last executing test programs: 2.010269024s ago: executing program 0 (id=353): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x1, 0x0, 0x7ffc1bfb}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000"], 0x88}}, 0x0) iopl(0x3) syz_emit_ethernet(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r3, 0x1, {0xb4d92c3c1588cfd3, 0x1, 0x2}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f00000001c0)="4dddc4d6ea503c6b4b223bff1b5066ca5658d723e6b40440703017f846c8925897a97d05bbbbfdf0910e8f679692cce2115b4574096449a2404056129e9340c9cb9f2fedb72cac9bed2534107714c2a02f7ad5198b78b513266511f2a48b6ff7a62feb08703b318c6dacf311819d4879cf5caa03eb27c8d60b7d5f827df68c8a174aeab7b70d2ad05a1576bf782f82bf534d30cfe5ad1d60a6f5151bd844a48c93e548651449b4e3e1dd068ac212343c08e962fa23554bc0fce60ec7ad2fa4842bb7de4bfc021e553173d0bb1b9a6c012401a2e83934e851f9592b1430aad8e8498abe32", 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r4 = timerfd_create(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) 1.55251875s ago: executing program 4 (id=374): syz_read_part_table(0x624, &(0x7f0000000640)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200010000000000", @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="00000000ffffffff00000000000000000000000000000000c4"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) 1.220118474s ago: executing program 4 (id=381): r0 = semget$private(0x0, 0x2, 0x200) semop(r0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x0, 0xe65b}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000c80)=""/29) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x10100}, 0x0, 0x0) 1.108963055s ago: executing program 0 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001280)='<', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001500)='&', 0x1}], 0x1}}], 0x2, 0x24004441) 1.070491936s ago: executing program 0 (id=386): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) 1.018573107s ago: executing program 1 (id=387): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000300), &(0x7f0000000080)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 997.189927ms ago: executing program 1 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x400002, 0x9c}, &(0x7f0000000100)=0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r4, 0x0) syz_clone3(&(0x7f00000001c0)={0x68081000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x264b, 0x4, 0x1, 0x0, 0x0) 992.892337ms ago: executing program 0 (id=389): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 950.336348ms ago: executing program 0 (id=390): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) 841.229029ms ago: executing program 1 (id=392): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 840.813799ms ago: executing program 1 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_read_part_table(0x624, &(0x7f0000000640)="$eJzs2z+IHFUcB/Dv7mb/nKfZJlUazQWsAsEQO7cw4W4VFMLFIEgKlTTBVBEODl2yYooY4YgWwUawCcI1p+lioxg8IgQ7JVgowolpBO1UJCOzO7vuaUQwISB8PsXMm5nf733nMa+d8L9WT7M8NUYXPyTZ/+Kv7cz9WXBh9Kw7uSy63eytj8fDHFtfXPqtKIrimXZqOZ5m9lzd+WE74wmKmZyFJK0HJkHJpffu2zF59nDRPV9NmWHa2ZlkvnWbl21vG96ugntso5fU8sb8WnnRH2zdejb54KfFybc9fKI8Hu/kWnVj/J0/KSb7INNdUPvLzMU/h87P5m92h2dP99dWeyfLqd5Z/+6RW7v7k1k/PpCsTCPqMxmt2d303230Nhup8m/sr24ODu27vOviwdWPPl++2filGFnqTHvKt3jz6N1IBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbutms/v62dP9tdXeyRv9wda5r64//ejKhceuzOV6UW8dPpF0yrpraW7re/lqI8lLeSGncmry6Iuk6JaD4eiY2qR650xnfTranWSjV+V//9TehX67auqvv1bVHKjOR6ZdcymKM5kbje+/4/Vv9DZnFjbYWtnz1nNvDw7tu7zr4sFPv8zyzXKZeXdbT3t0/D077jgdAAAAAAAAAAAAAAAAAAAAxhaXnnzoyOPLr5xLMuwk+fHVetJMMfrJvZZheeokC1X9N+Of31uXOsnw5yea618frbWe/+z8t+P7GaadZhqZf//KseTBac6ZvyXX7sXy+Bd/BAAA//+bBHhd") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x310) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000140)=0x7, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) 670.324781ms ago: executing program 1 (id=398): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000300), &(0x7f0000000080)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 654.256612ms ago: executing program 3 (id=399): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) 605.337413ms ago: executing program 1 (id=401): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x1, 0x0, 0x7ffc1bfb}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) iopl(0x3) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x2b00, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r6, 0x1, {0xb4d92c3c1588cfd3, 0x1, 0x2}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r7 = timerfd_create(0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) 570.173653ms ago: executing program 3 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) msgsnd(0x0, &(0x7f0000000600)={0x1, "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"}, 0x1004, 0x800) 569.739582ms ago: executing program 2 (id=403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 519.542413ms ago: executing program 2 (id=404): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 417.285424ms ago: executing program 3 (id=405): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 404.051185ms ago: executing program 2 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000040701"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 368.331845ms ago: executing program 3 (id=407): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x4, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 347.793265ms ago: executing program 4 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x0) 307.691816ms ago: executing program 3 (id=409): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x60, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x9a, 0x0, 0x0) r3 = socket(0x8, 0x5, 0x40000000) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file5\x00', 0xffffffffffffff9c, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000001100)=ANY=[@ANYRESOCT=r3], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 307.313976ms ago: executing program 4 (id=410): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbd1df2504000000140001800800050001000000060009"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r8, &(0x7f0000000200)="7853a42ae2", 0x5) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 294.591056ms ago: executing program 2 (id=411): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @empty}}}, 0x0) 270.976186ms ago: executing program 4 (id=412): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) 224.151457ms ago: executing program 2 (id=413): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000480)={0x335, @tick, 0x0, {}, 0x40}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7f}, {0x10, 0x9}, 0x8, 0x1, 0x80}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 220.235048ms ago: executing program 3 (id=414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$kcm(0x10, 0x3, 0x10) 121.172739ms ago: executing program 4 (id=415): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0) 24.18387ms ago: executing program 0 (id=416): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 0s ago: executing program 2 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4) kernel console output (not intermixed with test programs): [ 24.155503][ T29] audit: type=1400 audit(1746226742.012:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 28.070796][ T29] audit: type=1400 audit(1746226745.932:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.071933][ T3291] cgroup: Unknown subsys name 'net' [ 28.097470][ T29] audit: type=1400 audit(1746226745.932:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.129937][ T29] audit: type=1400 audit(1746226745.972:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.271104][ T3291] cgroup: Unknown subsys name 'cpuset' [ 28.278318][ T3291] cgroup: Unknown subsys name 'rlimit' [ 28.410986][ T29] audit: type=1400 audit(1746226746.272:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.439956][ T29] audit: type=1400 audit(1746226746.272:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.465056][ T29] audit: type=1400 audit(1746226746.272:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.469491][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.488489][ T29] audit: type=1400 audit(1746226746.272:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.522434][ T29] audit: type=1400 audit(1746226746.292:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.553710][ T29] audit: type=1400 audit(1746226746.292:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.578328][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.580477][ T29] audit: type=1400 audit(1746226746.362:91): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.593225][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.697635][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.708440][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.718688][ T3303] bridge_slave_0: entered allmulticast mode [ 29.726938][ T3303] bridge_slave_0: entered promiscuous mode [ 29.735548][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.744968][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.753602][ T3303] bridge_slave_1: entered allmulticast mode [ 29.760989][ T3303] bridge_slave_1: entered promiscuous mode [ 29.805854][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.823076][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.856798][ T3303] team0: Port device team_slave_0 added [ 29.883878][ T3303] team0: Port device team_slave_1 added [ 29.932705][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.943120][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.973421][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.985677][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.995533][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.024626][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.075178][ T3303] hsr_slave_0: entered promiscuous mode [ 30.083266][ T3303] hsr_slave_1: entered promiscuous mode [ 30.137233][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.245069][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.269211][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.285551][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.293380][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.302580][ T3314] bridge_slave_0: entered allmulticast mode [ 30.311877][ T3314] bridge_slave_0: entered promiscuous mode [ 30.336964][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.347200][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.356689][ T3314] bridge_slave_1: entered allmulticast mode [ 30.364085][ T3314] bridge_slave_1: entered promiscuous mode [ 30.417661][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.449286][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.482995][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.522778][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.532000][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.541794][ T3312] bridge_slave_0: entered allmulticast mode [ 30.550946][ T3312] bridge_slave_0: entered promiscuous mode [ 30.562705][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.571788][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.584047][ T3315] bridge_slave_0: entered allmulticast mode [ 30.591114][ T3315] bridge_slave_0: entered promiscuous mode [ 30.614642][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.622327][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.629796][ T3312] bridge_slave_1: entered allmulticast mode [ 30.637854][ T3312] bridge_slave_1: entered promiscuous mode [ 30.646912][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.654657][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.662353][ T3315] bridge_slave_1: entered allmulticast mode [ 30.669172][ T3315] bridge_slave_1: entered promiscuous mode [ 30.675615][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.684829][ T3314] team0: Port device team_slave_0 added [ 30.705677][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.716215][ T3314] team0: Port device team_slave_1 added [ 30.746081][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.757289][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.776191][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.802199][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.819540][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.830985][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.842131][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.876095][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.888778][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.898982][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.906352][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.914555][ T3317] bridge_slave_0: entered allmulticast mode [ 30.922490][ T3317] bridge_slave_0: entered promiscuous mode [ 30.936781][ T3315] team0: Port device team_slave_0 added [ 30.943943][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.951407][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.978812][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.999029][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.007308][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.017106][ T3317] bridge_slave_1: entered allmulticast mode [ 31.023852][ T3317] bridge_slave_1: entered promiscuous mode [ 31.037456][ T3315] team0: Port device team_slave_1 added [ 31.063803][ T3312] team0: Port device team_slave_0 added [ 31.083950][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.094053][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.124863][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.140587][ T3312] team0: Port device team_slave_1 added [ 31.150095][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.168790][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.177474][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.214999][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.238068][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.255337][ T3314] hsr_slave_0: entered promiscuous mode [ 31.262244][ T3314] hsr_slave_1: entered promiscuous mode [ 31.268952][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.277246][ T3314] Cannot create hsr debugfs directory [ 31.305163][ T3317] team0: Port device team_slave_0 added [ 31.313267][ T3317] team0: Port device team_slave_1 added [ 31.321580][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.329778][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.358277][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.383018][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.392117][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.422608][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.455891][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.463741][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.511137][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.533873][ T3315] hsr_slave_0: entered promiscuous mode [ 31.541080][ T3315] hsr_slave_1: entered promiscuous mode [ 31.548181][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.557650][ T3315] Cannot create hsr debugfs directory [ 31.564888][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.574501][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.610852][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.647082][ T3312] hsr_slave_0: entered promiscuous mode [ 31.653797][ T3312] hsr_slave_1: entered promiscuous mode [ 31.659978][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.668748][ T3312] Cannot create hsr debugfs directory [ 31.719869][ T3317] hsr_slave_0: entered promiscuous mode [ 31.726988][ T3317] hsr_slave_1: entered promiscuous mode [ 31.733647][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.742925][ T3317] Cannot create hsr debugfs directory [ 31.922994][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.930638][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.940739][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.949836][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.962693][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.980825][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.011867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.020975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.038485][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.049611][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.065512][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.078216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.086669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.109996][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.143286][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.164372][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.178643][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.203730][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.251615][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.261964][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.272263][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.283376][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.294567][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.315922][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.351659][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.360452][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.374169][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.382174][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.410193][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.448735][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.479139][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.488547][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.512259][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.538800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.546110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.563196][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.570506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.592571][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.613527][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.621751][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.634790][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.642515][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.671131][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.692239][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.706850][ T3303] veth0_vlan: entered promiscuous mode [ 32.721219][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.733022][ T3303] veth1_vlan: entered promiscuous mode [ 32.744562][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.769320][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.778639][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.786209][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.812312][ T3303] veth0_macvtap: entered promiscuous mode [ 32.821161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.828521][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.857339][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.873010][ T3303] veth1_macvtap: entered promiscuous mode [ 32.928863][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.951943][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.975503][ T3314] veth0_vlan: entered promiscuous mode [ 32.987714][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.996711][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005512][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.015079][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035206][ T3314] veth1_vlan: entered promiscuous mode [ 33.049792][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.075486][ T3317] veth0_vlan: entered promiscuous mode [ 33.100550][ T3317] veth1_vlan: entered promiscuous mode [ 33.111824][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.111842][ T29] audit: type=1400 audit(1746226750.972:110): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.wfNSAU/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.117441][ T3314] veth0_macvtap: entered promiscuous mode [ 33.120795][ T29] audit: type=1400 audit(1746226750.972:111): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.154276][ T3317] veth0_macvtap: entered promiscuous mode [ 33.173963][ T29] audit: type=1400 audit(1746226750.972:112): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.wfNSAU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.185122][ T3315] veth0_vlan: entered promiscuous mode [ 33.209680][ T29] audit: type=1400 audit(1746226750.972:113): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.227852][ T3315] veth1_vlan: entered promiscuous mode [ 33.239785][ T29] audit: type=1400 audit(1746226750.972:114): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.wfNSAU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.265596][ T3317] veth1_macvtap: entered promiscuous mode [ 33.273008][ T29] audit: type=1400 audit(1746226750.972:115): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.wfNSAU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.297357][ T3314] veth1_macvtap: entered promiscuous mode [ 33.310422][ T29] audit: type=1400 audit(1746226750.972:116): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.341016][ T29] audit: type=1400 audit(1746226751.002:117): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.365787][ T29] audit: type=1400 audit(1746226751.002:118): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.372481][ T3315] veth0_macvtap: entered promiscuous mode [ 33.402785][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.409761][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.430012][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.441452][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.457059][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.468722][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.480901][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.495276][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.508380][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.517855][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.531795][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.544082][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.554998][ T3315] veth1_macvtap: entered promiscuous mode [ 33.561642][ T3439] loop1: detected capacity change from 0 to 512 [ 33.570017][ T29] audit: type=1400 audit(1746226751.412:119): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.580063][ T3439] EXT4-fs: Ignoring removed bh option [ 33.612635][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.627637][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.641485][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.657058][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.670204][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.676579][ T3439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.685485][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698981][ T3439] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.707642][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.733071][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.743696][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.761561][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.772180][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.782605][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.793042][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.804141][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.819040][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.831098][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.842121][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.853661][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.864987][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.880585][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.892986][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.907796][ T3312] veth0_vlan: entered promiscuous mode [ 33.940884][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.952808][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.964122][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.975209][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.985652][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.997540][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.011021][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.029398][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.029635][ C0] hrtimer: interrupt took 36991 ns [ 34.038817][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.054859][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065884][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.084933][ T3312] veth1_vlan: entered promiscuous mode [ 34.165782][ T3312] veth0_macvtap: entered promiscuous mode [ 34.192073][ T3312] veth1_macvtap: entered promiscuous mode [ 34.205782][ T3448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 34.263673][ T3457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.266485][ T3456] loop4: detected capacity change from 0 to 512 [ 34.285907][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.297475][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.298734][ T3457] mmap: syz.0.1 (3457) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.308564][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.308588][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.308601][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.308618][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.308643][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.308659][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.315319][ T3456] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.362221][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.385240][ T3456] EXT4-fs (loop4): invalid journal inode [ 34.453458][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.465665][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.478856][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.479019][ T3456] EXT4-fs (loop4): can't get journal size [ 34.492494][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.492513][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.520150][ T3456] EXT4-fs (loop4): 1 truncate cleaned up [ 34.527823][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.537230][ T3456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.546390][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.574608][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.587175][ T3456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.593529][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.607966][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.618081][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.628403][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.638187][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.694761][ T3456] FAULT_INJECTION: forcing a failure. [ 34.694761][ T3456] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.709570][ T3456] CPU: 1 UID: 0 PID: 3456 Comm: syz.4.5 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 34.709604][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.709638][ T3456] Call Trace: [ 34.709645][ T3456] [ 34.709654][ T3456] __dump_stack+0x1d/0x30 [ 34.709717][ T3456] dump_stack_lvl+0xe8/0x140 [ 34.709816][ T3456] dump_stack+0x15/0x1b [ 34.709836][ T3456] should_fail_ex+0x265/0x280 [ 34.709875][ T3456] should_fail+0xb/0x20 [ 34.709932][ T3456] should_fail_usercopy+0x1a/0x20 [ 34.709952][ T3456] _copy_to_user+0x20/0xa0 [ 34.709978][ T3456] simple_read_from_buffer+0xb5/0x130 [ 34.710005][ T3456] proc_fail_nth_read+0x100/0x140 [ 34.710092][ T3456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 34.710115][ T3456] vfs_read+0x19d/0x6f0 [ 34.710137][ T3456] ? __rcu_read_unlock+0x4f/0x70 [ 34.710160][ T3456] ? __fget_files+0x184/0x1c0 [ 34.710226][ T3456] ksys_read+0xda/0x1a0 [ 34.710250][ T3456] __x64_sys_read+0x40/0x50 [ 34.710327][ T3456] x64_sys_call+0x2d77/0x2fb0 [ 34.710353][ T3456] do_syscall_64+0xd0/0x1a0 [ 34.710380][ T3456] ? clear_bhb_loop+0x25/0x80 [ 34.710406][ T3456] ? clear_bhb_loop+0x25/0x80 [ 34.710429][ T3456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.710458][ T3456] RIP: 0033:0x7f92d9d6d37c [ 34.710482][ T3456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 34.710503][ T3456] RSP: 002b:00007f92d83d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.710529][ T3456] RAX: ffffffffffffffda RBX: 00007f92d9f95fa0 RCX: 00007f92d9d6d37c [ 34.710544][ T3456] RDX: 000000000000000f RSI: 00007f92d83d70a0 RDI: 000000000000000c [ 34.710559][ T3456] RBP: 00007f92d83d7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.710574][ T3456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.710588][ T3456] R13: 0000000000000000 R14: 00007f92d9f95fa0 R15: 00007fff58cd62e8 [ 34.710668][ T3456] [ 34.988307][ T3470] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.989338][ T3466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.015203][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.035579][ T3474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.061045][ T3474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.251579][ T3490] loop4: detected capacity change from 0 to 512 [ 35.267856][ T3490] EXT4-fs: Ignoring removed bh option [ 35.298305][ T3490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.331969][ T3490] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.382060][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.395426][ T3494] Zero length message leads to an empty skb [ 35.495125][ T3466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.519050][ T3502] FAULT_INJECTION: forcing a failure. [ 35.519050][ T3502] name failslab, interval 1, probability 0, space 0, times 0 [ 35.519078][ T3502] CPU: 1 UID: 0 PID: 3502 Comm: syz.4.21 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 35.519103][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.519124][ T3502] Call Trace: [ 35.519131][ T3502] [ 35.519140][ T3502] __dump_stack+0x1d/0x30 [ 35.519206][ T3502] dump_stack_lvl+0xe8/0x140 [ 35.519657][ T3502] dump_stack+0x15/0x1b [ 35.519676][ T3502] should_fail_ex+0x265/0x280 [ 35.519708][ T3502] should_failslab+0x8c/0xb0 [ 35.519753][ T3502] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 35.519797][ T3502] ? shmem_alloc_inode+0x34/0x50 [ 35.519859][ T3502] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 35.519888][ T3502] shmem_alloc_inode+0x34/0x50 [ 35.519923][ T3502] alloc_inode+0x3d/0x170 [ 35.519950][ T3502] new_inode+0x1d/0xe0 [ 35.520241][ T3502] shmem_get_inode+0x244/0x750 [ 35.520279][ T3502] __shmem_file_setup+0x122/0x1f0 [ 35.520319][ T3502] shmem_file_setup+0x3b/0x50 [ 35.520381][ T3502] __se_sys_memfd_create+0x2c3/0x590 [ 35.520411][ T3502] __x64_sys_memfd_create+0x31/0x40 [ 35.520433][ T3502] x64_sys_call+0x122f/0x2fb0 [ 35.520539][ T3502] do_syscall_64+0xd0/0x1a0 [ 35.520566][ T3502] ? clear_bhb_loop+0x25/0x80 [ 35.520589][ T3502] ? clear_bhb_loop+0x25/0x80 [ 35.520615][ T3502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.520641][ T3502] RIP: 0033:0x7f92d9d6e969 [ 35.520740][ T3502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.520775][ T3502] RSP: 002b:00007f92d83d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 35.520797][ T3502] RAX: ffffffffffffffda RBX: 0000000000000553 RCX: 00007f92d9d6e969 [ 35.520813][ T3502] RDX: 00007f92d83d6ef0 RSI: 0000000000000000 RDI: 00007f92d9df1444 [ 35.520828][ T3502] RBP: 0000200000001080 R08: 00007f92d83d6bb7 R09: 00007f92d83d6e40 [ 35.520840][ T3502] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 35.520879][ T3502] R13: 00007f92d83d6ef0 R14: 00007f92d83d6eb0 R15: 0000200000000080 [ 35.520900][ T3502] [ 35.957254][ T3522] loop3: detected capacity change from 0 to 256 [ 35.964695][ T3522] ======================================================= [ 35.964695][ T3522] WARNING: The mand mount option has been deprecated and [ 35.964695][ T3522] and is ignored by this kernel. Remove the mand [ 35.964695][ T3522] option from the mount to silence this warning. [ 35.964695][ T3522] ======================================================= [ 36.314508][ T3466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.353685][ T3466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.452245][ T3466] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.474310][ T3466] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.489612][ T3466] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.503753][ T3466] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.535824][ T3549] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 36.653940][ T3553] loop0: detected capacity change from 0 to 256 [ 36.773502][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 36.785930][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.794251][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.803215][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.811002][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.950701][ T3568] netlink: 252 bytes leftover after parsing attributes in process `syz.3.45'. [ 37.062088][ T3466] syz.1.10 (3466) used greatest stack depth: 10872 bytes left [ 37.116620][ T3575] gretap1: entered allmulticast mode [ 37.136851][ T3575] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 37.251043][ T3581] loop2: detected capacity change from 0 to 512 [ 37.262860][ T3581] EXT4-fs: Ignoring removed nobh option [ 37.274175][ T3579] infiniband syz!: set active [ 37.279077][ T3579] infiniband syz!: added team_slave_0 [ 37.286214][ T3581] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 37.297183][ T3581] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.51: attempt to clear invalid blocks 2 len 1 [ 37.319501][ T3579] RDS/IB: syz!: added [ 37.322202][ T3581] EXT4-fs (loop2): Remounting filesystem read-only [ 37.337545][ T3579] smc: adding ib device syz! with port count 1 [ 37.345932][ T3579] smc: ib device syz! port 1 has pnetid [ 37.406364][ T3581] EXT4-fs (loop2): 1 truncate cleaned up [ 37.413016][ T3581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.510236][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.989557][ T3601] openvswitch: netlink: Message has 6 unknown bytes. [ 38.064145][ T3579] syz.1.50 (3579) used greatest stack depth: 10152 bytes left [ 38.075241][ T3605] netlink: 172 bytes leftover after parsing attributes in process `syz.2.59'. [ 38.084542][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 38.129073][ T29] kauditd_printk_skb: 855 callbacks suppressed [ 38.129088][ T29] audit: type=1326 audit(1746226755.982:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9975f5927 code=0x7ffc0000 [ 38.170898][ T3611] netlink: 64 bytes leftover after parsing attributes in process `syz.2.62'. [ 38.192036][ T29] audit: type=1326 audit(1746226756.022:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc99759ab39 code=0x7ffc0000 [ 38.219548][ T29] audit: type=1326 audit(1746226756.022:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9975f5927 code=0x7ffc0000 [ 38.243994][ T29] audit: type=1326 audit(1746226756.022:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc99759ab39 code=0x7ffc0000 [ 38.267881][ T29] audit: type=1326 audit(1746226756.022:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc9975fe969 code=0x7ffc0000 [ 38.291247][ T29] audit: type=1326 audit(1746226756.022:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9975f5927 code=0x7ffc0000 [ 38.315092][ T29] audit: type=1326 audit(1746226756.022:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc99759ab39 code=0x7ffc0000 [ 38.341842][ T29] audit: type=1326 audit(1746226756.022:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc9975fe969 code=0x7ffc0000 [ 38.367507][ T29] audit: type=1326 audit(1746226756.042:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9975f5927 code=0x7ffc0000 [ 38.392317][ T29] audit: type=1326 audit(1746226756.042:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3598 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc99759ab39 code=0x7ffc0000 [ 38.559110][ T3631] loop2: detected capacity change from 0 to 2048 [ 38.600329][ T3587] loop2: p1 < > p3 p4 < > [ 38.605890][ T3587] loop2: p3 start 4284289 is beyond EOD, truncated [ 38.615711][ T3631] loop2: p1 < > p3 p4 < > [ 38.622570][ T3631] loop2: p3 start 4284289 is beyond EOD, truncated [ 38.632641][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 38.674223][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 38.687422][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.712829][ T3635] loop2: detected capacity change from 0 to 1024 [ 38.730740][ T3637] syz.0.73 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.741923][ T3635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.756662][ T3635] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.776815][ T3635] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 38.793877][ T3635] EXT4-fs (loop2): Remounting filesystem read-only [ 38.801328][ T51] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 38.818852][ T3635] syz.2.72 (3635) used greatest stack depth: 9000 bytes left [ 38.829187][ T3641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 38.842281][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.843598][ T3641] vlan2: entered promiscuous mode [ 38.857349][ T3641] veth0_virt_wifi: entered promiscuous mode [ 38.863872][ T3641] vlan2: entered allmulticast mode [ 38.869351][ T3641] veth0_virt_wifi: entered allmulticast mode [ 38.888323][ T3641] tipc: Started in network mode [ 38.893936][ T3641] tipc: Node identity ac1414aa, cluster identity 4711 [ 38.895336][ T3643] netlink: 64 bytes leftover after parsing attributes in process `syz.2.75'. [ 38.909009][ T3641] tipc: Enabled bearer , priority 10 [ 38.919403][ T3641] tipc: Disabling bearer [ 39.031400][ T3656] loop0: detected capacity change from 0 to 512 [ 39.038142][ T3656] ext4: Unknown parameter 'fsmagic' [ 39.237016][ T3657] loop0: detected capacity change from 0 to 1764 [ 39.300723][ T3656] team0 (unregistering): Port device team_slave_0 removed [ 39.364296][ T3656] team0 (unregistering): Port device team_slave_1 removed [ 39.576205][ T3665] FAULT_INJECTION: forcing a failure. [ 39.576205][ T3665] name failslab, interval 1, probability 0, space 0, times 0 [ 39.595700][ T3665] CPU: 0 UID: 0 PID: 3665 Comm: syz.0.83 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 39.595804][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.595819][ T3665] Call Trace: [ 39.595826][ T3665] [ 39.595835][ T3665] __dump_stack+0x1d/0x30 [ 39.595860][ T3665] dump_stack_lvl+0xe8/0x140 [ 39.595884][ T3665] dump_stack+0x15/0x1b [ 39.595953][ T3665] should_fail_ex+0x265/0x280 [ 39.596045][ T3665] should_failslab+0x8c/0xb0 [ 39.596082][ T3665] kmem_cache_alloc_noprof+0x50/0x310 [ 39.596166][ T3665] ? getname_flags+0x80/0x3b0 [ 39.596234][ T3665] getname_flags+0x80/0x3b0 [ 39.596312][ T3665] user_path_create+0x27/0x130 [ 39.596341][ T3665] bpf_obj_pin_user+0xe0/0x230 [ 39.596396][ T3665] bpf_obj_pin+0xac/0xd0 [ 39.596467][ T3665] __sys_bpf+0x6a7/0x790 [ 39.596512][ T3665] __x64_sys_bpf+0x41/0x50 [ 39.596584][ T3665] x64_sys_call+0x2478/0x2fb0 [ 39.596667][ T3665] do_syscall_64+0xd0/0x1a0 [ 39.596690][ T3665] ? clear_bhb_loop+0x25/0x80 [ 39.596717][ T3665] ? clear_bhb_loop+0x25/0x80 [ 39.596744][ T3665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.596807][ T3665] RIP: 0033:0x7fc9975fe969 [ 39.596853][ T3665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.596941][ T3665] RSP: 002b:00007fc995c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.596964][ T3665] RAX: ffffffffffffffda RBX: 00007fc997825fa0 RCX: 00007fc9975fe969 [ 39.596980][ T3665] RDX: 0000000000000018 RSI: 0000200000000400 RDI: 0000000000000006 [ 39.596995][ T3665] RBP: 00007fc995c67090 R08: 0000000000000000 R09: 0000000000000000 [ 39.597010][ T3665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.597025][ T3665] R13: 0000000000000000 R14: 00007fc997825fa0 R15: 00007ffd96a16188 [ 39.597048][ T3665] [ 39.932211][ T3688] __nla_validate_parse: 1 callbacks suppressed [ 39.932284][ T3688] netlink: 252 bytes leftover after parsing attributes in process `syz.1.93'. [ 40.764379][ T3718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.102'. [ 40.794746][ T3722] netlink: 252 bytes leftover after parsing attributes in process `syz.4.104'. [ 40.888843][ T3726] netlink: 196 bytes leftover after parsing attributes in process `syz.2.106'. [ 41.048741][ T3731] loop3: detected capacity change from 0 to 256 [ 41.566349][ T3756] netlink: 64 bytes leftover after parsing attributes in process `syz.4.117'. [ 41.566741][ T3752] loop0: detected capacity change from 0 to 512 [ 41.590387][ T3752] EXT4-fs: Ignoring removed nobh option [ 41.604904][ T3752] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 41.630794][ T3752] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.115: attempt to clear invalid blocks 2 len 1 [ 41.650771][ T3752] EXT4-fs (loop0): Remounting filesystem read-only [ 41.657665][ T3762] netlink: 252 bytes leftover after parsing attributes in process `syz.4.119'. [ 41.667962][ T3752] EXT4-fs (loop0): 1 truncate cleaned up [ 41.680476][ T3763] netlink: 'syz.3.116': attribute type 13 has an invalid length. [ 41.701093][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.771080][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.830116][ T3763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.935276][ T3780] loop1: detected capacity change from 0 to 512 [ 42.034353][ T3780] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.125: Parent and EA inode have the same ino 15 [ 42.102044][ T3775] loop0: detected capacity change from 0 to 256 [ 42.161330][ T3780] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.176340][ T3780] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.125: Parent and EA inode have the same ino 15 [ 42.204931][ T3780] EXT4-fs (loop1): 1 orphan inode deleted [ 42.213379][ T3780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.277241][ T3790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.129'. [ 42.278307][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.386343][ T3801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 43.466144][ T3827] netlink: 64 bytes leftover after parsing attributes in process `syz.4.142'. [ 43.549655][ T3831] loop1: detected capacity change from 0 to 512 [ 43.682811][ T3831] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.143: Parent and EA inode have the same ino 15 [ 43.728452][ T3831] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.143: Parent and EA inode have the same ino 15 [ 43.750644][ T3831] EXT4-fs (loop1): 1 orphan inode deleted [ 43.764785][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.805394][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.877167][ T3848] loop0: detected capacity change from 0 to 256 [ 44.108229][ T3866] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.556133][ T29] kauditd_printk_skb: 3115 callbacks suppressed [ 44.556149][ T29] audit: type=1400 audit(1746226762.412:4098): avc: denied { create } for pid=3874 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.925482][ T3895] loop2: detected capacity change from 0 to 512 [ 44.968356][ T29] audit: type=1326 audit(1746226762.822:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 44.996280][ T29] audit: type=1326 audit(1746226762.822:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.022360][ T29] audit: type=1326 audit(1746226762.822:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.047318][ T29] audit: type=1326 audit(1746226762.822:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.073056][ T29] audit: type=1326 audit(1746226762.822:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.098467][ T29] audit: type=1326 audit(1746226762.822:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.098974][ T3896] loop0: detected capacity change from 0 to 256 [ 45.125746][ T29] audit: type=1326 audit(1746226762.822:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.166348][ T29] audit: type=1326 audit(1746226762.822:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.204907][ T29] audit: type=1326 audit(1746226762.822:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8482ce969 code=0x7ffc0000 [ 45.264303][ T3895] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.168: Parent and EA inode have the same ino 15 [ 45.284900][ T3905] netlink: 252 bytes leftover after parsing attributes in process `syz.4.172'. [ 45.328857][ T3895] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.168: Parent and EA inode have the same ino 15 [ 45.376183][ T3895] EXT4-fs (loop2): 1 orphan inode deleted [ 45.417845][ T3895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.476252][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.135047][ T3937] netlink: 252 bytes leftover after parsing attributes in process `syz.3.183'. [ 46.167938][ T3939] loop1: detected capacity change from 0 to 512 [ 46.176663][ T3939] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.187534][ T3939] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 46.209613][ T3939] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 46.225417][ T3939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 46.236741][ T3939] System zones: 0-2, 18-18, 34-34 [ 46.271501][ T3939] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.331333][ T3939] EXT4-fs (loop1): 1 truncate cleaned up [ 46.338272][ T3939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.416201][ T3954] loop0: detected capacity change from 0 to 512 [ 46.423816][ T3954] EXT4-fs: Ignoring removed nobh option [ 46.429698][ T3956] loop3: detected capacity change from 0 to 512 [ 46.450926][ T3954] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 46.457930][ T3956] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.191: Parent and EA inode have the same ino 15 [ 46.506658][ T3957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.509573][ T3954] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.190: attempt to clear invalid blocks 2 len 1 [ 46.543056][ T3957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.549600][ T3956] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.191: Parent and EA inode have the same ino 15 [ 46.575428][ T3956] EXT4-fs (loop3): 1 orphan inode deleted [ 46.585847][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.591367][ T3954] EXT4-fs (loop0): Remounting filesystem read-only [ 46.626888][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.650009][ T3954] EXT4-fs (loop0): 1 truncate cleaned up [ 46.670531][ T3954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.730088][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.870029][ T3979] process 'syz.0.197' launched './file0' with NULL argv: empty string added [ 47.229090][ T4001] loop0: detected capacity change from 0 to 512 [ 47.239162][ T4001] EXT4-fs: Ignoring removed nobh option [ 47.249979][ T4001] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 47.250491][ T4001] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.205: attempt to clear invalid blocks 2 len 1 [ 47.275910][ T4001] EXT4-fs (loop0): Remounting filesystem read-only [ 47.276399][ T4001] EXT4-fs (loop0): 1 truncate cleaned up [ 47.290469][ T4001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.319290][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.504020][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 47.519294][ T4012] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.549182][ T4014] netlink: 252 bytes leftover after parsing attributes in process `syz.0.210'. [ 47.616120][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 47.627172][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 47.642165][ T4020] vlan2: entered promiscuous mode [ 47.646053][ T4018] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.648576][ T4020] veth0_virt_wifi: entered promiscuous mode [ 47.663460][ T4020] vlan2: entered allmulticast mode [ 47.669243][ T4020] veth0_virt_wifi: entered allmulticast mode [ 48.232018][ T4040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 48.245285][ T4040] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 48.809322][ T4066] loop3: detected capacity change from 0 to 512 [ 48.847955][ T4066] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.231: Parent and EA inode have the same ino 15 [ 48.874739][ T4066] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.231: Parent and EA inode have the same ino 15 [ 48.915107][ T4066] EXT4-fs (loop3): 1 orphan inode deleted [ 48.930706][ T4066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.978079][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.014869][ T4074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.234'. [ 49.073953][ T4080] loop4: detected capacity change from 0 to 2048 [ 49.075917][ T4080] EXT4-fs: Ignoring removed bh option [ 49.113173][ T4080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.209296][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.280314][ T4098] loop2: detected capacity change from 0 to 2048 [ 49.579312][ T29] kauditd_printk_skb: 1849 callbacks suppressed [ 49.579326][ T29] audit: type=1400 audit(1746226767.432:5957): avc: denied { shutdown } for pid=4097 comm="syz.2.242" lport=40151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.752389][ T4098] loop2: p1 < > p4 < > [ 49.810737][ T29] audit: type=1326 audit(1746226767.672:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 49.837465][ T29] audit: type=1326 audit(1746226767.672:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 49.895651][ T4118] gretap1: entered allmulticast mode [ 49.900075][ T29] audit: type=1326 audit(1746226767.672:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 49.928471][ T29] audit: type=1326 audit(1746226767.672:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 49.931981][ T4118] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 49.953746][ T29] audit: type=1326 audit(1746226767.672:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 49.989376][ T29] audit: type=1326 audit(1746226767.672:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 50.013309][ T29] audit: type=1326 audit(1746226767.672:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 50.037353][ T29] audit: type=1326 audit(1746226767.672:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 50.061870][ T29] audit: type=1326 audit(1746226767.672:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f434001e969 code=0x7ffc0000 [ 50.128484][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 50.152997][ T4124] FAULT_INJECTION: forcing a failure. [ 50.152997][ T4124] name failslab, interval 1, probability 0, space 0, times 0 [ 50.157036][ T4123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.169343][ T4124] CPU: 0 UID: 0 PID: 4124 Comm: syz.0.249 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 50.169473][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.169500][ T4124] Call Trace: [ 50.169508][ T4124] [ 50.169520][ T4124] __dump_stack+0x1d/0x30 [ 50.169546][ T4124] dump_stack_lvl+0xe8/0x140 [ 50.169571][ T4124] dump_stack+0x15/0x1b [ 50.169592][ T4124] should_fail_ex+0x265/0x280 [ 50.169704][ T4124] should_failslab+0x8c/0xb0 [ 50.169742][ T4124] kmem_cache_alloc_node_noprof+0x57/0x320 [ 50.169791][ T4124] ? __alloc_skb+0x101/0x320 [ 50.169917][ T4124] __alloc_skb+0x101/0x320 [ 50.169955][ T4124] skb_copy+0xf0/0x3f0 [ 50.169978][ T4124] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 50.170048][ T4124] ? ref_tracker_alloc+0x1a0/0x2f0 [ 50.170085][ T4124] ? dst_alloc+0xe0/0x100 [ 50.170123][ T4124] ? ip_route_input_rcu+0x177d/0x1d00 [ 50.170213][ T4124] ip6_err_gen_icmpv6_unreach+0x174/0x520 [ 50.170246][ T4124] ? ipip6_tunnel_lookup+0x46c/0x4a0 [ 50.170282][ T4124] ipip6_err+0x3b4/0x5b0 [ 50.170314][ T4124] tunnelmpls4_err+0x41/0xa0 [ 50.170431][ T4124] ? __pfx_tunnelmpls4_err+0x10/0x10 [ 50.170474][ T4124] icmp_unreach+0x45a/0x600 [ 50.170502][ T4124] icmp_rcv+0xb61/0xdd0 [ 50.170528][ T4124] ? __pfx_icmp_rcv+0x10/0x10 [ 50.170577][ T4124] ip_protocol_deliver_rcu+0x420/0x780 [ 50.170618][ T4124] ip_local_deliver_finish+0x184/0x220 [ 50.170657][ T4124] ip_local_deliver+0xe8/0x1c0 [ 50.170750][ T4124] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 50.170789][ T4124] ? __pfx_ip_local_deliver+0x10/0x10 [ 50.170904][ T4124] ip_rcv_finish+0x188/0x1a0 [ 50.170941][ T4124] ip_rcv+0x62/0x140 [ 50.170977][ T4124] ? __pfx_ip_rcv_finish+0x10/0x10 [ 50.171014][ T4124] ? __pfx_ip_rcv+0x10/0x10 [ 50.171114][ T4124] __netif_receive_skb+0xff/0x270 [ 50.171154][ T4124] ? tun_rx_batched+0xc7/0x430 [ 50.171183][ T4124] netif_receive_skb+0x4b/0x2e0 [ 50.171212][ T4124] ? tun_rx_batched+0xc7/0x430 [ 50.171241][ T4124] tun_rx_batched+0xfc/0x430 [ 50.171335][ T4124] tun_get_user+0x1e07/0x24d0 [ 50.171370][ T4124] ? ref_tracker_alloc+0x1f2/0x2f0 [ 50.171415][ T4124] tun_chr_write_iter+0x15e/0x210 [ 50.171446][ T4124] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 50.171561][ T4124] vfs_write+0x49d/0x8d0 [ 50.171597][ T4124] ksys_write+0xda/0x1a0 [ 50.171630][ T4124] __x64_sys_write+0x40/0x50 [ 50.171662][ T4124] x64_sys_call+0x2cdd/0x2fb0 [ 50.171689][ T4124] do_syscall_64+0xd0/0x1a0 [ 50.171725][ T4124] ? clear_bhb_loop+0x25/0x80 [ 50.171769][ T4124] ? clear_bhb_loop+0x25/0x80 [ 50.171795][ T4124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.171823][ T4124] RIP: 0033:0x7fc9975fd41f [ 50.171842][ T4124] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 50.171920][ T4124] RSP: 002b:00007fc995c67000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 50.171981][ T4124] RAX: ffffffffffffffda RBX: 00007fc997825fa0 RCX: 00007fc9975fd41f [ 50.172000][ T4124] RDX: 00000000000000da RSI: 0000200000001600 RDI: 00000000000000c8 [ 50.172016][ T4124] RBP: 00007fc995c67090 R08: 0000000000000000 R09: 0000000000000000 [ 50.172111][ T4124] R10: 00000000000000da R11: 0000000000000293 R12: 0000000000000001 [ 50.172140][ T4124] R13: 0000000000000001 R14: 00007fc997825fa0 R15: 00007ffd96a16188 [ 50.172162][ T4124] [ 50.592804][ T4123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.602067][ T4123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.606760][ T4133] loop2: detected capacity change from 0 to 512 [ 50.610204][ T4123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.626958][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.665476][ T4133] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.254: Parent and EA inode have the same ino 15 [ 50.685528][ T4133] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.254: Parent and EA inode have the same ino 15 [ 50.701632][ T4133] EXT4-fs (loop2): 1 orphan inode deleted [ 50.713411][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.761319][ T4144] loop4: detected capacity change from 0 to 512 [ 50.773332][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.788857][ T4144] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.258: Parent and EA inode have the same ino 15 [ 50.815666][ T4148] loop0: detected capacity change from 0 to 512 [ 50.823280][ T4148] EXT4-fs: Ignoring removed nobh option [ 50.841584][ T4144] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.258: Parent and EA inode have the same ino 15 [ 50.845721][ T4148] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 50.865144][ T4144] EXT4-fs (loop4): 1 orphan inode deleted [ 50.872006][ T4150] loop1: detected capacity change from 0 to 512 [ 50.872575][ T4144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.893232][ T4148] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.260: attempt to clear invalid blocks 2 len 1 [ 50.927521][ T4148] EXT4-fs (loop0): Remounting filesystem read-only [ 50.936178][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.937534][ T4150] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.261: Parent and EA inode have the same ino 15 [ 50.954976][ T4148] EXT4-fs (loop0): 1 truncate cleaned up [ 50.972547][ T4150] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.261: Parent and EA inode have the same ino 15 [ 50.989396][ T4150] EXT4-fs (loop1): 1 orphan inode deleted [ 51.014675][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.021309][ T4165] loop3: detected capacity change from 0 to 128 [ 51.037255][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.045577][ T4165] syz.3.264: attempt to access beyond end of device [ 51.045577][ T4165] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 51.067237][ T4165] Buffer I/O error on dev loop3, logical block 2065, async page read [ 51.098716][ T4165] syz.3.264: attempt to access beyond end of device [ 51.098716][ T4165] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 51.113789][ T4165] Buffer I/O error on dev loop3, logical block 2066, async page read [ 51.124283][ T4165] syz.3.264: attempt to access beyond end of device [ 51.124283][ T4165] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 51.139423][ T4165] Buffer I/O error on dev loop3, logical block 2067, async page read [ 51.154646][ T4165] syz.3.264: attempt to access beyond end of device [ 51.154646][ T4165] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 51.163151][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.170863][ T4165] Buffer I/O error on dev loop3, logical block 2068, async page read [ 51.199442][ T4165] syz.3.264: attempt to access beyond end of device [ 51.199442][ T4165] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 51.216428][ T4165] Buffer I/O error on dev loop3, logical block 2069, async page read [ 51.226122][ T4165] syz.3.264: attempt to access beyond end of device [ 51.226122][ T4165] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 51.242502][ T4165] Buffer I/O error on dev loop3, logical block 2070, async page read [ 51.253311][ T4165] syz.3.264: attempt to access beyond end of device [ 51.253311][ T4165] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 51.267823][ T4165] Buffer I/O error on dev loop3, logical block 2071, async page read [ 51.268193][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.278291][ T4165] syz.3.264: attempt to access beyond end of device [ 51.278291][ T4165] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 51.304392][ T4165] Buffer I/O error on dev loop3, logical block 2072, async page read [ 51.318880][ T4165] syz.3.264: attempt to access beyond end of device [ 51.318880][ T4165] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 51.336852][ T4165] Buffer I/O error on dev loop3, logical block 2065, async page read [ 51.350485][ T4165] syz.3.264: attempt to access beyond end of device [ 51.350485][ T4165] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 51.365613][ T4165] Buffer I/O error on dev loop3, logical block 2066, async page read [ 51.404029][ T4184] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 51.451151][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 51.467162][ T4189] vlan2: entered promiscuous mode [ 51.473645][ T4189] veth0_virt_wifi: entered promiscuous mode [ 51.476438][ T4192] SELinux: security_context_str_to_sid (n/input0 [ 51.476438][ T4192] S: Sysfs=/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 51.476438][ T4192] U: Uniq= [ 51.476438][ T4192] H: Handlers=kbd event0 [ 51.476438][ T4192] B: PROP=0 [ 51.476438][ T4192] B: EV=3 [ 51.476438][ T4192] B: KEY=8000 10000000000000 0 [ 51.476438][ T4192] [ 51.476438][ T4192] I: Bus=0019 Vendor=0000 Product=0003 Version=0000 [ 51.476438][ T4192] N: Name=Sleep Button [ 51.476438][ T4192] P: Phys=LNXSLPBN/button/input0 [ 51.476438][ T4192] S: Sysfs=/devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 51.476438][ T4192] U: Uniq= [ 51.476438][ T4192] H: Handlers=kbd event1 [ 51.476438][ T4192] B: PROP=0 [ 51.476438][ T4192] B: EV=3 [ 51.476438][ T4192] B: KEY=4000 0 0 [ 51.476438][ T4192] [ 51.476438][ T4192] I: Bus=0011 Vendor=0001 Product=0001 Version=abba [ 51.476438][ T4192] N: Name=AT Translated Set 2 keyboard [ 51.476438][ T4192] P: Phys=isa0060/serio0/input0 [ 51.476438][ T4192] S: Sysfs=/devices/platform/i8042/serio0/input/input2 [ 51.476438][ T4192] U: Uniq= [ 51.476438][ T4192] H: Handlers=kbd leds event2 [ 51.476438][ T4192] B: PROP=0 [ 51.476438][ T4192] B: EV=120013 [ 51.476438][ T4192] B: KEY=402000002 3803078f800d001 feffffdfffefffff fffffffffffffffe [ 51.476438][ T4192] B: MSC=10 [ 51.476438][ T4192] B: LED=7 [ 51.476438][ T4192] [ 51.476438][ T4192] I: Bus=0011 Vendor=0002 Product=0006 Version=0000 [ 51.476438][ T4192] N: Name=ImExPS/2 Generic Explorer Mouse [ 51.476438][ T4192] P: Phys=isa0060/serio1/input0 [ 51.476438][ T4192] S: Sysfs=/devices/platform/i8042/serio1/input/input4 [ 51.476438][ T4192] U: Uniq= [ 51.476438][ T4192] H: Handlers=event3 [ 51.476438][ T4192] B: PROP=1 [ 51.476438][ T4192] B: EV=7 [ 51.476438][ T4192] B: KEY=1f0000 0 0 0 0 [ 51.476438][ T4192] B: REL=143 [ 51.476438][ T4192] [ 51.476438][ T4192] ) failed with errno=-22 [ 51.481661][ T4189] vlan2: entered allmulticast mode [ 51.695962][ T4189] veth0_virt_wifi: entered allmulticast mode [ 51.703301][ T4183] tipc: Started in network mode [ 51.708411][ T4183] tipc: Node identity ac1414aa, cluster identity 4711 [ 51.716546][ T4183] tipc: Enabled bearer , priority 10 [ 51.749265][ T4196] netlink: 252 bytes leftover after parsing attributes in process `syz.0.274'. [ 51.756214][ T4183] tipc: Disabling bearer [ 51.893489][ T4206] loop4: detected capacity change from 0 to 256 [ 51.924485][ T4215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 51.937255][ T4215] tipc: Enabled bearer , priority 10 [ 51.944918][ T4215] tipc: Disabling bearer [ 52.000816][ T4221] loop4: detected capacity change from 0 to 2048 [ 52.003706][ T4223] loop0: detected capacity change from 0 to 512 [ 52.021483][ T4223] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.285: Parent and EA inode have the same ino 15 [ 52.026974][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.039488][ T4223] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.285: Parent and EA inode have the same ino 15 [ 52.061759][ T4223] EXT4-fs (loop0): 1 orphan inode deleted [ 52.068062][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.088419][ T4221] SELinux: Context : is not valid (left unmapped). [ 52.096414][ T4221] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 52.113099][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.127885][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.393021][ T4248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 52.691538][ T4252] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.999128][ T4254] FAULT_INJECTION: forcing a failure. [ 52.999128][ T4254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.014797][ T4254] CPU: 0 UID: 0 PID: 4254 Comm: syz.0.294 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 53.014905][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 53.014927][ T4254] Call Trace: [ 53.014935][ T4254] [ 53.014945][ T4254] __dump_stack+0x1d/0x30 [ 53.014978][ T4254] dump_stack_lvl+0xe8/0x140 [ 53.014996][ T4254] dump_stack+0x15/0x1b [ 53.015011][ T4254] should_fail_ex+0x265/0x280 [ 53.015049][ T4254] should_fail+0xb/0x20 [ 53.015196][ T4254] should_fail_usercopy+0x1a/0x20 [ 53.015218][ T4254] _copy_to_user+0x20/0xa0 [ 53.015244][ T4254] proc_pid_cmdline_read+0x347/0x6a0 [ 53.015277][ T4254] vfs_readv+0x3e6/0x670 [ 53.015314][ T4254] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 53.015393][ T4254] __x64_sys_preadv+0xfd/0x1c0 [ 53.015505][ T4254] x64_sys_call+0x1503/0x2fb0 [ 53.015533][ T4254] do_syscall_64+0xd0/0x1a0 [ 53.015560][ T4254] ? clear_bhb_loop+0x25/0x80 [ 53.015588][ T4254] ? clear_bhb_loop+0x25/0x80 [ 53.015678][ T4254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.015704][ T4254] RIP: 0033:0x7fc9975fe969 [ 53.015777][ T4254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.015799][ T4254] RSP: 002b:00007fc995c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 53.015816][ T4254] RAX: ffffffffffffffda RBX: 00007fc997825fa0 RCX: 00007fc9975fe969 [ 53.015828][ T4254] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 53.015840][ T4254] RBP: 00007fc995c67090 R08: 00000000fffffff9 R09: 0000000000000000 [ 53.015855][ T4254] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 53.015936][ T4254] R13: 0000000000000000 R14: 00007fc997825fa0 R15: 00007ffd96a16188 [ 53.015971][ T4254] [ 53.313788][ T4265] loop0: detected capacity change from 0 to 512 [ 53.335547][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 53.350368][ T4265] EXT4-fs: Ignoring removed nobh option [ 53.363354][ T4265] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 53.379364][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 53.392783][ T4265] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.299: attempt to clear invalid blocks 2 len 1 [ 53.408642][ T4265] EXT4-fs (loop0): Remounting filesystem read-only [ 53.418747][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 53.433138][ T4265] EXT4-fs (loop0): 1 truncate cleaned up [ 53.440021][ T4265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.535282][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.558597][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 53.572870][ T4290] netlink: 252 bytes leftover after parsing attributes in process `syz.1.307'. [ 53.593170][ T4288] tipc: Enabled bearer , priority 10 [ 53.600881][ T4288] tipc: Disabling bearer [ 53.638624][ T4294] loop0: detected capacity change from 0 to 128 [ 53.707073][ T4303] netlink: 252 bytes leftover after parsing attributes in process `syz.1.312'. [ 53.736894][ T4304] loop4: detected capacity change from 0 to 2048 [ 53.783481][ T4310] netlink: 64 bytes leftover after parsing attributes in process `syz.2.316'. [ 53.816543][ T4304] loop4: p1 < > p4 < > [ 54.045869][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 54.064317][ T4345] loop1: detected capacity change from 0 to 2048 [ 54.084769][ T4345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.115632][ T4345] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 54.153042][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.180332][ T4354] loop4: detected capacity change from 0 to 2048 [ 54.200677][ T4354] loop4: p1 < > p4 < > [ 54.302454][ T4365] loop1: detected capacity change from 0 to 128 [ 54.345700][ T4371] loop1: detected capacity change from 0 to 164 [ 54.354128][ T4371] Unable to read rock-ridge attributes [ 54.363010][ T4371] Unable to read rock-ridge attributes [ 54.370023][ T4373] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 54.381797][ T4374] SELinux: security_context_str_to_sid (n/input0 [ 54.381797][ T4374] S: Sysfs=/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 54.381797][ T4374] U: Uniq= [ 54.381797][ T4374] H: Handlers=kbd event0 [ 54.381797][ T4374] B: PROP=0 [ 54.381797][ T4374] B: EV=3 [ 54.381797][ T4374] B: KEY=8000 10000000000000 0 [ 54.381797][ T4374] [ 54.381797][ T4374] I: Bus=0019 Vendor=0000 Product=0003 Version=0000 [ 54.381797][ T4374] N: Name=Sleep Button [ 54.381797][ T4374] P: Phys=LNXSLPBN/button/input0 [ 54.381797][ T4374] S: Sysfs=/devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 54.381797][ T4374] U: Uniq= [ 54.381797][ T4374] H: Handlers=kbd event1 [ 54.381797][ T4374] B: PROP=0 [ 54.381797][ T4374] B: EV=3 [ 54.381797][ T4374] B: KEY=4000 0 0 [ 54.381797][ T4374] [ 54.381797][ T4374] I: Bus=0011 Vendor=0001 Product=0001 Version=abba [ 54.381797][ T4374] N: Name=AT Translated Set 2 keyboard [ 54.381797][ T4374] P: Phys=isa0060/serio0/input0 [ 54.381797][ T4374] S: Sysfs=/devices/platform/i8042/serio0/input/input2 [ 54.381797][ T4374] U: Uniq= [ 54.381797][ T4374] H: Handlers=kbd leds event2 [ 54.381797][ T4374] B: PROP=0 [ 54.381797][ T4374] B: EV=120013 [ 54.381797][ T4374] B: KEY=402000002 3803078f800d001 feffffdfffefffff fffffffffffffffe [ 54.381797][ T4374] B: MSC=10 [ 54.381797][ T4374] B: LED=7 [ 54.381797][ T4374] [ 54.381797][ T4374] I: Bus=0011 Vendor=0002 Product=0006 Version=0000 [ 54.381797][ T4374] N: Name=ImExPS/2 Generic Explorer Mouse [ 54.381797][ T4374] P: Phys=isa0060/serio1/input0 [ 54.381797][ T4374] S: Sysfs=/devices/platform/i8042/serio1/input/input4 [ 54.381797][ T4374] U: Uniq= [ 54.381797][ T4374] H: Handlers=event3 [ 54.381797][ T4374] B: PROP=1 [ 54.381797][ T4374] B: EV=7 [ 54.381797][ T4374] B: KEY=1f0000 0 0 0 0 [ 54.381797][ T4374] B: REL=143 [ 54.381797][ T4374] [ 54.381797][ T4374] ) failed with errno=-22 [ 54.581679][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 54.581694][ T29] audit: type=1326 audit(1746226772.442:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9975f5927 code=0x7ffc0000 [ 54.613236][ T29] audit: type=1326 audit(1746226772.442:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc99759ab39 code=0x7ffc0000 [ 54.638089][ T29] audit: type=1326 audit(1746226772.442:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc9975fe969 code=0x7ffc0000 [ 54.662507][ T29] audit: type=1326 audit(1746226772.442:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdc2925927 code=0x7ffc0000 [ 54.686259][ T29] audit: type=1326 audit(1746226772.442:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdc28cab39 code=0x7ffc0000 [ 54.712063][ T29] audit: type=1326 audit(1746226772.442:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fcdc292e969 code=0x7ffc0000 [ 54.736486][ T29] audit: type=1326 audit(1746226772.492:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9975f5927 code=0x7ffc0000 [ 54.760161][ T29] audit: type=1326 audit(1746226772.492:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc99759ab39 code=0x7ffc0000 [ 54.784319][ T29] audit: type=1326 audit(1746226772.492:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc9975fe969 code=0x7ffc0000 [ 54.809013][ T29] audit: type=1326 audit(1746226772.492:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdc2925927 code=0x7ffc0000 [ 54.868858][ T4381] tipc: Started in network mode [ 54.868985][ T4381] tipc: Node identity ac1414aa, cluster identity 4711 [ 54.869319][ T4381] tipc: Enabled bearer , priority 10 [ 54.892714][ T4381] tipc: Disabling bearer [ 54.948920][ T4386] loop2: detected capacity change from 0 to 2048 [ 55.012557][ T4386] loop2: p1 < > p4 < > [ 55.030303][ T4399] loop3: detected capacity change from 0 to 512 [ 55.043879][ T4399] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.350: Parent and EA inode have the same ino 15 [ 55.061700][ T4399] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.350: Parent and EA inode have the same ino 15 [ 55.078008][ T4399] EXT4-fs (loop3): 1 orphan inode deleted [ 55.084716][ T4399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.126817][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.535332][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 55.538812][ T4459] loop4: detected capacity change from 0 to 2048 [ 55.552566][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 55.601106][ T4459] loop4: p1 < > p4 < > [ 55.663807][ T4467] loop1: detected capacity change from 0 to 128 [ 55.716035][ T4470] loop1: detected capacity change from 0 to 2048 [ 55.732556][ T4470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.770848][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.214524][ T4508] loop1: detected capacity change from 0 to 2048 [ 56.270254][ T4508] loop1: p1 < > p4 < > [ 56.292140][ T4513] loop2: detected capacity change from 0 to 512 [ 56.317150][ T4513] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.394: Parent and EA inode have the same ino 15 [ 56.335155][ T4513] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.394: Parent and EA inode have the same ino 15 [ 56.348923][ T4513] EXT4-fs (loop2): 1 orphan inode deleted [ 56.367054][ T4513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.436807][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.473989][ T4532] tipc: Enabled bearer , priority 10 [ 56.481406][ T4532] tipc: Disabling bearer [ 56.507526][ T4536] loop3: detected capacity change from 0 to 512 [ 56.515224][ T4536] EXT4-fs: Ignoring removed nobh option [ 56.523880][ T4536] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 56.534650][ T4536] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.402: attempt to clear invalid blocks 2 len 1 [ 56.549311][ T4536] EXT4-fs (loop3): Remounting filesystem read-only [ 56.556796][ T4536] EXT4-fs (loop3): 1 truncate cleaned up [ 56.563637][ T4536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.568688][ T4543] loop2: detected capacity change from 0 to 2048 [ 56.591615][ T4543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.608979][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.611516][ T4543] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 56.649137][ T4547] loop3: detected capacity change from 0 to 164 [ 56.658684][ T4547] Unable to read rock-ridge attributes [ 56.659975][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.667231][ T4547] Unable to read rock-ridge attributes [ 56.701852][ T4549] __nla_validate_parse: 12 callbacks suppressed [ 56.701871][ T4549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.406'. [ 56.776259][ T4557] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 56.855876][ T4565] loop3: detected capacity change from 0 to 128 [ 56.871040][ T4565] bio_check_eod: 118 callbacks suppressed [ 56.871056][ T4565] syz.3.414: attempt to access beyond end of device [ 56.871056][ T4565] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 56.892769][ T4565] buffer_io_error: 118 callbacks suppressed [ 56.892833][ T4565] Buffer I/O error on dev loop3, logical block 2065, async page read [ 56.898691][ T4568] loop4: detected capacity change from 0 to 128 [ 56.900448][ T4565] syz.3.414: attempt to access beyond end of device [ 56.900448][ T4565] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 56.914245][ T4568] syz.4.415: attempt to access beyond end of device [ 56.914245][ T4568] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 56.916705][ T4565] Buffer I/O error on dev loop3, logical block 2066, async page read [ 56.932974][ T4568] Buffer I/O error on dev loop4, logical block 2065, async page read [ 56.948279][ T4565] syz.3.414: attempt to access beyond end of device [ 56.948279][ T4565] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 56.967976][ T4568] syz.4.415: attempt to access beyond end of device [ 56.967976][ T4568] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 56.980636][ T4565] Buffer I/O error on dev loop3, logical block 2067, async page read [ 57.003782][ T4568] Buffer I/O error on dev loop4, logical block 2066, async page read [ 57.022668][ T4565] syz.3.414: attempt to access beyond end of device [ 57.022668][ T4565] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 57.036013][ T4565] Buffer I/O error on dev loop3, logical block 2068, async page read [ 57.045311][ T4568] syz.4.415: attempt to access beyond end of device [ 57.045311][ T4568] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 57.059878][ T4568] Buffer I/O error on dev loop4, logical block 2067, async page read [ 57.068635][ T4568] syz.4.415: attempt to access beyond end of device [ 57.068635][ T4568] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 57.070299][ T4573] loop0: detected capacity change from 0 to 2048 [ 57.082512][ T4568] Buffer I/O error on dev loop4, logical block 2068, async page read [ 57.097535][ T4565] syz.3.414: attempt to access beyond end of device [ 57.097535][ T4565] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 57.111034][ T4565] Buffer I/O error on dev loop3, logical block 2069, async page read [ 57.119633][ T4565] syz.3.414: attempt to access beyond end of device [ 57.119633][ T4565] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 57.134253][ T4565] Buffer I/O error on dev loop3, logical block 2070, async page read [ 57.145196][ T4565] ================================================================== [ 57.153958][ T4565] BUG: KCSAN: data-race in filemap_read_folio / filemap_read_folio [ 57.162849][ T4565] [ 57.165288][ T4565] read-write to 0xffff88810f85d160 of 4 bytes by task 4570 on cpu 0: [ 57.174404][ T4565] filemap_read_folio+0xea/0x110 [ 57.179481][ T4565] filemap_fault+0x569/0xb40 [ 57.184131][ T4565] __do_fault+0xb9/0x200 [ 57.188544][ T4565] handle_mm_fault+0x110c/0x2ae0 [ 57.193554][ T4565] do_user_addr_fault+0x3fe/0x1090 [ 57.198952][ T4565] exc_page_fault+0x54/0xc0 [ 57.203579][ T4565] asm_exc_page_fault+0x26/0x30 [ 57.209429][ T4565] rep_movs_alternative+0x4a/0x90 [ 57.214947][ T4565] _copy_from_iter+0x141/0xdd0 [ 57.220004][ T4565] file_tty_write+0x32f/0x670 [ 57.225124][ T4565] tty_write+0x25/0x30 [ 57.229318][ T4565] vfs_write+0x49d/0x8d0 [ 57.233621][ T4565] ksys_write+0xda/0x1a0 [ 57.237988][ T4565] __x64_sys_write+0x40/0x50 [ 57.242782][ T4565] x64_sys_call+0x2cdd/0x2fb0 [ 57.247664][ T4565] do_syscall_64+0xd0/0x1a0 [ 57.252922][ T4565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.259160][ T4565] [ 57.261599][ T4565] read-write to 0xffff88810f85d160 of 4 bytes by task 4565 on cpu 1: [ 57.270738][ T4565] filemap_read_folio+0xea/0x110 [ 57.275881][ T4565] filemap_fault+0x569/0xb40 [ 57.280601][ T4565] __do_fault+0xb9/0x200 [ 57.285260][ T4565] handle_mm_fault+0x110c/0x2ae0 [ 57.290273][ T4565] do_user_addr_fault+0x793/0x1090 [ 57.295907][ T4565] exc_page_fault+0x54/0xc0 [ 57.301315][ T4565] asm_exc_page_fault+0x26/0x30 [ 57.306837][ T4565] fault_in_readable+0xfe/0x1b0 [ 57.312865][ T4565] fault_in_iov_iter_readable+0x129/0x210 [ 57.319450][ T4565] generic_perform_write+0x3cf/0x490 [ 57.326252][ T4565] __generic_file_write_iter+0xec/0x120 [ 57.332092][ T4565] generic_file_write_iter+0x8d/0x2f0 [ 57.337696][ T4565] vfs_write+0x49d/0x8d0 [ 57.342143][ T4565] ksys_write+0xda/0x1a0 [ 57.346522][ T4565] __x64_sys_write+0x40/0x50 [ 57.351134][ T4565] x64_sys_call+0x2cdd/0x2fb0 [ 57.355828][ T4565] do_syscall_64+0xd0/0x1a0 [ 57.360354][ T4565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.366280][ T4565] [ 57.368688][ T4565] value changed: 0x00000008 -> 0x00000002 [ 57.374497][ T4565] [ 57.377734][ T4565] Reported by Kernel Concurrency Sanitizer on: [ 57.384624][ T4565] CPU: 1 UID: 0 PID: 4565 Comm: syz.3.414 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 57.397499][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.407869][ T4565] ================================================================== [ 57.421265][ T4573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.444024][ T4573] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 57.483612][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.