last executing test programs: 3.499123025s ago: executing program 2 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x21400c, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001b80)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@dccp_packet={0x7, 0x6, '4Ko', 0xf98, 0x21, 0x1, @private0, @empty, {[], {{0x4e24, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x1, "1ab553", 0x4, "bbf3e7"}, "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"}}}}}, 0xfce) r1 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x200080, &(0x7f0000000180)="86a229f91b034d6684a3eda6f5af7ae7582bf3911ee3abfd18693026ece756d7a12aba0529fe4975efd14b", 0x2b, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) 3.183514021s ago: executing program 4 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f000013b000/0x4000)=nil, &(0x7f00008d4000/0x2000)=nil], 0x0, &(0x7f0000000200), 0x0) 2.892347115s ago: executing program 2 (id=246): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/84, 0x54, 0x0, &(0x7f0000000300)=""/251, 0xfb}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000001c0), 0x4) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) (async) time(0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_read_part_table(0x618, &(0x7f0000002200)="$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") (async) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x44, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000060fb8100002020207b1af8ff000000002d2330c990b27db8386bd229e9bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x81, 0x775, &(0x7f0000001180)="$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") (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (rerun: 64) 2.808020246s ago: executing program 4 (id=251): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4e4, &(0x7f0000002d40)="$eJzs3c9PXFsdAPDvHZgCLc/hqYvnS3w2+gxttDNQbEtcVEyMrppY68YVIgyEMDCEGdpCGkPjH2Bi/BVduXJj4tqYmP4JxqSJ7o0xmkbbunChjrnDHYu8AYaUYSjz+SSn95z763tO4R7m3HMzN4C+dTkiZiJiICKuRkQhW5/LUuzspnS/F88fzacpicbQvb8lkWTrWudKsuWl7LDhiPjaVyK+lXwwbm1re2WuUilvZOVSfXW9VNvavra8OrdUXiqvzUxN3py+NX1jeuLE2nr7S3/+4Xd//uXbv/nsgz/O/vXKt9NqjWbb9rajEzsd7rfb9Hzz/6JlMCI2jhPsDBvI2pPvdUUAAOhI+hn/wxHxyYh4+ZNe1wYAAADohsYXRuNfSUQDAAAAOLdyzWdgk1wxexZgNHK5YnH3Gd6PxsVcpVqrf2axurm2sPus7Fjkc4vLlfJE9qzwWOSTtDzZzL8qX99XnoqItyPi+4WRZrk4X60s9PrmBwAAAPSJS/vG//8o7I7/AQAAgHNmrNcVAAAAALrO+B8AAADOvwPH/8ng6VYEAAAA6Iav3rmTpkbr/dcL97c2V6r3ry2UayvF1c354nx1Y724VK0uNb+zb/Wo81Wq1fXPxdrmw1K9XKuXalvbs6vVzbX6bPO93rPlRuFUmgUAAADs8fYnnvwhiYidz480U+pCti1/9OEz3a0d0E254+2edKsewOkb6HUFgJ7xgC/0rw7G+MA5d8TA/gf7yse8bQAAAJwF4x97rfl/84HwBjOQh/5l/h/6l/l/6F/m/6HPDR29y/BBG357wnUBAAC6ZrSZklwxmwscjVyuWIx4q/lagHyyuFwpT0TEhyLi94X8UFqe7HWlAQAAAAAAAAAAAAAAAAAAAAAAAOAN02gk0QAAAADOtYjcX5LsRf7jhfdH998fuJD8s9BcRsSDn9770cO5en1jMl3/9/+tr/84W3+9tSb1jVO+kwEAAAC0tMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJykF88fzbfSacZ99sWIGGsXfzCGm8vhXxUi4uLLJAb3HJdExMAJxN95HBHvtIufpNWKsawW++PnImKkx/EvnUB86GdP0v5nJr3+8vuuv1xcbi7bX3+DWXpdzy4f1P/lWv1fs59r1/+9dfiph1uZd5/+snRg/McR7w62739a8ZN28S903sZvfn17+6BtjZ9FjB/x9yeNX6qvrpdqW9vXllfnlspL5bWpqcmb07emb0xPlBaXK+Xs37YxvvfxX//nsPZfbBt/t/89sP0R8X6H7f/304fPP3JI/Cufav/zf+eQ+OnvxKezvwPp9vFWfmc3v9d7v/jde4e1f+GA9h/684+IKx22/+rd7/ypw10BgFNQ29pematUyhtdyYx07cwyaaa6diaqIXN2M3ezC/3Yh/e4YwIAAE7cqw/9+7ccY4IHAAAAAAAAAAAAAAAAAAAAeC1d/xKyof//ZoHh3jUVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/w0AAP//5w/Stg==") ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) close_range(r0, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x2, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) splice(r0, 0x0, r1, 0x0, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/187, 0xbb}], 0x1, 0x80000000, 0x2) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x27, 0x7, 0x3, 0x8e, 0x0, 0x100000000, 0x60, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x2ea, 0x8, 0x18, 0x0, 0x3ff, 0x3, 0x2, 0x0, 0x0, 0x0, 0x80}, r5, 0xa, r0, 0x1) truncate(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2.732614317s ago: executing program 2 (id=253): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000500000010000000000000002ba1533c1e5699a75b9d8ed252177b10605c0327b8bc06001aef567d65b7941bd589acfc89676469bdcf06a5dc06df9d3ef1e2b4d7d6930743543b56d8ac7c68bd931f4ec65629f7da70bcd15eb279d48657089fe7f0864ff6a73d963bda96044cf2fc01dc90cc30aa484a9a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x7fff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "347882c6c46d0631", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) 1.831712531s ago: executing program 2 (id=276): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1566, &(0x7f0000000200)={0x0, 0x80004661, 0x1, 0x3, 0x288}, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='{!]:\t^+1B)%/\\!^((\x96\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000600)={[&(0x7f00000002c0)='\x00', &(0x7f0000000300)=' \x01\x00', &(0x7f0000000340)=' \x01\x00', &(0x7f0000000380)='$\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='+)$\x00', &(0x7f0000000480)=' \x01\x00', &(0x7f00000004c0)='#*%-\x00', &(0x7f0000000540)=' \x01\x00']}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.309897799s ago: executing program 1 (id=277): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) 1.30358157s ago: executing program 3 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4, @multicast2}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001c80)="2b4136f22dcac4d5bc0e84bdd04e761f71bcd8129ad465e64de6dc55cdfb41cf296799cdba16512a1c3db9e715af8cab433a7aa68d2d42c08f3e1e4fe38f6c266fead099aa8d12af95f501376ddd1b9c6d4c21297eee3a179ec02ff3d0b352d2d771940c0aad92f972f5d5da8543323bd822534734077759e8c03434f51d3cb85b8c54707912b7fad6213bd824b6a90269504a395c15cf7550e63e600cf5362f", 0xa0}, {&(0x7f00000003c0)="5cb9289b3b269c0ccce3efe562b890b1f94b0e03248f814cd040a940f2c0ea08a29ee9efa261217c98ff1c282e7ef2ddc496c2a634cf628c85f3dc213c8b03271eb46f0dc90f7df24f77a1a84e124ec7ee3a4978f4d5604dbab423c52af56190067711dd30c8debab689523dda1948bae6a3a9c5d71d25df839595d26f224623d80b291c0079b5802cee5bdd85a4d96d3d5f561679717536b818d023a0005b242bdd7a60349d17f735d35dd92094e1feff018302", 0xb4}, {&(0x7f0000000580)="73bd2ae4e7db30da007092f5b4f9df589b686655bb7fdedc2179fd6b2f805f5abb919bc642de0a96fe3d2dc9bfc6129b3b217b93bbefd89c2e471f1c53dd30d72c50e89603a627cbc12330dbd9d8011fc93232e88e41d69fd0469a5b7396ea7bd680d8d41f4cb9bdee16e7a66aa775c05f6694e9f73b94020948e2647eb932320614f4c8853282fdfe5a22b72606595519c6ea02633bd664b2c02af30cdc59732ee876635ff1310c5c0786b4c078c55be79567c8ffe5c6fbe30c245596afb4f34fbc2162fcac013e28d9c57d", 0xcc}, {&(0x7f00000000c0)="67d441bc85e8a218290cfaa963d34dfa9655a9715d9dcaff6af031d934403dee00"/47, 0x2f}, {&(0x7f0000000140)}, {&(0x7f0000001bc0)="fe0561cbd42cc9c558bfd5978a430ba00358980dec9a45f7dc01dfbcae6963a825e5e678aadc904e954bbd1942d040861a22c0be0a80ab36e026abeb28718519843c8b6a6f8a4e0431ea1eb1d01b0215e27acbe4aac6b9e7ba2ad9a835d9d431cbe9d2310e9a2d043370f249f540116bf3789930139ae585ba65b26bacdaf32c54e68cbf565bc40b10f76f0c04231e5fff5310aaf55455da6e0a2bcb9dcbef82cc375a6ff22d25bb2131787409232bb5898bc56b", 0xb4}, {&(0x7f0000001ac0)="c3914b3443e2926e7a21ad8899024a4120386471372313694a4cfbcaf2186ea439dd603174405c408bb1bcbe676f47fffa2c905fb323bdd754e76ff6c66528ceb79d2231cf36fb8a47350d1b811726260a99494cddb3a5b7ed6200205236c39795fb14d77467d4d9535264e336d36a17a06342101b6a7e54473451f1abc53fac304f4cb7207e56d792aa9976fdbbeebe1b82660ed2c1ba0e85ea6e432a644a192606fe55cf95258aae5c24f4618510ab69687a1536aa02bccb7c6a2edaa7fc156b621d648a5c1f3a17fb912cb7620b8dcf97c69dedc78831f62f417f090fc3b122df294c77ef579214fe38d7081a991c3d8304cffb52cdad1412", 0xfa}], 0x7}, 0x48000) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000240)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00006dc000/0x2000)=nil, 0x2000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) munlockall() sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000003, 0x10012, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x21ac6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x8c9200268ef9770f, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7e, 0x6}, &(0x7f0000000200)=0x400, &(0x7f00000006c0), 0x6, 0xd1d9, 0x5, 0xfffffffffffffffb, 0x10, 0x8}}], 0x58}, 0x0) 1.29922827s ago: executing program 4 (id=279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x24, 0x0, 0x2, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xfd, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x420000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) write$cgroup_subtree(r1, &(0x7f0000001440)={[{0x2b, 'net_prio'}]}, 0xa) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x3, 0x10) 1.24856778s ago: executing program 1 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.173508141s ago: executing program 1 (id=282): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000000700)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50) r9 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) 1.053853753s ago: executing program 0 (id=285): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) sendmsg$NFT_BATCH(r3, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a01f4ff000000000000000a000017140000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 865.719016ms ago: executing program 0 (id=286): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16], &(0x7f00000002c0)='GPL\x00', 0x3944, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x1b) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18) ftruncate(r1, 0xc17a) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4718a05f20824a9e}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) setpgid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec000000000a01020000000000000000050000020900010073797a300000000008000240000000023c0006e808cf7384552f120183af56c4b2b79056586784bdcd8587885c60e5aa03d08d86c3f3fb99dac62aecd67dae229b4fb1f5e5cc1fdb5a5790010c00044000000000000000027300060019b59eb8f88251e50df3a7832fa66219e3adfb6f7f9e540e5d75f5287b5e577d484288d63bf01771d1421e03c82f09584c5fccf3c638eda875b512ced355af6eac1595e41486cd23fbd7165585760593db53e7aaf06ae70b4224d1c9d423d0daa28bf927198015adbbcc6fd9c1e56000080002400000000314000000110001"], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4) syz_io_uring_setup(0x832, &(0x7f0000000700)={0x0, 0x4cd1c, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f00000000c0)) 507.725602ms ago: executing program 0 (id=287): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e354", 0x45b) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) 459.720912ms ago: executing program 0 (id=288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) 332.032615ms ago: executing program 2 (id=289): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x7fff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "347882c6c46d0631", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) 229.981546ms ago: executing program 1 (id=290): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) (fail_nth: 4) 212.169646ms ago: executing program 1 (id=291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000300)="f525353cee366ba6ee38351206d78e26f7", 0x1d, 0x64, &(0x7f0000000480)={0xa, 0x4e23, 0x7fffffff, @loopback, 0xfffffffd}, 0x1c) 198.660277ms ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000000000}) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) 57.041959ms ago: executing program 0 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x566) 56.583799ms ago: executing program 2 (id=294): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$getflags(r4, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000100)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000300), 0x0}, 0x20) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000300)}], 0x5, &(0x7f0000000680)=""/131, 0x83}, 0x20) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 9.004269ms ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) membarrier(0x4, 0x0) 0s ago: executing program 1 (id=296): syz_emit_ethernet(0x5a, &(0x7f0000000340)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@local, @multicast2]}, @rr={0x7, 0x17, 0x88, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 26.865206][ T29] audit: type=1400 audit(1749717383.140:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.866350][ T3295] cgroup: Unknown subsys name 'net' [ 26.888029][ T29] audit: type=1400 audit(1749717383.140:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.915386][ T29] audit: type=1400 audit(1749717383.160:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.035889][ T3295] cgroup: Unknown subsys name 'cpuset' [ 27.041956][ T3295] cgroup: Unknown subsys name 'rlimit' [ 27.192648][ T29] audit: type=1400 audit(1749717383.460:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.215946][ T29] audit: type=1400 audit(1749717383.460:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.236434][ T29] audit: type=1400 audit(1749717383.460:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.256778][ T29] audit: type=1400 audit(1749717383.460:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.265015][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.277093][ T29] audit: type=1400 audit(1749717383.470:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.310503][ T29] audit: type=1400 audit(1749717383.470:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.329828][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.333803][ T29] audit: type=1400 audit(1749717383.560:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.532930][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.580967][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.609843][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.634082][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.641173][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.648413][ T3307] bridge_slave_0: entered allmulticast mode [ 28.655845][ T3307] bridge_slave_0: entered promiscuous mode [ 28.664823][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.671922][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.679134][ T3307] bridge_slave_1: entered allmulticast mode [ 28.685635][ T3307] bridge_slave_1: entered promiscuous mode [ 28.709640][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.724956][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.737249][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.752868][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.777840][ T3307] team0: Port device team_slave_0 added [ 28.803374][ T3307] team0: Port device team_slave_1 added [ 28.831856][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.838843][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.864855][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.879738][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.886875][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.894177][ T3313] bridge_slave_0: entered allmulticast mode [ 28.900861][ T3313] bridge_slave_0: entered promiscuous mode [ 28.909220][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.916298][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.923426][ T3315] bridge_slave_0: entered allmulticast mode [ 28.929825][ T3315] bridge_slave_0: entered promiscuous mode [ 28.936374][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.943318][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.969352][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.984502][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.991641][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.998885][ T3313] bridge_slave_1: entered allmulticast mode [ 29.005378][ T3313] bridge_slave_1: entered promiscuous mode [ 29.016369][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.023446][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.030561][ T3315] bridge_slave_1: entered allmulticast mode [ 29.037111][ T3315] bridge_slave_1: entered promiscuous mode [ 29.071887][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.084076][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.093427][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.100523][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.107737][ T3316] bridge_slave_0: entered allmulticast mode [ 29.114156][ T3316] bridge_slave_0: entered promiscuous mode [ 29.130964][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.145434][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.154594][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.161735][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.169053][ T3316] bridge_slave_1: entered allmulticast mode [ 29.175550][ T3316] bridge_slave_1: entered promiscuous mode [ 29.183600][ T3307] hsr_slave_0: entered promiscuous mode [ 29.189740][ T3307] hsr_slave_1: entered promiscuous mode [ 29.218832][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.225949][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.233093][ T3306] bridge_slave_0: entered allmulticast mode [ 29.239430][ T3306] bridge_slave_0: entered promiscuous mode [ 29.255768][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.269869][ T3315] team0: Port device team_slave_0 added [ 29.276571][ T3315] team0: Port device team_slave_1 added [ 29.287283][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.294350][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.301491][ T3306] bridge_slave_1: entered allmulticast mode [ 29.308098][ T3306] bridge_slave_1: entered promiscuous mode [ 29.314775][ T3313] team0: Port device team_slave_0 added [ 29.321349][ T3313] team0: Port device team_slave_1 added [ 29.328085][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.373480][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.380457][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.406498][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.421722][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.428727][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.454661][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.465847][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.472862][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.498768][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.512534][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.523991][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.530994][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.556993][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.568482][ T3316] team0: Port device team_slave_0 added [ 29.578475][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.611110][ T3316] team0: Port device team_slave_1 added [ 29.628898][ T3306] team0: Port device team_slave_0 added [ 29.651699][ T3306] team0: Port device team_slave_1 added [ 29.666300][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.673248][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.699253][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.717082][ T3315] hsr_slave_0: entered promiscuous mode [ 29.723010][ T3315] hsr_slave_1: entered promiscuous mode [ 29.728920][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.736487][ T3315] Cannot create hsr debugfs directory [ 29.748618][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.755613][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.781538][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.798990][ T3313] hsr_slave_0: entered promiscuous mode [ 29.805129][ T3313] hsr_slave_1: entered promiscuous mode [ 29.810858][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.818572][ T3313] Cannot create hsr debugfs directory [ 29.824930][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.831925][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.857957][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.882908][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.889951][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.915901][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.980115][ T3306] hsr_slave_0: entered promiscuous mode [ 29.986131][ T3306] hsr_slave_1: entered promiscuous mode [ 29.992080][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.999673][ T3306] Cannot create hsr debugfs directory [ 30.007959][ T3316] hsr_slave_0: entered promiscuous mode [ 30.014016][ T3316] hsr_slave_1: entered promiscuous mode [ 30.020045][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.027604][ T3316] Cannot create hsr debugfs directory [ 30.037549][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.057652][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.087539][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.114676][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.202721][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.223754][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.232647][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.246863][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.255760][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.264658][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.276289][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.289814][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.325289][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.343234][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.369439][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.378438][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.387120][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.396978][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.419274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.426436][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.434421][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.445257][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.453901][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.463358][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.478418][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.485568][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.497351][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.523907][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.550552][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.562844][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.569912][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.587312][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.597051][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.604186][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.625627][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.632726][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.641841][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.648897][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.692305][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.705385][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.717422][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.734855][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.746882][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.753950][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.769159][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.777674][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.788165][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.795372][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.804218][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.811273][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.829693][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.836943][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.895187][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.911804][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.922223][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.950146][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.007118][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.049143][ T3307] veth0_vlan: entered promiscuous mode [ 31.067348][ T3307] veth1_vlan: entered promiscuous mode [ 31.110209][ T3313] veth0_vlan: entered promiscuous mode [ 31.125697][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.135698][ T3307] veth0_macvtap: entered promiscuous mode [ 31.148219][ T3313] veth1_vlan: entered promiscuous mode [ 31.161881][ T3307] veth1_macvtap: entered promiscuous mode [ 31.192415][ T3313] veth0_macvtap: entered promiscuous mode [ 31.200529][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.212867][ T3313] veth1_macvtap: entered promiscuous mode [ 31.224279][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.236769][ T3315] veth0_vlan: entered promiscuous mode [ 31.244598][ T3315] veth1_vlan: entered promiscuous mode [ 31.261908][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.270829][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.279702][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.288461][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.297209][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.311912][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.320243][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.328982][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.337720][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.346496][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.369480][ T3306] veth0_vlan: entered promiscuous mode [ 31.388414][ T3316] veth0_vlan: entered promiscuous mode [ 31.398628][ T3315] veth0_macvtap: entered promiscuous mode [ 31.406733][ T3306] veth1_vlan: entered promiscuous mode [ 31.419583][ T3306] veth0_macvtap: entered promiscuous mode [ 31.428941][ T3316] veth1_vlan: entered promiscuous mode [ 31.440091][ T3315] veth1_macvtap: entered promiscuous mode [ 31.448086][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.452393][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.483484][ T3306] veth1_macvtap: entered promiscuous mode [ 31.490634][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.503139][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512164][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.520967][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.529771][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536766][ T3475] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 31.548290][ T3316] veth0_macvtap: entered promiscuous mode [ 31.566226][ T3316] veth1_macvtap: entered promiscuous mode [ 31.572987][ T3475] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 31.580503][ T3475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.596749][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.608692][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.623905][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.643814][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.663035][ T3477] vlan2: entered allmulticast mode [ 31.672806][ T3475] tmpfs: Unknown parameter '°ú&]I›Ÿ²WæRla ‘7§ÞðÀ‚}¦ §‚J#üó¤Ú¨œœÑÜØþá¥*'ÂÉ I7Ù ŠŠšÈ2¿§R\ôKvT@©JÁ)¨ÓÝÕp)' [ 31.687897][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.696692][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.707664][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.719513][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.742750][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.745737][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.750240][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.758875][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.766231][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.774952][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.791145][ C1] hrtimer: interrupt took 38158 ns [ 31.791164][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.869920][ T3489] xt_hashlimit: max too large, truncated to 1048576 [ 31.898373][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.941023][ T3409] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.955689][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.963120][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.970544][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.978090][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.979787][ T3489] syzkaller0: entered promiscuous mode [ 31.985507][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.990963][ T3489] syzkaller0: entered allmulticast mode [ 31.998366][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.010351][ T3500] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 32.011300][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.018734][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.026147][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.042367][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.049928][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.057452][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.066661][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 32.066673][ T29] audit: type=1400 audit(1749717388.340:119): avc: denied { write } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.135256][ T3489] loop0: detected capacity change from 0 to 512 [ 32.158747][ T3489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.171917][ T3489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.192890][ T29] audit: type=1400 audit(1749717388.370:120): avc: denied { create } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.212225][ T29] audit: type=1400 audit(1749717388.370:121): avc: denied { setopt } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.214025][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.231406][ T29] audit: type=1400 audit(1749717388.370:122): avc: denied { bind } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.238723][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.238748][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.272526][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.279945][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.280439][ T29] audit: type=1400 audit(1749717388.550:123): avc: denied { write } for pid=3488 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.287347][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.307368][ T29] audit: type=1400 audit(1749717388.550:124): avc: denied { read } for pid=3488 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.314696][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.342126][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.349542][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.357017][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.364437][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.371862][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.379356][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.386779][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.395903][ T3501] mmap: syz.3.4 (3501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.427234][ T3489] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 32.444754][ T3489] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.466376][ T3489] EXT4-fs (loop0): 1 truncate cleaned up [ 32.472571][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.488980][ T29] audit: type=1400 audit(1749717388.760:125): avc: denied { mount } for pid=3487 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.489086][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.554408][ T3505] fido_id[3505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.555114][ T3507] netlink: 'syz.1.9': attribute type 7 has an invalid length. [ 32.575528][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 32.602081][ T29] audit: type=1400 audit(1749717388.870:126): avc: denied { create } for pid=3508 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.634537][ T3509] loop4: detected capacity change from 0 to 256 [ 32.644280][ T29] audit: type=1400 audit(1749717388.900:127): avc: denied { write } for pid=3508 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.682315][ T29] audit: type=1400 audit(1749717388.950:128): avc: denied { mount } for pid=3508 comm="syz.4.10" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.747860][ T3509] atomic_op ffff88811ac9e528 conn xmit_atomic 0000000000000000 [ 32.800095][ T3496] syz.3.4 (3496) used greatest stack depth: 10912 bytes left [ 32.839370][ T3514] netlink: 'syz.3.12': attribute type 7 has an invalid length. [ 32.847017][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 32.885465][ T3516] xt_hashlimit: max too large, truncated to 1048576 [ 32.918470][ T3516] syzkaller0: entered promiscuous mode [ 32.924069][ T3516] syzkaller0: entered allmulticast mode [ 32.953381][ T3516] loop4: detected capacity change from 0 to 512 [ 32.960658][ T3516] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.983513][ T3516] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 33.000519][ T3516] EXT4-fs (loop4): 1 truncate cleaned up [ 33.007250][ T3516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.429610][ T3522] SELinux: failed to load policy [ 33.469989][ T3526] loop1: detected capacity change from 0 to 256 [ 33.530223][ T3526] syz.1.16: attempt to access beyond end of device [ 33.530223][ T3526] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 33.548896][ T3526] atomic_op ffff88811ac95928 conn xmit_atomic 0000000000000000 [ 33.575309][ T3489] syz.0.7 (3489) used greatest stack depth: 10824 bytes left [ 33.583673][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.627101][ T3530] loop0: detected capacity change from 0 to 512 [ 33.652764][ T3528] SELinux: failed to load policy [ 33.654128][ T3530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.670914][ T3530] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.746980][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.812250][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 33.820666][ T3542] loop0: detected capacity change from 0 to 256 [ 33.827663][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.880136][ T3547] SELinux: policydb version 576 does not match my version range 15-34 [ 33.890539][ T3544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.904355][ T3547] SELinux: failed to load policy [ 33.917216][ T3542] msdos: Bad value for 'time_offset' [ 33.931105][ T3547] syz.1.24 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.961137][ T3542] loop0: detected capacity change from 0 to 512 [ 33.987092][ T3542] ======================================================= [ 33.987092][ T3542] WARNING: The mand mount option has been deprecated and [ 33.987092][ T3542] and is ignored by this kernel. Remove the mand [ 33.987092][ T3542] option from the mount to silence this warning. [ 33.987092][ T3542] ======================================================= [ 34.044723][ T3547] syz.1.24 (3547) used greatest stack depth: 10104 bytes left [ 34.054116][ T3542] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.079898][ T3542] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.20: bg 0: block 248: padding at end of block bitmap is not set [ 34.097166][ T3542] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.20: Failed to acquire dquot type 1 [ 34.117579][ T3556] loop1: detected capacity change from 0 to 256 [ 34.125587][ T3542] EXT4-fs (loop0): 1 truncate cleaned up [ 34.132448][ T3542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.148195][ T3542] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.178539][ T3542] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 34.245739][ T3542] syz.0.20 (3542) used greatest stack depth: 9304 bytes left [ 34.251140][ T3556] syz.1.26: attempt to access beyond end of device [ 34.251140][ T3556] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 34.280288][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.283027][ T3556] atomic_op ffff88811af08928 conn xmit_atomic 0000000000000000 [ 34.343998][ T3564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 34.417586][ T3571] loop1: detected capacity change from 0 to 256 [ 34.473655][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.525075][ T3571] syz.1.32: attempt to access beyond end of device [ 34.525075][ T3571] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 34.575631][ T3571] atomic_op ffff88811ac95528 conn xmit_atomic 0000000000000000 [ 34.596346][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.603825][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.611418][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.631510][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.638960][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.646438][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.653988][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.661653][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.669072][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.676548][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.683961][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.691384][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.698820][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.703919][ T3578] capability: warning: `syz.0.35' uses deprecated v2 capabilities in a way that may be insecure [ 34.706237][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.724464][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.731924][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.739428][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.746855][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.754281][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.761734][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.769272][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.776752][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.784264][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.791677][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.799069][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.806466][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.813933][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.821384][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.829340][ T3409] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 34.843618][ T3584] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 34.895060][ T3584] SELinux: failed to load policy [ 34.942602][ T3591] loop4: detected capacity change from 0 to 512 [ 34.960509][ T2961] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 34.975192][ T2961] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.999217][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.027994][ T3591] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.079587][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.141947][ T3604] SELinux: failed to load policy [ 35.171433][ T3607] loop4: detected capacity change from 0 to 128 [ 35.201972][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 35.212301][ T36] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.281921][ T3544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.297736][ T3620] syz.4.47: attempt to access beyond end of device [ 35.297736][ T3620] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 35.334601][ T3620] syz.4.47: attempt to access beyond end of device [ 35.334601][ T3620] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 35.373786][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.374309][ T3620] syz.4.47: attempt to access beyond end of device [ 35.374309][ T3620] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 35.381427][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.401884][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.435967][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.436622][ T3633] loop1: detected capacity change from 0 to 512 [ 35.443363][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.443438][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.464632][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.472053][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.476414][ T3620] syz.4.47: attempt to access beyond end of device [ 35.476414][ T3620] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 35.479464][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.500160][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.506228][ T3620] syz.4.47: attempt to access beyond end of device [ 35.506228][ T3620] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 35.507582][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.524004][ T3620] syz.4.47: attempt to access beyond end of device [ 35.524004][ T3620] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 35.528191][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.548884][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.549415][ T3620] syz.4.47: attempt to access beyond end of device [ 35.549415][ T3620] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 35.556344][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.581902][ T3544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.593897][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.601338][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.608802][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.616489][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.623896][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.631317][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.638764][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.646160][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.653666][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.661179][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.668639][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.676077][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.683567][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.683910][ T3633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.691040][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 35.705499][ T3633] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.711488][ T36] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 35.760480][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.784471][ T3639] loop0: detected capacity change from 0 to 256 [ 35.821411][ T3643] loop1: detected capacity change from 0 to 256 [ 35.836661][ T3643] msdos: Bad value for 'time_offset' [ 35.855339][ T3645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 35.889457][ T3544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.897597][ T3643] loop1: detected capacity change from 0 to 512 [ 35.918159][ T3643] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.927297][ T3648] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.941121][ T3643] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.58: bg 0: block 248: padding at end of block bitmap is not set [ 35.956539][ T3648] loop2: detected capacity change from 0 to 512 [ 35.959347][ T3639] atomic_op ffff88811ac99d28 conn xmit_atomic 0000000000000000 [ 35.963155][ T3648] EXT4-fs: Ignoring removed orlov option [ 35.976259][ T3643] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.58: Failed to acquire dquot type 1 [ 35.988233][ T3643] EXT4-fs (loop1): 1 truncate cleaned up [ 35.994041][ T3648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.994487][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.015827][ T3648] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.026444][ T3648] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.61: bg 0: block 248: padding at end of block bitmap is not set [ 36.041110][ T3648] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.61: Failed to acquire dquot type 1 [ 36.054199][ T3648] EXT4-fs (loop2): 1 truncate cleaned up [ 36.063255][ T3648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.092121][ T3643] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 36.113415][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.139118][ T3643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 36.189061][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.200672][ T3544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.216813][ T3666] netlink: 'syz.4.67': attribute type 7 has an invalid length. [ 36.224473][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 36.237182][ T3669] loop1: detected capacity change from 0 to 512 [ 36.251741][ T3670] loop0: detected capacity change from 0 to 512 [ 36.260296][ T3670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.272215][ T3670] EXT4-fs (loop0): 1 truncate cleaned up [ 36.278277][ T3670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.290679][ T3669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.291111][ T3670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.312910][ T3669] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.352937][ T3544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.363329][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.448916][ T3544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.492207][ T3544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.541086][ T3685] loop1: detected capacity change from 0 to 512 [ 36.556085][ T3685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.569335][ T3687] loop0: detected capacity change from 0 to 128 [ 36.579933][ T3685] EXT4-fs (loop1): 1 truncate cleaned up [ 36.586287][ T3685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.625720][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.675843][ T3694] loop1: detected capacity change from 0 to 2048 [ 36.748325][ T3701] vlan0: entered promiscuous mode [ 36.755318][ T3694] loop1: p1 < > p4 [ 36.760135][ T3694] loop1: p4 size 8388608 extends beyond EOD, truncated [ 36.827974][ T3707] loop3: detected capacity change from 0 to 512 [ 36.847825][ T3707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.864130][ T3711] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use) [ 36.873904][ T3707] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.919229][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.934589][ T3719] loop1: detected capacity change from 0 to 512 [ 36.941659][ T3719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.952882][ T3719] EXT4-fs (loop1): 1 truncate cleaned up [ 36.960783][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.973895][ T3719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.070540][ T3727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.102636][ T29] kauditd_printk_skb: 773 callbacks suppressed [ 37.102649][ T29] audit: type=1400 audit(1749717393.370:894): avc: denied { create } for pid=3726 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.129249][ T29] audit: type=1400 audit(1749717393.370:895): avc: denied { write } for pid=3726 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.154126][ T29] audit: type=1400 audit(1749717393.420:896): avc: denied { mounton } for pid=3723 comm="syz.3.86" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.180356][ T3727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.203827][ T29] audit: type=1400 audit(1749717393.470:897): avc: denied { create } for pid=3723 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.223315][ T3725] loop3: detected capacity change from 0 to 512 [ 37.223569][ T3725] EXT4-fs: Ignoring removed orlov option [ 37.236404][ T3725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.246656][ T3725] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.253781][ T3725] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.86: bg 0: block 248: padding at end of block bitmap is not set [ 37.272904][ T29] audit: type=1400 audit(1749717393.540:898): avc: denied { read } for pid=3732 comm="syz.1.88" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.296061][ T29] audit: type=1400 audit(1749717393.540:899): avc: denied { open } for pid=3732 comm="syz.1.88" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.321599][ T29] audit: type=1400 audit(1749717393.570:900): avc: denied { ioctl } for pid=3732 comm="syz.1.88" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.321847][ T3725] Quota error (device loop3): write_blk: dquota write failed [ 37.353865][ T3725] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 37.363819][ T3725] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.86: Failed to acquire dquot type 1 [ 37.376109][ T29] audit: type=1400 audit(1749717393.650:901): avc: denied { create } for pid=3734 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.390407][ T3727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.396994][ T3725] EXT4-fs (loop3): 1 truncate cleaned up [ 37.397595][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.428684][ T3725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.457799][ T3724] loop3: detected capacity change from 0 to 1024 [ 37.511804][ T3727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.523488][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.548626][ T3743] SELinux: Context Ü is not valid (left unmapped). [ 37.557543][ T3725] syz.3.86 (3725) used greatest stack depth: 9000 bytes left [ 37.581948][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.633137][ T3745] netlink: 'syz.0.93': attribute type 3 has an invalid length. [ 37.658709][ T3727] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.714673][ T3727] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.729220][ T3745] ipvlan2: entered promiscuous mode [ 37.738814][ T3745] bridge0: port 3(ipvlan2) entered blocking state [ 37.745458][ T3745] bridge0: port 3(ipvlan2) entered disabled state [ 37.753416][ T3745] ipvlan2: entered allmulticast mode [ 37.758777][ T3745] bridge0: entered allmulticast mode [ 37.765553][ T3745] ipvlan2: left allmulticast mode [ 37.770719][ T3745] bridge0: left allmulticast mode [ 37.853167][ T3727] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.919967][ T3727] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.959274][ T3763] syzkaller0: entered promiscuous mode [ 37.964770][ T3763] syzkaller0: entered allmulticast mode [ 37.984026][ T3763] loop0: detected capacity change from 0 to 512 [ 37.992175][ T3763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.004789][ T3763] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.021495][ T3763] EXT4-fs (loop0): 1 truncate cleaned up [ 38.027553][ T3763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.046071][ T3760] vhci_hcd: invalid port number 0 [ 38.082166][ T3774] 9pnet_fd: Insufficient options for proto=fd [ 38.089925][ T3774] loop2: detected capacity change from 0 to 128 [ 38.146464][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.359115][ T3791] loop0: detected capacity change from 0 to 256 [ 38.438772][ T3791] atomic_op ffff88811af06d28 conn xmit_atomic 0000000000000000 [ 38.573957][ T3805] syzkaller0: entered promiscuous mode [ 38.579857][ T3805] syzkaller0: entered allmulticast mode [ 38.597925][ T3805] loop0: detected capacity change from 0 to 512 [ 38.604808][ T3805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.616998][ T3805] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.632009][ T3805] EXT4-fs (loop0): 1 truncate cleaned up [ 38.639454][ T3805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.775457][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.811712][ T3810] loop2: detected capacity change from 0 to 2048 [ 38.856499][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.909402][ T377] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.947438][ T377] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.959695][ T377] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.959695][ T377] [ 38.969409][ T377] EXT4-fs (loop2): Total free blocks count 0 [ 38.975566][ T377] EXT4-fs (loop2): Free/Dirty block details [ 38.981462][ T377] EXT4-fs (loop2): free_blocks=2415919504 [ 38.987220][ T377] EXT4-fs (loop2): dirty_blocks=32 [ 38.992329][ T377] EXT4-fs (loop2): Block reservation details [ 38.998358][ T377] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 39.006570][ T377] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 39.049715][ T3822] loop1: detected capacity change from 0 to 256 [ 39.210190][ T3822] bio_check_eod: 219 callbacks suppressed [ 39.210272][ T3822] syz.1.123: attempt to access beyond end of device [ 39.210272][ T3822] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 39.267669][ T3838] binfmt_misc: register: failed to install interpreter file ./file2 [ 39.278037][ T3822] atomic_op ffff88811a759528 conn xmit_atomic 0000000000000000 [ 39.350826][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.358347][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.365794][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.393473][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.401006][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.408516][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.415980][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.423403][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.430851][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.438292][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.445717][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.453096][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.460665][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.468070][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.476595][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.484001][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.491476][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.498966][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.506502][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.514175][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.521632][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.529076][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.536578][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.543974][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.551412][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.558935][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.566356][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.573761][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 39.582141][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 39.693931][ T3861] loop1: detected capacity change from 0 to 512 [ 39.794840][ T3868] syz.3.138 (3868) used obsolete PPPIOCDETACH ioctl [ 39.811317][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 39.842116][ T3873] loop0: detected capacity change from 0 to 256 [ 39.849808][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.868290][ T3861] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.939489][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.948943][ T3868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 39.955552][ T3868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.963223][ T3868] vhci_hcd vhci_hcd.0: Device attached [ 39.995154][ T3873] syz.0.142: attempt to access beyond end of device [ 39.995154][ T3873] loop0: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 40.013094][ T3873] atomic_op ffff88811b3d6128 conn xmit_atomic 0000000000000000 [ 40.085839][ T3880] bridge_slave_0: left promiscuous mode [ 40.091637][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.104765][ T3880] bridge_slave_1: left allmulticast mode [ 40.110504][ T3880] bridge_slave_1: left promiscuous mode [ 40.116257][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.132490][ T3880] bond0: (slave bond_slave_0): Releasing backup interface [ 40.145625][ T3880] bond0: (slave bond_slave_1): Releasing backup interface [ 40.154581][ T3882] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 40.168967][ T3880] team0: Port device team_slave_0 removed [ 40.179128][ T3880] team0: Port device team_slave_1 removed [ 40.187048][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.194462][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.205887][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.213486][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.224951][ T3409] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 40.314238][ T3883] syzkaller0: entered promiscuous mode [ 40.319821][ T3883] syzkaller0: entered allmulticast mode [ 40.352566][ T3883] loop0: detected capacity change from 0 to 512 [ 40.360523][ T3883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.394439][ T3883] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 40.413251][ T3883] EXT4-fs (loop0): 1 truncate cleaned up [ 40.419259][ T3883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.483913][ T3903] loop4: detected capacity change from 0 to 512 [ 40.505114][ T3903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.515478][ T3869] vhci_hcd: connection reset by peer [ 40.523898][ T377] vhci_hcd: stop threads [ 40.528287][ T377] vhci_hcd: release socket [ 40.532736][ T377] vhci_hcd: disconnect device [ 40.544529][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.556059][ T3903] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.153: invalid block [ 40.579900][ T3907] FAULT_INJECTION: forcing a failure. [ 40.579900][ T3907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.593179][ T3907] CPU: 1 UID: 0 PID: 3907 Comm: syz.2.155 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 40.593208][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.593222][ T3907] Call Trace: [ 40.593227][ T3907] [ 40.593233][ T3907] __dump_stack+0x1d/0x30 [ 40.593334][ T3907] dump_stack_lvl+0xe8/0x140 [ 40.593381][ T3907] dump_stack+0x15/0x1b [ 40.593400][ T3907] should_fail_ex+0x265/0x280 [ 40.593486][ T3907] should_fail+0xb/0x20 [ 40.593562][ T3907] should_fail_usercopy+0x1a/0x20 [ 40.593643][ T3907] _copy_to_user+0x20/0xa0 [ 40.593691][ T3907] simple_read_from_buffer+0xb5/0x130 [ 40.593737][ T3907] proc_fail_nth_read+0x100/0x140 [ 40.593766][ T3907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.593820][ T3907] vfs_read+0x19d/0x6f0 [ 40.593842][ T3907] ? __rcu_read_unlock+0x4f/0x70 [ 40.593868][ T3907] ? __rcu_read_unlock+0x4f/0x70 [ 40.593896][ T3907] ? __fget_files+0x184/0x1c0 [ 40.593933][ T3907] ksys_read+0xda/0x1a0 [ 40.593969][ T3907] __x64_sys_read+0x40/0x50 [ 40.593988][ T3907] x64_sys_call+0x2d77/0x2fb0 [ 40.594008][ T3907] do_syscall_64+0xd2/0x200 [ 40.594029][ T3907] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.594060][ T3907] ? clear_bhb_loop+0x40/0x90 [ 40.594124][ T3907] ? clear_bhb_loop+0x40/0x90 [ 40.594146][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.594171][ T3907] RIP: 0033:0x7fd519b9d33c [ 40.594263][ T3907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.594286][ T3907] RSP: 002b:00007fd518207030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.594306][ T3907] RAX: ffffffffffffffda RBX: 00007fd519dc5fa0 RCX: 00007fd519b9d33c [ 40.594391][ T3907] RDX: 000000000000000f RSI: 00007fd5182070a0 RDI: 0000000000000006 [ 40.594407][ T3907] RBP: 00007fd518207090 R08: 0000000000000000 R09: 0000000000000000 [ 40.594422][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.594438][ T3907] R13: 0000000000000000 R14: 00007fd519dc5fa0 R15: 00007ffdf8275bf8 [ 40.594496][ T3907] [ 40.806402][ T3909] FAULT_INJECTION: forcing a failure. [ 40.806402][ T3909] name failslab, interval 1, probability 0, space 0, times 1 [ 40.819069][ T3909] CPU: 0 UID: 0 PID: 3909 Comm: syz.0.154 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 40.819100][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.819177][ T3909] Call Trace: [ 40.819184][ T3909] [ 40.819192][ T3909] __dump_stack+0x1d/0x30 [ 40.819214][ T3909] dump_stack_lvl+0xe8/0x140 [ 40.819236][ T3909] dump_stack+0x15/0x1b [ 40.819298][ T3909] should_fail_ex+0x265/0x280 [ 40.819334][ T3909] should_failslab+0x8c/0xb0 [ 40.819353][ T3909] kmem_cache_alloc_noprof+0x50/0x310 [ 40.819387][ T3909] ? fcntl_setlk+0x53/0x950 [ 40.819402][ T3909] fcntl_setlk+0x53/0x950 [ 40.819419][ T3909] ? should_fail_ex+0xdb/0x280 [ 40.819499][ T3909] do_fcntl+0x5dd/0xdf0 [ 40.819524][ T3909] ? selinux_file_fcntl+0x1cb/0x1e0 [ 40.819550][ T3909] __se_sys_fcntl+0xb1/0x120 [ 40.819595][ T3909] __x64_sys_fcntl+0x43/0x50 [ 40.819619][ T3909] x64_sys_call+0x1f1d/0x2fb0 [ 40.819688][ T3909] do_syscall_64+0xd2/0x200 [ 40.819708][ T3909] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.819825][ T3909] ? clear_bhb_loop+0x40/0x90 [ 40.819844][ T3909] ? clear_bhb_loop+0x40/0x90 [ 40.819893][ T3909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.819912][ T3909] RIP: 0033:0x7f775c0ee929 [ 40.819925][ T3909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.820007][ T3909] RSP: 002b:00007f775a757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 40.820024][ T3909] RAX: ffffffffffffffda RBX: 00007f775c315fa0 RCX: 00007f775c0ee929 [ 40.820034][ T3909] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000003 [ 40.820045][ T3909] RBP: 00007f775a757090 R08: 0000000000000000 R09: 0000000000000000 [ 40.820055][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.820066][ T3909] R13: 0000000000000000 R14: 00007f775c315fa0 R15: 00007ffd2aed9db8 [ 40.820082][ T3909] [ 40.820208][ T3903] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.153: invalid indirect mapped block 4294967295 (level 1) [ 41.051724][ T3903] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.153: invalid indirect mapped block 4294967295 (level 1) [ 41.085138][ T3903] EXT4-fs (loop4): 2 truncates cleaned up [ 41.100664][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.118795][ T3919] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 41.137368][ T3919] team0 (unregistering): Port device team_slave_0 removed [ 41.147137][ T3919] team0 (unregistering): Port device team_slave_1 removed [ 41.176624][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.211804][ T3923] netlink: 96 bytes leftover after parsing attributes in process `syz.0.158'. [ 41.497332][ T3937] syzkaller0: entered promiscuous mode [ 41.502928][ T3937] syzkaller0: entered allmulticast mode [ 41.517519][ T3947] FAULT_INJECTION: forcing a failure. [ 41.517519][ T3947] name failslab, interval 1, probability 0, space 0, times 0 [ 41.530242][ T3947] CPU: 1 UID: 0 PID: 3947 Comm: syz.4.168 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 41.530268][ T3947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.530285][ T3947] Call Trace: [ 41.530339][ T3947] [ 41.530345][ T3947] __dump_stack+0x1d/0x30 [ 41.530401][ T3947] dump_stack_lvl+0xe8/0x140 [ 41.530444][ T3947] dump_stack+0x15/0x1b [ 41.530463][ T3947] should_fail_ex+0x265/0x280 [ 41.530502][ T3947] should_failslab+0x8c/0xb0 [ 41.530572][ T3947] kmem_cache_alloc_node_noprof+0x57/0x320 [ 41.530622][ T3947] ? __alloc_skb+0x101/0x320 [ 41.530683][ T3947] __alloc_skb+0x101/0x320 [ 41.530719][ T3947] alloc_skb_with_frags+0x7d/0x470 [ 41.530805][ T3947] ? should_fail_ex+0x30/0x280 [ 41.530839][ T3947] ? __rcu_read_unlock+0x4f/0x70 [ 41.530858][ T3947] ? avc_has_perm_noaudit+0x1b1/0x200 [ 41.530979][ T3947] sock_alloc_send_pskb+0x43a/0x4f0 [ 41.531001][ T3947] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 41.531035][ T3947] unix_stream_sendmsg+0x39a/0x8e0 [ 41.531067][ T3947] ? selinux_socket_sendmsg+0x175/0x1b0 [ 41.531170][ T3947] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 41.531203][ T3947] __sock_sendmsg+0x142/0x180 [ 41.531256][ T3947] ____sys_sendmsg+0x31e/0x4e0 [ 41.531283][ T3947] ___sys_sendmsg+0x17b/0x1d0 [ 41.531350][ T3947] __x64_sys_sendmsg+0xd4/0x160 [ 41.531374][ T3947] x64_sys_call+0x2999/0x2fb0 [ 41.531398][ T3947] do_syscall_64+0xd2/0x200 [ 41.531422][ T3947] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.531503][ T3947] ? clear_bhb_loop+0x40/0x90 [ 41.531522][ T3947] ? clear_bhb_loop+0x40/0x90 [ 41.531547][ T3947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.531571][ T3947] RIP: 0033:0x7f8fa852e929 [ 41.531633][ T3947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.531713][ T3947] RSP: 002b:00007f8fa6b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.531732][ T3947] RAX: ffffffffffffffda RBX: 00007f8fa8755fa0 RCX: 00007f8fa852e929 [ 41.531742][ T3947] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 41.531800][ T3947] RBP: 00007f8fa6b97090 R08: 0000000000000000 R09: 0000000000000000 [ 41.531810][ T3947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.531844][ T3947] R13: 0000000000000000 R14: 00007f8fa8755fa0 R15: 00007fff820734b8 [ 41.531865][ T3947] [ 41.775680][ T3937] loop0: detected capacity change from 0 to 512 [ 41.782833][ T3937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.815795][ T3937] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.854292][ T3951] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 41.854332][ T3937] EXT4-fs (loop0): 1 truncate cleaned up [ 41.870773][ T3937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.940364][ T3951] bond0 (unregistering): Released all slaves [ 41.952722][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.070008][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.077623][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.085213][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.113133][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.120897][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.128552][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.136200][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.143753][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.151173][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.158633][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.166059][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.173450][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.180939][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.188418][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.216100][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.223621][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.231239][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.238800][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.246289][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.253735][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.261192][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.268606][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.276060][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.283458][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.290863][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.298282][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.305737][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.313153][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.339572][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 42.339583][ T29] audit: type=1326 audit(1749717398.610:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.380887][ T1036] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.401640][ T29] audit: type=1326 audit(1749717398.610:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.425062][ T29] audit: type=1326 audit(1749717398.610:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.448280][ T29] audit: type=1326 audit(1749717398.610:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.471642][ T29] audit: type=1326 audit(1749717398.610:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.495093][ T29] audit: type=1326 audit(1749717398.610:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.518334][ T29] audit: type=1326 audit(1749717398.610:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.541654][ T29] audit: type=1326 audit(1749717398.610:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.565003][ T29] audit: type=1326 audit(1749717398.610:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.588598][ T29] audit: type=1326 audit(1749717398.610:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 42.604027][ T3973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3973 comm=syz.0.178 [ 42.707048][ T3945] syz.1.167 (3945) used greatest stack depth: 6952 bytes left [ 42.743546][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 42.755596][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 42.766834][ T3989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3989 comm=syz.1.184 [ 42.782245][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 42.793922][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 42.947724][ T4016] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 42.981197][ T4016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.034846][ T4016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.056392][ T4016] bond0 (unregistering): Released all slaves [ 43.385434][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.392862][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.400295][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.445526][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.453040][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.460501][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.467967][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.475434][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.482878][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.490302][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.497707][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.505120][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.512543][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.519958][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.620370][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.627873][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.635385][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.642814][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.650249][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.657732][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.665164][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.672605][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.680012][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.687423][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.694827][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.702595][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.710005][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.717425][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.727322][ T4058] netlink: 144 bytes leftover after parsing attributes in process `syz.4.212'. [ 43.747623][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 43.785375][ T4064] FAULT_INJECTION: forcing a failure. [ 43.785375][ T4064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.798538][ T4064] CPU: 0 UID: 0 PID: 4064 Comm: syz.1.217 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 43.798610][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.798641][ T4064] Call Trace: [ 43.798648][ T4064] [ 43.798654][ T4064] __dump_stack+0x1d/0x30 [ 43.798674][ T4064] dump_stack_lvl+0xe8/0x140 [ 43.798714][ T4064] dump_stack+0x15/0x1b [ 43.798734][ T4064] should_fail_ex+0x265/0x280 [ 43.798806][ T4064] should_fail+0xb/0x20 [ 43.798903][ T4064] should_fail_usercopy+0x1a/0x20 [ 43.798926][ T4064] _copy_to_user+0x20/0xa0 [ 43.798949][ T4064] do_ipv6_getsockopt+0xb32/0x1470 [ 43.798988][ T4064] ? avc_has_perm_noaudit+0x1b1/0x200 [ 43.799019][ T4064] ? avc_has_perm+0xd3/0x150 [ 43.799051][ T4064] ipv6_getsockopt+0x71/0x1e0 [ 43.799081][ T4064] ? selinux_socket_getsockopt+0x120/0x1b0 [ 43.799192][ T4064] ? selinux_socket_getsockopt+0x120/0x1b0 [ 43.799226][ T4064] rawv6_getsockopt+0x1ae/0x380 [ 43.799258][ T4064] sock_common_getsockopt+0x60/0x70 [ 43.799362][ T4064] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 43.799388][ T4064] do_sock_getsockopt+0x1fd/0x240 [ 43.799408][ T4064] __x64_sys_getsockopt+0x11e/0x1a0 [ 43.799504][ T4064] x64_sys_call+0x12aa/0x2fb0 [ 43.799530][ T4064] do_syscall_64+0xd2/0x200 [ 43.799550][ T4064] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.799603][ T4064] ? clear_bhb_loop+0x40/0x90 [ 43.799657][ T4064] ? clear_bhb_loop+0x40/0x90 [ 43.799680][ T4064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.799701][ T4064] RIP: 0033:0x7f349335e929 [ 43.799728][ T4064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.799747][ T4064] RSP: 002b:00007f34919c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 43.799765][ T4064] RAX: ffffffffffffffda RBX: 00007f3493585fa0 RCX: 00007f349335e929 [ 43.799776][ T4064] RDX: 000000000000003c RSI: 0000000000000029 RDI: 0000000000000003 [ 43.799846][ T4064] RBP: 00007f34919c7090 R08: 00002000000003c0 R09: 0000000000000000 [ 43.799859][ T4064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.799882][ T4064] R13: 0000000000000000 R14: 00007f3493585fa0 R15: 00007ffd8bb3ffc8 [ 43.799902][ T4064] [ 44.114559][ T4068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.124745][ T4068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.165124][ T4068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.173613][ T4068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.207992][ T4077] FAULT_INJECTION: forcing a failure. [ 44.207992][ T4077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.221092][ T4077] CPU: 0 UID: 0 PID: 4077 Comm: syz.4.223 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 44.221116][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.221126][ T4077] Call Trace: [ 44.221131][ T4077] [ 44.221136][ T4077] __dump_stack+0x1d/0x30 [ 44.221158][ T4077] dump_stack_lvl+0xe8/0x140 [ 44.221199][ T4077] dump_stack+0x15/0x1b [ 44.221281][ T4077] should_fail_ex+0x265/0x280 [ 44.221323][ T4077] should_fail+0xb/0x20 [ 44.221353][ T4077] should_fail_usercopy+0x1a/0x20 [ 44.221386][ T4077] _copy_from_user+0x1c/0xb0 [ 44.221409][ T4077] __se_sys_mount+0x10d/0x2e0 [ 44.221433][ T4077] ? fput+0x8f/0xc0 [ 44.221519][ T4077] ? ksys_write+0x192/0x1a0 [ 44.221537][ T4077] __x64_sys_mount+0x67/0x80 [ 44.221555][ T4077] x64_sys_call+0xd36/0x2fb0 [ 44.221574][ T4077] do_syscall_64+0xd2/0x200 [ 44.221607][ T4077] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.221638][ T4077] ? clear_bhb_loop+0x40/0x90 [ 44.221662][ T4077] ? clear_bhb_loop+0x40/0x90 [ 44.221727][ T4077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.221746][ T4077] RIP: 0033:0x7f8fa852e929 [ 44.221761][ T4077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.221853][ T4077] RSP: 002b:00007f8fa6b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.221874][ T4077] RAX: ffffffffffffffda RBX: 00007f8fa8755fa0 RCX: 00007f8fa852e929 [ 44.221906][ T4077] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 44.221916][ T4077] RBP: 00007f8fa6b97090 R08: 0000200000000a40 R09: 0000000000000000 [ 44.221927][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.221940][ T4077] R13: 0000000000000000 R14: 00007f8fa8755fa0 R15: 00007fff820734b8 [ 44.221960][ T4077] [ 44.437263][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 44.469627][ T4082] SELinux: failed to load policy [ 44.482174][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.489797][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.497254][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.510481][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.518034][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.525699][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.533202][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.540651][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.548106][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.555639][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.563306][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.570797][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.578398][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.585815][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.607636][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.615176][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.622754][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.630178][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.637721][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.645333][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.652993][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.660418][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.667874][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.675293][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.682687][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.690190][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.697679][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.705122][ T2961] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.713167][ T2961] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.783574][ T4114] netlink: 'syz.1.238': attribute type 3 has an invalid length. [ 44.847419][ T4122] SELinux: syz.1.238 (4122) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 44.863642][ T4119] loop4: detected capacity change from 0 to 2048 [ 44.886277][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.955055][ T4119] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.968732][ T4119] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.239: bg 0: block 345: padding at end of block bitmap is not set [ 44.987005][ T4119] EXT4-fs (loop4): Remounting filesystem read-only [ 44.993561][ T4119] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.4.239: cleanup dec ref error -117 [ 45.028649][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.057952][ T4138] FAULT_INJECTION: forcing a failure. [ 45.057952][ T4138] name failslab, interval 1, probability 0, space 0, times 0 [ 45.070645][ T4138] CPU: 1 UID: 0 PID: 4138 Comm: syz.0.244 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 45.070743][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.070758][ T4138] Call Trace: [ 45.070770][ T4138] [ 45.070777][ T4138] __dump_stack+0x1d/0x30 [ 45.070795][ T4138] dump_stack_lvl+0xe8/0x140 [ 45.070810][ T4138] dump_stack+0x15/0x1b [ 45.070851][ T4138] should_fail_ex+0x265/0x280 [ 45.070907][ T4138] should_failslab+0x8c/0xb0 [ 45.070985][ T4138] kmem_cache_alloc_noprof+0x50/0x310 [ 45.071014][ T4138] ? skb_clone+0x151/0x1f0 [ 45.071086][ T4138] skb_clone+0x151/0x1f0 [ 45.071217][ T4138] __netlink_deliver_tap+0x2c9/0x500 [ 45.071246][ T4138] netlink_unicast+0x64c/0x670 [ 45.071283][ T4138] netlink_sendmsg+0x58b/0x6b0 [ 45.071384][ T4138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.071407][ T4138] __sock_sendmsg+0x142/0x180 [ 45.071457][ T4138] ____sys_sendmsg+0x31e/0x4e0 [ 45.071483][ T4138] ___sys_sendmsg+0x17b/0x1d0 [ 45.071519][ T4138] __x64_sys_sendmsg+0xd4/0x160 [ 45.071554][ T4138] x64_sys_call+0x2999/0x2fb0 [ 45.071574][ T4138] do_syscall_64+0xd2/0x200 [ 45.071591][ T4138] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.071686][ T4138] ? clear_bhb_loop+0x40/0x90 [ 45.071710][ T4138] ? clear_bhb_loop+0x40/0x90 [ 45.071731][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.071749][ T4138] RIP: 0033:0x7f775c0ee929 [ 45.071796][ T4138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.071816][ T4138] RSP: 002b:00007f775a757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.071836][ T4138] RAX: ffffffffffffffda RBX: 00007f775c315fa0 RCX: 00007f775c0ee929 [ 45.071849][ T4138] RDX: 0000000000040000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 45.071862][ T4138] RBP: 00007f775a757090 R08: 0000000000000000 R09: 0000000000000000 [ 45.071872][ T4138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.071947][ T4138] R13: 0000000000000000 R14: 00007f775c315fa0 R15: 00007ffd2aed9db8 [ 45.071966][ T4138] [ 45.294932][ T4138] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 45.306529][ T3409] usb 7-1: enqueue for inactive port 0 [ 45.312018][ T3409] usb 7-1: enqueue for inactive port 0 [ 45.352852][ T4146] xt_hashlimit: max too large, truncated to 1048576 [ 45.395055][ T3409] vhci_hcd: vhci_device speed not set [ 45.453280][ T4160] loop4: detected capacity change from 0 to 512 [ 45.488913][ T4160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.514582][ T4168] loop0: detected capacity change from 0 to 512 [ 45.523865][ T4146] loop1: detected capacity change from 0 to 512 [ 45.530922][ T4168] EXT4-fs: Ignoring removed i_version option [ 45.537211][ T4146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.547119][ T4168] EXT4-fs: test_dummy_encryption option not supported [ 45.548097][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.568602][ T4172] loop3: detected capacity change from 0 to 128 [ 45.574994][ T4166] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 45.588532][ T4146] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.603062][ T4160] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.613927][ T4146] EXT4-fs (loop1): 1 truncate cleaned up [ 45.621648][ T4146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.622613][ T4179] usb usb3: usbfs: process 4179 (syz.0.256) did not claim interface 8 before use [ 45.644766][ T4160] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 45.646888][ T4172] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.670368][ T4166] Invalid ELF header magic: != ELF [ 45.688494][ T4172] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.735003][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.070594][ T4209] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 46.096821][ T4209] bridge_slave_0: left allmulticast mode [ 46.102546][ T4209] bridge_slave_0: left promiscuous mode [ 46.108438][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.118541][ T4209] bridge_slave_1: left allmulticast mode [ 46.124213][ T4209] bridge_slave_1: left promiscuous mode [ 46.129974][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.147075][ T4209] team0: Port device team_slave_0 removed [ 46.165913][ T4209] team0: Port device team_slave_1 removed [ 46.181033][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.188501][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.201757][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.214108][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.221590][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.268429][ T4214] loop1: detected capacity change from 0 to 2048 [ 46.277517][ T4214] ext4: Unknown parameter 'smackfshat' [ 46.290383][ T4214] can0: slcan on ttyS3. [ 46.316641][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.336002][ T4218] loop3: detected capacity change from 0 to 1024 [ 46.345244][ T4214] can0 (unregistered): slcan off ttyS3. [ 46.356702][ T4218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.420023][ T4229] netlink: 'syz.0.274': attribute type 39 has an invalid length. [ 46.459399][ T4233] loop4: detected capacity change from 0 to 512 [ 46.651483][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.680367][ T4240] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 46.691259][ T4233] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.851020][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.912343][ T3306] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /51/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 46.945030][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.005414][ T3306] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.035650][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.084681][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 47.104713][ T4240] bond0 (unregistering): Released all slaves [ 47.124169][ T3306] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /51/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.202794][ T3306] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.243113][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 47.262790][ T4263] usb usb8: usbfs: process 4263 (syz.0.285) did not claim interface 0 before use [ 47.281764][ T3306] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /51/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.342183][ T3306] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.365637][ T4265] random: crng reseeded on system resumption [ 47.371733][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 47.371744][ T29] audit: type=1400 audit(1749717403.640:1469): avc: denied { append } for pid=4264 comm="syz.0.286" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.442107][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.449658][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.457162][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.474957][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 47.489345][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.496769][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.504227][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.511725][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.519202][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.526622][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.534046][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.541519][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.548918][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.556306][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.563747][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.595049][ T3306] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /51/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.656217][ T3306] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.696872][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 47.740117][ T3306] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /51/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.781573][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.789021][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.796439][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.803848][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.811337][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.818789][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.826183][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.833627][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.841122][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.848551][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.855970][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.863372][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.870770][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.878324][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 47.919880][ T4276] loop2: detected capacity change from 0 to 512 [ 47.927940][ T3306] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 47.968213][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 47.980257][ T4276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.996470][ T29] audit: type=1400 audit(1749717404.270:1470): avc: denied { bind } for pid=4279 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.044574][ T4276] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.076190][ T4238] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 48.088513][ T4238] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.088513][ T4238] [ 48.098183][ T4238] EXT4-fs (loop3): Total free blocks count 0 [ 48.104249][ T4238] EXT4-fs (loop3): Free/Dirty block details [ 48.110336][ T4238] EXT4-fs (loop3): free_blocks=68451041280 [ 48.116239][ T4238] EXT4-fs (loop3): dirty_blocks=76864 [ 48.121620][ T4238] EXT4-fs (loop3): Block reservation details [ 48.127632][ T4238] EXT4-fs (loop3): i_reserved_data_blocks=4804 [ 48.129295][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 48.145900][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 48.157680][ T36] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 48.158805][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 48.180164][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 48.193103][ T3306] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 48.206538][ T4286] netlink: 96 bytes leftover after parsing attributes in process `syz.0.293'. [ 48.216100][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.248513][ T3316] ================================================================== [ 48.256612][ T3316] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 48.264335][ T3316] [ 48.266681][ T3316] read-write to 0xffff888237d26f10 of 8 bytes by task 3306 on cpu 1: [ 48.274760][ T3316] find_get_block_common+0x4f0/0x960 [ 48.280056][ T3316] bdev_getblk+0x83/0x3d0 [ 48.284390][ T3316] ext4_getblk+0x1b6/0x510 [ 48.288818][ T3316] ext4_bread+0x28/0x110 [ 48.293077][ T3316] ext4_readdir+0x793/0x1d40 [ 48.297689][ T3316] iterate_dir+0x114/0x330 [ 48.302131][ T3316] __se_sys_getdents64+0x88/0x1b0 [ 48.307178][ T3316] __x64_sys_getdents64+0x43/0x50 [ 48.312218][ T3316] x64_sys_call+0x1302/0x2fb0 [ 48.316904][ T3316] do_syscall_64+0xd2/0x200 [ 48.321411][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.327308][ T3316] [ 48.329629][ T3316] read to 0xffff888237d26f10 of 8 bytes by task 3316 on cpu 0: [ 48.337167][ T3316] has_bh_in_lru+0x35/0x1f0 [ 48.341666][ T3316] __lru_add_drain_all+0x234/0x3f0 [ 48.346792][ T3316] lru_add_drain_all+0x10/0x20 [ 48.351564][ T3316] invalidate_bdev+0x47/0x70 [ 48.356159][ T3316] ext4_put_super+0x624/0x7d0 [ 48.360849][ T3316] generic_shutdown_super+0xe3/0x210 [ 48.366143][ T3316] kill_block_super+0x2a/0x70 [ 48.370821][ T3316] ext4_kill_sb+0x42/0x80 [ 48.375159][ T3316] deactivate_locked_super+0x75/0x1c0 [ 48.380539][ T3316] deactivate_super+0x97/0xa0 [ 48.385235][ T3316] cleanup_mnt+0x269/0x2e0 [ 48.389665][ T3316] __cleanup_mnt+0x19/0x20 [ 48.394086][ T3316] task_work_run+0x12e/0x1a0 [ 48.398690][ T3316] exit_to_user_mode_loop+0xe4/0x100 [ 48.403996][ T3316] do_syscall_64+0x1d6/0x200 [ 48.408600][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.414499][ T3316] [ 48.416831][ T3316] value changed: 0x0000000000000000 -> 0xffff888106abd820 [ 48.423940][ T3316] [ 48.426281][ T3316] Reported by Kernel Concurrency Sanitizer on: [ 48.432427][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 48.445018][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.455076][ T3316] ================================================================== [ 48.489581][ T4292] loop0: detected capacity change from 0 to 1024 [ 48.498362][ T4292] EXT4-fs (loop0): inodes count not valid: 32 vs 1312 [ 48.513467][ T4292] FAULT_INJECTION: forcing a failure. [ 48.513467][ T4292] name failslab, interval 1, probability 0, space 0, times 0 [ 48.526161][ T4292] CPU: 1 UID: 0 PID: 4292 Comm: syz.0.297 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 48.526217][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.526231][ T4292] Call Trace: [ 48.526237][ T4292] [ 48.526242][ T4292] __dump_stack+0x1d/0x30 [ 48.526260][ T4292] dump_stack_lvl+0xe8/0x140 [ 48.526280][ T4292] dump_stack+0x15/0x1b [ 48.526371][ T4292] should_fail_ex+0x265/0x280 [ 48.526401][ T4292] should_failslab+0x8c/0xb0 [ 48.526426][ T4292] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 48.526517][ T4292] ? __d_alloc+0x3d/0x350 [ 48.526540][ T4292] __d_alloc+0x3d/0x350 [ 48.526561][ T4292] ? from_vfsgid+0x70/0xa0 [ 48.526580][ T4292] d_alloc_pseudo+0x1e/0x80 [ 48.526632][ T4292] alloc_file_pseudo+0x71/0x160 [ 48.526663][ T4292] ? hugetlbfs_get_inode+0x267/0x370 [ 48.526768][ T4292] hugetlb_file_setup+0x298/0x3d0 [ 48.526823][ T4292] ksys_mmap_pgoff+0x157/0x310 [ 48.526852][ T4292] x64_sys_call+0x1602/0x2fb0 [ 48.526869][ T4292] do_syscall_64+0xd2/0x200 [ 48.526906][ T4292] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.526935][ T4292] ? clear_bhb_loop+0x40/0x90 [ 48.526958][ T4292] ? clear_bhb_loop+0x40/0x90 [ 48.526982][ T4292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.527006][ T4292] RIP: 0033:0x7f775c0ee929 [ 48.527070][ T4292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.527090][ T4292] RSP: 002b:00007f775a757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 48.527111][ T4292] RAX: ffffffffffffffda RBX: 00007f775c315fa0 RCX: 00007f775c0ee929 [ 48.527125][ T4292] RDX: 0000000002000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 48.527135][ T4292] RBP: 00007f775a757090 R08: ffffffffffffffff R09: 0000000000000000 [ 48.527145][ T4292] R10: 000000000004ca31 R11: 0000000000000246 R12: 0000000000000001 [ 48.527155][ T4292] R13: 0000000000000000 R14: 00007f775c315fa0 R15: 00007ffd2aed9db8 [ 48.527170][ T4292] [ 48.531697][ T29] audit: type=1400 audit(1749717404.800:1471): avc: denied { read } for pid=4293 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.754051][ T29] audit: type=1326 audit(1749717404.830:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 48.777441][ T29] audit: type=1326 audit(1749717404.830:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 48.800814][ T29] audit: type=1326 audit(1749717404.830:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 48.824200][ T29] audit: type=1326 audit(1749717404.830:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 48.847609][ T29] audit: type=1326 audit(1749717404.830:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 48.870904][ T29] audit: type=1326 audit(1749717404.830:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 48.894216][ T29] audit: type=1326 audit(1749717404.830:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775c0ee929 code=0x7ffc0000 [ 49.064300][ T1697] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 49.064339][ T377] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.116634][ T377] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.166453][ T377] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.196526][ T377] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.398600][ T377] hsr_slave_0: left promiscuous mode [ 49.404524][ T377] hsr_slave_1: left promiscuous mode [ 49.413949][ T377] veth1_macvtap: left promiscuous mode [ 49.419581][ T377] veth0_macvtap: left promiscuous mode [ 49.425362][ T377] veth1_vlan: left promiscuous mode