36.910180][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.913264][ T3807] FAT-fs (loop0): Directory bread(block 72) failed [ 36.926778][ T3807] FAT-fs (loop0): Directory bread(block 73) failed [ 36.975226][ T3631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.995065][ T3631] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.000549][ T3836] loop2: detected capacity change from 0 to 7 [ 37.017791][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.024965][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.342548][ T3846] loop3: detected capacity change from 0 to 128 [ 37.425998][ T3846] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.456577][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.463700][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.474896][ T3846] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.524034][ T3631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.534491][ T3631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.553134][ T3862] loop0: detected capacity change from 0 to 1024 [ 37.561365][ T3862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.571374][ T3862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.600697][ T3862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.630976][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.635636][ T3631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.658276][ T3876] loop0: detected capacity change from 0 to 512 [ 37.665325][ T3876] EXT4-fs: Ignoring removed i_version option [ 37.693334][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.710834][ T3876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.724007][ T3876] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.772478][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.775366][ T3631] veth0_vlan: entered promiscuous mode [ 37.793274][ T3631] veth1_vlan: entered promiscuous mode [ 37.912513][ T3631] veth0_macvtap: entered promiscuous mode [ 37.921143][ T3631] veth1_macvtap: entered promiscuous mode [ 37.941184][ T3900] loop0: detected capacity change from 0 to 1024 [ 37.952439][ T3631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.962533][ T3900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.979644][ T3631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.266813][ T3667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.294642][ T3667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.331131][ T3900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.377955][ T3667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.471315][ T3667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.698154][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.203769][ T3927] loop5: detected capacity change from 0 to 128 [ 39.230672][ T3927] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.244423][ T3927] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.352036][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.451728][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.471175][ T3937] mmap: syz.3.129 (3937): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 39.491827][ T3631] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.530158][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.560768][ T3953] loop5: detected capacity change from 0 to 128 [ 39.572944][ T3954] loop3: detected capacity change from 0 to 512 [ 39.602315][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.622420][ T3961] usb usb8: usbfs: process 3961 (syz.2.134) did not claim interface 0 before use [ 39.653384][ T3953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.665052][ T3953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.792743][ T3975] loop2: detected capacity change from 0 to 512 [ 39.800421][ T3975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.819410][ T12] bridge_slave_1: left allmulticast mode [ 39.825135][ T12] bridge_slave_1: left promiscuous mode [ 39.830900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.843389][ T3975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 39.857059][ T12] bridge_slave_0: left allmulticast mode [ 39.860058][ T3975] System zones: 1-12 [ 39.862840][ T12] bridge_slave_0: left promiscuous mode [ 39.872342][ T3975] EXT4-fs (loop2): 1 truncate cleaned up [ 39.872359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.885754][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.954951][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.005593][ T4007] loop2: detected capacity change from 0 to 128 [ 40.014374][ T4007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.026697][ T4007] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.061468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.071227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.080642][ T12] bond0 (unregistering): Released all slaves [ 40.091682][ T3938] chnl_net:caif_netlink_parms(): no params data found [ 40.139139][ T12] hsr_slave_0: left promiscuous mode [ 40.146089][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 40.146101][ T29] audit: type=1400 audit(1757695383.889:199): avc: denied { create } for pid=4014 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.175717][ T12] hsr_slave_1: left promiscuous mode [ 40.192386][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.199894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.209327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.216738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.224061][ T29] audit: type=1400 audit(1757695383.899:200): avc: denied { write } for pid=4014 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.244069][ T29] audit: type=1400 audit(1757695383.899:201): avc: denied { nlmsg_write } for pid=4014 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.262596][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.264590][ T29] audit: type=1400 audit(1757695383.919:202): avc: denied { watch watch_reads } for pid=4016 comm="syz.0.145" path="/30" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.274652][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.305869][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.318228][ T29] audit: type=1400 audit(1757695384.049:203): avc: denied { execmem } for pid=4020 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.353963][ T29] audit: type=1400 audit(1757695384.099:204): avc: denied { create } for pid=4023 comm="syz.5.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.383795][ T29] audit: type=1400 audit(1757695384.119:205): avc: denied { bind } for pid=4023 comm="syz.5.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.403120][ T29] audit: type=1400 audit(1757695384.119:206): avc: denied { listen } for pid=4023 comm="syz.5.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.422640][ T29] audit: type=1400 audit(1757695384.119:207): avc: denied { connect } for pid=4023 comm="syz.5.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.422836][ T12] veth1_macvtap: left promiscuous mode [ 40.442523][ T29] audit: type=1400 audit(1757695384.119:208): avc: denied { ioctl } for pid=4023 comm="syz.5.149" path="socket:[6476]" dev="sockfs" ino=6476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.453315][ T12] veth0_macvtap: left promiscuous mode [ 40.483660][ T12] veth1_vlan: left promiscuous mode [ 40.488955][ T12] veth0_vlan: left promiscuous mode [ 40.565723][ T12] team0 (unregistering): Port device team_slave_1 removed [ 40.576796][ T12] team0 (unregistering): Port device team_slave_0 removed [ 40.825491][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.832769][ T3938] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.857073][ T3938] bridge_slave_0: entered allmulticast mode [ 40.885518][ T3938] bridge_slave_0: entered promiscuous mode [ 40.893505][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.900672][ T3938] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.907892][ T3938] bridge_slave_1: entered allmulticast mode [ 40.914328][ T3938] bridge_slave_1: entered promiscuous mode [ 40.933084][ T4042] loop2: detected capacity change from 0 to 512 [ 40.954951][ T4042] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.150: casefold flag without casefold feature [ 40.971950][ T3938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.983614][ T3938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.003593][ T4042] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.150: couldn't read orphan inode 15 (err -117) [ 41.016882][ T4042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.030270][ T3938] team0: Port device team_slave_0 added [ 41.043855][ T3938] team0: Port device team_slave_1 added [ 41.055493][ T4042] netlink: 'syz.2.150': attribute type 9 has an invalid length. [ 41.063258][ T4042] netlink: 'syz.2.150': attribute type 6 has an invalid length. [ 41.103815][ T3938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.110851][ T3938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.137000][ T3938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.154288][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.211312][ T3938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.218260][ T3938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.244756][ T3938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.348011][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.377171][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.393035][ T3938] hsr_slave_0: entered promiscuous mode [ 41.399055][ T3938] hsr_slave_1: entered promiscuous mode [ 41.405066][ T3938] debugfs: 'hsr0' already exists in 'hsr' [ 41.410814][ T3938] Cannot create hsr debugfs directory [ 41.503376][ T4094] loop5: detected capacity change from 0 to 1024 [ 41.520092][ T4094] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.572153][ T3938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.581038][ T3938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.588127][ T4094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.602423][ T3938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.621806][ T3938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.624889][ T4101] loop0: detected capacity change from 0 to 2048 [ 41.637547][ T4094] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.660020][ T4094] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.661736][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.672260][ T4094] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.672260][ T4094] [ 41.679264][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.688876][ T4094] EXT4-fs (loop5): Total free blocks count 0 [ 41.696119][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.702050][ T4094] EXT4-fs (loop5): Free/Dirty block details [ 41.709094][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.714966][ T4094] EXT4-fs (loop5): free_blocks=68451041280 [ 41.727947][ T4094] EXT4-fs (loop5): dirty_blocks=80 [ 41.733132][ T4094] EXT4-fs (loop5): Block reservation details [ 41.739130][ T4094] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 41.757598][ T4113] loop2: detected capacity change from 0 to 2048 [ 41.766543][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.771073][ T4101] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.788235][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.797951][ T4094] syz.5.165 (4094) used greatest stack depth: 9864 bytes left [ 41.821026][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 41.844790][ T4113] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.921161][ T3938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.939727][ T3938] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.950698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.957830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.969244][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.976301][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.982438][ T4077] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.000694][ T3302] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 42.013589][ T4077] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 42.025814][ T4077] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.025814][ T4077] [ 42.036018][ T4077] EXT4-fs (loop0): Total free blocks count 0 [ 42.042068][ T4077] EXT4-fs (loop0): Free/Dirty block details [ 42.043541][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 42.047959][ T4077] EXT4-fs (loop0): free_blocks=2415919104 [ 42.047975][ T4077] EXT4-fs (loop0): dirty_blocks=16 [ 42.047987][ T4077] EXT4-fs (loop0): Block reservation details [ 42.047996][ T4077] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 42.089017][ T3938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.099498][ T3938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.135026][ T4145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.147901][ T4145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.229345][ T3938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.320024][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.174'. [ 42.402514][ T3938] veth0_vlan: entered promiscuous mode [ 42.410562][ T3938] veth1_vlan: entered promiscuous mode [ 42.425402][ T3938] veth0_macvtap: entered promiscuous mode [ 42.433051][ T3938] veth1_macvtap: entered promiscuous mode [ 42.444379][ T3938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.458155][ T3938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.469707][ T401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.478572][ T401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.487942][ T401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.498251][ T401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.538473][ T4182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.547581][ T4182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.602547][ T3667] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 4 with error 28 [ 42.604116][ T4186] loop6: detected capacity change from 0 to 2048 [ 42.641131][ T4186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.724278][ T3938] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.739582][ T4198] loop2: detected capacity change from 0 to 512 [ 42.746380][ T4198] EXT4-fs: quotafile must be on filesystem root [ 42.776542][ T4201] loop0: detected capacity change from 0 to 512 [ 42.803761][ T4201] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.823224][ T4201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.840011][ T4201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.854436][ T4201] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.914951][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.962924][ T4222] loop0: detected capacity change from 0 to 2048 [ 43.003174][ T4222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.024730][ T4235] syz.2.209 uses obsolete (PF_INET,SOCK_PACKET) [ 43.183426][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.184389][ T4245] loop2: detected capacity change from 0 to 512 [ 43.225725][ T4259] loop5: detected capacity change from 0 to 128 [ 43.278690][ T4245] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.355006][ T4264] loop0: detected capacity change from 0 to 512 [ 43.362675][ T4262] loop6: detected capacity change from 0 to 1024 [ 43.375072][ T4259] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.393884][ T4245] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.432916][ T4262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.466555][ T4245] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.200: Failed to acquire dquot type 1 [ 43.498180][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.527679][ T4259] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.566020][ T4264] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.577431][ T4245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.200: bg 0: block 40: padding at end of block bitmap is not set [ 43.592891][ T3938] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.593022][ T4245] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 43.621216][ T4245] EXT4-fs (loop2): 1 truncate cleaned up [ 43.628389][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.630111][ T4245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.722901][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.761330][ T3631] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.807200][ T4285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.820902][ T4285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.977193][ T4298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.993110][ T4298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.513110][ T4313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.527533][ T4313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.549655][ T4318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.558152][ T4318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.579471][ T4306] loop2: detected capacity change from 0 to 2048 [ 44.591586][ T4306] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.658912][ T4306] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.674655][ T4306] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 44.686841][ T4306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.686841][ T4306] [ 44.696571][ T4306] EXT4-fs (loop2): Total free blocks count 0 [ 44.702642][ T4306] EXT4-fs (loop2): Free/Dirty block details [ 44.708527][ T4306] EXT4-fs (loop2): free_blocks=2415919104 [ 44.714362][ T4306] EXT4-fs (loop2): dirty_blocks=16 [ 44.719495][ T4306] EXT4-fs (loop2): Block reservation details [ 44.725473][ T4306] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 44.841819][ T4330] tracefs: Bad value for 'uid' [ 44.846606][ T4330] tracefs: Bad value for 'uid' [ 44.903012][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.952296][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.002266][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.054237][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.067210][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 45.091470][ T4344] loop6: detected capacity change from 0 to 256 [ 45.158975][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.166183][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.174374][ T4332] bridge_slave_0: entered allmulticast mode [ 45.180794][ T4332] bridge_slave_0: entered promiscuous mode [ 45.187421][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.194667][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.201850][ T4332] bridge_slave_1: entered allmulticast mode [ 45.208404][ T4332] bridge_slave_1: entered promiscuous mode [ 45.236708][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.263826][ T401] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 4 with error 28 [ 45.302625][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.314083][ T12] bridge_slave_1: left allmulticast mode [ 45.319761][ T12] bridge_slave_1: left promiscuous mode [ 45.325397][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.346124][ T12] bridge_slave_0: left allmulticast mode [ 45.351945][ T12] bridge_slave_0: left promiscuous mode [ 45.357652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.372873][ T4358] loop2: detected capacity change from 0 to 1024 [ 45.400444][ T4358] EXT4-fs: Ignoring removed orlov option [ 45.406146][ T4358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.482074][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.499629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.533077][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 45.533090][ T29] audit: type=1400 audit(1757695389.279:225): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.565605][ T12] bond0 (unregistering): Released all slaves [ 45.582509][ T4358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.598006][ T4376] loop3: detected capacity change from 0 to 1024 [ 45.622661][ T4376] EXT4-fs: inline encryption not supported [ 45.628533][ T4376] EXT4-fs: Ignoring removed i_version option [ 45.653693][ T12] hsr_slave_0: left promiscuous mode [ 45.664643][ T29] audit: type=1400 audit(1757695389.399:226): avc: denied { create } for pid=4357 comm="syz.2.240" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.706588][ T12] hsr_slave_1: left promiscuous mode [ 45.708895][ T4376] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.712598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.725057][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.729842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.744089][ T4376] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.241: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.759943][ T4376] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 45.761446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.768349][ T4376] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.241: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.775552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.801347][ T12] veth1_macvtap: left promiscuous mode [ 45.803365][ T4376] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 45.807239][ T12] veth0_macvtap: left promiscuous mode [ 45.815695][ T4376] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.241: Failed to acquire dquot type 0 [ 45.821675][ T12] veth1_vlan: left promiscuous mode [ 45.837813][ T12] veth0_vlan: left promiscuous mode [ 45.840930][ T4376] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.853836][ T4376] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.241: mark_inode_dirty error [ 45.865223][ T4376] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.875808][ T4376] EXT4-fs (loop3): 1 orphan inode deleted [ 45.883260][ T4376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.895592][ T3667] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.910038][ T3667] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 45.918475][ T3667] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 45.918878][ T4376] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.241: Invalid inode table block 1 in block_group 0 [ 45.945791][ T4376] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.966216][ T4376] EXT4-fs error (device loop3): ext4_setattr:5913: inode #2: comm syz.3.241: mark_inode_dirty error [ 45.990633][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.999905][ T4382] loop0: detected capacity change from 0 to 512 [ 46.008362][ T4382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.014126][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.026464][ T3903] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.026627][ T12] team0 (unregistering): Port device team_slave_0 removed [ 46.046498][ T3903] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 46.056265][ T3903] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 46.073489][ T4382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.086338][ T4382] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.100570][ T4382] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.243: corrupted xattr block 19: overlapping e_value [ 46.117394][ T3309] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 46.131698][ T3309] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 46.142641][ T4382] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 46.152751][ T3309] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 46.155009][ T4382] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.243: corrupted xattr block 19: overlapping e_value [ 46.178552][ T4382] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 46.189402][ T4382] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.243: corrupted xattr block 19: overlapping e_value [ 46.223656][ T4332] team0: Port device team_slave_0 added [ 46.243484][ T4332] team0: Port device team_slave_1 added [ 46.257351][ T4382] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 46.306425][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.313468][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.339486][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.385165][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.399848][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.406916][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.432883][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.446735][ T29] audit: type=1400 audit(1757695390.179:227): avc: denied { name_bind } for pid=4405 comm="syz.6.253" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.484362][ T29] audit: type=1400 audit(1757695390.219:228): avc: denied { map } for pid=4391 comm="syz.3.247" path="socket:[7082]" dev="sockfs" ino=7082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.515890][ T4414] loop2: detected capacity change from 0 to 512 [ 46.621899][ T4332] hsr_slave_0: entered promiscuous mode [ 46.627954][ T4332] hsr_slave_1: entered promiscuous mode [ 46.650839][ T4426] netlink: 148 bytes leftover after parsing attributes in process `syz.6.259'. [ 46.682004][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.686934][ T4332] debugfs: 'hsr0' already exists in 'hsr' [ 46.696124][ T4332] Cannot create hsr debugfs directory [ 46.698405][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.734698][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.744389][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.893569][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.911523][ T4332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 46.918756][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.932240][ T4332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 46.941625][ T4332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 46.952716][ T4332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 46.996793][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.012979][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.022491][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.029596][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.046848][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.053958][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.075971][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.086423][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.148797][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.323851][ T4332] veth0_vlan: entered promiscuous mode [ 47.335014][ T4332] veth1_vlan: entered promiscuous mode [ 47.366635][ T4332] veth0_macvtap: entered promiscuous mode [ 47.380479][ T4332] veth1_macvtap: entered promiscuous mode [ 47.407624][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.419443][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.502075][ T4518] loop0: detected capacity change from 0 to 512 [ 47.545303][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.559242][ T29] audit: type=1400 audit(1757695391.309:229): avc: denied { write } for pid=4520 comm="syz.3.271" name="sockstat6" dev="proc" ino=4026532694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.708030][ T29] audit: type=1400 audit(1757695391.409:230): avc: denied { ioctl } for pid=4515 comm="syz.6.269" path="socket:[9278]" dev="sockfs" ino=9278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.772839][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.841608][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.932297][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.060094][ T4542] loop7: detected capacity change from 0 to 1024 [ 48.076633][ T4542] EXT4-fs: inline encryption not supported [ 48.108800][ T4542] EXT4-fs: Ignoring removed bh option [ 48.131815][ T4542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.411796][ T4332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.663724][ T4559] loop6: detected capacity change from 0 to 512 [ 48.822455][ T4568] loop7: detected capacity change from 0 to 128 [ 48.838411][ T4568] EXT4-fs: Ignoring removed nobh option [ 48.867724][ T4568] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.876406][ T4572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.897323][ T4568] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.932109][ T4572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.074056][ T4580] loop0: detected capacity change from 0 to 1764 [ 49.118028][ T4582] loop3: detected capacity change from 0 to 128 [ 49.135092][ T4332] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.161289][ T4582] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.225844][ T4582] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.366200][ T4602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.395151][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.405389][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.456569][ T4616] capability: warning: `syz.2.298' uses deprecated v2 capabilities in a way that may be insecure [ 49.537501][ T4627] tracefs: Bad value for 'uid' [ 49.542354][ T4627] tracefs: Bad value for 'uid' [ 49.555725][ T4630] loop3: detected capacity change from 0 to 128 [ 49.565519][ T4630] EXT4-fs: Ignoring removed nobh option [ 49.591269][ T4631] loop6: detected capacity change from 0 to 512 [ 49.623756][ T4630] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.630149][ T4631] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.301: casefold flag without casefold feature [ 49.650220][ T4630] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.661893][ T4631] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.301: couldn't read orphan inode 15 (err -117) [ 49.674459][ T4631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.854136][ T4666] loop3: detected capacity change from 0 to 128 [ 49.876864][ T4666] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.896783][ T4663] loop6: detected capacity change from 0 to 8192 [ 49.949587][ T3292] loop6: p1 p2 p4 < > [ 49.953712][ T3292] loop6: partition table partially beyond EOD, truncated [ 49.975840][ T3292] loop6: p1 start 16777216 is beyond EOD, truncated [ 49.982517][ T3292] loop6: p2 size 515840 extends beyond EOD, truncated [ 49.999789][ T3292] loop6: p4 start 16777216 is beyond EOD, truncated [ 50.013267][ T4663] loop6: p1 p2 p4 < > [ 50.017348][ T4663] loop6: partition table partially beyond EOD, truncated [ 50.024605][ T4663] loop6: p1 start 16777216 is beyond EOD, truncated [ 50.031256][ T4663] loop6: p2 size 515840 extends beyond EOD, truncated [ 50.039984][ T4663] loop6: p4 start 16777216 is beyond EOD, truncated [ 50.100354][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 50.162501][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 50.247918][ T4697] loop6: detected capacity change from 0 to 128 [ 50.261654][ T4697] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.508303][ T4729] loop0: detected capacity change from 0 to 256 [ 50.542450][ T4729] FAT-fs (loop0): Directory bread(block 64) failed [ 50.558638][ T4729] FAT-fs (loop0): Directory bread(block 65) failed [ 50.587966][ T4729] FAT-fs (loop0): Directory bread(block 66) failed [ 50.616976][ T4729] FAT-fs (loop0): Directory bread(block 67) failed [ 50.634151][ T4729] FAT-fs (loop0): Directory bread(block 68) failed [ 50.641696][ T4729] FAT-fs (loop0): Directory bread(block 69) failed [ 50.657586][ T4729] FAT-fs (loop0): Directory bread(block 70) failed [ 50.676091][ T4729] FAT-fs (loop0): Directory bread(block 71) failed [ 50.686183][ T4729] FAT-fs (loop0): Directory bread(block 72) failed [ 50.707443][ T4729] FAT-fs (loop0): Directory bread(block 73) failed [ 50.931129][ T4766] netlink: 'syz.6.339': attribute type 1 has an invalid length. [ 50.938839][ T4766] netlink: 'syz.6.339': attribute type 2 has an invalid length. [ 50.993732][ T4769] loop0: detected capacity change from 0 to 128 [ 51.000607][ T4769] EXT4-fs: Ignoring removed nobh option [ 51.025204][ T4769] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.053659][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 51.053673][ T29] audit: type=1400 audit(1757695394.799:592): avc: denied { shutdown } for pid=4778 comm="syz.6.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.256165][ T4788] loop2: detected capacity change from 0 to 1024 [ 51.264830][ T4788] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.276373][ T4788] JBD2: no valid journal superblock found [ 51.282142][ T4788] EXT4-fs (loop2): Could not load journal inode [ 51.535917][ T4802] loop7: detected capacity change from 0 to 128 [ 51.552680][ T29] audit: type=1400 audit(1757695395.299:593): avc: denied { checkpoint_restore } for pid=4795 comm="syz.6.351" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.579705][ T4800] loop0: detected capacity change from 0 to 1024 [ 51.597154][ T4800] EXT4-fs: inline encryption not supported [ 51.604226][ T4800] EXT4-fs: Ignoring removed nobh option [ 51.609829][ T4800] EXT4-fs: Ignoring removed bh option [ 51.658310][ T4806] loop6: detected capacity change from 0 to 256 [ 51.722004][ T4806] FAT-fs (loop6): Directory bread(block 64) failed [ 51.734515][ T4806] FAT-fs (loop6): Directory bread(block 65) failed [ 51.750748][ T4806] FAT-fs (loop6): Directory bread(block 66) failed [ 51.764870][ T4806] FAT-fs (loop6): Directory bread(block 67) failed [ 51.778760][ T4806] FAT-fs (loop6): Directory bread(block 68) failed [ 51.793442][ T4806] FAT-fs (loop6): Directory bread(block 69) failed [ 51.808777][ T4806] FAT-fs (loop6): Directory bread(block 70) failed [ 51.826268][ T4806] FAT-fs (loop6): Directory bread(block 71) failed [ 51.840267][ T4806] FAT-fs (loop6): Directory bread(block 72) failed [ 51.855262][ T4806] FAT-fs (loop6): Directory bread(block 73) failed [ 51.914383][ T4806] bio_check_eod: 8 callbacks suppressed [ 51.914399][ T4806] syz.6.354: attempt to access beyond end of device [ 51.914399][ T4806] loop6: rw=2049, sector=1888, nr_sectors = 8 limit=256 [ 51.961717][ T29] audit: type=1400 audit(1757695395.699:594): avc: denied { create } for pid=4798 comm="syz.0.347" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.981910][ T29] audit: type=1400 audit(1757695395.699:595): avc: denied { listen } for pid=4810 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.002829][ T4800] Trying to write to read-only block-device loop0 [ 52.022202][ T4811] loop2: detected capacity change from 0 to 1024 [ 52.037870][ T2842] kworker/u8:5: attempt to access beyond end of device [ 52.037870][ T2842] loop6: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 52.040970][ T29] audit: type=1400 audit(1757695395.749:596): avc: denied { read write open } for pid=4798 comm="syz.0.347" path="/86/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.055034][ T4811] EXT4-fs: Ignoring removed orlov option [ 52.074801][ T29] audit: type=1400 audit(1757695395.749:597): avc: denied { mounton } for pid=4798 comm="syz.0.347" path="/86/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.080485][ T2842] kworker/u8:5: attempt to access beyond end of device [ 52.080485][ T2842] loop6: rw=1, sector=1864, nr_sectors = 24 limit=256 [ 52.137913][ T29] audit: type=1400 audit(1757695395.879:598): avc: denied { rmdir } for pid=3301 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.161119][ T29] audit: type=1400 audit(1757695395.879:599): avc: denied { unlink } for pid=3301 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 52.192061][ T4819] loop3: detected capacity change from 0 to 1024 [ 52.199662][ T29] audit: type=1400 audit(1757695395.949:600): avc: denied { unlink } for pid=3301 comm="syz-executor" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.295868][ T4827] loop6: detected capacity change from 0 to 4096 [ 52.313082][ T4811] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 52.496464][ T4843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.524412][ T4840] loop0: detected capacity change from 0 to 512 [ 52.588943][ T4840] ext4: Unknown parameter 'noacl' [ 52.644348][ T4843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.982334][ T4869] loop2: detected capacity change from 0 to 4096 [ 53.070847][ T4879] loop7: detected capacity change from 0 to 128 [ 53.102115][ T4879] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.141751][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.373'. [ 53.308157][ T4910] loop0: detected capacity change from 0 to 512 [ 53.387504][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 53.504924][ T4931] loop0: detected capacity change from 0 to 512 [ 53.646137][ T29] audit: type=1400 audit(1757695397.389:601): avc: denied { write } for pid=4942 comm="syz.7.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.769365][ T4947] loop3: detected capacity change from 0 to 1024 [ 53.796385][ T4947] EXT4-fs: inline encryption not supported [ 53.827981][ T4947] EXT4-fs: Ignoring removed nobh option [ 53.833624][ T4947] EXT4-fs: Ignoring removed bh option [ 53.875359][ T4947] Trying to write to read-only block-device loop3 [ 53.946565][ T4961] loop3: detected capacity change from 0 to 1024 [ 53.967904][ T4961] EXT4-fs: Ignoring removed nobh option [ 53.973556][ T4961] EXT4-fs: Ignoring removed bh option [ 54.296512][ T4986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.402'. [ 54.676068][ T4993] SELinux: failed to load policy [ 55.047646][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 55.061132][ T5014] loop7: detected capacity change from 0 to 512 [ 55.079153][ T5011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.083780][ T5014] journal_path: Non-blockdev passed as './file1' [ 55.086535][ T5011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.092896][ T5014] EXT4-fs: error: could not find journal device path [ 55.185559][ T5020] loop7: detected capacity change from 0 to 4096 [ 55.201066][ T5011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.208481][ T5011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.274228][ T5020] syzkaller1: entered promiscuous mode [ 55.279848][ T5020] syzkaller1: entered allmulticast mode [ 55.459723][ T5026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.555650][ T5032] netlink: 'syz.0.416': attribute type 10 has an invalid length. [ 55.564192][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.571360][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.597151][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.604525][ T5032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.611896][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.619127][ T5032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.629265][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 55.630022][ T5032] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 55.657883][ T5026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.691128][ T5034] bridge_slave_1: left allmulticast mode [ 55.696898][ T5034] bridge_slave_1: left promiscuous mode [ 55.702626][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.714565][ T5034] bridge_slave_0: left allmulticast mode [ 55.720284][ T5034] bridge_slave_0: left promiscuous mode [ 55.726086][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.738887][ T5034] bond0: (slave bridge0): Releasing backup interface [ 55.804882][ T5026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.874925][ T5037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.925792][ T5026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.976432][ T5037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.029511][ T3667] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.047790][ T3667] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.059779][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 56.059834][ T29] audit: type=1326 audit(1757695399.799:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.089503][ T29] audit: type=1326 audit(1757695399.799:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.112764][ T29] audit: type=1326 audit(1757695399.799:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.136048][ T29] audit: type=1326 audit(1757695399.799:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.159283][ T29] audit: type=1326 audit(1757695399.799:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.182553][ T29] audit: type=1326 audit(1757695399.799:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.206235][ T29] audit: type=1326 audit(1757695399.799:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.229565][ T29] audit: type=1326 audit(1757695399.799:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.252883][ T29] audit: type=1326 audit(1757695399.799:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.276099][ T29] audit: type=1326 audit(1757695399.799:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a675ada9 code=0x7ffc0000 [ 56.303476][ T5037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.322945][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.335680][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.363248][ T5037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.423365][ T5039] ref_ctr increment failed for inode: 0x1ba offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811ade3f40 [ 56.426958][ T3903] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.454174][ T5038] uprobe: syz.3.418:5038 failed to unregister, leaking uprobe [ 56.471677][ T3903] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.489186][ T3903] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.497432][ T3903] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.578429][ T5043] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 56.586710][ T5043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'. [ 56.605379][ T5043] dummy0: entered promiscuous mode [ 56.618917][ T5043] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 56.863423][ T5049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 56.964004][ T5044] syz_tun: entered allmulticast mode [ 57.205652][ T5057] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 57.216880][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.224161][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.235935][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.237179][ T5055] loop6: detected capacity change from 0 to 512 [ 57.243167][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.243413][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.263974][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.274358][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 57.276900][ T5057] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 57.285914][ T5055] journal_path: Non-blockdev passed as './file1' [ 57.298196][ T5055] EXT4-fs: error: could not find journal device path [ 57.307821][ T5058] bridge_slave_1: left allmulticast mode [ 57.313595][ T5058] bridge_slave_1: left promiscuous mode [ 57.319305][ T5058] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.336370][ T5058] bridge_slave_0: left allmulticast mode [ 57.342074][ T5058] bridge_slave_0: left promiscuous mode [ 57.347744][ T5058] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.368358][ T5058] bond0: (slave bridge0): Releasing backup interface [ 57.389616][ T5060] loop6: detected capacity change from 0 to 4096 [ 57.430087][ T5040] syz_tun: left allmulticast mode [ 57.663349][ T5072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.427'. [ 57.681490][ T5071] ref_ctr increment failed for inode: 0x1c5 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811ade2e00 [ 57.693231][ T5070] uprobe: syz.3.429:5070 failed to unregister, leaking uprobe [ 57.760207][ T5078] syzkaller1: entered promiscuous mode [ 57.765748][ T5078] syzkaller1: entered allmulticast mode [ 57.819948][ T5082] loop3: detected capacity change from 0 to 128 [ 57.948606][ T5085] tipc: Started in network mode [ 57.953703][ T5085] tipc: Node identity 62a0683abfa6, cluster identity 4711 [ 57.960971][ T5085] tipc: Enabled bearer , priority 0 [ 58.006648][ T5084] tipc: Resetting bearer [ 58.027696][ T5084] tipc: Disabling bearer [ 58.076934][ T5091] SELinux: failed to load policy [ 58.162909][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 58.175315][ T5094] loop3: detected capacity change from 0 to 4096 [ 58.229378][ T5094] syzkaller1: entered promiscuous mode [ 58.234893][ T5094] syzkaller1: entered allmulticast mode [ 58.550534][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 58.593271][ T5131] sd 0:0:1:0: device reset [ 58.697589][ T5136] netlink: 'syz.7.444': attribute type 10 has an invalid length. [ 58.714066][ T5136] team0: Port device dummy0 added [ 58.759302][ T5136] netlink: 'syz.7.444': attribute type 10 has an invalid length. [ 58.777777][ T5136] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.847242][ T5136] team0: Failed to send options change via netlink (err -105) [ 58.878318][ T5155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.446'. [ 58.901940][ T5136] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.944742][ T5136] team0: Port device dummy0 removed [ 59.022873][ T5136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.557114][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 59.747935][ T5203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.852498][ T5203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.982822][ T5203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.052874][ T5203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.182053][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.206005][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.238612][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.281845][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.350517][ T5208] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 60.358767][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 60.542153][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.457'. [ 60.734237][ T5214] syz_tun: entered allmulticast mode [ 60.744523][ T5222] loop0: detected capacity change from 0 to 512 [ 60.761610][ T5222] journal_path: Non-blockdev passed as './file1' [ 60.768120][ T5222] EXT4-fs: error: could not find journal device path [ 60.832621][ T5224] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 60.840894][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 61.232506][ T5209] syz_tun: left allmulticast mode [ 61.250819][ T5239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.465'. [ 61.307225][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 61.703948][ T5184] syz.7.451 (5184) used greatest stack depth: 6904 bytes left [ 61.729051][ T29] kauditd_printk_skb: 2406 callbacks suppressed [ 61.735385][ T29] audit: type=1400 audit(1757695405.469:3470): avc: denied { execute } for pid=5246 comm="syz.0.468" path="/104/memory.events" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.742774][ T5247] SELinux: failed to load policy [ 61.758882][ T5249] ref_ctr increment failed for inode: 0x23b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811ade2e00 [ 61.787837][ T5250] loop6: detected capacity change from 0 to 4096 [ 61.811803][ T5246] uprobe: syz.0.468:5246 failed to unregister, leaking uprobe [ 61.863515][ T5250] syzkaller1: entered promiscuous mode [ 61.869146][ T5250] syzkaller1: entered allmulticast mode [ 61.996375][ T5258] ref_ctr increment failed for inode: 0x241 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811ade2e00 [ 62.018185][ T5262] loop3: detected capacity change from 0 to 1024 [ 62.025164][ T5257] uprobe: syz.0.473:5257 failed to unregister, leaking uprobe [ 62.069390][ T5262] EXT4-fs: Ignoring removed orlov option [ 62.141648][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 62.261217][ C0] hrtimer: interrupt took 27411 ns [ 62.331815][ T5289] FAULT_INJECTION: forcing a failure. [ 62.331815][ T5289] name failslab, interval 1, probability 0, space 0, times 1 [ 62.344584][ T5289] CPU: 0 UID: 0 PID: 5289 Comm: syz.7.483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.344610][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.344621][ T5289] Call Trace: [ 62.344627][ T5289] [ 62.344634][ T5289] __dump_stack+0x1d/0x30 [ 62.344651][ T5289] dump_stack_lvl+0xe8/0x140 [ 62.344666][ T5289] dump_stack+0x15/0x1b [ 62.344678][ T5289] should_fail_ex+0x265/0x280 [ 62.344701][ T5289] should_failslab+0x8c/0xb0 [ 62.344724][ T5289] kmem_cache_alloc_noprof+0x50/0x310 [ 62.344750][ T5289] ? vm_area_dup+0x33/0x2c0 [ 62.344774][ T5289] vm_area_dup+0x33/0x2c0 [ 62.344801][ T5289] __split_vma+0xe9/0x650 [ 62.344826][ T5289] ? avc_has_perm+0xf7/0x180 [ 62.344852][ T5289] vms_gather_munmap_vmas+0x17a/0x7b0 [ 62.344872][ T5289] ? __rcu_read_unlock+0x4f/0x70 [ 62.344889][ T5289] ? mntput_no_expire+0x6f/0x460 [ 62.344913][ T5289] do_vmi_align_munmap+0x1a4/0x3d0 [ 62.344939][ T5289] do_vmi_munmap+0x1db/0x220 [ 62.344961][ T5289] mremap_at+0x110/0x630 [ 62.344988][ T5289] __se_sys_mremap+0x6ea/0xb40 [ 62.345019][ T5289] ? fput+0x8f/0xc0 [ 62.345046][ T5289] ? ksys_write+0x192/0x1a0 [ 62.345068][ T5289] __x64_sys_mremap+0x67/0x80 [ 62.345092][ T5289] x64_sys_call+0x2a24/0x2ff0 [ 62.345115][ T5289] do_syscall_64+0xd2/0x200 [ 62.345139][ T5289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.345156][ T5289] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.345184][ T5289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.345203][ T5289] RIP: 0033:0x7fe7fd17eba9 [ 62.345216][ T5289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.345230][ T5289] RSP: 002b:00007fe7fbbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 62.345248][ T5289] RAX: ffffffffffffffda RBX: 00007fe7fd3c5fa0 RCX: 00007fe7fd17eba9 [ 62.345261][ T5289] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 62.345273][ T5289] RBP: 00007fe7fbbe7090 R08: 00002000008b5000 R09: 0000000000000000 [ 62.345284][ T5289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.345296][ T5289] R13: 00007fe7fd3c6038 R14: 00007fe7fd3c5fa0 R15: 00007ffd78c18ee8 [ 62.345314][ T5289] [ 62.605652][ T29] audit: type=1400 audit(1757695406.329:3471): avc: denied { create } for pid=5290 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.712834][ T29] audit: type=1326 audit(1757695406.439:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.736249][ T29] audit: type=1326 audit(1757695406.439:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.759654][ T29] audit: type=1326 audit(1757695406.439:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.782959][ T29] audit: type=1326 audit(1757695406.439:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.806274][ T29] audit: type=1326 audit(1757695406.439:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.829564][ T29] audit: type=1326 audit(1757695406.439:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.852963][ T29] audit: type=1326 audit(1757695406.439:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.876295][ T29] audit: type=1326 audit(1757695406.439:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 62.987362][ T5305] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.030261][ T5301] netlink: 'syz.7.486': attribute type 10 has an invalid length. [ 63.038147][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.039531][ T5305] SELinux: failed to load policy [ 63.045389][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.164219][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.171501][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.178893][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.185971][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.265489][ T5301] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 63.302191][ T5311] bridge_slave_1: left allmulticast mode [ 63.307863][ T5311] bridge_slave_1: left promiscuous mode [ 63.313600][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.347127][ T5317] __nla_validate_parse: 4 callbacks suppressed [ 63.347141][ T5317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 63.369399][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 63.459711][ T5311] bridge_slave_0: left allmulticast mode [ 63.465406][ T5311] bridge_slave_0: left promiscuous mode [ 63.471107][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.507504][ T5311] bond0: (slave bridge0): Releasing backup interface [ 63.683817][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.497'. [ 63.710734][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.497'. [ 63.897152][ T5334] loop0: detected capacity change from 0 to 2048 [ 63.975344][ T5339] lo speed is unknown, defaulting to 1000 [ 63.981908][ T5339] lo speed is unknown, defaulting to 1000 [ 63.988073][ T5339] lo speed is unknown, defaulting to 1000 [ 64.034996][ T5339] infiniband sz1: set active [ 64.039748][ T5339] infiniband sz1: added lo [ 64.047234][ T805] lo speed is unknown, defaulting to 1000 [ 64.213228][ T5339] RDS/IB: sz1: added [ 64.217369][ T5339] smc: adding ib device sz1 with port count 1 [ 64.223575][ T5339] smc: ib device sz1 port 1 has pnetid [ 64.229979][ T5339] lo speed is unknown, defaulting to 1000 [ 64.280805][ T5339] lo speed is unknown, defaulting to 1000 [ 64.332041][ T5339] lo speed is unknown, defaulting to 1000 [ 64.381768][ T5339] lo speed is unknown, defaulting to 1000 [ 64.433129][ T5339] lo speed is unknown, defaulting to 1000 [ 64.559503][ T805] lo speed is unknown, defaulting to 1000 [ 64.610196][ T5346] netlink: 14 bytes leftover after parsing attributes in process `syz.0.498'. [ 64.622386][ T5348] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 64.666272][ T5348] SELinux: failed to load policy [ 64.683387][ T5350] loop7: detected capacity change from 0 to 1024 [ 64.690135][ T5346] hsr_slave_0: left promiscuous mode [ 64.695806][ T5346] hsr_slave_1: left promiscuous mode [ 64.746782][ T5355] loop6: detected capacity change from 0 to 512 [ 64.757284][ T5355] ext4: Unknown parameter 'audit' [ 64.831106][ T5357] loop3: detected capacity change from 0 to 2048 [ 64.845008][ T5350] EXT4-fs: Ignoring removed nobh option [ 64.850627][ T5350] EXT4-fs: Ignoring removed bh option [ 64.903444][ T5334] Alternate GPT is invalid, using primary GPT. [ 64.909772][ T5334] loop0: p2 p3 p7 [ 64.909882][ T5350] FAULT_INJECTION: forcing a failure. [ 64.909882][ T5350] name failslab, interval 1, probability 0, space 0, times 0 [ 64.926189][ T5350] CPU: 1 UID: 0 PID: 5350 Comm: syz.7.501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.926217][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.926236][ T5350] Call Trace: [ 64.926243][ T5350] [ 64.926271][ T5350] __dump_stack+0x1d/0x30 [ 64.926289][ T5350] dump_stack_lvl+0xe8/0x140 [ 64.926304][ T5350] dump_stack+0x15/0x1b [ 64.926319][ T5350] should_fail_ex+0x265/0x280 [ 64.926342][ T5350] should_failslab+0x8c/0xb0 [ 64.926398][ T5350] __kmalloc_cache_node_noprof+0x54/0x320 [ 64.926461][ T5350] ? __get_vm_area_node+0x106/0x1d0 [ 64.926491][ T5350] __get_vm_area_node+0x106/0x1d0 [ 64.926519][ T5350] __vmalloc_node_range_noprof+0x273/0xe00 [ 64.926625][ T5350] ? sel_write_load+0x158/0x380 [ 64.926711][ T5350] ? __rcu_read_unlock+0x4f/0x70 [ 64.926734][ T5350] ? sel_write_load+0x158/0x380 [ 64.926757][ T5350] vmalloc_noprof+0x82/0xc0 [ 64.926843][ T5350] ? sel_write_load+0x158/0x380 [ 64.926863][ T5350] sel_write_load+0x158/0x380 [ 64.926882][ T5350] ? __pfx_sel_write_load+0x10/0x10 [ 64.926912][ T5350] vfs_write+0x269/0x960 [ 64.926991][ T5350] ? __rcu_read_unlock+0x4f/0x70 [ 64.927011][ T5350] ? __fget_files+0x184/0x1c0 [ 64.927037][ T5350] ksys_write+0xda/0x1a0 [ 64.927098][ T5350] __x64_sys_write+0x40/0x50 [ 64.927117][ T5350] x64_sys_call+0x27fe/0x2ff0 [ 64.927157][ T5350] do_syscall_64+0xd2/0x200 [ 64.927187][ T5350] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.927208][ T5350] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.927316][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.927349][ T5350] RIP: 0033:0x7fe7fd17eba9 [ 64.927407][ T5350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.927423][ T5350] RSP: 002b:00007fe7fbbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.927439][ T5350] RAX: ffffffffffffffda RBX: 00007fe7fd3c5fa0 RCX: 00007fe7fd17eba9 [ 64.927492][ T5350] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000007 [ 64.927511][ T5350] RBP: 00007fe7fbbe7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.927522][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.927533][ T5350] R13: 00007fe7fd3c6038 R14: 00007fe7fd3c5fa0 R15: 00007ffd78c18ee8 [ 64.927606][ T5350] [ 64.927613][ T5350] syz.7.501: vmalloc error: size 65448, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 65.170497][ T5350] CPU: 1 UID: 0 PID: 5350 Comm: syz.7.501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.170540][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.170577][ T5350] Call Trace: [ 65.170583][ T5350] [ 65.170590][ T5350] __dump_stack+0x1d/0x30 [ 65.170608][ T5350] dump_stack_lvl+0xe8/0x140 [ 65.170624][ T5350] dump_stack+0x15/0x1b [ 65.170637][ T5350] warn_alloc+0x12b/0x1a0 [ 65.170669][ T5350] __vmalloc_node_range_noprof+0x297/0xe00 [ 65.170821][ T5350] ? __rcu_read_unlock+0x4f/0x70 [ 65.170865][ T5350] ? sel_write_load+0x158/0x380 [ 65.170887][ T5350] vmalloc_noprof+0x82/0xc0 [ 65.170980][ T5350] ? sel_write_load+0x158/0x380 [ 65.171094][ T5350] sel_write_load+0x158/0x380 [ 65.171114][ T5350] ? __pfx_sel_write_load+0x10/0x10 [ 65.171145][ T5350] vfs_write+0x269/0x960 [ 65.171163][ T5350] ? __rcu_read_unlock+0x4f/0x70 [ 65.171180][ T5350] ? __fget_files+0x184/0x1c0 [ 65.171216][ T5350] ksys_write+0xda/0x1a0 [ 65.171293][ T5350] __x64_sys_write+0x40/0x50 [ 65.171315][ T5350] x64_sys_call+0x27fe/0x2ff0 [ 65.171333][ T5350] do_syscall_64+0xd2/0x200 [ 65.171361][ T5350] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.171420][ T5350] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.171448][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.171467][ T5350] RIP: 0033:0x7fe7fd17eba9 [ 65.171480][ T5350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.171495][ T5350] RSP: 002b:00007fe7fbbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.171514][ T5350] RAX: ffffffffffffffda RBX: 00007fe7fd3c5fa0 RCX: 00007fe7fd17eba9 [ 65.171546][ T5350] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000007 [ 65.171558][ T5350] RBP: 00007fe7fbbe7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.171569][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.171579][ T5350] R13: 00007fe7fd3c6038 R14: 00007fe7fd3c5fa0 R15: 00007ffd78c18ee8 [ 65.171661][ T5350] [ 65.374198][ T5350] Mem-Info: [ 65.377398][ T5350] active_anon:37205 inactive_anon:0 isolated_anon:0 [ 65.377398][ T5350] active_file:26935 inactive_file:2372 isolated_file:0 [ 65.377398][ T5350] unevictable:0 dirty:16 writeback:0 [ 65.377398][ T5350] slab_reclaimable:3558 slab_unreclaimable:15762 [ 65.377398][ T5350] mapped:44065 shmem:28948 pagetables:1592 [ 65.377398][ T5350] sec_pagetables:0 bounce:0 [ 65.377398][ T5350] kernel_misc_reclaimable:0 [ 65.377398][ T5350] free:1825294 free_pcp:30622 free_cma:0 [ 65.422652][ T5350] Node 0 active_anon:142672kB inactive_anon:0kB active_file:107740kB inactive_file:9488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176260kB dirty:64kB writeback:0kB shmem:109528kB kernel_stack:4032kB pagetables:6368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 65.450285][ T5350] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.479103][ T5350] lowmem_reserve[]: 0 2883 7862 7862 [ 65.484485][ T5350] Node 0 DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 65.514554][ T5350] lowmem_reserve[]: 0 0 4978 4978 [ 65.519698][ T5350] Node 0 Normal free:4360188kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:125040kB inactive_anon:0kB active_file:107740kB inactive_file:9488kB unevictable:0kB writepending:64kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:118904kB local_pcp:53840kB free_cma:0kB [ 65.551928][ T5350] lowmem_reserve[]: 0 0 0 0 [ 65.556506][ T5350] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 65.569318][ T5350] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB [ 65.585550][ T5350] Node 0 Normal: 1640*4kB (UME) 1092*8kB (UME) 615*16kB (UM) 391*32kB (UM) 218*64kB (UM) 71*128kB (UM) 28*256kB (UM) 22*512kB (UME) 9*1024kB (U) 11*2048kB (UM) 1040*4096kB (UM) = 4370704kB [ 65.604423][ T5350] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 65.613728][ T5350] 52600 total pagecache pages [ 65.618405][ T5350] 5 pages in swap cache [ 65.622590][ T5350] Free swap = 124976kB [ 65.626748][ T5350] Total swap = 124996kB [ 65.630924][ T5350] 2097051 pages RAM [ 65.634714][ T5350] 0 pages HighMem/MovableOnly [ 65.639410][ T5350] 80445 pages reserved [ 65.708817][ T5355] lo speed is unknown, defaulting to 1000 [ 65.722940][ T5355] lo speed is unknown, defaulting to 1000 [ 65.729048][ T4332] EXT4-fs unmount: 29 callbacks suppressed [ 65.734963][ T4332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.754501][ T5355] lo speed is unknown, defaulting to 1000 [ 65.813226][ T5370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.507'. [ 65.835022][ T5355] infiniband syz2: set active [ 65.839765][ T5355] infiniband syz2: added lo [ 65.844325][ T36] lo speed is unknown, defaulting to 1000 [ 65.855960][ T5355] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 65.856154][ T5355] infiniband syz2: Couldn't open port 1 [ 65.876684][ T5355] RDS/IB: syz2: added [ 65.883695][ T5355] smc: adding ib device syz2 with port count 1 [ 65.889898][ T5355] smc: ib device syz2 port 1 has pnetid [ 65.895824][ T36] lo speed is unknown, defaulting to 1000 [ 65.902303][ T5355] lo speed is unknown, defaulting to 1000 [ 65.934291][ T5355] lo speed is unknown, defaulting to 1000 [ 65.943822][ T5373] loop7: detected capacity change from 0 to 512 [ 65.950768][ T5373] journal_path: Non-blockdev passed as './file1' [ 65.957185][ T5373] EXT4-fs: error: could not find journal device path [ 66.022347][ T5355] lo speed is unknown, defaulting to 1000 [ 66.078482][ T5355] lo speed is unknown, defaulting to 1000 [ 66.101634][ T5380] loop0: detected capacity change from 0 to 512 [ 66.254922][ T5355] lo speed is unknown, defaulting to 1000 [ 66.415492][ T5391] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.427884][ T5392] netlink: 180 bytes leftover after parsing attributes in process `syz.6.515'. [ 66.453575][ T5391] SELinux: failed to load policy [ 66.460865][ T5392] netlink: 180 bytes leftover after parsing attributes in process `syz.6.515'. [ 66.574313][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 66.663244][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.521'. [ 66.730257][ T5412] FAULT_INJECTION: forcing a failure. [ 66.730257][ T5412] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.743388][ T5412] CPU: 1 UID: 0 PID: 5412 Comm: syz.7.523 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.743514][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.743527][ T5412] Call Trace: [ 66.743540][ T5412] [ 66.743546][ T5412] __dump_stack+0x1d/0x30 [ 66.743564][ T5412] dump_stack_lvl+0xe8/0x140 [ 66.743602][ T5412] dump_stack+0x15/0x1b [ 66.743617][ T5412] should_fail_ex+0x265/0x280 [ 66.743642][ T5412] should_fail+0xb/0x20 [ 66.743663][ T5412] should_fail_usercopy+0x1a/0x20 [ 66.743698][ T5412] _copy_to_user+0x20/0xa0 [ 66.743729][ T5412] simple_read_from_buffer+0xb5/0x130 [ 66.743752][ T5412] proc_fail_nth_read+0x10e/0x150 [ 66.743782][ T5412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.743803][ T5412] vfs_read+0x1a8/0x770 [ 66.743820][ T5412] ? __fput+0x555/0x650 [ 66.743848][ T5412] ? __rcu_read_unlock+0x4f/0x70 [ 66.743900][ T5412] ? __fget_files+0x184/0x1c0 [ 66.743928][ T5412] ksys_read+0xda/0x1a0 [ 66.744013][ T5412] __x64_sys_read+0x40/0x50 [ 66.744035][ T5412] x64_sys_call+0x27bc/0x2ff0 [ 66.744052][ T5412] do_syscall_64+0xd2/0x200 [ 66.744077][ T5412] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.744142][ T5412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.744171][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.744192][ T5412] RIP: 0033:0x7fe7fd17d5bc [ 66.744207][ T5412] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.744265][ T5412] RSP: 002b:00007fe7fbbe7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.744282][ T5412] RAX: ffffffffffffffda RBX: 00007fe7fd3c5fa0 RCX: 00007fe7fd17d5bc [ 66.744293][ T5412] RDX: 000000000000000f RSI: 00007fe7fbbe70a0 RDI: 0000000000000005 [ 66.744303][ T5412] RBP: 00007fe7fbbe7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.744313][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.744323][ T5412] R13: 00007fe7fd3c6038 R14: 00007fe7fd3c5fa0 R15: 00007ffd78c18ee8 [ 66.744342][ T5412] [ 66.977737][ T5415] loop7: detected capacity change from 0 to 512 [ 67.047013][ T5419] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 67.057316][ T5419] SELinux: failed to load policy [ 67.243319][ T5427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.253303][ T5427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.648059][ T5434] FAULT_INJECTION: forcing a failure. [ 67.648059][ T5434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.661294][ T5434] CPU: 1 UID: 0 PID: 5434 Comm: syz.6.531 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.661322][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.661335][ T5434] Call Trace: [ 67.661341][ T5434] [ 67.661348][ T5434] __dump_stack+0x1d/0x30 [ 67.661368][ T5434] dump_stack_lvl+0xe8/0x140 [ 67.661458][ T5434] dump_stack+0x15/0x1b [ 67.661475][ T5434] should_fail_ex+0x265/0x280 [ 67.661499][ T5434] should_fail+0xb/0x20 [ 67.661520][ T5434] should_fail_usercopy+0x1a/0x20 [ 67.661618][ T5434] _copy_to_user+0x20/0xa0 [ 67.661686][ T5434] simple_read_from_buffer+0xb5/0x130 [ 67.661710][ T5434] proc_fail_nth_read+0x10e/0x150 [ 67.661737][ T5434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.661758][ T5434] vfs_read+0x1a8/0x770 [ 67.661813][ T5434] ? do_mq_open+0xe9/0x4f0 [ 67.661836][ T5434] ? __rcu_read_unlock+0x4f/0x70 [ 67.661955][ T5434] ? __fget_files+0x184/0x1c0 [ 67.662008][ T5434] ? finish_task_switch+0xad/0x2b0 [ 67.662027][ T5434] ksys_read+0xda/0x1a0 [ 67.662045][ T5434] __x64_sys_read+0x40/0x50 [ 67.662126][ T5434] x64_sys_call+0x27bc/0x2ff0 [ 67.662146][ T5434] do_syscall_64+0xd2/0x200 [ 67.662220][ T5434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.662300][ T5434] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.662330][ T5434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.662351][ T5434] RIP: 0033:0x7fe2a67bd5bc [ 67.662367][ T5434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 67.662454][ T5434] RSP: 002b:00007fe2a521f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.662474][ T5434] RAX: ffffffffffffffda RBX: 00007fe2a6a05fa0 RCX: 00007fe2a67bd5bc [ 67.662488][ T5434] RDX: 000000000000000f RSI: 00007fe2a521f0a0 RDI: 0000000000000006 [ 67.662500][ T5434] RBP: 00007fe2a521f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.662510][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.662559][ T5434] R13: 00007fe2a6a06038 R14: 00007fe2a6a05fa0 R15: 00007ffdf94ff8e8 [ 67.662578][ T5434] [ 67.916117][ T5442] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.923775][ T5442] FAULT_INJECTION: forcing a failure. [ 67.923775][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 67.936544][ T5442] CPU: 1 UID: 0 PID: 5442 Comm: syz.6.534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.936641][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.936722][ T5442] Call Trace: [ 67.936728][ T5442] [ 67.936734][ T5442] __dump_stack+0x1d/0x30 [ 67.936752][ T5442] dump_stack_lvl+0xe8/0x140 [ 67.936772][ T5442] dump_stack+0x15/0x1b [ 67.936795][ T5442] should_fail_ex+0x265/0x280 [ 67.936815][ T5442] should_failslab+0x8c/0xb0 [ 67.936870][ T5442] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 67.936894][ T5442] ? shmem_alloc_inode+0x34/0x50 [ 67.936929][ T5442] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 67.936947][ T5442] shmem_alloc_inode+0x34/0x50 [ 67.936963][ T5442] alloc_inode+0x40/0x170 [ 67.936982][ T5442] new_inode+0x1d/0xe0 [ 67.937079][ T5442] shmem_get_inode+0x244/0x750 [ 67.937174][ T5442] __shmem_file_setup+0x113/0x210 [ 67.937202][ T5442] shmem_file_setup+0x3b/0x50 [ 67.937216][ T5442] __se_sys_memfd_create+0x2c3/0x590 [ 67.937293][ T5442] __x64_sys_memfd_create+0x31/0x40 [ 67.937382][ T5442] x64_sys_call+0x2abe/0x2ff0 [ 67.937400][ T5442] do_syscall_64+0xd2/0x200 [ 67.937496][ T5442] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.937515][ T5442] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.937591][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.937609][ T5442] RIP: 0033:0x7fe2a67beba9 [ 67.937624][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.937686][ T5442] RSP: 002b:00007fe2a521ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 67.937702][ T5442] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007fe2a67beba9 [ 67.937713][ T5442] RDX: 00007fe2a521eef0 RSI: 0000000000000000 RDI: 00007fe2a68427e8 [ 67.937723][ T5442] RBP: 0000200000000640 R08: 00007fe2a521ebb7 R09: 00007fe2a521ee40 [ 67.937733][ T5442] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 67.937773][ T5442] R13: 00007fe2a521eef0 R14: 00007fe2a521eeb0 R15: 00002000000001c0 [ 67.937793][ T5442] [ 68.157557][ T5442] program syz.6.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.199937][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 68.199950][ T29] audit: type=1326 audit(1757695411.949:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 68.202538][ T5446] loop0: detected capacity change from 0 to 512 [ 68.206217][ T29] audit: type=1326 audit(1757695411.949:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa628bdeba9 code=0x7ffc0000 [ 68.302496][ T29] audit: type=1400 audit(1757695412.049:3615): avc: denied { ioctl } for pid=5452 comm="syz.7.538" path="/dev/input/event2" dev="devtmpfs" ino=251 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.406612][ T5462] loop0: detected capacity change from 0 to 512 [ 68.413161][ T29] audit: type=1400 audit(1757695412.089:3616): avc: denied { bind } for pid=5456 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.432478][ T29] audit: type=1400 audit(1757695412.089:3617): avc: denied { name_bind } for pid=5456 comm="syz.6.540" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.443398][ T5454] loop2: detected capacity change from 0 to 8192 [ 68.454140][ T29] audit: type=1400 audit(1757695412.089:3618): avc: denied { node_bind } for pid=5456 comm="syz.6.540" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.472747][ T5466] netlink: 104 bytes leftover after parsing attributes in process `syz.6.544'. [ 68.481146][ T29] audit: type=1400 audit(1757695412.089:3619): avc: denied { write } for pid=5456 comm="syz.6.540" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.496197][ T5468] FAULT_INJECTION: forcing a failure. [ 68.496197][ T5468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.510490][ T29] audit: type=1400 audit(1757695412.089:3620): avc: denied { connect } for pid=5456 comm="syz.6.540" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.510517][ T29] audit: type=1400 audit(1757695412.089:3621): avc: denied { name_connect } for pid=5456 comm="syz.6.540" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.523543][ T5468] CPU: 0 UID: 0 PID: 5468 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.523574][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.523590][ T5468] Call Trace: [ 68.523673][ T5468] [ 68.523680][ T5468] __dump_stack+0x1d/0x30 [ 68.523700][ T5468] dump_stack_lvl+0xe8/0x140 [ 68.523718][ T5468] dump_stack+0x15/0x1b [ 68.523734][ T5468] should_fail_ex+0x265/0x280 [ 68.523756][ T5468] should_fail+0xb/0x20 [ 68.523775][ T5468] should_fail_usercopy+0x1a/0x20 [ 68.523850][ T5468] strncpy_from_user+0x25/0x230 [ 68.523878][ T5468] ? kmem_cache_alloc_noprof+0x186/0x310 [ 68.523962][ T5468] ? getname_flags+0x80/0x3b0 [ 68.523989][ T5468] getname_flags+0xae/0x3b0 [ 68.524015][ T5468] __x64_sys_renameat2+0x6c/0x90 [ 68.524102][ T5468] x64_sys_call+0x3f9/0x2ff0 [ 68.524122][ T5468] do_syscall_64+0xd2/0x200 [ 68.524190][ T5468] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.524213][ T5468] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.524239][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.524302][ T5468] RIP: 0033:0x7fd18d98eba9 [ 68.524316][ T5468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.524332][ T5468] RSP: 002b:00007fd18c3ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 68.524351][ T5468] RAX: ffffffffffffffda RBX: 00007fd18dbd5fa0 RCX: 00007fd18d98eba9 [ 68.524363][ T5468] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 68.524375][ T5468] RBP: 00007fd18c3ef090 R08: 0000000000000006 R09: 0000000000000000 [ 68.524388][ T5468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.524478][ T5468] R13: 00007fd18dbd6038 R14: 00007fd18dbd5fa0 R15: 00007ffd1b65ca08 [ 68.524496][ T5468] [ 68.609018][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.609741][ T29] audit: type=1326 audit(1757695412.129:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f58bceba9 code=0x7ffc0000 [ 68.782679][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.817796][ T3731] loop2: p1 < > p2 p4 [ 68.822037][ T3731] loop2: partition table partially beyond EOD, truncated [ 68.832635][ T3731] loop2: p1 start 408832 is beyond EOD, truncated [ 68.839090][ T3731] loop2: p2 size 8388352 extends beyond EOD, truncated [ 68.853951][ T5454] loop2: p1 < > p2 p4 [ 68.858049][ T5454] loop2: partition table partially beyond EOD, truncated [ 68.869465][ T5478] loop6: detected capacity change from 0 to 512 [ 68.870969][ T5454] loop2: p1 start 408832 is beyond EOD, truncated [ 68.879567][ T5478] journal_path: Non-blockdev passed as './file1' [ 68.882245][ T5454] loop2: p2 size 8388352 extends beyond EOD, truncated [ 68.888459][ T5478] EXT4-fs: error: could not find journal device path [ 68.987115][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.003787][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.026672][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.047738][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.083157][ T5497] loop0: detected capacity change from 0 to 512 [ 69.124894][ T5501] loop3: detected capacity change from 0 to 512 [ 69.165476][ T5501] ext4: Unknown parameter 'audit' [ 69.311904][ T5503] loop6: detected capacity change from 0 to 512 [ 69.329669][ T5503] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.371289][ T5510] netlink: 'syz.0.556': attribute type 4 has an invalid length. [ 69.378967][ T5510] netlink: 17 bytes leftover after parsing attributes in process `syz.0.556'. [ 69.401783][ T5503] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.555: Failed to acquire dquot type 1 [ 69.426091][ T5503] EXT4-fs (loop6): 1 truncate cleaned up [ 69.443077][ T5503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.510396][ T5503] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 69.587218][ T3938] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.665080][ T5515] lo speed is unknown, defaulting to 1000 [ 70.172444][ T5515] lo speed is unknown, defaulting to 1000 [ 70.179797][ T5519] program syz.6.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.262361][ T5525] loop2: detected capacity change from 0 to 512 [ 70.289940][ T5525] journal_path: Non-blockdev passed as './file1' [ 70.296413][ T5525] EXT4-fs: error: could not find journal device path [ 70.419046][ T5528] hub 6-0:1.0: USB hub found [ 70.463069][ T5532] FAULT_INJECTION: forcing a failure. [ 70.463069][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.476171][ T5532] CPU: 1 UID: 0 PID: 5532 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.476249][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.476260][ T5532] Call Trace: [ 70.476271][ T5532] [ 70.476278][ T5532] __dump_stack+0x1d/0x30 [ 70.476377][ T5532] dump_stack_lvl+0xe8/0x140 [ 70.476396][ T5532] dump_stack+0x15/0x1b [ 70.476413][ T5532] should_fail_ex+0x265/0x280 [ 70.476467][ T5532] should_fail+0xb/0x20 [ 70.476486][ T5532] should_fail_usercopy+0x1a/0x20 [ 70.476506][ T5532] _copy_from_iter+0xd2/0xe80 [ 70.476529][ T5532] ? __build_skb_around+0x1a0/0x200 [ 70.476576][ T5532] ? __alloc_skb+0x223/0x320 [ 70.476662][ T5532] netlink_sendmsg+0x471/0x6b0 [ 70.476685][ T5532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.476711][ T5532] __sock_sendmsg+0x145/0x180 [ 70.476813][ T5532] ____sys_sendmsg+0x31e/0x4e0 [ 70.476891][ T5532] ___sys_sendmsg+0x17b/0x1d0 [ 70.477002][ T5532] __x64_sys_sendmsg+0xd4/0x160 [ 70.477094][ T5532] x64_sys_call+0x191e/0x2ff0 [ 70.477113][ T5532] do_syscall_64+0xd2/0x200 [ 70.477144][ T5532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.477169][ T5532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.477209][ T5532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.477239][ T5532] RIP: 0033:0x7fa628bdeba9 [ 70.477251][ T5532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.477274][ T5532] RSP: 002b:00007fa627647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.477294][ T5532] RAX: ffffffffffffffda RBX: 00007fa628e25fa0 RCX: 00007fa628bdeba9 [ 70.477307][ T5532] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 70.477320][ T5532] RBP: 00007fa627647090 R08: 0000000000000000 R09: 0000000000000000 [ 70.477333][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.477345][ T5532] R13: 00007fa628e26038 R14: 00007fa628e25fa0 R15: 00007ffebf354ef8 [ 70.477421][ T5532] [ 70.689520][ T5528] hub 6-0:1.0: 8 ports detected [ 70.937836][ T5542] loop6: detected capacity change from 0 to 512 [ 70.958918][ T5542] ext4: Unknown parameter 'audit' [ 71.205019][ T5546] loop2: detected capacity change from 0 to 512 [ 71.391102][ T5552] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 71.487396][ T5548] infiniband syz!: set active [ 71.492163][ T5548] infiniband syz!: added team_slave_0 [ 71.530572][ T5552] SELinux: failed to load policy [ 71.616683][ T5548] RDS/IB: syz!: added [ 71.624995][ T5548] smc: adding ib device syz! with port count 1 [ 71.636948][ T5548] smc: ib device syz! port 1 has pnetid [ 71.687921][ T5557] FAULT_INJECTION: forcing a failure. [ 71.687921][ T5557] name failslab, interval 1, probability 0, space 0, times 0 [ 71.700619][ T5557] CPU: 1 UID: 0 PID: 5557 Comm: syz.0.571 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.700642][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.700652][ T5557] Call Trace: [ 71.700659][ T5557] [ 71.700667][ T5557] __dump_stack+0x1d/0x30 [ 71.700689][ T5557] dump_stack_lvl+0xe8/0x140 [ 71.700786][ T5557] dump_stack+0x15/0x1b [ 71.700807][ T5557] should_fail_ex+0x265/0x280 [ 71.700830][ T5557] should_failslab+0x8c/0xb0 [ 71.700856][ T5557] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 71.700887][ T5557] ? p9_client_create+0x207/0xbc0 [ 71.700938][ T5557] kstrdup+0x3e/0xd0 [ 71.700994][ T5557] p9_client_create+0x207/0xbc0 [ 71.701077][ T5557] v9fs_session_init+0xf7/0xde0 [ 71.701099][ T5557] ? __schedule+0x6b9/0xb30 [ 71.701181][ T5557] ? should_fail_ex+0xdb/0x280 [ 71.701199][ T5557] ? v9fs_mount+0x51/0x5c0 [ 71.701231][ T5557] ? should_failslab+0x8c/0xb0 [ 71.701255][ T5557] ? __kmalloc_cache_noprof+0x189/0x320 [ 71.701414][ T5557] v9fs_mount+0x67/0x5c0 [ 71.701456][ T5557] ? selinux_capable+0x31/0x40 [ 71.701519][ T5557] ? __pfx_v9fs_mount+0x10/0x10 [ 71.701544][ T5557] legacy_get_tree+0x75/0xd0 [ 71.701567][ T5557] vfs_get_tree+0x54/0x1d0 [ 71.701670][ T5557] do_new_mount+0x207/0x5e0 [ 71.701691][ T5557] ? security_capable+0x83/0x90 [ 71.701711][ T5557] path_mount+0x4a4/0xb20 [ 71.701801][ T5557] ? user_path_at+0x109/0x130 [ 71.701890][ T5557] __se_sys_mount+0x28f/0x2e0 [ 71.701913][ T5557] ? __schedule+0x6b9/0xb30 [ 71.701952][ T5557] __x64_sys_mount+0x67/0x80 [ 71.701970][ T5557] x64_sys_call+0x2b4d/0x2ff0 [ 71.702016][ T5557] do_syscall_64+0xd2/0x200 [ 71.702046][ T5557] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.702071][ T5557] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.702112][ T5557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.702134][ T5557] RIP: 0033:0x7f7f58bceba9 [ 71.702147][ T5557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.702166][ T5557] RSP: 002b:00007f7f5762f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.702186][ T5557] RAX: ffffffffffffffda RBX: 00007f7f58e15fa0 RCX: 00007f7f58bceba9 [ 71.702199][ T5557] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 71.702238][ T5557] RBP: 00007f7f5762f090 R08: 0000200000000080 R09: 0000000000000000 [ 71.702250][ T5557] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000002 [ 71.702260][ T5557] R13: 00007f7f58e16038 R14: 00007f7f58e15fa0 R15: 00007ffefd556e38 [ 71.702279][ T5557] [ 72.196737][ T5551] sctp: failed to load transform for md5: -2 [ 72.587749][ T5560] loop7: detected capacity change from 0 to 512 [ 72.658871][ T5560] journal_path: Non-blockdev passed as './file1' [ 72.665311][ T5560] EXT4-fs: error: could not find journal device path [ 72.906054][ T5565] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.916902][ T5546] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 72.925069][ T5546] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 72.957759][ T5546] EXT4-fs (loop2): 1 truncate cleaned up [ 72.963885][ T5546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.132904][ T5565] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.137594][ T5576] SELinux: failed to load policy [ 73.229883][ T5583] loop0: detected capacity change from 0 to 512 [ 73.264153][ T5565] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.270563][ T5569] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 73.308780][ T5579] tipc: Started in network mode [ 73.313750][ T5579] tipc: Node identity 26bb80fad0e6, cluster identity 4711 [ 73.321022][ T5579] tipc: Enabled bearer , priority 0 [ 73.361059][ T5577] tipc: Resetting bearer [ 73.375021][ T5577] tipc: Disabling bearer [ 73.385567][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.440164][ T5565] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.509868][ T5592] loop6: detected capacity change from 0 to 2048 [ 73.557649][ T3457] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.566295][ T5592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.587199][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.587226][ T5592] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #12: comm syz.6.583: inline data xattr refers to an external xattr inode [ 73.589095][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 73.589107][ T29] audit: type=1326 audit(1757695417.329:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.639555][ T29] audit: type=1326 audit(1757695417.329:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.662905][ T29] audit: type=1326 audit(1757695417.329:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.670438][ T5597] loop0: detected capacity change from 0 to 512 [ 73.686215][ T29] audit: type=1326 audit(1757695417.329:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.719144][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.749487][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.815727][ T5599] SELinux: failed to load policy [ 73.822700][ T5592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 73.829239][ T29] audit: type=1326 audit(1757695417.359:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.855011][ T29] audit: type=1326 audit(1757695417.359:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.878554][ T29] audit: type=1326 audit(1757695417.389:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.902208][ T29] audit: type=1326 audit(1757695417.389:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 73.925868][ T29] audit: type=1326 audit(1757695417.389:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2a67bd65f code=0x7ffc0000 [ 73.949075][ T29] audit: type=1326 audit(1757695417.389:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.6.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a67beba9 code=0x7ffc0000 [ 74.010363][ T5599] netlink: 'syz.7.585': attribute type 1 has an invalid length. [ 74.018030][ T5599] netlink: 140472 bytes leftover after parsing attributes in process `syz.7.585'. [ 74.182584][ T5611] SELinux: failed to load policy [ 74.215712][ T5618] ================================================================== [ 74.223804][ T5618] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 74.231089][ T5618] [ 74.233395][ T5618] write to 0xffff888103e24b00 of 8 bytes by task 5615 on cpu 1: [ 74.241002][ T5618] mas_wmb_replace+0x20d/0x14a0 [ 74.245837][ T5618] mas_wr_store_entry+0x1773/0x2b50 [ 74.251029][ T5618] mas_store_prealloc+0x74d/0x9e0 [ 74.256040][ T5618] vma_iter_store_new+0x1c5/0x200 [ 74.261050][ T5618] vma_complete+0x125/0x580 [ 74.265538][ T5618] __split_vma+0x5d9/0x650 [ 74.269938][ T5618] vma_modify+0x3f2/0xc80 [ 74.274252][ T5618] vma_modify_flags+0x101/0x130 [ 74.279087][ T5618] mprotect_fixup+0x2cc/0x570 [ 74.283751][ T5618] do_mprotect_pkey+0x6d6/0x980 [ 74.288589][ T5618] __x64_sys_mprotect+0x48/0x60 [ 74.293422][ T5618] x64_sys_call+0x274e/0x2ff0 [ 74.298083][ T5618] do_syscall_64+0xd2/0x200 [ 74.302585][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.308461][ T5618] [ 74.310764][ T5618] read to 0xffff888103e24b00 of 8 bytes by task 5618 on cpu 0: [ 74.318287][ T5618] mas_state_walk+0x485/0x650 [ 74.322953][ T5618] mas_walk+0x60/0x150 [ 74.327011][ T5618] lock_vma_under_rcu+0x8d/0x160 [ 74.331938][ T5618] do_user_addr_fault+0x233/0x1090 [ 74.337043][ T5618] exc_page_fault+0x62/0xa0 [ 74.341532][ T5618] asm_exc_page_fault+0x26/0x30 [ 74.346364][ T5618] [ 74.348665][ T5618] value changed: 0xffff88811ade1d01 -> 0xffff888103e24b00 [ 74.355749][ T5618] [ 74.358052][ T5618] Reported by Kernel Concurrency Sanitizer on: [ 74.364177][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: syz.6.592 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.373786][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.383821][ T5618] ==================================================================