last executing test programs: 6.569239606s ago: executing program 2 (id=402): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$caif_stream(0x25, 0x1, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x1, 0x80802, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 6.252402762s ago: executing program 2 (id=406): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240), 0x0) tee(r0, r3, 0x8f5, 0x100000000000000) write$cgroup_type(r3, &(0x7f0000000180), 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) 3.229123023s ago: executing program 2 (id=439): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x987d0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r3) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.047534177s ago: executing program 2 (id=442): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000002100)=""/4076, 0xfec}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x1cda, 0xc, 0x5, 0x3, 0x5, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 2.269834762s ago: executing program 1 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 2.153209952s ago: executing program 2 (id=453): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r3, 0x8f5, 0x100000000000000) write$cgroup_type(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) 1.877230924s ago: executing program 4 (id=458): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r8 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="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"/427], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.841364038s ago: executing program 4 (id=461): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) write(r2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009838000000f500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000004d4670000000e00"/40], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000010c7d86ffca16db800"], 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x8, 0x4, 0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700697a9eb4263bbbd53eeba2b312ec39b90410000004000000ff0000ec00000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) 1.623006936s ago: executing program 4 (id=462): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) write(r2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009838000000f5000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000004d4670000000e00"/40], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000010c7d86ffca16db800"], 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x8, 0x4, 0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700697a9eb4263bbbd53eeba2b312ec39b90410000004000000ff0000ec00000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) 1.379218186s ago: executing program 4 (id=465): socket$kcm(0x11, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 1.358365957s ago: executing program 1 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) setuid(0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 1.313076092s ago: executing program 3 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 971.32479ms ago: executing program 0 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 954.026361ms ago: executing program 0 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000061187e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 931.069373ms ago: executing program 0 (id=471): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="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"/427], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 907.379345ms ago: executing program 0 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 519.355677ms ago: executing program 4 (id=473): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) write(r2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009838000000f500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000004d4670000000e00"/40], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000010c7d86ffca16db800"], 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x8, 0x4, 0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700697a9eb4263bbbd53eeba2b312ec39b90410000004000000ff0000ec00000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) 502.974479ms ago: executing program 1 (id=474): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x987d0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r3, &(0x7f0000000040), 0x2) close(r3) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 487.55809ms ago: executing program 3 (id=475): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) write(r2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009838000000f5000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000004d4670000000e00"/40], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000010c7d86ffca16db800"], 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x8, 0x4, 0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700697a9eb4263bbbd53eeba2b312ec39b90410000004000000ff0000ec00000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) 218.149622ms ago: executing program 3 (id=476): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 153.505727ms ago: executing program 4 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 152.577787ms ago: executing program 1 (id=478): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r3, 0x8f5, 0x100000000000000) write$cgroup_type(r3, &(0x7f0000000180), 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) write(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000010c7d86ffca16db800"], 0x28}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000080)={0x8, 0x4, 0x2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) 61.333375ms ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 60.256125ms ago: executing program 3 (id=481): socket$kcm(0x11, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) close(0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x5) sync() lstat(0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 55.817316ms ago: executing program 0 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="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"/421], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000061187e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.083057ms ago: executing program 1 (id=483): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="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"/427], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 23.225878ms ago: executing program 0 (id=484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) setuid(0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 0s ago: executing program 1 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x61) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 29.183883][ T29] audit: type=1400 audit(1754090262.337:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.185105][ T3289] cgroup: Unknown subsys name 'net' [ 29.206652][ T29] audit: type=1400 audit(1754090262.337:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.234041][ T29] audit: type=1400 audit(1754090262.377:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.349382][ T3289] cgroup: Unknown subsys name 'cpuset' [ 29.355759][ T3289] cgroup: Unknown subsys name 'rlimit' [ 29.507152][ T29] audit: type=1400 audit(1754090262.657:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.530475][ T29] audit: type=1400 audit(1754090262.657:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.551045][ T29] audit: type=1400 audit(1754090262.657:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.571513][ T29] audit: type=1400 audit(1754090262.657:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.591981][ T29] audit: type=1400 audit(1754090262.697:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.601495][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.616826][ T29] audit: type=1400 audit(1754090262.697:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.648658][ T29] audit: type=1400 audit(1754090262.787:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.684291][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.956558][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 30.993112][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 31.060381][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 31.085517][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.092708][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.099879][ T3299] bridge_slave_0: entered allmulticast mode [ 31.106426][ T3299] bridge_slave_0: entered promiscuous mode [ 31.121531][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 31.138471][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.145552][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.152775][ T3299] bridge_slave_1: entered allmulticast mode [ 31.159155][ T3299] bridge_slave_1: entered promiscuous mode [ 31.171302][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.178387][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.185641][ T3307] bridge_slave_0: entered allmulticast mode [ 31.192314][ T3307] bridge_slave_0: entered promiscuous mode [ 31.220471][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.227596][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.235036][ T3307] bridge_slave_1: entered allmulticast mode [ 31.241557][ T3307] bridge_slave_1: entered promiscuous mode [ 31.267931][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.287451][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.300678][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.312730][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.333557][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 31.371125][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.378418][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.385690][ T3300] bridge_slave_0: entered allmulticast mode [ 31.392253][ T3300] bridge_slave_0: entered promiscuous mode [ 31.404891][ T3299] team0: Port device team_slave_0 added [ 31.414515][ T3299] team0: Port device team_slave_1 added [ 31.420895][ T3307] team0: Port device team_slave_0 added [ 31.426637][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.433729][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.440955][ T3300] bridge_slave_1: entered allmulticast mode [ 31.447373][ T3300] bridge_slave_1: entered promiscuous mode [ 31.453629][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.460724][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.468007][ T3306] bridge_slave_0: entered allmulticast mode [ 31.474496][ T3306] bridge_slave_0: entered promiscuous mode [ 31.491955][ T3307] team0: Port device team_slave_1 added [ 31.513758][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.520928][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.528426][ T3306] bridge_slave_1: entered allmulticast mode [ 31.534844][ T3306] bridge_slave_1: entered promiscuous mode [ 31.554724][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.561766][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.587694][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.599500][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.608858][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.615815][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.641791][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.660131][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.667106][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.693091][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.704997][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.714410][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.721484][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.747425][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.783948][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.805362][ T3300] team0: Port device team_slave_0 added [ 31.811760][ T3300] team0: Port device team_slave_1 added [ 31.825035][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.840392][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.847549][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.854860][ T3309] bridge_slave_0: entered allmulticast mode [ 31.861621][ T3309] bridge_slave_0: entered promiscuous mode [ 31.868579][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.875710][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.882958][ T3309] bridge_slave_1: entered allmulticast mode [ 31.889405][ T3309] bridge_slave_1: entered promiscuous mode [ 31.926323][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.933504][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.959586][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.976049][ T3306] team0: Port device team_slave_0 added [ 31.989473][ T3299] hsr_slave_0: entered promiscuous mode [ 31.995531][ T3299] hsr_slave_1: entered promiscuous mode [ 32.008805][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.015781][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.041739][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.054782][ T3307] hsr_slave_0: entered promiscuous mode [ 32.060853][ T3307] hsr_slave_1: entered promiscuous mode [ 32.066823][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 32.072697][ T3307] Cannot create hsr debugfs directory [ 32.078957][ T3306] team0: Port device team_slave_1 added [ 32.086002][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.096580][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.120665][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.127646][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.153652][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.175436][ T3309] team0: Port device team_slave_0 added [ 32.195112][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.202235][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.228198][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.239645][ T3309] team0: Port device team_slave_1 added [ 32.253171][ T3300] hsr_slave_0: entered promiscuous mode [ 32.259412][ T3300] hsr_slave_1: entered promiscuous mode [ 32.265268][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.271110][ T3300] Cannot create hsr debugfs directory [ 32.301420][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.308866][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.334913][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.367402][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.374518][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.400563][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.431115][ T3306] hsr_slave_0: entered promiscuous mode [ 32.437255][ T3306] hsr_slave_1: entered promiscuous mode [ 32.443382][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.449168][ T3306] Cannot create hsr debugfs directory [ 32.522397][ T3309] hsr_slave_0: entered promiscuous mode [ 32.528765][ T3309] hsr_slave_1: entered promiscuous mode [ 32.534502][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 32.540303][ T3309] Cannot create hsr debugfs directory [ 32.656482][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.670652][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.681289][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.697253][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.714699][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.724036][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.733106][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.742112][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.781728][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.796599][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.811209][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.821469][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.854746][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.863707][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.873505][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.882686][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.917726][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.927853][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.940335][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.949713][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.967056][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.974658][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.010473][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.026432][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.033600][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.043128][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.056172][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.077988][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.085216][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.097046][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.112657][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.121201][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.128362][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.140696][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.147807][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.161399][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.168472][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.185631][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.192783][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.210965][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.235829][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.242961][ T2772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.251754][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.258904][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.305234][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.330225][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.355697][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.366193][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.390082][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.409418][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.416502][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.443526][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.450678][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.483579][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.496432][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.509873][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.523502][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.660225][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.697641][ T3299] veth0_vlan: entered promiscuous mode [ 33.727707][ T3306] veth0_vlan: entered promiscuous mode [ 33.743077][ T3299] veth1_vlan: entered promiscuous mode [ 33.752563][ T3306] veth1_vlan: entered promiscuous mode [ 33.773928][ T3307] veth0_vlan: entered promiscuous mode [ 33.790933][ T3300] veth0_vlan: entered promiscuous mode [ 33.806865][ T3300] veth1_vlan: entered promiscuous mode [ 33.816006][ T3299] veth0_macvtap: entered promiscuous mode [ 33.830497][ T3306] veth0_macvtap: entered promiscuous mode [ 33.837075][ T3307] veth1_vlan: entered promiscuous mode [ 33.844855][ T3299] veth1_macvtap: entered promiscuous mode [ 33.862224][ T3306] veth1_macvtap: entered promiscuous mode [ 33.877226][ T3300] veth0_macvtap: entered promiscuous mode [ 33.893495][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.902362][ T3309] veth0_vlan: entered promiscuous mode [ 33.909422][ T3300] veth1_macvtap: entered promiscuous mode [ 33.920098][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.934967][ T3309] veth1_vlan: entered promiscuous mode [ 33.942304][ T3307] veth0_macvtap: entered promiscuous mode [ 33.957672][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.965969][ T791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.980578][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.988072][ T3307] veth1_macvtap: entered promiscuous mode [ 33.995815][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.007346][ T3309] veth0_macvtap: entered promiscuous mode [ 34.014112][ T791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.023111][ T791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.036989][ T791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.055354][ T3309] veth1_macvtap: entered promiscuous mode [ 34.063280][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.075725][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.085973][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.099878][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.108826][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117682][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.136555][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.146086][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.146120][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.171108][ T3457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.190314][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.201678][ T3457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.218533][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 34.218548][ T29] audit: type=1400 audit(1754090267.377:93): avc: denied { create } for pid=3467 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.225096][ T3468] loop0: detected capacity change from 0 to 512 [ 34.252545][ T3457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.263272][ T3468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.276084][ T29] audit: type=1400 audit(1754090267.427:94): avc: denied { mount } for pid=3467 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.299490][ T29] audit: type=1400 audit(1754090267.437:95): avc: denied { add_name } for pid=3467 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.319764][ T29] audit: type=1400 audit(1754090267.437:96): avc: denied { create } for pid=3467 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.339584][ T29] audit: type=1400 audit(1754090267.437:97): avc: denied { read open } for pid=3467 comm="syz.0.1" path="/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.362110][ T29] audit: type=1400 audit(1754090267.437:98): avc: denied { write } for pid=3467 comm="syz.0.1" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.383413][ T29] audit: type=1400 audit(1754090267.447:99): avc: denied { prog_load } for pid=3467 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.402134][ T29] audit: type=1400 audit(1754090267.447:100): avc: denied { bpf } for pid=3467 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.417864][ T3471] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.422427][ T29] audit: type=1400 audit(1754090267.447:101): avc: denied { perfmon } for pid=3467 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.422457][ T29] audit: type=1400 audit(1754090267.447:102): avc: denied { prog_run } for pid=3467 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.480420][ T3457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.503120][ T3457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.527243][ T3457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.558930][ T3476] loop1: detected capacity change from 0 to 1024 [ 34.569480][ T3476] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.580484][ T3476] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.590738][ T3457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.606019][ T3457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.616296][ T3457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.627586][ T3476] JBD2: no valid journal superblock found [ 34.633489][ T3476] EXT4-fs (loop1): Could not load journal inode [ 34.663141][ T3457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.677417][ T3482] loop4: detected capacity change from 0 to 512 [ 34.695163][ T3457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.708408][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.720835][ T3457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.736334][ T3485] loop2: detected capacity change from 0 to 2048 [ 34.747033][ T3483] loop3: detected capacity change from 0 to 512 [ 34.754731][ T3476] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 34.802652][ T3482] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.822827][ T3485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 34.834883][ T3483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.861995][ T3483] netlink: 87 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.957731][ T51] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.975382][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 404 with error 28 [ 34.987959][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.987959][ T51] [ 34.997904][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 35.003988][ T51] EXT4-fs (loop2): Free/Dirty block details [ 35.009947][ T51] EXT4-fs (loop2): free_blocks=2415919104 [ 35.015676][ T51] EXT4-fs (loop2): dirty_blocks=624 [ 35.021004][ T51] EXT4-fs (loop2): Block reservation details [ 35.027040][ T51] EXT4-fs (loop2): i_reserved_data_blocks=39 [ 35.180118][ T3468] syz.0.1 (3468) used greatest stack depth: 10488 bytes left [ 35.207087][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.227560][ T2772] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 35.554311][ T3512] loop0: detected capacity change from 0 to 512 [ 35.596948][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.635430][ T3512] netlink: 87 bytes leftover after parsing attributes in process `syz.0.11'. [ 35.692825][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.733445][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.741156][ T3516] loop1: detected capacity change from 0 to 2048 [ 35.781497][ T3516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 35.826490][ T3524] loop3: detected capacity change from 0 to 1024 [ 35.843489][ T3524] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.854495][ T3524] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.866041][ T3524] JBD2: no valid journal superblock found [ 35.871982][ T3524] EXT4-fs (loop3): Could not load journal inode [ 35.896627][ T3524] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 35.923451][ T3518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3518 comm=syz.4.12 [ 35.935939][ T3518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3518 comm=syz.4.12 [ 35.952171][ T3526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.967983][ T3526] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1416 with error 28 [ 35.980519][ T3526] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.980519][ T3526] [ 35.990212][ T3526] EXT4-fs (loop1): Total free blocks count 0 [ 35.996219][ T3526] EXT4-fs (loop1): Free/Dirty block details [ 36.002178][ T3526] EXT4-fs (loop1): free_blocks=2415919104 [ 36.007990][ T3526] EXT4-fs (loop1): dirty_blocks=1424 [ 36.013404][ T3526] EXT4-fs (loop1): Block reservation details [ 36.019429][ T3526] EXT4-fs (loop1): i_reserved_data_blocks=89 [ 36.052843][ T3533] loop4: detected capacity change from 0 to 2048 [ 36.137254][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 36.151878][ T3532] loop3: detected capacity change from 0 to 512 [ 36.174451][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.193766][ T3526] syz.1.13 (3526) used greatest stack depth: 10120 bytes left [ 36.239009][ T3532] netlink: 87 bytes leftover after parsing attributes in process `syz.3.15'. [ 36.248908][ T3540] loop2: detected capacity change from 0 to 512 [ 36.276029][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 36.295370][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.326515][ T3541] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.354504][ T3540] netlink: 87 bytes leftover after parsing attributes in process `syz.2.18'. [ 36.365886][ T3541] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 840 with error 28 [ 36.378336][ T3541] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.378336][ T3541] [ 36.387986][ T3541] EXT4-fs (loop4): Total free blocks count 0 [ 36.394047][ T3541] EXT4-fs (loop4): Free/Dirty block details [ 36.400080][ T3541] EXT4-fs (loop4): free_blocks=2415919104 [ 36.405919][ T3541] EXT4-fs (loop4): dirty_blocks=848 [ 36.411164][ T3541] EXT4-fs (loop4): Block reservation details [ 36.417311][ T3541] EXT4-fs (loop4): i_reserved_data_blocks=53 [ 36.443109][ T3547] loop1: detected capacity change from 0 to 512 [ 36.477990][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.508635][ T3547] netlink: 87 bytes leftover after parsing attributes in process `syz.1.19'. [ 36.553024][ T2772] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 36.682823][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.755091][ T3557] loop0: detected capacity change from 0 to 512 [ 36.765347][ T3559] loop4: detected capacity change from 0 to 512 [ 36.774945][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.814061][ T3559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.836141][ T3559] netlink: 87 bytes leftover after parsing attributes in process `syz.4.21'. [ 37.310877][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.400409][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.416697][ T3566] loop3: detected capacity change from 0 to 2048 [ 37.429921][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.462315][ T3568] tipc: Started in network mode [ 37.467367][ T3568] tipc: Node identity 4, cluster identity 4711 [ 37.473583][ T3568] tipc: Node number set to 4 [ 37.482923][ T3566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 37.686558][ T3575] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.723575][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.726798][ T3584] loop2: detected capacity change from 0 to 2048 [ 37.741054][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.748441][ T3575] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 732 with error 28 [ 37.762404][ T3575] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.762404][ T3575] [ 37.772099][ T3575] EXT4-fs (loop3): Total free blocks count 0 [ 37.778228][ T3575] EXT4-fs (loop3): Free/Dirty block details [ 37.784138][ T3575] EXT4-fs (loop3): free_blocks=2415919104 [ 37.789988][ T3575] EXT4-fs (loop3): dirty_blocks=736 [ 37.795226][ T3575] EXT4-fs (loop3): Block reservation details [ 37.801271][ T3575] EXT4-fs (loop3): i_reserved_data_blocks=46 [ 37.833738][ T3584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 37.857561][ T3596] loop0: detected capacity change from 0 to 512 [ 37.864334][ T3591] loop4: detected capacity change from 0 to 512 [ 37.899695][ T791] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 37.914593][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.915449][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.970712][ T3596] netlink: 87 bytes leftover after parsing attributes in process `syz.0.29'. [ 37.981515][ T3591] netlink: 87 bytes leftover after parsing attributes in process `syz.4.28'. [ 38.002994][ T3601] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.018315][ T3601] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28 [ 38.030737][ T3601] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.030737][ T3601] [ 38.040440][ T3601] EXT4-fs (loop2): Total free blocks count 0 [ 38.046432][ T3601] EXT4-fs (loop2): Free/Dirty block details [ 38.052614][ T3601] EXT4-fs (loop2): free_blocks=2415919104 [ 38.058378][ T3601] EXT4-fs (loop2): dirty_blocks=576 [ 38.063619][ T3601] EXT4-fs (loop2): Block reservation details [ 38.069656][ T3601] EXT4-fs (loop2): i_reserved_data_blocks=36 [ 38.121553][ T3616] loop1: detected capacity change from 0 to 1024 [ 38.129355][ T791] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 38.136420][ T3616] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.153513][ T3616] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.164947][ T3616] JBD2: no valid journal superblock found [ 38.170800][ T3616] EXT4-fs (loop1): Could not load journal inode [ 38.237287][ T3616] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 38.248530][ T3622] tmpfs: Bad value for 'mpol' [ 38.457130][ T3631] loop2: detected capacity change from 0 to 1024 [ 38.474632][ T3631] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.485669][ T3631] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.501166][ T3631] JBD2: no valid journal superblock found [ 38.506940][ T3631] EXT4-fs (loop2): Could not load journal inode [ 38.569339][ T3631] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 38.817674][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.851508][ T3637] FAULT_INJECTION: forcing a failure. [ 38.851508][ T3637] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.864822][ T3637] CPU: 1 UID: 0 PID: 3637 Comm: syz.2.40 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 38.864921][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.864935][ T3637] Call Trace: [ 38.864944][ T3637] [ 38.864953][ T3637] __dump_stack+0x1d/0x30 [ 38.864978][ T3637] dump_stack_lvl+0xe8/0x140 [ 38.865001][ T3637] dump_stack+0x15/0x1b [ 38.865120][ T3637] should_fail_ex+0x265/0x280 [ 38.865158][ T3637] should_fail+0xb/0x20 [ 38.865249][ T3637] should_fail_usercopy+0x1a/0x20 [ 38.865296][ T3637] _copy_from_user+0x1c/0xb0 [ 38.865356][ T3637] snd_seq_ioctl+0x127/0x2e0 [ 38.865437][ T3637] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 38.865461][ T3637] __se_sys_ioctl+0xce/0x140 [ 38.865549][ T3637] __x64_sys_ioctl+0x43/0x50 [ 38.865585][ T3637] x64_sys_call+0x1816/0x2ff0 [ 38.865610][ T3637] do_syscall_64+0xd2/0x200 [ 38.865659][ T3637] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.865764][ T3637] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.865788][ T3637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.865832][ T3637] RIP: 0033:0x7f2c4780eb69 [ 38.865855][ T3637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.865877][ T3637] RSP: 002b:00007f2c45e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.865908][ T3637] RAX: ffffffffffffffda RBX: 00007f2c47a35fa0 RCX: 00007f2c4780eb69 [ 38.865922][ T3637] RDX: 0000200000000180 RSI: 0000000040605346 RDI: 0000000000000003 [ 38.865936][ T3637] RBP: 00007f2c45e77090 R08: 0000000000000000 R09: 0000000000000000 [ 38.865950][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.865963][ T3637] R13: 0000000000000000 R14: 00007f2c47a35fa0 R15: 00007ffd8b0ec3c8 [ 38.866000][ T3637] [ 39.188849][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.239585][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 39.239602][ T29] audit: type=1400 audit(1754090272.397:146): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.310560][ T3655] tmpfs: Bad value for 'mpol' [ 39.376197][ T29] audit: type=1400 audit(1754090272.527:147): avc: denied { create } for pid=3648 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.395617][ T29] audit: type=1400 audit(1754090272.527:148): avc: denied { ioctl } for pid=3648 comm="syz.0.44" path="socket:[4820]" dev="sockfs" ino=4820 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.483603][ T3669] __nla_validate_parse: 1 callbacks suppressed [ 39.483624][ T3669] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.46'. [ 39.499094][ T3669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'. [ 39.510632][ T29] audit: type=1400 audit(1754090272.667:149): avc: denied { create } for pid=3661 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.569188][ T29] audit: type=1400 audit(1754090272.697:150): avc: denied { connect } for pid=3661 comm="syz.4.46" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.577736][ T3673] loop0: detected capacity change from 0 to 1024 [ 39.589605][ T29] audit: type=1400 audit(1754090272.697:151): avc: denied { write } for pid=3661 comm="syz.4.46" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.628825][ T3673] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.640388][ T3673] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.673670][ T3673] JBD2: no valid journal superblock found [ 39.679498][ T3673] EXT4-fs (loop0): Could not load journal inode [ 39.734390][ T3673] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 39.820929][ T29] audit: type=1400 audit(1754090272.967:152): avc: denied { create } for pid=3678 comm="syz.0.51" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.850539][ T29] audit: type=1400 audit(1754090273.007:153): avc: denied { map } for pid=3676 comm="syz.1.52" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.874726][ T29] audit: type=1400 audit(1754090273.007:154): avc: denied { read write } for pid=3676 comm="syz.1.52" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.911206][ T3677] loop1: detected capacity change from 0 to 128 [ 39.914935][ T3681] loop0: detected capacity change from 0 to 1024 [ 39.945077][ T29] audit: type=1400 audit(1754090273.087:155): avc: denied { mount } for pid=3676 comm="syz.1.52" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.978123][ T3681] ======================================================= [ 39.978123][ T3681] WARNING: The mand mount option has been deprecated and [ 39.978123][ T3681] and is ignored by this kernel. Remove the mand [ 39.978123][ T3681] option from the mount to silence this warning. [ 39.978123][ T3681] ======================================================= [ 40.034380][ T3681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.047605][ T3681] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.095185][ T37] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 40.121952][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 40.134461][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.134461][ T37] [ 40.167007][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.217617][ T3691] loop0: detected capacity change from 0 to 1024 [ 40.255524][ T3691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.285681][ T3694] mmap: syz.2.55 (3694) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.336430][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.348020][ T3696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25704 sclass=netlink_route_socket pid=3696 comm=syz.4.57 [ 40.402784][ T3702] tmpfs: Bad value for 'mpol' [ 40.463447][ T3688] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 40.480603][ T3688] loop2: detected capacity change from 0 to 512 [ 40.496486][ T3688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 40.511866][ T3688] System zones: 1-12 [ 40.518533][ T3688] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.55: error while reading EA inode 32 err=-116 [ 40.532167][ T3688] EXT4-fs (loop2): Remounting filesystem read-only [ 40.538833][ T3688] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.551892][ T3688] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 40.562937][ T3688] EXT4-fs (loop2): 1 orphan inode deleted [ 40.569388][ T3688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.649568][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.672549][ T3727] loop4: detected capacity change from 0 to 512 [ 40.704554][ T3727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.718600][ T3727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.789578][ T3725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3725 comm=syz.3.64 [ 40.802021][ T3725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3725 comm=syz.3.64 [ 40.875819][ T3736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3736 comm=syz.2.67 [ 40.888309][ T3736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3736 comm=syz.2.67 [ 41.003656][ T3759] loop1: detected capacity change from 0 to 512 [ 41.012784][ T3759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.864675][ T3782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3782 comm=syz.0.79 [ 41.877183][ T3782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3782 comm=syz.0.79 [ 41.879045][ T3763] syz.1.75 (3763) used greatest stack depth: 9776 bytes left [ 41.897247][ T3791] loop4: detected capacity change from 0 to 1024 [ 41.904660][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.915309][ T3791] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.926381][ T3791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.952620][ T3791] JBD2: no valid journal superblock found [ 41.958476][ T3791] EXT4-fs (loop4): Could not load journal inode [ 41.993055][ T3800] loop2: detected capacity change from 0 to 512 [ 42.000549][ T3800] EXT4-fs: Ignoring removed nobh option [ 42.027770][ T3800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.87: bg 0: block 393: padding at end of block bitmap is not set [ 42.045366][ T3800] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.058931][ T3800] EXT4-fs (loop2): 2 truncates cleaned up [ 42.070574][ T3800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.820481][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.873603][ T3824] netlink: 87 bytes leftover after parsing attributes in process `syz.0.95'. [ 42.885197][ T3826] loop4: detected capacity change from 0 to 512 [ 42.895697][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.912806][ T3826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.959345][ T3835] loop3: detected capacity change from 0 to 512 [ 42.980317][ T3835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.010282][ T3841] loop1: detected capacity change from 0 to 1024 [ 43.017229][ T3841] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.028231][ T3841] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.038721][ T3841] JBD2: no valid journal superblock found [ 43.044469][ T3841] EXT4-fs (loop1): Could not load journal inode [ 43.087325][ T3830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3830 comm=syz.2.97 [ 43.099746][ T3830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3830 comm=syz.2.97 [ 43.354296][ T3857] loop1: detected capacity change from 0 to 512 [ 43.534961][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.626683][ T3854] netlink: 87 bytes leftover after parsing attributes in process `syz.1.104'. [ 43.833575][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.946968][ T3882] tmpfs: Bad value for 'mpol' [ 43.981283][ T3884] loop3: detected capacity change from 0 to 1024 [ 43.990246][ T3884] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.001197][ T3884] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.014294][ T3884] JBD2: no valid journal superblock found [ 44.020168][ T3884] EXT4-fs (loop3): Could not load journal inode [ 44.260875][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.294216][ T3900] loop4: detected capacity change from 0 to 512 [ 44.305232][ T3900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.320023][ T3903] loop1: detected capacity change from 0 to 512 [ 44.327334][ T3900] netlink: 87 bytes leftover after parsing attributes in process `syz.4.119'. [ 44.329284][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.364372][ T3903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3903 comm=syz.1.120 [ 44.381788][ T3908] tmpfs: Bad value for 'mpol' [ 44.410565][ T3894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3894 comm=syz.3.116 [ 44.423596][ T3894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3894 comm=syz.3.116 [ 44.474352][ T3915] loop2: detected capacity change from 0 to 1024 [ 44.481815][ T3915] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.492913][ T3915] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.503720][ T3915] JBD2: no valid journal superblock found [ 44.509563][ T3915] EXT4-fs (loop2): Could not load journal inode [ 45.147597][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.170035][ T3938] tmpfs: Bad value for 'mpol' [ 45.176373][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.296143][ T3949] loop1: detected capacity change from 0 to 1024 [ 45.303402][ T3949] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.314368][ T3949] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.325686][ T3949] JBD2: no valid journal superblock found [ 45.331499][ T3949] EXT4-fs (loop1): Could not load journal inode [ 45.351527][ T3940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3940 comm=syz.4.134 [ 45.363985][ T3940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3940 comm=syz.4.134 [ 45.498022][ T3970] loop4: detected capacity change from 0 to 512 [ 45.512763][ T3970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.533090][ T3970] netlink: 87 bytes leftover after parsing attributes in process `syz.4.143'. [ 45.582164][ T3979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3979 comm=syz.0.144 [ 45.742380][ T3990] tmpfs: Bad value for 'mpol' [ 45.795554][ T3992] loop3: detected capacity change from 0 to 2048 [ 45.797764][ T3994] loop2: detected capacity change from 0 to 1024 [ 45.819381][ T3994] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.830378][ T3994] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.841721][ T3994] JBD2: no valid journal superblock found [ 45.847569][ T3994] EXT4-fs (loop2): Could not load journal inode [ 45.861167][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.064630][ T4001] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.080098][ T4001] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 46.092622][ T4001] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.092622][ T4001] [ 46.102325][ T4001] EXT4-fs (loop3): Total free blocks count 0 [ 46.108377][ T4001] EXT4-fs (loop3): Free/Dirty block details [ 46.114345][ T4001] EXT4-fs (loop3): free_blocks=2415919104 [ 46.120116][ T4001] EXT4-fs (loop3): dirty_blocks=2400 [ 46.125567][ T4001] EXT4-fs (loop3): Block reservation details [ 46.131607][ T4001] EXT4-fs (loop3): i_reserved_data_blocks=150 [ 46.419507][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 46.439170][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.536031][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 46.536048][ T29] audit: type=1400 audit(1754090279.687:187): avc: denied { name_bind } for pid=4027 comm="syz.4.155" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.542841][ T4033] tmpfs: Bad value for 'mpol' [ 46.563703][ T29] audit: type=1400 audit(1754090279.687:188): avc: denied { node_bind } for pid=4027 comm="syz.4.155" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.600529][ T4028] bond1: entered promiscuous mode [ 46.605636][ T4028] bond1: entered allmulticast mode [ 46.616485][ T4028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.629749][ T4028] bond1 (unregistering): Released all slaves [ 46.646587][ T29] audit: type=1400 audit(1754090279.797:189): avc: denied { create } for pid=4027 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.666394][ T29] audit: type=1400 audit(1754090279.797:190): avc: denied { connect } for pid=4027 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.686079][ T29] audit: type=1400 audit(1754090279.797:191): avc: denied { ioctl } for pid=4027 comm="syz.4.155" path="socket:[6403]" dev="sockfs" ino=6403 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.901681][ T4064] loop2: detected capacity change from 0 to 512 [ 46.910227][ T4064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.928717][ T4068] loop3: detected capacity change from 0 to 512 [ 46.942412][ T4068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.955123][ T4064] netlink: 87 bytes leftover after parsing attributes in process `syz.2.166'. [ 47.004230][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.046595][ T4073] loop3: detected capacity change from 0 to 512 [ 47.063926][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.084506][ T4073] selinux_netlink_send: 4 callbacks suppressed [ 47.084526][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.3.168 [ 47.256720][ T4086] tmpfs: Bad value for 'mpol' [ 47.445625][ T4088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4088 comm=syz.1.174 [ 47.458110][ T4088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4088 comm=syz.1.174 [ 47.744760][ T4110] loop1: detected capacity change from 0 to 2048 [ 47.764165][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.779924][ T4110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 47.909074][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.939729][ T29] audit: type=1400 audit(1754090281.097:192): avc: denied { read write } for pid=4119 comm="syz.4.183" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.951244][ T4121] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.963265][ T29] audit: type=1400 audit(1754090281.097:193): avc: denied { open } for pid=4119 comm="syz.4.183" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.978057][ T4121] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1410 with error 28 [ 48.013842][ T4121] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.013842][ T4121] [ 48.023524][ T4121] EXT4-fs (loop1): Total free blocks count 0 [ 48.029670][ T4121] EXT4-fs (loop1): Free/Dirty block details [ 48.035594][ T4121] EXT4-fs (loop1): free_blocks=2415919104 [ 48.041420][ T4121] EXT4-fs (loop1): dirty_blocks=1424 [ 48.046773][ T4121] EXT4-fs (loop1): Block reservation details [ 48.052793][ T4121] EXT4-fs (loop1): i_reserved_data_blocks=89 [ 48.189349][ T2772] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 48.269389][ T4134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4134 comm=syz.0.186 [ 48.281965][ T4134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4134 comm=syz.0.186 [ 48.314862][ T4160] loop1: detected capacity change from 0 to 512 [ 48.356340][ T4160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.383242][ T4160] netlink: 87 bytes leftover after parsing attributes in process `syz.1.192'. [ 48.400364][ T4168] loop2: detected capacity change from 0 to 512 [ 48.411974][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.859050][ T4186] loop4: detected capacity change from 0 to 2048 [ 48.870379][ T4186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.016836][ T4189] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.032878][ T4189] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 570 with error 28 [ 49.045334][ T4189] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.045334][ T4189] [ 49.055027][ T4189] EXT4-fs (loop4): Total free blocks count 0 [ 49.061187][ T4189] EXT4-fs (loop4): Free/Dirty block details [ 49.067159][ T4189] EXT4-fs (loop4): free_blocks=2415919104 [ 49.072946][ T4189] EXT4-fs (loop4): dirty_blocks=576 [ 49.078391][ T4189] EXT4-fs (loop4): Block reservation details [ 49.084483][ T4189] EXT4-fs (loop4): i_reserved_data_blocks=36 [ 49.154492][ T791] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 49.183622][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.207823][ T4195] loop1: detected capacity change from 0 to 512 [ 49.234807][ T4195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.249151][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.277890][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.315607][ T4208] loop1: detected capacity change from 0 to 1024 [ 49.322632][ T4208] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.333609][ T4208] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.344758][ T4208] JBD2: no valid journal superblock found [ 49.350646][ T4208] EXT4-fs (loop1): Could not load journal inode [ 49.378091][ T29] audit: type=1400 audit(1754090282.527:194): avc: denied { execute } for pid=4215 comm="syz.1.210" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=5972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 49.405822][ T4216] Zero length message leads to an empty skb [ 49.410081][ T29] audit: type=1400 audit(1754090282.537:195): avc: denied { create } for pid=4215 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.435242][ T29] audit: type=1400 audit(1754090282.537:196): avc: denied { setopt } for pid=4215 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.469345][ T4200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4200 comm=syz.3.204 [ 49.481294][ T4223] loop2: detected capacity change from 0 to 2048 [ 49.482188][ T4200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4200 comm=syz.3.204 [ 49.522923][ T4228] loop1: detected capacity change from 0 to 512 [ 49.532241][ T4223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.550725][ T4228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.566787][ T4228] netlink: 87 bytes leftover after parsing attributes in process `syz.1.212'. [ 49.613710][ T4235] loop3: detected capacity change from 0 to 512 [ 49.623017][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.638573][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.654086][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 28 [ 49.666588][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.666588][ T12] [ 49.676303][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 49.682421][ T12] EXT4-fs (loop2): Free/Dirty block details [ 49.688375][ T12] EXT4-fs (loop2): free_blocks=2415919104 [ 49.694130][ T12] EXT4-fs (loop2): dirty_blocks=368 [ 49.699449][ T12] EXT4-fs (loop2): Block reservation details [ 49.705517][ T12] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 49.726716][ T791] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 50.078267][ T4247] loop4: detected capacity change from 0 to 512 [ 50.087868][ T4247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.128803][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.386296][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.468758][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.492192][ T4281] loop3: detected capacity change from 0 to 512 [ 50.503989][ T4283] loop1: detected capacity change from 0 to 1024 [ 50.512469][ T4281] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.512509][ T4283] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.512533][ T4283] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.527988][ T4281] EXT4-fs (loop3): mount failed [ 50.541405][ T4283] JBD2: no valid journal superblock found [ 50.558565][ T4283] EXT4-fs (loop1): Could not load journal inode [ 50.747236][ T4287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4287 comm=syz.4.226 [ 50.759798][ T4287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4287 comm=syz.4.226 [ 50.804607][ T4313] loop2: detected capacity change from 0 to 2048 [ 50.820309][ T4313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 50.832968][ T4317] loop4: detected capacity change from 0 to 512 [ 50.841261][ T4317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.946393][ T4322] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.962128][ T4322] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1400 with error 28 [ 50.974630][ T4322] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.974630][ T4322] [ 50.984412][ T4322] EXT4-fs (loop2): Total free blocks count 0 [ 50.990518][ T4322] EXT4-fs (loop2): Free/Dirty block details [ 50.996454][ T4322] EXT4-fs (loop2): free_blocks=2415919104 [ 51.002424][ T4322] EXT4-fs (loop2): dirty_blocks=1408 [ 51.007806][ T4322] EXT4-fs (loop2): Block reservation details [ 51.013846][ T4322] EXT4-fs (loop2): i_reserved_data_blocks=88 [ 51.090669][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 51.163106][ T4331] loop2: detected capacity change from 0 to 1024 [ 51.170966][ T4331] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.181943][ T4331] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.194710][ T4331] JBD2: no valid journal superblock found [ 51.200499][ T4331] EXT4-fs (loop2): Could not load journal inode [ 51.666343][ T4323] syz.4.234 (4323) used greatest stack depth: 9656 bytes left [ 51.711175][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 51.711193][ T29] audit: type=1400 audit(1754090284.857:198): avc: denied { append } for pid=4355 comm="syz.1.249" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 51.743234][ T29] audit: type=1400 audit(1754090284.897:199): avc: denied { create } for pid=4355 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.743337][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.833634][ T4374] loop4: detected capacity change from 0 to 512 [ 51.845581][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.860659][ T4374] netlink: 87 bytes leftover after parsing attributes in process `syz.4.256'. [ 51.920817][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.281479][ T4403] loop2: detected capacity change from 0 to 512 [ 52.290333][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.802009][ T4408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4408 comm=syz.1.263 [ 52.814538][ T4408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4408 comm=syz.1.263 [ 52.833107][ T4418] loop4: detected capacity change from 0 to 2048 [ 52.872667][ T4418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.028547][ T29] audit: type=1400 audit(1754090286.177:200): avc: denied { name_bind } for pid=4437 comm="syz.1.271" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.071335][ T4439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.086709][ T4439] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1268 with error 28 [ 53.099293][ T4439] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.099293][ T4439] [ 53.109105][ T4439] EXT4-fs (loop4): Total free blocks count 0 [ 53.115099][ T4439] EXT4-fs (loop4): Free/Dirty block details [ 53.121037][ T4439] EXT4-fs (loop4): free_blocks=2415919104 [ 53.126787][ T4439] EXT4-fs (loop4): dirty_blocks=1280 [ 53.132187][ T4439] EXT4-fs (loop4): Block reservation details [ 53.138275][ T4439] EXT4-fs (loop4): i_reserved_data_blocks=80 [ 53.220138][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.231793][ T3457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 53.285340][ T4451] loop1: detected capacity change from 0 to 1024 [ 53.292593][ T4451] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.303612][ T4451] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.314089][ T4451] JBD2: no valid journal superblock found [ 53.319888][ T4451] EXT4-fs (loop1): Could not load journal inode [ 53.383500][ T4459] FAULT_INJECTION: forcing a failure. [ 53.383500][ T4459] name failslab, interval 1, probability 0, space 0, times 1 [ 53.396316][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.1.278 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 53.396438][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.396449][ T4459] Call Trace: [ 53.396454][ T4459] [ 53.396461][ T4459] __dump_stack+0x1d/0x30 [ 53.396480][ T4459] dump_stack_lvl+0xe8/0x140 [ 53.396496][ T4459] dump_stack+0x15/0x1b [ 53.396510][ T4459] should_fail_ex+0x265/0x280 [ 53.396612][ T4459] should_failslab+0x8c/0xb0 [ 53.396638][ T4459] kmem_cache_alloc_noprof+0x50/0x310 [ 53.396676][ T4459] ? skb_clone+0x151/0x1f0 [ 53.396697][ T4459] skb_clone+0x151/0x1f0 [ 53.396793][ T4459] __netlink_deliver_tap+0x2c9/0x500 [ 53.396907][ T4459] netlink_unicast+0x66b/0x690 [ 53.396935][ T4459] netlink_sendmsg+0x58b/0x6b0 [ 53.397016][ T4459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.397058][ T4459] __sock_sendmsg+0x142/0x180 [ 53.397081][ T4459] ____sys_sendmsg+0x31e/0x4e0 [ 53.397154][ T4459] ___sys_sendmsg+0x17b/0x1d0 [ 53.397230][ T4459] __x64_sys_sendmsg+0xd4/0x160 [ 53.397322][ T4459] x64_sys_call+0x191e/0x2ff0 [ 53.397373][ T4459] do_syscall_64+0xd2/0x200 [ 53.397395][ T4459] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.397417][ T4459] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.397437][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.397489][ T4459] RIP: 0033:0x7fdaf1d9eb69 [ 53.397503][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.397519][ T4459] RSP: 002b:00007fdaf03ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.397535][ T4459] RAX: ffffffffffffffda RBX: 00007fdaf1fc5fa0 RCX: 00007fdaf1d9eb69 [ 53.397546][ T4459] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 53.397590][ T4459] RBP: 00007fdaf03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 53.397600][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.397610][ T4459] R13: 0000000000000000 R14: 00007fdaf1fc5fa0 R15: 00007ffc05d41f58 [ 53.397627][ T4459] [ 53.623629][ T4461] loop1: detected capacity change from 0 to 512 [ 53.631974][ T4461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.654875][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.829567][ T4464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4464 comm=syz.1.280 [ 53.842087][ T4464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4464 comm=syz.1.280 [ 53.874505][ T4483] loop1: detected capacity change from 0 to 512 [ 54.121366][ T4488] loop2: detected capacity change from 0 to 2048 [ 54.265291][ T4497] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.281169][ T4497] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1170 with error 28 [ 54.293705][ T4497] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.293705][ T4497] [ 54.303605][ T4497] EXT4-fs (loop2): Total free blocks count 0 [ 54.309629][ T4497] EXT4-fs (loop2): Free/Dirty block details [ 54.315538][ T4497] EXT4-fs (loop2): free_blocks=2415919104 [ 54.321339][ T4497] EXT4-fs (loop2): dirty_blocks=1184 [ 54.326660][ T4497] EXT4-fs (loop2): Block reservation details [ 54.332735][ T4497] EXT4-fs (loop2): i_reserved_data_blocks=74 [ 54.417028][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 54.429506][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.429506][ T12] [ 54.476423][ T4504] loop2: detected capacity change from 0 to 512 [ 54.512246][ T29] audit: type=1400 audit(1754090287.667:201): avc: denied { kexec_image_load } for pid=4506 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 54.650658][ T29] audit: type=1400 audit(1754090287.807:202): avc: denied { write } for pid=4511 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.740336][ T4509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4509 comm=syz.2.292 [ 54.752784][ T4509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4509 comm=syz.2.292 [ 54.871537][ T4518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4518 comm=syz.0.294 [ 54.883982][ T4518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4518 comm=syz.0.294 [ 54.934636][ T4540] loop1: detected capacity change from 0 to 512 [ 55.067139][ T29] audit: type=1400 audit(1754090288.217:203): avc: denied { name_bind } for pid=4549 comm="syz.4.305" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.747210][ T4564] loop2: detected capacity change from 0 to 512 [ 55.831012][ T4559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4559 comm=syz.3.308 [ 55.843618][ T4559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4559 comm=syz.3.308 [ 55.885205][ T4580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 55.963991][ T29] audit: type=1400 audit(1754090289.117:204): avc: denied { mounton } for pid=4584 comm="syz.0.316" path="/57/file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.780658][ T4604] loop3: detected capacity change from 0 to 1024 [ 56.787713][ T4604] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.798685][ T4604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.809551][ T4604] JBD2: no valid journal superblock found [ 56.815313][ T4604] EXT4-fs (loop3): Could not load journal inode [ 57.496725][ T4648] loop2: detected capacity change from 0 to 1024 [ 57.514535][ T4648] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.525553][ T4648] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.542358][ T4648] JBD2: no valid journal superblock found [ 57.548285][ T4648] EXT4-fs (loop2): Could not load journal inode [ 57.661744][ T29] audit: type=1326 audit(1754090290.817:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.685079][ T29] audit: type=1326 audit(1754090290.817:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.708699][ T29] audit: type=1326 audit(1754090290.817:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.725193][ T4653] hub 6-0:1.0: USB hub found [ 57.732055][ T29] audit: type=1326 audit(1754090290.817:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.739692][ T4653] hub 6-0:1.0: 8 ports detected [ 57.760252][ T29] audit: type=1326 audit(1754090290.817:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.788234][ T29] audit: type=1326 audit(1754090290.817:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.812049][ T29] audit: type=1326 audit(1754090290.817:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.835380][ T29] audit: type=1326 audit(1754090290.817:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.858836][ T29] audit: type=1326 audit(1754090290.817:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 57.882105][ T29] audit: type=1326 audit(1754090290.817:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 58.066394][ T4656] selinux_netlink_send: 6 callbacks suppressed [ 58.066413][ T4656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4656 comm=syz.2.339 [ 58.085277][ T4656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4656 comm=syz.2.339 [ 58.140522][ T4669] FAULT_INJECTION: forcing a failure. [ 58.140522][ T4669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.153752][ T4669] CPU: 1 UID: 0 PID: 4669 Comm: syz.4.343 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 58.153789][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.153805][ T4669] Call Trace: [ 58.153871][ T4669] [ 58.153879][ T4669] __dump_stack+0x1d/0x30 [ 58.153902][ T4669] dump_stack_lvl+0xe8/0x140 [ 58.153928][ T4669] dump_stack+0x15/0x1b [ 58.153950][ T4669] should_fail_ex+0x265/0x280 [ 58.153994][ T4669] should_fail+0xb/0x20 [ 58.154090][ T4669] should_fail_usercopy+0x1a/0x20 [ 58.154109][ T4669] _copy_from_user+0x1c/0xb0 [ 58.154134][ T4669] snd_seq_ioctl+0x127/0x2e0 [ 58.154171][ T4669] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 58.154200][ T4669] __se_sys_ioctl+0xce/0x140 [ 58.154324][ T4669] __x64_sys_ioctl+0x43/0x50 [ 58.154372][ T4669] x64_sys_call+0x1816/0x2ff0 [ 58.154447][ T4669] do_syscall_64+0xd2/0x200 [ 58.154474][ T4669] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.154498][ T4669] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.154540][ T4669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.154568][ T4669] RIP: 0033:0x7fd6fbf5eb69 [ 58.154586][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.154604][ T4669] RSP: 002b:00007fd6fa5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.154637][ T4669] RAX: ffffffffffffffda RBX: 00007fd6fc185fa0 RCX: 00007fd6fbf5eb69 [ 58.154649][ T4669] RDX: 0000200000000180 RSI: 0000000040605346 RDI: 0000000000000004 [ 58.154681][ T4669] RBP: 00007fd6fa5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 58.154744][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.154759][ T4669] R13: 0000000000000000 R14: 00007fd6fc185fa0 R15: 00007ffc6246d808 [ 58.154782][ T4669] [ 58.347416][ T4660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4660 comm=syz.1.341 [ 58.360009][ T4660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4660 comm=syz.1.341 [ 58.459030][ T4681] loop2: detected capacity change from 0 to 1024 [ 58.481149][ T4681] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.492137][ T4681] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.547507][ T4681] JBD2: no valid journal superblock found [ 58.553336][ T4681] EXT4-fs (loop2): Could not load journal inode [ 58.606586][ T4691] loop2: detected capacity change from 0 to 512 [ 59.078311][ T4700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4700 comm=syz.0.352 [ 59.090811][ T4700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4700 comm=syz.0.352 [ 59.566329][ T4713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4713 comm=syz.3.355 [ 59.578851][ T4713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4713 comm=syz.3.355 [ 59.621493][ T4733] tipc: Started in network mode [ 59.626520][ T4733] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 59.626797][ T4731] loop3: detected capacity change from 0 to 1024 [ 59.636283][ T4733] tipc: New replicast peer: fe80:0000:0000:0000:0000:7f00:0000:0000 [ 59.644658][ T4731] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.650035][ T4733] tipc: Enabled bearer , priority 10 [ 59.660803][ T4731] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.663285][ T4731] JBD2: no valid journal superblock found [ 59.682593][ T4731] EXT4-fs (loop3): Could not load journal inode [ 59.882567][ T4739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4739 comm=syz.2.363 [ 59.895097][ T4739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4739 comm=syz.2.363 [ 60.026274][ T4750] loop2: detected capacity change from 0 to 512 [ 60.115654][ T4754] FAULT_INJECTION: forcing a failure. [ 60.115654][ T4754] name failslab, interval 1, probability 0, space 0, times 0 [ 60.128416][ T4754] CPU: 1 UID: 0 PID: 4754 Comm: syz.4.368 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 60.128453][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.128467][ T4754] Call Trace: [ 60.128475][ T4754] [ 60.128485][ T4754] __dump_stack+0x1d/0x30 [ 60.128511][ T4754] dump_stack_lvl+0xe8/0x140 [ 60.128537][ T4754] dump_stack+0x15/0x1b [ 60.128555][ T4754] should_fail_ex+0x265/0x280 [ 60.128589][ T4754] should_failslab+0x8c/0xb0 [ 60.128621][ T4754] kmem_cache_alloc_noprof+0x50/0x310 [ 60.128657][ T4754] ? vm_area_dup+0x33/0x2c0 [ 60.128691][ T4754] vm_area_dup+0x33/0x2c0 [ 60.128722][ T4754] __split_vma+0xe9/0x650 [ 60.128747][ T4754] ? obj_cgroup_charge_account+0x122/0x1a0 [ 60.128789][ T4754] ? should_fail_ex+0x30/0x280 [ 60.128832][ T4754] vms_gather_munmap_vmas+0x172/0x7a0 [ 60.128858][ T4754] ? mas_find+0x608/0x700 [ 60.128885][ T4754] ? __rcu_read_unlock+0x34/0x70 [ 60.128913][ T4754] mmap_region+0x53f/0x1630 [ 60.128948][ T4754] ? sidtab_context_to_sid+0x5d/0x5e0 [ 60.128985][ T4754] ? mls_compute_sid+0x139/0x560 [ 60.129016][ T4754] ? mls_context_isvalid+0x85/0x1f0 [ 60.129072][ T4754] do_mmap+0x9b3/0xbe0 [ 60.129116][ T4754] vm_mmap_pgoff+0x17a/0x2e0 [ 60.129159][ T4754] ksys_mmap_pgoff+0x2d0/0x310 [ 60.129203][ T4754] x64_sys_call+0x14a3/0x2ff0 [ 60.129228][ T4754] do_syscall_64+0xd2/0x200 [ 60.129251][ T4754] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.129277][ T4754] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.129303][ T4754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.129330][ T4754] RIP: 0033:0x7fd6fbf5eb69 [ 60.129349][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.129371][ T4754] RSP: 002b:00007fd6fa5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 60.129402][ T4754] RAX: ffffffffffffffda RBX: 00007fd6fc185fa0 RCX: 00007fd6fbf5eb69 [ 60.129418][ T4754] RDX: 0000000000000008 RSI: 0000000000c00000 RDI: 0000200000400000 [ 60.129434][ T4754] RBP: 00007fd6fa5bf090 R08: ffffffffffffffff R09: 0000000000000000 [ 60.129450][ T4754] R10: 0000000000051031 R11: 0000000000000246 R12: 0000000000000001 [ 60.129465][ T4754] R13: 0000000000000000 R14: 00007fd6fc185fa0 R15: 00007ffc6246d808 [ 60.129490][ T4754] [ 60.668218][ T2954] tipc: Node number set to 1 [ 60.737518][ T4774] loop3: detected capacity change from 0 to 1024 [ 60.744909][ T4774] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.755926][ T4774] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.766473][ T4774] JBD2: no valid journal superblock found [ 60.772326][ T4774] EXT4-fs (loop3): Could not load journal inode [ 60.851641][ T4779] Illegal XDP return value 4294967282 on prog (id 249) dev N/A, expect packet loss! [ 61.716415][ T4803] loop3: detected capacity change from 0 to 256 [ 61.828816][ T4810] loop2: detected capacity change from 0 to 1024 [ 61.835889][ T4810] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.846826][ T4810] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.857172][ T4810] JBD2: no valid journal superblock found [ 61.862978][ T4810] EXT4-fs (loop2): Could not load journal inode [ 61.921689][ T4816] loop3: detected capacity change from 0 to 512 [ 62.037454][ T4832] FAULT_INJECTION: forcing a failure. [ 62.037454][ T4832] name failslab, interval 1, probability 0, space 0, times 0 [ 62.050201][ T4832] CPU: 0 UID: 0 PID: 4832 Comm: syz.1.394 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 62.050290][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.050303][ T4832] Call Trace: [ 62.050309][ T4832] [ 62.050317][ T4832] __dump_stack+0x1d/0x30 [ 62.050420][ T4832] dump_stack_lvl+0xe8/0x140 [ 62.050444][ T4832] dump_stack+0x15/0x1b [ 62.050464][ T4832] should_fail_ex+0x265/0x280 [ 62.050503][ T4832] should_failslab+0x8c/0xb0 [ 62.050532][ T4832] __kmalloc_cache_node_noprof+0x54/0x320 [ 62.050577][ T4832] ? __get_vm_area_node+0x106/0x1d0 [ 62.050660][ T4832] __get_vm_area_node+0x106/0x1d0 [ 62.050692][ T4832] __vmalloc_node_range_noprof+0x273/0xe00 [ 62.050758][ T4832] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.050790][ T4832] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.050816][ T4832] ? cred_has_capability+0x210/0x280 [ 62.050911][ T4832] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.050939][ T4832] __vmalloc_noprof+0x83/0xc0 [ 62.051082][ T4832] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.051117][ T4832] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.051145][ T4832] ? bpf_prog_alloc+0x2a/0x150 [ 62.051171][ T4832] bpf_prog_alloc+0x3c/0x150 [ 62.051246][ T4832] bpf_prog_load+0x514/0x1070 [ 62.051311][ T4832] ? security_bpf+0x2b/0x90 [ 62.051362][ T4832] __sys_bpf+0x462/0x7b0 [ 62.051415][ T4832] __x64_sys_bpf+0x41/0x50 [ 62.051446][ T4832] x64_sys_call+0x2aea/0x2ff0 [ 62.051471][ T4832] do_syscall_64+0xd2/0x200 [ 62.051501][ T4832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.051603][ T4832] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.051632][ T4832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.051660][ T4832] RIP: 0033:0x7fdaf1d9eb69 [ 62.051676][ T4832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.051693][ T4832] RSP: 002b:00007fdaf03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.051712][ T4832] RAX: ffffffffffffffda RBX: 00007fdaf1fc5fa0 RCX: 00007fdaf1d9eb69 [ 62.051726][ T4832] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 62.051787][ T4832] RBP: 00007fdaf03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 62.051822][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.051838][ T4832] R13: 0000000000000000 R14: 00007fdaf1fc5fa0 R15: 00007ffc05d41f58 [ 62.051862][ T4832] [ 62.051921][ T4832] syz.1.394: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 62.310051][ T4832] CPU: 0 UID: 0 PID: 4832 Comm: syz.1.394 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 62.310078][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.310089][ T4832] Call Trace: [ 62.310095][ T4832] [ 62.310102][ T4832] __dump_stack+0x1d/0x30 [ 62.310139][ T4832] dump_stack_lvl+0xe8/0x140 [ 62.310156][ T4832] dump_stack+0x15/0x1b [ 62.310171][ T4832] warn_alloc+0x12b/0x1a0 [ 62.310205][ T4832] __vmalloc_node_range_noprof+0x297/0xe00 [ 62.310295][ T4832] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.310319][ T4832] ? cred_has_capability+0x210/0x280 [ 62.310397][ T4832] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.310490][ T4832] __vmalloc_noprof+0x83/0xc0 [ 62.310518][ T4832] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.310543][ T4832] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 62.310572][ T4832] ? bpf_prog_alloc+0x2a/0x150 [ 62.310642][ T4832] bpf_prog_alloc+0x3c/0x150 [ 62.310667][ T4832] bpf_prog_load+0x514/0x1070 [ 62.310701][ T4832] ? security_bpf+0x2b/0x90 [ 62.310761][ T4832] __sys_bpf+0x462/0x7b0 [ 62.310792][ T4832] __x64_sys_bpf+0x41/0x50 [ 62.310813][ T4832] x64_sys_call+0x2aea/0x2ff0 [ 62.310854][ T4832] do_syscall_64+0xd2/0x200 [ 62.310874][ T4832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.310922][ T4832] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.310941][ T4832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.310960][ T4832] RIP: 0033:0x7fdaf1d9eb69 [ 62.310974][ T4832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.310990][ T4832] RSP: 002b:00007fdaf03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.311079][ T4832] RAX: ffffffffffffffda RBX: 00007fdaf1fc5fa0 RCX: 00007fdaf1d9eb69 [ 62.311091][ T4832] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 62.311101][ T4832] RBP: 00007fdaf03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 62.311125][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.311136][ T4832] R13: 0000000000000000 R14: 00007fdaf1fc5fa0 R15: 00007ffc05d41f58 [ 62.311153][ T4832] [ 62.311168][ T4832] Mem-Info: [ 62.352143][ T4845] netlink: 'syz.0.396': attribute type 13 has an invalid length. [ 62.352710][ T4832] active_anon:3830 inactive_anon:0 isolated_anon:0 [ 62.352710][ T4832] active_file:15901 inactive_file:2466 isolated_file:0 [ 62.352710][ T4832] unevictable:0 dirty:149 writeback:0 [ 62.352710][ T4832] slab_reclaimable:3170 slab_unreclaimable:13600 [ 62.352710][ T4832] mapped:29185 shmem:177 pagetables:1115 [ 62.352710][ T4832] sec_pagetables:0 bounce:0 [ 62.352710][ T4832] kernel_misc_reclaimable:0 [ 62.352710][ T4832] free:1902681 free_pcp:5196 free_cma:0 [ 62.357140][ T4845] netlink: 'syz.0.396': attribute type 17 has an invalid length. [ 62.590173][ T4832] Node 0 active_anon:15320kB inactive_anon:0kB active_file:63604kB inactive_file:9864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124860kB dirty:596kB writeback:0kB shmem:708kB kernel_stack:3328kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 62.617355][ T4832] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.645989][ T4832] lowmem_reserve[]: 0 2883 7862 7862 [ 62.651344][ T4832] Node 0 DMA32 free:2949276kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 62.681712][ T4832] lowmem_reserve[]: 0 0 4978 4978 [ 62.686785][ T4832] Node 0 Normal free:4645856kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15320kB inactive_anon:0kB active_file:63604kB inactive_file:9864kB unevictable:0kB writepending:596kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:17264kB local_pcp:10260kB free_cma:0kB [ 62.718698][ T4832] lowmem_reserve[]: 0 0 0 0 [ 62.723305][ T4832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 62.736224][ T4832] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949276kB [ 62.752400][ T4832] Node 0 Normal: 610*4kB (M) 708*8kB (ME) 484*16kB (UME) 369*32kB (UM) 298*64kB (UM) 58*128kB (UM) 22*256kB (UME) 9*512kB (UM) 2*1024kB (M) 2*2048kB (ME) 1117*4096kB (UM) = 4645768kB [ 62.770657][ T4832] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 62.779960][ T4832] 18535 total pagecache pages [ 62.784717][ T4832] 0 pages in swap cache [ 62.788931][ T4832] Free swap = 124996kB [ 62.793166][ T4832] Total swap = 124996kB [ 62.797337][ T4832] 2097051 pages RAM [ 62.801282][ T4832] 0 pages HighMem/MovableOnly [ 62.805950][ T4832] 80424 pages reserved [ 62.883280][ T4853] loop3: detected capacity change from 0 to 1024 [ 62.883321][ T4854] loop2: detected capacity change from 0 to 512 [ 62.891419][ T4853] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.907192][ T4853] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.907179][ T4845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.934557][ T4853] JBD2: no valid journal superblock found [ 62.940468][ T4853] EXT4-fs (loop3): Could not load journal inode [ 62.985671][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 62.985734][ T29] audit: type=1326 audit(1754090296.137:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.016178][ T29] audit: type=1326 audit(1754090296.137:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.027883][ T4861] IPv6: Can't replace route, no match found [ 63.039532][ T29] audit: type=1326 audit(1754090296.137:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.069156][ T29] audit: type=1326 audit(1754090296.137:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.076419][ T4864] selinux_netlink_send: 8 callbacks suppressed [ 63.076439][ T4864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4864 comm=syz.1.399 [ 63.092881][ T29] audit: type=1326 audit(1754090296.137:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.098952][ T4864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4864 comm=syz.1.399 [ 63.148626][ T29] audit: type=1326 audit(1754090296.137:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.172841][ T29] audit: type=1326 audit(1754090296.137:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.196408][ T29] audit: type=1326 audit(1754090296.137:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.219829][ T29] audit: type=1326 audit(1754090296.137:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.243361][ T29] audit: type=1326 audit(1754090296.137:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4780eb69 code=0x7ffc0000 [ 63.343514][ T4876] capability: warning: `syz.4.407' uses deprecated v2 capabilities in a way that may be insecure [ 63.380197][ T4878] netlink: 80 bytes leftover after parsing attributes in process `syz.0.408'. [ 63.574361][ T4882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4882 comm=syz.0.409 [ 63.586774][ T4882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4882 comm=syz.0.409 [ 63.616945][ T4888] FAULT_INJECTION: forcing a failure. [ 63.616945][ T4888] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.630849][ T4888] CPU: 0 UID: 0 PID: 4888 Comm: syz.0.410 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 63.630886][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.630902][ T4888] Call Trace: [ 63.630911][ T4888] [ 63.630921][ T4888] __dump_stack+0x1d/0x30 [ 63.630988][ T4888] dump_stack_lvl+0xe8/0x140 [ 63.631008][ T4888] dump_stack+0x15/0x1b [ 63.631104][ T4888] should_fail_ex+0x265/0x280 [ 63.631144][ T4888] should_fail_alloc_page+0xf2/0x100 [ 63.631168][ T4888] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.631208][ T4888] alloc_pages_mpol+0xb3/0x250 [ 63.631238][ T4888] vma_alloc_folio_noprof+0x1aa/0x300 [ 63.631331][ T4888] handle_mm_fault+0xec2/0x2c20 [ 63.631473][ T4888] ? __rcu_read_unlock+0x4f/0x70 [ 63.631502][ T4888] do_user_addr_fault+0x3fe/0x1090 [ 63.631598][ T4888] exc_page_fault+0x62/0xa0 [ 63.631617][ T4888] asm_exc_page_fault+0x26/0x30 [ 63.631654][ T4888] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 63.631682][ T4888] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 63.631697][ T4888] RSP: 0018:ffffc9000fd4fcb8 EFLAGS: 00050216 [ 63.631711][ T4888] RAX: daa66d2af997ca9a RBX: 0000000000000017 RCX: 0000000000000017 [ 63.631721][ T4888] RDX: 0000000000000000 RSI: ffffc9000fd4fd10 RDI: 0000200000033a80 [ 63.631732][ T4888] RBP: ffffc9000fd4fd90 R08: 0000000000000521 R09: 0000000000000000 [ 63.631784][ T4888] R10: 0001c9000fd4fd10 R11: 0001c9000fd4fd26 R12: 0000200000033a97 [ 63.631795][ T4888] R13: 00007ffffffff000 R14: 0000200000033a80 R15: ffffc9000fd4fd10 [ 63.631884][ T4888] _copy_to_user+0x7c/0xa0 [ 63.631918][ T4888] rng_dev_read+0x3ef/0x740 [ 63.631970][ T4888] ? __pfx_rng_dev_read+0x10/0x10 [ 63.632002][ T4888] vfs_readv+0x3f8/0x690 [ 63.632029][ T4888] ? bpf_probe_read_kernel+0x4a/0x70 [ 63.632143][ T4888] __x64_sys_preadv+0xfd/0x1c0 [ 63.632167][ T4888] x64_sys_call+0x282a/0x2ff0 [ 63.632188][ T4888] do_syscall_64+0xd2/0x200 [ 63.632226][ T4888] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.632248][ T4888] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.632267][ T4888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.632359][ T4888] RIP: 0033:0x7f44b434eb69 [ 63.632379][ T4888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.632404][ T4888] RSP: 002b:00007f44b29af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 63.632481][ T4888] RAX: ffffffffffffffda RBX: 00007f44b4575fa0 RCX: 00007f44b434eb69 [ 63.632491][ T4888] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 63.632502][ T4888] RBP: 00007f44b29af090 R08: 0000000000000000 R09: 0000000000000000 [ 63.632512][ T4888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.632523][ T4888] R13: 0000000000000000 R14: 00007f44b4575fa0 R15: 00007ffd0ba57ae8 [ 63.632540][ T4888] [ 64.086292][ T4898] loop3: detected capacity change from 0 to 1024 [ 64.093743][ T4898] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.104695][ T4898] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.116698][ T4898] JBD2: no valid journal superblock found [ 64.122678][ T4898] EXT4-fs (loop3): Could not load journal inode [ 64.157653][ T4901] loop3: detected capacity change from 0 to 512 [ 64.198658][ T4905] FAULT_INJECTION: forcing a failure. [ 64.198658][ T4905] name failslab, interval 1, probability 0, space 0, times 0 [ 64.211434][ T4905] CPU: 0 UID: 0 PID: 4905 Comm: syz.3.415 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 64.211517][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.211534][ T4905] Call Trace: [ 64.211544][ T4905] [ 64.211554][ T4905] __dump_stack+0x1d/0x30 [ 64.211711][ T4905] dump_stack_lvl+0xe8/0x140 [ 64.211738][ T4905] dump_stack+0x15/0x1b [ 64.211773][ T4905] should_fail_ex+0x265/0x280 [ 64.211818][ T4905] should_failslab+0x8c/0xb0 [ 64.211868][ T4905] __kvmalloc_node_noprof+0x123/0x4e0 [ 64.211952][ T4905] ? vmemdup_user+0x26/0xd0 [ 64.211984][ T4905] vmemdup_user+0x26/0xd0 [ 64.212017][ T4905] map_lookup_and_delete_elem+0x26b/0x5c0 [ 64.212100][ T4905] ? security_bpf+0x2b/0x90 [ 64.212160][ T4905] __sys_bpf+0x585/0x7b0 [ 64.212207][ T4905] __x64_sys_bpf+0x41/0x50 [ 64.212241][ T4905] x64_sys_call+0x2aea/0x2ff0 [ 64.212295][ T4905] do_syscall_64+0xd2/0x200 [ 64.212409][ T4905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.212443][ T4905] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.212473][ T4905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.212544][ T4905] RIP: 0033:0x7f24d578eb69 [ 64.212612][ T4905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.212633][ T4905] RSP: 002b:00007f24d3df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.212658][ T4905] RAX: ffffffffffffffda RBX: 00007f24d59b5fa0 RCX: 00007f24d578eb69 [ 64.212676][ T4905] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 64.212693][ T4905] RBP: 00007f24d3df7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.212710][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.212763][ T4905] R13: 0000000000000000 R14: 00007f24d59b5fa0 R15: 00007ffe3cf2f348 [ 64.212789][ T4905] [ 64.581069][ T4907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4907 comm=syz.3.416 [ 64.593531][ T4907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4907 comm=syz.3.416 [ 64.604513][ T4917] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.797049][ T4924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4924 comm=syz.3.421 [ 64.809506][ T4924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4924 comm=syz.3.421 [ 64.961426][ T4940] loop1: detected capacity change from 0 to 1024 [ 64.968853][ T4940] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.979952][ T4940] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.990724][ T4940] JBD2: no valid journal superblock found [ 64.996501][ T4940] EXT4-fs (loop1): Could not load journal inode [ 65.043516][ T4942] loop1: detected capacity change from 0 to 512 [ 65.302204][ T4948] loop4: detected capacity change from 0 to 512 [ 65.339936][ T4948] EXT4-fs (loop4): too many log groups per flexible block group [ 65.347671][ T4948] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 65.354887][ T4948] EXT4-fs (loop4): mount failed [ 65.388680][ T4953] vhci_hcd: invalid port number 96 [ 65.393942][ T4953] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 65.739186][ T4960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4960 comm=syz.0.431 [ 65.751757][ T4960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4960 comm=syz.0.431 [ 65.989529][ T4985] FAULT_INJECTION: forcing a failure. [ 65.989529][ T4985] name failslab, interval 1, probability 0, space 0, times 0 [ 66.002364][ T4985] CPU: 0 UID: 0 PID: 4985 Comm: syz.1.437 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 66.002440][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.002456][ T4985] Call Trace: [ 66.002464][ T4985] [ 66.002475][ T4985] __dump_stack+0x1d/0x30 [ 66.002498][ T4985] dump_stack_lvl+0xe8/0x140 [ 66.002573][ T4985] dump_stack+0x15/0x1b [ 66.002644][ T4985] should_fail_ex+0x265/0x280 [ 66.002706][ T4985] should_failslab+0x8c/0xb0 [ 66.002739][ T4985] kmem_cache_alloc_noprof+0x50/0x310 [ 66.002774][ T4985] ? fib6_add+0x201/0xe00 [ 66.002887][ T4985] fib6_add+0x201/0xe00 [ 66.002931][ T4985] inet6_rtm_newroute+0x6e0/0x1020 [ 66.002963][ T4985] ? __memcg_slab_free_hook+0x135/0x230 [ 66.003028][ T4985] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 66.003056][ T4985] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 66.003143][ T4985] netlink_rcv_skb+0x123/0x220 [ 66.003250][ T4985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.003334][ T4985] rtnetlink_rcv+0x1c/0x30 [ 66.003361][ T4985] netlink_unicast+0x5bd/0x690 [ 66.003401][ T4985] netlink_sendmsg+0x58b/0x6b0 [ 66.003436][ T4985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.003525][ T4985] __sock_sendmsg+0x142/0x180 [ 66.003556][ T4985] ____sys_sendmsg+0x31e/0x4e0 [ 66.003594][ T4985] ___sys_sendmsg+0x17b/0x1d0 [ 66.003671][ T4985] __x64_sys_sendmsg+0xd4/0x160 [ 66.003718][ T4985] x64_sys_call+0x191e/0x2ff0 [ 66.003758][ T4985] do_syscall_64+0xd2/0x200 [ 66.003790][ T4985] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.003823][ T4985] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.003876][ T4985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.003903][ T4985] RIP: 0033:0x7fdaf1d9eb69 [ 66.003929][ T4985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.003948][ T4985] RSP: 002b:00007fdaf03ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.003968][ T4985] RAX: ffffffffffffffda RBX: 00007fdaf1fc5fa0 RCX: 00007fdaf1d9eb69 [ 66.003984][ T4985] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000005 [ 66.004010][ T4985] RBP: 00007fdaf03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 66.004026][ T4985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.004042][ T4985] R13: 0000000000000000 R14: 00007fdaf1fc5fa0 R15: 00007ffc05d41f58 [ 66.004067][ T4985] [ 66.422216][ T5003] loop1: detected capacity change from 0 to 2048 [ 66.564260][ T5011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.658213][ T5011] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1140 with error 28 [ 66.670782][ T5011] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.670782][ T5011] [ 66.680584][ T5011] EXT4-fs (loop1): Total free blocks count 0 [ 66.686748][ T5011] EXT4-fs (loop1): Free/Dirty block details [ 66.692735][ T5011] EXT4-fs (loop1): free_blocks=2415919104 [ 66.698537][ T5011] EXT4-fs (loop1): dirty_blocks=1152 [ 66.703838][ T5011] EXT4-fs (loop1): Block reservation details [ 66.709891][ T5011] EXT4-fs (loop1): i_reserved_data_blocks=72 [ 66.810644][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 66.829572][ T2772] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 66.842092][ T2772] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.842092][ T2772] [ 67.345042][ T5050] loop2: detected capacity change from 0 to 1024 [ 67.352288][ T5050] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.363247][ T5050] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.373604][ T5050] JBD2: no valid journal superblock found [ 67.379545][ T5050] EXT4-fs (loop2): Could not load journal inode [ 67.699744][ T5066] loop3: detected capacity change from 0 to 2048 [ 67.786184][ T3457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.812025][ T3457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 62 with error 28 [ 67.824359][ T3457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.824359][ T3457] [ 67.834040][ T3457] EXT4-fs (loop3): Total free blocks count 0 [ 67.840114][ T3457] EXT4-fs (loop3): Free/Dirty block details [ 67.846014][ T3457] EXT4-fs (loop3): free_blocks=2415919104 [ 67.851842][ T3457] EXT4-fs (loop3): dirty_blocks=64 [ 67.856975][ T3457] EXT4-fs (loop3): Block reservation details [ 67.862997][ T3457] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 67.917644][ T3457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 67.918283][ T5074] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 62 with max blocks 2 with error 28 [ 68.061264][ T5086] loop3: detected capacity change from 0 to 1024 [ 68.069947][ T5086] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.080923][ T5086] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.092919][ T5086] JBD2: no valid journal superblock found [ 68.093981][ T5080] selinux_netlink_send: 8 callbacks suppressed [ 68.093999][ T5080] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5080 comm=syz.4.462 [ 68.098715][ T5086] EXT4-fs (loop3): Could not load journal inode [ 68.123651][ T5080] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5080 comm=syz.4.462 [ 68.161087][ T5089] loop4: detected capacity change from 0 to 512 [ 68.631152][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 69.013765][ T3300] EXT4-fs unmount: 27 callbacks suppressed [ 69.013781][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.054158][ T5111] loop1: detected capacity change from 0 to 2048 [ 69.069674][ T5111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 69.191594][ T5120] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.206698][ T5120] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.215159][ T5113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5113 comm=syz.4.473 [ 69.219280][ T5120] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.219280][ T5120] [ 69.231861][ T5113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5113 comm=syz.4.473 [ 69.241506][ T5120] EXT4-fs (loop1): Total free blocks count 0 [ 69.258783][ T5125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5125 comm=syz.3.475 [ 69.260177][ T5120] EXT4-fs (loop1): Free/Dirty block details [ 69.260191][ T5120] EXT4-fs (loop1): free_blocks=2415919104 [ 69.272767][ T5125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5125 comm=syz.3.475 [ 69.278635][ T5120] EXT4-fs (loop1): dirty_blocks=2080 [ 69.302039][ T5120] EXT4-fs (loop1): Block reservation details [ 69.308096][ T5120] EXT4-fs (loop1): i_reserved_data_blocks=130 [ 69.379920][ T791] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 69.418819][ T5133] loop1: detected capacity change from 0 to 1024 [ 69.425828][ T5133] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.437019][ T5133] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.447493][ T5133] JBD2: no valid journal superblock found [ 69.453307][ T5133] EXT4-fs (loop1): Could not load journal inode [ 69.485036][ T5139] loop3: detected capacity change from 0 to 512 [ 69.499842][ T5139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.531744][ T5139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5139 comm=syz.3.481 [ 70.146634][ T5150] ================================================================== [ 70.154763][ T5150] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 70.162886][ T5150] [ 70.165218][ T5150] write to 0xffff88811a2b53a8 of 8 bytes by task 5139 on cpu 0: [ 70.172868][ T5150] filemap_splice_read+0x47e/0x6b0 [ 70.177996][ T5150] ext4_file_splice_read+0x8f/0xb0 [ 70.183134][ T5150] splice_direct_to_actor+0x26f/0x680 [ 70.188518][ T5150] do_splice_direct+0xda/0x150 [ 70.193309][ T5150] do_sendfile+0x380/0x650 [ 70.197737][ T5150] __x64_sys_sendfile64+0x105/0x150 [ 70.202954][ T5150] x64_sys_call+0x2bb0/0x2ff0 [ 70.207652][ T5150] do_syscall_64+0xd2/0x200 [ 70.212178][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.218092][ T5150] [ 70.220429][ T5150] write to 0xffff88811a2b53a8 of 8 bytes by task 5150 on cpu 1: [ 70.228514][ T5150] filemap_splice_read+0x47e/0x6b0 [ 70.233666][ T5150] ext4_file_splice_read+0x8f/0xb0 [ 70.238804][ T5150] splice_direct_to_actor+0x26f/0x680 [ 70.244183][ T5150] do_splice_direct+0xda/0x150 [ 70.248967][ T5150] do_sendfile+0x380/0x650 [ 70.253402][ T5150] __x64_sys_sendfile64+0x105/0x150 [ 70.258619][ T5150] x64_sys_call+0x2bb0/0x2ff0 [ 70.263305][ T5150] do_syscall_64+0xd2/0x200 [ 70.267822][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.273722][ T5150] [ 70.276045][ T5150] value changed: 0x00000000000005aa -> 0x00000000000005ab [ 70.283151][ T5150] [ 70.285481][ T5150] Reported by Kernel Concurrency Sanitizer on: [ 70.291634][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: syz.3.481 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 70.303644][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.313708][ T5150] ================================================================== [ 70.391417][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.