last executing test programs: 9.091812822s ago: executing program 2 (id=945): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@sysvgroups}, {@dioread_nolock}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000040)) 9.003852883s ago: executing program 2 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, 0x0) r2 = accept4(r0, &(0x7f00000002c0)=@ethernet={0x0, @multicast}, &(0x7f0000000100)=0x80, 0x80000) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @private=0xa010101}, 0x10) r3 = memfd_create(&(0x7f0000000c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x01\x00\x00\x00.\xd4\xee\xbb\b\x85c\xc0G$hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\xe9c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\b\x00\x00\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\a\x00\x00\x00,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r9 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) ptrace$pokeuser(0x6, r9, 0x358, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.919857121s ago: executing program 2 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec7, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.575769757s ago: executing program 2 (id=969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x8}, 0xc) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r6) r7 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000d000200000014000200626f"], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="270e28bd7032eb9f5500000000000406f700"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x83c2}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000300)=""/173, &(0x7f0000000200)=0xad) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ftruncate(r8, 0x5) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r9, 0x0, 0x46) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e23, 0x3, @remote, 0x2}, @in6={0xa, 0x4e24, 0x6, @private0, 0x727}], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.575415247s ago: executing program 32 (id=969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x8}, 0xc) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r6) r7 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000d000200000014000200626f"], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="270e28bd7032eb9f5500000000000406f700"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x83c2}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000300)=""/173, &(0x7f0000000200)=0xad) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ftruncate(r8, 0x5) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r9, 0x0, 0x46) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e23, 0x3, @remote, 0x2}, @in6={0xa, 0x4e24, 0x6, @private0, 0x727}], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.809481518s ago: executing program 4 (id=987): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) 3.441549994s ago: executing program 4 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@sysvgroups}, {@dioread_nolock}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000040)) 3.219077988s ago: executing program 4 (id=994): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r2, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x1, 0x1}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0xf8, 0xdae, 0x5e, @loopback, @remote, 0x40, 0x80, 0x1ff, 0xe47b}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) (fail_nth: 8) 2.611500187s ago: executing program 4 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@empty, 0x62}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76a", 0x9f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d02", 0x5}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde", 0x35}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c", 0x17a}], 0x3}}], 0x2, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB=':'], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df121150e783b23a561aaa55466e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.203290354s ago: executing program 1 (id=1003): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540), 0x0, 0x1d, &(0x7f0000000580)=[{}, {}], 0x10, 0x5, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000010240), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000e000000020000000000000000000013040000000000"], 0x0, 0x26}, 0x20) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000e000000020000000000000000000013040000000000"], 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000640), &(0x7f0000000f80)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000640), &(0x7f0000000f80)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="11f1b202181bb61d549a86d8fe2cdcff7dc4f7c5fba5547242df1bfaa9a8283391fe8c8e3d44c5d3466d19219794931725069623", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES32=r6, @ANYRES16=r7], 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="11f1b202181bb61d549a86d8fe2cdcff7dc4f7c5fba5547242df1bfaa9a8283391fe8c8e3d44c5d3466d19219794931725069623", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES32=r6, @ANYRES16=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000029d80119a3c96a89e585000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r13, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000003c0)) (async) timer_settime(r13, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x3}, 0x18) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000380)) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000380)) 2.066750937s ago: executing program 0 (id=1006): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='f2fs_gc_end\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100010004000000040000040900000000000000aa57268ba20851cd79822464725e87d4153a5f7a817fbb0e9297f8193867dd6e232038821335869b47e250c4441c7384b9fee9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) personality(0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) socket$inet6(0xa, 0x3, 0x4) socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000100), 0xfd, 0x4a5, &(0x7f0000000e00)="$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") sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddf2500000000c522b325c177e8ade0f70839f78a5e50da6614d0d5280a66045e37ee07f3783c94e9a98a2c610443caf87dd2f63c216cd5bc39511b39028e005d36feaaae63e12af065b60f83d5ae22a6f5bd0a1c1d44ea1f6af04b94053d080000005d721fa49ea4fb02d3910cf694c7d13a0156684151f87e493a8837c8330d392779f97ab68b6d31ea5971926065bc4b13cbaf41fd62f210dcf722d9d61ba9b0221c40c308bba6145a9568a5efd1676cbdcdf5b6bae77d0e98b4ae133f9bc5a62ac0528367be39123b34922258814f72cf3f67e0d437f5febce8423338bc5eeab3200233b47f87cb9f2f39c4292e02258167ad7998bccd72201fda0831a6811eac588d28742c2e565009aefdd93a0d26f11a0000000000000000", @ANYRES32=r5, @ANYBLOB="8155010001000400"], 0xfffffffffffffdeb}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.915953709s ago: executing program 3 (id=1007): syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 1.915536839s ago: executing program 1 (id=1008): timer_create(0x0, &(0x7f0000000280)={0x0, 0x19, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000004c0)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) removexattr(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 1.820006141s ago: executing program 3 (id=1009): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x2, 0x0, 0x1, 0x0}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000280)=""/121) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 1.749597722s ago: executing program 1 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@sysvgroups}, {@dioread_nolock}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000040)) 1.479578786s ago: executing program 3 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) 1.414884567s ago: executing program 3 (id=1012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f00000004c0)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x4) 1.404034337s ago: executing program 4 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x34, 0x18, &(0x7f0000000200)="3996e813af455c52331711f29e4b5d049804c1cb8f63dc729308a727a929a39ad4497a433ceb4c4e1dc3eaeedc7df2933b4a64ca", &(0x7f0000000240)=""/24, 0x9, 0x0, 0x1000, 0xd1, &(0x7f0000000a00)="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", &(0x7f0000000280)="7c684f49cb57119a785796101771dacc2e6d06b8ea80ff38f67084ca9c05401dd1ef90ee0d2fda2454c4ad75f05e0b336f9c80c2235db953ccb4539e7dbe9d0e44c489bdfd22f8ff238e12fb809530446851087d3167796455bd4537820dfa30fd4e4a7bb4ee0e2d217f17f6be3f337c5d1519cfac1e1e7c30623c29e4dd152359ab85395c80aea87292529f8ee25fa6e6468d8f799bfd9758a14272df666faa8d1a25d6a6cdf841f3d07f6312b2cfda648cbe88f59d34eb1dfbc4ed86825071832f07b7ed3fa89614e9a5b9ae51bb1cd4", 0x6, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 1.402736567s ago: executing program 1 (id=1014): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 1.326854128s ago: executing program 3 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000028c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) setrlimit(0x7, &(0x7f00000000c0)={0x5, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d30000000000000400016803c0001800c0003"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.288623839s ago: executing program 1 (id=1016): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) fsync(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010040000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000"], 0x1a0}}, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f00000000c0)={0x4, 0x9669, 0x2000, 0x4, 0x20000000, 0xa, 0x2401}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000007e623084413314c0b60402a3b01e18ec9c7d43f2d55fef1c27a31d3387c69ef35cd8656997d5b10af0f1a2d25a22e19899aaaf8e3f636977f67619048799bb5129a689d290e4ffeb055a2e89e75f0ba760e65bfe55117ee7bcc62a8a3c232b1a657f26509340029d419ae904b6b9de942e8c6374e4450cb7edd7cd3d6ea84e83ad9acfc124795efc893d856ce3d4e181a2c2d61f5514af1bab82cec82172bfb49c078fe7fe798998980f01891e61e2f8809c0862812bbc77fc0d669cc5edbb71dea2dedd49f0d98c71a499a5cf8236ee8b58b6231fef3931ade6d7dc011643d6", @ANYRES16=r6, @ANYBLOB="db3c25bd7000fedbdf25070000001c00018008000700", @ANYRES32=0x0, @ANYBLOB="08000300ac1414bb0600010002000000"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x402c840) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc085}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x18) setgroups(0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.274682569s ago: executing program 0 (id=1017): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x48) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xefffffff, 0x30}, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) (async) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0xfff, 0x0}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) (async, rerun: 64) syz_open_pts(r4, 0x141601) (async, rerun: 64) timer_settime(0x0, 0x0, 0x0, 0x0) (async) inotify_init() (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x0) (async, rerun: 32) shutdown(r0, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r6}, 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) (async) recvmmsg(r8, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/227, 0xe3}, 0x7}], 0x1, 0x10100, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x100000000000000) 1.051979853s ago: executing program 0 (id=1018): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000001280)="$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") (fail_nth: 23) 769.145268ms ago: executing program 0 (id=1019): timer_create(0x0, &(0x7f0000000280)={0x0, 0x19, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000004c0)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) removexattr(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 669.035599ms ago: executing program 0 (id=1020): rt_sigaction(0x8, 0x0, 0x0, 0xffffffffffffff08, &(0x7f0000000440)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x749080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000040)=""/1) socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x41ed, &(0x7f0000000580)={0x0, 0xf541, 0x40, 0x0, 0xc8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000600)=0xd161, 0x0, 0x4) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x1, 0x9, 0x2, 0x600000}]}) tkill(0x0, 0xffffeffa) 640.14827ms ago: executing program 1 (id=1021): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x2, 0x0, 0x1, 0x0}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000280)=""/121) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 316.924085ms ago: executing program 4 (id=1022): write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @empty, @local}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) 315.813135ms ago: executing program 0 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@empty, 0x62}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76a", 0x9f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d02", 0x5}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde", 0x35}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c", 0x17a}], 0x3}}], 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB=':'], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df121150e783b23a561aaa55466e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 191.987547ms ago: executing program 3 (id=1024): setuid(0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x1ff, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 0s ago: executing program 5 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x401, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_config_ext={0x8c70, 0xa6d6}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x8, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x9fff, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x7fc000000000000, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x1ffe3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): permissive=1 [ 83.360485][ T29] audit: type=1400 audit(1753552472.836:6836): avc: denied { create } for pid=5112 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.384781][ T29] audit: type=1400 audit(1753552472.836:6837): avc: denied { bind } for pid=5112 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.406824][ T29] audit: type=1400 audit(1753552472.836:6838): avc: denied { create } for pid=5112 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.428439][ T29] audit: type=1400 audit(1753552472.836:6839): avc: denied { write } for pid=5112 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.450008][ T29] audit: type=1400 audit(1753552472.856:6840): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.462505][ T5118] loop2: detected capacity change from 0 to 1024 [ 83.476749][ T29] audit: type=1400 audit(1753552472.856:6841): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.511720][ T29] audit: type=1400 audit(1753552472.856:6842): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.541660][ T29] audit: type=1400 audit(1753552472.866:6843): avc: denied { map_create } for pid=5114 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.565938][ T5118] EXT4-fs: Ignoring removed nobh option [ 83.573146][ T5118] EXT4-fs: Ignoring removed bh option [ 83.580446][ T5118] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 83.631040][ T5118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.654984][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 83.671956][ T5118] xt_HMARK: proto mask must be zero with L3 mode [ 83.718038][ T5128] IPv6: Can't replace route, no match found [ 83.771088][ T5128] 9pnet_fd: Insufficient options for proto=fd [ 83.852359][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.877858][ T5141] loop4: detected capacity change from 0 to 1024 [ 83.880280][ T5140] loop3: detected capacity change from 0 to 128 [ 83.896728][ T5141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.915504][ T5140] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.954614][ T5140] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.955395][ T5145] loop2: detected capacity change from 0 to 256 [ 83.979850][ T5145] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.007300][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.042082][ T5149] loop1: detected capacity change from 0 to 1024 [ 84.050886][ T5149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.050900][ T5141] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 84.050923][ T5141] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 84.112830][ T5149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.164203][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.219604][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.292855][ T5164] nfs4: Bad value for 'source' [ 84.352627][ T5170] tipc: Enabling of bearer rejected, failed to enable media [ 84.375593][ T5171] rdma_op ffff88811e714d80 conn xmit_rdma 0000000000000000 [ 84.433434][ T5173] loop2: detected capacity change from 0 to 512 [ 84.445091][ T5175] loop4: detected capacity change from 0 to 7 [ 84.453976][ T5173] EXT4-fs: Ignoring removed nobh option [ 84.461833][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.471945][ C0] buffer_io_error: 21 callbacks suppressed [ 84.471973][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.488095][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.498984][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.508614][ T5175] loop4: unable to read partition table [ 84.519565][ T5173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.533866][ T5175] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 84.590661][ T5175] SELinux: failed to load policy [ 84.643249][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.723578][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.789806][ T5194] loop1: detected capacity change from 0 to 128 [ 84.812844][ T5194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.875625][ T5199] x_tables: unsorted entry at hook 2 [ 84.929078][ T5201] loop3: detected capacity change from 0 to 1024 [ 84.938923][ T5201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.960975][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 84.975603][ T5194] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.992270][ T5201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.001792][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.017013][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.062458][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.143543][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.158563][ T5209] tipc: Started in network mode [ 85.163815][ T5209] tipc: Node identity ac14140f, cluster identity 4711 [ 85.200123][ T5209] tipc: New replicast peer: 255.255.255.83 [ 85.206972][ T5209] tipc: Enabled bearer , priority 10 [ 85.218410][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 85.239101][ T5210] loop2: detected capacity change from 0 to 1024 [ 85.250543][ T5210] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.263488][ T5210] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.279224][ T5215] loop3: detected capacity change from 0 to 512 [ 85.283441][ T5210] JBD2: no valid journal superblock found [ 85.292300][ T5210] EXT4-fs (loop2): Could not load journal inode [ 85.306794][ T5215] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 85.366773][ T5215] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.374210][ T5215] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.515: bad orphan inode 15 [ 85.386301][ T5215] ext4_test_bit(bit=14, block=18) = 1 [ 85.392932][ T5215] is_bad_inode(inode)=0 [ 85.397691][ T5215] NEXT_ORPHAN(inode)=1023 [ 85.403019][ T5215] max_ino=32 [ 85.407363][ T5215] i_nlink=0 [ 85.412940][ T5215] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.515: corrupted xattr block 19: e_value size too large [ 85.434912][ T5215] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 85.446683][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.531872][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 85.584889][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.650083][ T5241] loop0: detected capacity change from 0 to 512 [ 85.661076][ T5241] EXT4-fs: Ignoring removed i_version option [ 85.670716][ T5241] EXT4-fs: Mount option(s) incompatible with ext3 [ 85.702008][ T5247] loop4: detected capacity change from 0 to 128 [ 85.746572][ T5247] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.768876][ T5247] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.798790][ T5254] loop3: detected capacity change from 0 to 2048 [ 85.808051][ T5254] ext3: Unknown parameter 'obj_role' [ 85.880302][ T5254] siw: device registration error -23 [ 85.882353][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.916810][ T5258] all: renamed from lo (while UP) [ 85.997469][ T5266] loop1: detected capacity change from 0 to 1024 [ 86.029295][ T5269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5269 comm=syz.0.531 [ 86.055609][ T5266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.094210][ T5266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5266 comm=syz.1.532 [ 86.108427][ T5266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5266 comm=syz.1.532 [ 86.142017][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 86.151941][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 86.173039][ T5266] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.532: Allocating blocks 385-513 which overlap fs metadata [ 86.209482][ T5266] EXT4-fs (loop1): pa ffff8881069db0e0: logic 16, phys. 129, len 24 [ 86.211704][ T5277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.534'. [ 86.218920][ T5266] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 86.268429][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.345418][ T10] tipc: Node number set to 2886997007 [ 86.393033][ T5283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 86.436582][ T5287] loop2: detected capacity change from 0 to 128 [ 86.453368][ T5287] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.566600][ T5292] loop1: detected capacity change from 0 to 2048 [ 86.579636][ T5292] ext3: Unknown parameter 'obj_role' [ 86.674839][ T5300] vxcan1: entered allmulticast mode [ 86.726295][ T5306] can0: slcan on ttyS3. [ 86.739204][ T5295] capability: warning: `syz.3.542' uses deprecated v2 capabilities in a way that may be insecure [ 86.753829][ T5295] loop3: detected capacity change from 0 to 1024 [ 86.759515][ T5304] SELinux: syz.2.544 (5304) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.761014][ T5304] cgroup: noprefix used incorrectly [ 86.824153][ T5306] can0 (unregistered): slcan off ttyS3. [ 86.831492][ T5306] Falling back ldisc for ttyS3. [ 86.926886][ T5313] loop3: detected capacity change from 0 to 1024 [ 86.936515][ T5314] bond0: entered promiscuous mode [ 86.941627][ T5314] bond0: entered allmulticast mode [ 86.963615][ T5313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.975161][ T5314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.995069][ T5322] loop0: detected capacity change from 0 to 128 [ 87.006452][ T5314] bond0 (unregistering): Released all slaves [ 87.006680][ T5322] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.016171][ T5325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'. [ 87.116443][ T5328] loop0: detected capacity change from 0 to 1024 [ 87.129171][ T5328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.201567][ T5333] loop4: detected capacity change from 0 to 2048 [ 87.212455][ T5335] FAULT_INJECTION: forcing a failure. [ 87.212455][ T5335] name failslab, interval 1, probability 0, space 0, times 0 [ 87.214619][ T5333] ext3: Unknown parameter 'obj_role' [ 87.227148][ T5335] CPU: 1 UID: 0 PID: 5335 Comm: syz.2.556 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 87.227192][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.227252][ T5335] Call Trace: [ 87.227262][ T5335] [ 87.227272][ T5335] __dump_stack+0x1d/0x30 [ 87.227303][ T5335] dump_stack_lvl+0xe8/0x140 [ 87.227343][ T5335] dump_stack+0x15/0x1b [ 87.227441][ T5335] should_fail_ex+0x265/0x280 [ 87.227486][ T5335] should_failslab+0x8c/0xb0 [ 87.227517][ T5335] kmem_cache_alloc_noprof+0x50/0x310 [ 87.227551][ T5335] ? security_inode_alloc+0x37/0x100 [ 87.227651][ T5335] security_inode_alloc+0x37/0x100 [ 87.227753][ T5335] inode_init_always_gfp+0x4b7/0x500 [ 87.227800][ T5335] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 87.227918][ T5335] alloc_inode+0x58/0x170 [ 87.227960][ T5335] new_inode+0x1d/0xe0 [ 87.227985][ T5335] shmem_get_inode+0x244/0x750 [ 87.228032][ T5335] shmem_mknod+0x46/0x180 [ 87.228110][ T5335] vfs_mknod+0x2cb/0x310 [ 87.228216][ T5335] unix_bind+0x321/0x920 [ 87.228283][ T5335] __sys_bind+0x1d1/0x2a0 [ 87.228383][ T5335] __x64_sys_bind+0x3f/0x50 [ 87.228409][ T5335] x64_sys_call+0x2086/0x2fb0 [ 87.228438][ T5335] do_syscall_64+0xd2/0x200 [ 87.228463][ T5335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.228499][ T5335] ? clear_bhb_loop+0x40/0x90 [ 87.228554][ T5335] ? clear_bhb_loop+0x40/0x90 [ 87.228584][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.228613][ T5335] RIP: 0033:0x7ff50ee2e9a9 [ 87.228636][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.228660][ T5335] RSP: 002b:00007ff50d48f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 87.228725][ T5335] RAX: ffffffffffffffda RBX: 00007ff50f055fa0 RCX: 00007ff50ee2e9a9 [ 87.228742][ T5335] RDX: 000000000000006e RSI: 00002000000007c0 RDI: 0000000000000006 [ 87.228757][ T5335] RBP: 00007ff50d48f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.228774][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.228791][ T5335] R13: 0000000000000000 R14: 00007ff50f055fa0 R15: 00007ffe6615db88 [ 87.228817][ T5335] [ 87.503533][ T5341] loop0: detected capacity change from 0 to 164 [ 87.512423][ T5333] siw: device registration error -23 [ 87.586475][ T5341] rock: directory entry would overflow storage [ 87.593520][ T5341] rock: sig=0x4f50, size=4, remaining=3 [ 87.599805][ T5341] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 87.701024][ T5343] loop3: detected capacity change from 0 to 8192 [ 87.763780][ T5354] loop4: detected capacity change from 0 to 128 [ 87.795292][ T5354] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.818724][ T5355] loop0: detected capacity change from 0 to 1024 [ 87.847769][ T5355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.975476][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 88.027210][ T5367] loop4: detected capacity change from 0 to 512 [ 88.115770][ T5367] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.568: casefold flag without casefold feature [ 88.152718][ T5367] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.568: couldn't read orphan inode 15 (err -117) [ 88.240053][ T5364] pim6reg1: entered promiscuous mode [ 88.245824][ T5364] pim6reg1: entered allmulticast mode [ 88.254811][ T5379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 88.289818][ T5381] loop0: detected capacity change from 0 to 2048 [ 88.334737][ T5381] loop0: p3 p4 < > [ 88.343952][ T29] kauditd_printk_skb: 1919 callbacks suppressed [ 88.343970][ T29] audit: type=1400 audit(1753552477.866:8763): avc: denied { create } for pid=5377 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.355507][ T5382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.371855][ T29] audit: type=1400 audit(1753552477.866:8764): avc: denied { map_create } for pid=5377 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.402275][ T5381] loop0: p3 size 57344 extends beyond EOD, truncated [ 88.406420][ T29] audit: type=1400 audit(1753552477.936:8765): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.432426][ T29] audit: type=1400 audit(1753552477.936:8766): avc: denied { create } for pid=5376 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.462154][ T29] audit: type=1400 audit(1753552477.986:8767): avc: denied { prog_load } for pid=5380 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.483311][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 88.494438][ T29] audit: type=1400 audit(1753552477.986:8768): avc: denied { bpf } for pid=5380 comm="syz.0.574" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.518951][ T29] audit: type=1400 audit(1753552477.986:8769): avc: denied { perfmon } for pid=5380 comm="syz.0.574" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.541610][ T29] audit: type=1400 audit(1753552477.986:8770): avc: denied { prog_run } for pid=5380 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.563592][ T29] audit: type=1400 audit(1753552477.986:8771): avc: denied { read write } for pid=5377 comm="syz.2.573" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.592083][ T29] audit: type=1400 audit(1753552477.986:8772): avc: denied { open } for pid=5377 comm="syz.2.573" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.646484][ T5386] loop4: detected capacity change from 0 to 1024 [ 88.827264][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 88.883379][ T5401] loop4: detected capacity change from 0 to 1024 [ 88.892318][ T5401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.091471][ T5415] loop1: detected capacity change from 0 to 2048 [ 89.110171][ T5415] ext3: Unknown parameter 'obj_role' [ 89.453635][ T5436] loop0: detected capacity change from 0 to 128 [ 89.512151][ T5436] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.592348][ T5442] loop1: detected capacity change from 0 to 128 [ 89.654512][ T5442] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.705095][ T5444] loop4: detected capacity change from 0 to 8192 [ 90.053010][ T5465] loop4: detected capacity change from 0 to 512 [ 90.079605][ T5465] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.118075][ T5465] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.128671][ T5466] loop0: detected capacity change from 0 to 2048 [ 90.177534][ T5466] ext3: Unknown parameter 'obj_role' [ 90.188687][ T5465] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.600: Failed to acquire dquot type 1 [ 90.210208][ T5465] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.600: bg 0: block 40: padding at end of block bitmap is not set [ 90.236243][ T5466] siw: device registration error -23 [ 90.263436][ T5465] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 90.302000][ T5479] loop3: detected capacity change from 0 to 128 [ 90.326371][ T5465] EXT4-fs (loop4): 1 truncate cleaned up [ 90.338282][ T5479] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.474039][ T5486] loop2: detected capacity change from 0 to 164 [ 90.522946][ T5492] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 90.523455][ T5486] netlink: 'syz.2.610': attribute type 28 has an invalid length. [ 90.538359][ T5465] lo speed is unknown, defaulting to 1000 [ 90.539899][ T5486] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.794322][ T5507] netlink: set zone limit has 4 unknown bytes [ 90.810109][ T5507] __nla_validate_parse: 3 callbacks suppressed [ 90.810134][ T5507] netlink: 7 bytes leftover after parsing attributes in process `syz.3.616'. [ 90.920955][ T5513] loop1: detected capacity change from 0 to 2048 [ 90.940672][ T5513] ext3: Unknown parameter 'obj_role' [ 90.970092][ T5507] netlink: 7 bytes leftover after parsing attributes in process `syz.3.616'. [ 91.304009][ T5519] loop3: detected capacity change from 0 to 512 [ 91.422411][ T5518] lo speed is unknown, defaulting to 1000 [ 91.566062][ T5519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.618: bg 0: block 16: invalid block bitmap [ 91.639352][ T5516] lo speed is unknown, defaulting to 1000 [ 91.659012][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 91.681038][ T5519] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 91.699930][ T5519] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.618: invalid indirect mapped block 5 (level 0) [ 91.745207][ T5519] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.618: invalid indirect mapped block 4294967295 (level 1) [ 91.910742][ T5545] loop4: detected capacity change from 0 to 512 [ 91.919448][ T5519] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.618: invalid indirect mapped block 4294967295 (level 2) [ 91.966268][ T5545] EXT4-fs (loop4): invalid inodes per group: 0 [ 91.966268][ T5545] [ 92.017989][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'. [ 92.079512][ T5519] EXT4-fs (loop3): 1 truncate cleaned up [ 92.196610][ T5549] loop4: detected capacity change from 0 to 128 [ 92.229076][ T5549] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.308053][ T5556] loop0: detected capacity change from 0 to 2048 [ 92.321226][ T5556] ext3: Unknown parameter 'obj_role' [ 92.377452][ T5551] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.406735][ T5556] siw: device registration error -23 [ 92.503637][ T5560] loop4: detected capacity change from 0 to 8192 [ 92.509516][ T5566] loop3: detected capacity change from 0 to 1024 [ 92.532470][ T5566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.560629][ T5560] loop4: p2 p3 p4 [ 92.577489][ T5560] loop4: p2 start 2936012800 is beyond EOD, truncated [ 92.584778][ T5560] loop4: p3 start 1912602624 is beyond EOD, truncated [ 92.592079][ T5560] loop4: p4 size 656640 extends beyond EOD, truncated [ 92.616495][ T5573] IPv6: NLM_F_REPLACE set, but no existing node found! [ 92.952033][ T5587] loop3: detected capacity change from 0 to 128 [ 92.963893][ T5587] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.982434][ T5585] FAULT_INJECTION: forcing a failure. [ 92.982434][ T5585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.996578][ T5585] CPU: 1 UID: 0 PID: 5585 Comm: syz.2.640 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 92.996654][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.996669][ T5585] Call Trace: [ 92.996678][ T5585] [ 92.996687][ T5585] __dump_stack+0x1d/0x30 [ 92.996710][ T5585] dump_stack_lvl+0xe8/0x140 [ 92.996728][ T5585] dump_stack+0x15/0x1b [ 92.996744][ T5585] should_fail_ex+0x265/0x280 [ 92.996799][ T5585] should_fail+0xb/0x20 [ 92.996842][ T5585] should_fail_usercopy+0x1a/0x20 [ 92.996875][ T5585] _copy_to_iter+0x24b/0xe30 [ 92.996915][ T5585] ? __list_add_valid_or_report+0x38/0xe0 [ 92.997019][ T5585] ? __set_next_task_fair+0x5b/0x150 [ 92.997047][ T5585] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 92.997094][ T5585] ? _raw_spin_unlock+0x26/0x50 [ 92.997133][ T5585] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 92.997153][ T5585] __skb_datagram_iter+0x2f4/0x690 [ 92.997172][ T5585] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 92.997268][ T5585] skb_copy_datagram_iter+0x3d/0x110 [ 92.997294][ T5585] unix_stream_read_actor+0x43/0x70 [ 92.997324][ T5585] unix_stream_read_generic+0x65e/0x13a0 [ 92.997356][ T5585] ? __pfx_autoremove_wake_function+0x10/0x10 [ 92.997473][ T5585] unix_stream_recvmsg+0xc3/0xf0 [ 92.997504][ T5585] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 92.997537][ T5585] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 92.997611][ T5585] sock_recvmsg+0x139/0x170 [ 92.997643][ T5585] ____sys_recvmsg+0xf5/0x280 [ 92.997676][ T5585] ___sys_recvmsg+0x11f/0x370 [ 92.997713][ T5585] do_recvmmsg+0x1ef/0x540 [ 92.997751][ T5585] ? __traceiter_sys_enter+0x5c/0x80 [ 92.997798][ T5585] __x64_sys_recvmmsg+0xe5/0x170 [ 92.997826][ T5585] x64_sys_call+0x1c6a/0x2fb0 [ 92.997853][ T5585] do_syscall_64+0xd2/0x200 [ 92.998104][ T5585] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.998150][ T5585] ? clear_bhb_loop+0x40/0x90 [ 92.998197][ T5585] ? clear_bhb_loop+0x40/0x90 [ 92.998267][ T5585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.998295][ T5585] RIP: 0033:0x7ff50ee2e9a9 [ 92.998315][ T5585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.998340][ T5585] RSP: 002b:00007ff50d48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 92.998389][ T5585] RAX: ffffffffffffffda RBX: 00007ff50f055fa0 RCX: 00007ff50ee2e9a9 [ 92.998407][ T5585] RDX: 040000000000013c RSI: 00002000000034c0 RDI: 0000000000000005 [ 92.998423][ T5585] RBP: 00007ff50d48f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.998440][ T5585] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000002 [ 92.998456][ T5585] R13: 0000000000000000 R14: 00007ff50f055fa0 R15: 00007ffe6615db88 [ 92.998483][ T5585] [ 93.354084][ T29] kauditd_printk_skb: 1443 callbacks suppressed [ 93.354103][ T29] audit: type=1326 audit(1753552482.886:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.399192][ T29] audit: type=1326 audit(1753552482.886:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.425229][ T29] audit: type=1326 audit(1753552482.886:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.454321][ T29] audit: type=1326 audit(1753552482.886:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.480690][ T29] audit: type=1326 audit(1753552482.886:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.505665][ T29] audit: type=1326 audit(1753552482.886:10219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.530269][ T29] audit: type=1326 audit(1753552482.886:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.555809][ T29] audit: type=1326 audit(1753552482.886:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.581934][ T29] audit: type=1326 audit(1753552482.886:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.607094][ T29] audit: type=1326 audit(1753552482.886:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56f59e9a9 code=0x7ffc0000 [ 93.711068][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 93.856005][ T5602] loop2: detected capacity change from 0 to 1024 [ 93.884770][ T5602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.911743][ T5606] IPVS: Error connecting to the multicast addr [ 93.966816][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 94.515877][ T5623] loop2: detected capacity change from 0 to 1024 [ 94.720577][ T5621] loop1: detected capacity change from 0 to 1024 [ 94.898427][ T5621] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.376797][ T5635] loop4: detected capacity change from 0 to 128 [ 95.389340][ T5635] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.551783][ T5642] loop3: detected capacity change from 0 to 1024 [ 95.574801][ T5642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.618192][ T5644] loop0: detected capacity change from 0 to 128 [ 95.637510][ T5644] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.651648][ T5644] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.863122][ T5671] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 97.107671][ T5676] loop0: detected capacity change from 0 to 128 [ 97.157626][ T5676] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.331116][ T5683] loop0: detected capacity change from 0 to 1024 [ 97.339628][ T5683] EXT4-fs: Ignoring removed orlov option [ 97.368081][ T5683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.674: bg 0: block 427: padding at end of block bitmap is not set [ 97.390554][ T5683] EXT4-fs (loop0): Remounting filesystem read-only [ 97.397750][ T5683] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.0.674: cleanup dec ref error -117 [ 97.428296][ T5687] loop2: detected capacity change from 0 to 1024 [ 97.439254][ T5687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.816005][ T5706] loop0: detected capacity change from 0 to 128 [ 97.920175][ T5706] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.373745][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 98.373760][ T29] audit: type=1400 audit(1753552487.896:11017): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.404778][ T29] audit: type=1400 audit(1753552487.896:11018): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.433302][ T29] audit: type=1400 audit(1753552487.966:11019): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.470709][ T29] audit: type=1400 audit(1753552487.996:11020): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.495580][ T29] audit: type=1400 audit(1753552487.996:11021): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.521364][ T29] audit: type=1400 audit(1753552487.996:11022): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.572755][ T29] audit: type=1400 audit(1753552488.076:11023): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.597364][ T29] audit: type=1400 audit(1753552488.076:11024): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.624383][ T29] audit: type=1400 audit(1753552488.076:11025): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.665088][ T29] audit: type=1400 audit(1753552488.126:11026): avc: denied { create } for pid=5717 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.747574][ T5721] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 98.802367][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 98.856391][ T5733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 98.912255][ T5736] SELinux: Context '8z@«üç [ 98.912255][ T5736] is not valid (left unmapped). [ 98.926632][ T5728] loop4: detected capacity change from 0 to 1024 [ 98.935123][ T5736] SELinux: Context ›Y7»ôj [ 98.935123][ T5736] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 98.935123][ T5736] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 98.983052][ T5728] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 99.006187][ T5728] rdma_rxe: rxe_newlink: failed to add syz_tun [ 99.015974][ T5736] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 99.029005][ T5736] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 99.130123][ T5736] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 99.156274][ T5736] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZðeoÄìáþQ[aSêáI>$YiLÿ.([ P¶ûô%U.T8†}zK/7ä“o©¦Ógç¥Wìf$Ž¨ÿC%{}9¡Ó঴@yòoíP½íß'Çbßì9Z -ƒœS”èkª6¶1E®A[TË<; is not valid (left unmapped). [ 99.162276][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.194970][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.243378][ T5750] loop2: detected capacity change from 0 to 128 [ 99.251344][ T5742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.293036][ T5750] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.307446][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.315157][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.322467][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.346312][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.355770][ T5742] dummy0 speed is unknown, defaulting to 1000 [ 99.476390][ T5763] pim6reg: left allmulticast mode [ 99.484505][ T5765] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.110737][ T5776] loop3: detected capacity change from 0 to 1024 [ 100.197157][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 100.256190][ T5789] loop0: detected capacity change from 0 to 128 [ 100.293753][ T5790] loop3: detected capacity change from 0 to 8192 [ 100.362025][ T5789] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.565898][ T5800] ------------[ cut here ]------------ [ 100.571823][ T5800] WARNING: CPU: 1 PID: 5800 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 100.582584][ T5800] Modules linked in: [ 100.586728][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz.4.712 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 100.600122][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.610732][ T5800] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 100.618182][ T5800] Code: 83 3d c3 55 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 52 4d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 100.640764][ T5800] RSP: 0018:ffffc900113d3a98 EFLAGS: 00010246 [ 100.647091][ T5800] RAX: 10062feb74823500 RBX: 0000000000000013 RCX: 0000000000000000 [ 100.655936][ T5800] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040dc0 [ 100.664475][ T5800] RBP: 0000000000000dc0 R08: ffff88811a0f8a98 R09: 0000000000000000 [ 100.672975][ T5800] R10: ffff88811ebbac10 R11: 000188811ebbac10 R12: ffffc900113d3d28 [ 100.681459][ T5800] R13: 0000000008010000 R14: 0000000000040dc0 R15: 0000000000000000 [ 100.689912][ T5800] FS: 00007f8fdc9676c0(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 100.700187][ T5800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.707291][ T5800] CR2: 0000200000001000 CR3: 000000011b08a000 CR4: 00000000003506f0 [ 100.716298][ T5800] Call Trace: [ 100.716952][ T5806] loop1: detected capacity change from 0 to 512 [ 100.719841][ T5800] [ 100.719859][ T5800] __alloc_pages_noprof+0x9/0x20 [ 100.736991][ T5800] ___kmalloc_large_node+0x73/0x140 [ 100.742461][ T5800] __kmalloc_large_node_noprof+0x16/0xa0 [ 100.748676][ T5800] __kmalloc_noprof+0x2ab/0x3e0 [ 100.754675][ T5800] ? hashtab_init+0x9b/0xe0 [ 100.759598][ T5800] hashtab_init+0x9b/0xe0 [ 100.764297][ T5800] symtab_init+0x2c/0x40 [ 100.769474][ T5800] policydb_read+0x516/0x1330 [ 100.774259][ T5800] ? security_load_policy+0x90/0x890 [ 100.779835][ T5800] security_load_policy+0xba/0x890 [ 100.785186][ T5800] ? rep_movs_alternative+0x4a/0x90 [ 100.790794][ T5800] sel_write_load+0x1d4/0x380 [ 100.796466][ T5800] ? __pfx_sel_write_load+0x10/0x10 [ 100.801963][ T5800] vfs_write+0x266/0x8e0 [ 100.806392][ T5800] ? __rcu_read_unlock+0x4f/0x70 [ 100.811743][ T5800] ? __fget_files+0x184/0x1c0 [ 100.816767][ T5800] ksys_write+0xda/0x1a0 [ 100.821197][ T5800] __x64_sys_write+0x40/0x50 [ 100.826314][ T5800] x64_sys_call+0x2cdd/0x2fb0 [ 100.831230][ T5800] do_syscall_64+0xd2/0x200 [ 100.836145][ T5800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.842853][ T5800] ? clear_bhb_loop+0x40/0x90 [ 100.847867][ T5800] ? clear_bhb_loop+0x40/0x90 [ 100.853330][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.859738][ T5800] RIP: 0033:0x7f8fde2fe9a9 [ 100.864461][ T5800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.884364][ T5800] RSP: 002b:00007f8fdc967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.892840][ T5800] RAX: ffffffffffffffda RBX: 00007f8fde525fa0 RCX: 00007f8fde2fe9a9 [ 100.901398][ T5800] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 100.909962][ T5800] RBP: 00007f8fde380d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.918654][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.927454][ T5800] R13: 0000000000000000 R14: 00007f8fde525fa0 R15: 00007fff362d8cf8 [ 100.937144][ T5800] [ 100.940786][ T5800] ---[ end trace 0000000000000000 ]--- [ 100.947150][ T5800] SELinux: failed to load policy [ 100.959079][ T5806] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.182683][ T5798] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 101.345252][ T5822] FAULT_INJECTION: forcing a failure. [ 101.345252][ T5822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.361393][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz.3.715 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 101.361502][ T5822] Tainted: [W]=WARN [ 101.361509][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.361576][ T5822] Call Trace: [ 101.361584][ T5822] [ 101.361594][ T5822] __dump_stack+0x1d/0x30 [ 101.361623][ T5822] dump_stack_lvl+0xe8/0x140 [ 101.361648][ T5822] dump_stack+0x15/0x1b [ 101.361669][ T5822] should_fail_ex+0x265/0x280 [ 101.362427][ T5822] should_fail_alloc_page+0xf2/0x100 [ 101.362467][ T5822] __alloc_frozen_pages_noprof+0xff/0x360 [ 101.362511][ T5822] alloc_pages_mpol+0xb3/0x250 [ 101.362589][ T5822] vma_alloc_folio_noprof+0x1aa/0x300 [ 101.362800][ T5822] handle_mm_fault+0xec2/0x2be0 [ 101.362823][ T5822] ? mas_walk+0xf2/0x120 [ 101.362861][ T5822] do_user_addr_fault+0x636/0x1090 [ 101.362905][ T5822] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.362991][ T5822] exc_page_fault+0x62/0xa0 [ 101.363025][ T5822] asm_exc_page_fault+0x26/0x30 [ 101.363049][ T5822] RIP: 0033:0x7f0c624aa3ab [ 101.363065][ T5822] Code: 00 00 00 48 8d 3d 8d 2b 19 00 48 89 c1 31 c0 e8 8b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 2b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 101.363107][ T5822] RSP: 002b:00007f0c60c3dfb0 EFLAGS: 00010202 [ 101.363126][ T5822] RAX: 0000000000000000 RBX: 00007f0c62805fa0 RCX: 0000000000000000 [ 101.363141][ T5822] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000600 [ 101.363157][ T5822] RBP: 00007f0c60c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.363172][ T5822] R10: 0000200000000600 R11: 0000000000000000 R12: 0000000000000001 [ 101.363220][ T5822] R13: 0000000000000000 R14: 00007f0c62805fa0 R15: 00007ffe3eebbdb8 [ 101.363242][ T5822] [ 101.363253][ T5822] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.810345][ T5835] lo speed is unknown, defaulting to 1000 [ 101.848375][ T5835] dummy0 speed is unknown, defaulting to 1000 [ 101.854813][ T5837] loop1: detected capacity change from 0 to 512 [ 102.019704][ T5837] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.723: corrupted xattr block 95: invalid header [ 102.252971][ T5837] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.723: bg 0: block 7: invalid block bitmap [ 102.273071][ T5837] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 102.292296][ T5837] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.723: corrupted xattr block 95: invalid header [ 102.328440][ T5837] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 102.374512][ T5837] EXT4-fs (loop1): 1 orphan inode deleted [ 102.380864][ T5837] EXT4-fs mount: 58 callbacks suppressed [ 102.380934][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.413070][ T5847] lo speed is unknown, defaulting to 1000 [ 102.465543][ T5847] dummy0 speed is unknown, defaulting to 1000 [ 102.506211][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 102.525344][ T5851] loop2: detected capacity change from 0 to 512 [ 102.552175][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.581897][ T5851] EXT4-fs (loop2): 1 orphan inode deleted [ 102.594540][ T1463] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 102.614782][ T5851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.730577][ T5851] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.016117][ T5869] loop1: detected capacity change from 0 to 512 [ 103.048306][ T5869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.062477][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.074551][ T5869] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.135205][ T5869] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.733: corrupted inode contents [ 103.188822][ T5869] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.733: mark_inode_dirty error [ 103.206759][ T5869] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.733: corrupted inode contents [ 103.220317][ T5869] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.733: mark_inode_dirty error [ 103.243550][ T5869] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.733'. [ 103.375922][ T29] kauditd_printk_skb: 1059 callbacks suppressed [ 103.375936][ T29] audit: type=1400 audit(1753552492.906:12083): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.432031][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.443410][ T29] audit: type=1400 audit(1753552492.936:12084): avc: denied { prog_load } for pid=5882 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.463352][ T29] audit: type=1400 audit(1753552492.936:12085): avc: denied { bpf } for pid=5882 comm="+}[@" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.484550][ T29] audit: type=1400 audit(1753552492.936:12086): avc: denied { perfmon } for pid=5882 comm="+}[@" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.505589][ T29] audit: type=1400 audit(1753552492.936:12087): avc: denied { create } for pid=5882 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.525314][ T29] audit: type=1400 audit(1753552492.946:12088): avc: denied { prog_load } for pid=5882 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.545402][ T29] audit: type=1400 audit(1753552492.946:12089): avc: denied { bpf } for pid=5882 comm="+}[@" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.566305][ T29] audit: type=1400 audit(1753552492.946:12090): avc: denied { perfmon } for pid=5882 comm="+}[@" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.587248][ T29] audit: type=1400 audit(1753552492.946:12091): avc: denied { prog_run } for pid=5882 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.606021][ T29] audit: type=1400 audit(1753552492.946:12092): avc: denied { prog_load } for pid=5882 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.751049][ T5893] lo speed is unknown, defaulting to 1000 [ 103.849676][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'. [ 103.876514][ T5905] loop0: detected capacity change from 0 to 512 [ 103.908386][ T5893] dummy0 speed is unknown, defaulting to 1000 [ 104.095184][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.745: bad orphan inode 13 [ 104.266836][ T5905] ext4_test_bit(bit=12, block=4) = 1 [ 104.272489][ T5905] is_bad_inode(inode)=0 [ 104.276748][ T5905] NEXT_ORPHAN(inode)=0 [ 104.280882][ T5905] max_ino=32 [ 104.284154][ T5905] i_nlink=1 [ 104.298770][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.300567][ T5911] loop4: detected capacity change from 0 to 1024 [ 104.302222][ T5911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.313996][ T5911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.321680][ T5905] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.745: Unrecognised inode hash code 20 [ 104.355007][ T5905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.745: Corrupt directory, running e2fsck is recommended [ 104.358355][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.378457][ T5905] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.745: corrupted in-inode xattr: e_value out of bounds [ 104.437346][ T5905] cgroup: No subsys list or none specified [ 104.444755][ T5905] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.745: Unrecognised inode hash code 20 [ 104.448775][ T5922] 9pnet: Could not find request transport: t [ 104.456760][ T5905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.745: Corrupt directory, running e2fsck is recommended [ 104.476868][ T5922] loop2: detected capacity change from 0 to 1024 [ 104.489814][ T5922] EXT4-fs: Ignoring removed bh option [ 104.498804][ T5923] loop4: detected capacity change from 0 to 1024 [ 104.506914][ T5923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.585393][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.597254][ T5922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.615469][ T5923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.660365][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.701111][ T5934] 9pnet: p9_errstr2errno: server reported unknown error  [ 104.744457][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.891963][ T5939] loop2: detected capacity change from 0 to 2048 [ 104.921468][ T5940] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 104.955055][ T5939] loop2: p1 < > p4 [ 104.956430][ T5940] loop4: detected capacity change from 0 to 1024 [ 104.968680][ T5940] EXT4-fs: Ignoring removed orlov option [ 104.974218][ T5939] loop2: p4 size 8388608 extends beyond EOD, truncated [ 104.975142][ T5943] netlink: 'syz.3.755': attribute type 27 has an invalid length. [ 104.998758][ T5940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.283740][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.296370][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.304589][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.312364][ T5949] xt_CT: No such helper "pptp" [ 105.325629][ T5943] $Hÿ: left promiscuous mode [ 105.330543][ T5943] bond_slave_0: left promiscuous mode [ 105.336166][ T5943] bond_slave_1: left promiscuous mode [ 105.367433][ T5943] dummy0: left promiscuous mode [ 105.427512][ T5943] vxcan1: left allmulticast mode [ 105.437338][ T5959] loop4: detected capacity change from 0 to 512 [ 105.487251][ T5959] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.499707][ T5959] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 105.511098][ T5959] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.758: Corrupt directory, running e2fsck is recommended [ 105.544785][ T5959] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 105.561272][ T5943] wg2: left promiscuous mode [ 105.567943][ T5943] wg2: left allmulticast mode [ 105.589436][ T5959] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.758: corrupted in-inode xattr: invalid ea_ino [ 105.616653][ T5959] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.758: couldn't read orphan inode 15 (err -117) [ 105.655910][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.682147][ T5959] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.694500][ T5959] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 105.704843][ T5959] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.758: Corrupt directory, running e2fsck is recommended [ 105.750041][ T5943] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.760231][ T5943] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.766587][ T5977] loop2: detected capacity change from 0 to 128 [ 105.771099][ T5943] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.789906][ T5943] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.805650][ T5943] geneve2: left promiscuous mode [ 105.837262][ T5977] EXT4-fs: Ignoring removed nobh option [ 105.850151][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.869136][ T5977] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.949579][ T5977] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.991659][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 106.060069][ T5977] lo speed is unknown, defaulting to 1000 [ 106.103249][ T5977] dummy0 speed is unknown, defaulting to 1000 [ 106.171311][ T5983] $Hÿ: entered promiscuous mode [ 106.176479][ T5983] bond_slave_0: entered promiscuous mode [ 106.182204][ T5983] bond_slave_1: entered promiscuous mode [ 106.246714][ T5988] loop1: detected capacity change from 0 to 512 [ 106.272936][ T5983] dummy0: entered promiscuous mode [ 106.327740][ T5988] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.762: corrupted xattr block 95: invalid header [ 106.494306][ T5988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.762: bg 0: block 7: invalid block bitmap [ 106.515821][ T5988] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 106.543097][ T5986] lo speed is unknown, defaulting to 1000 [ 106.566942][ T5988] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.762: corrupted xattr block 95: invalid header [ 106.583172][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.589672][ T5986] dummy0 speed is unknown, defaulting to 1000 [ 106.641897][ T5988] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 106.668647][ T5994] loop2: detected capacity change from 0 to 2048 [ 106.679525][ T5988] EXT4-fs (loop1): 1 orphan inode deleted [ 106.688081][ T5991] Driver unsupported XDP return value 0 on prog (id 576) dev N/A, expect packet loss! [ 106.688528][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.722533][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.816171][ T5994] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 106.970915][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.061592][ T6008] loop4: detected capacity change from 0 to 1024 [ 107.098012][ T6008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.126027][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 107.149483][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.246202][ T6014] loop4: detected capacity change from 0 to 512 [ 107.289597][ T6014] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.301770][ T6014] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 107.312671][ T6014] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.771: Corrupt directory, running e2fsck is recommended [ 107.325964][ T6014] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 107.334583][ T6014] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.771: corrupted in-inode xattr: invalid ea_ino [ 107.354033][ T6014] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.771: couldn't read orphan inode 15 (err -117) [ 107.367321][ T6014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.387019][ T6014] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.398576][ T6014] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 107.410712][ T6014] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.771: Corrupt directory, running e2fsck is recommended [ 107.464996][ T5755] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 107.506621][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.530490][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.573259][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.573312][ T6021] xt_CT: No such helper "pptp" [ 107.573368][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 107.573368][ T12] [ 107.600133][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 107.606777][ T12] EXT4-fs (loop2): Free/Dirty block details [ 107.613187][ T12] EXT4-fs (loop2): free_blocks=2415919104 [ 107.619538][ T12] EXT4-fs (loop2): dirty_blocks=6816 [ 107.625803][ T12] EXT4-fs (loop2): Block reservation details [ 107.632098][ T12] EXT4-fs (loop2): i_reserved_data_blocks=426 [ 107.705023][ T6027] loop4: detected capacity change from 0 to 1024 [ 107.728727][ T6027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.759281][ T6027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.763234][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 107.946462][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.137308][ T6043] loop0: detected capacity change from 0 to 512 [ 108.165341][ T6043] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 108.177336][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.783'. [ 108.286381][ T6049] loop4: detected capacity change from 0 to 1024 [ 108.308497][ T6049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.336142][ T6054] loop2: detected capacity change from 0 to 512 [ 108.354771][ T6054] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.367887][ T6054] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 108.378449][ T6054] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.785: Corrupt directory, running e2fsck is recommended [ 108.392730][ T29] kauditd_printk_skb: 892 callbacks suppressed [ 108.392744][ T29] audit: type=1400 audit(1753552497.926:12985): avc: denied { prog_load } for pid=6055 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.421573][ T6057] loop3: detected capacity change from 0 to 2048 [ 108.431251][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.431619][ T6057] ext3: Unknown parameter 'obj_role' [ 108.446122][ T6054] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 108.485200][ T29] audit: type=1400 audit(1753552497.926:12986): avc: denied { bpf } for pid=6055 comm="syz.3.786" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.506473][ T29] audit: type=1400 audit(1753552497.926:12987): avc: denied { perfmon } for pid=6055 comm="syz.3.786" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.527595][ T29] audit: type=1400 audit(1753552497.926:12988): avc: denied { prog_run } for pid=6055 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.546744][ T29] audit: type=1400 audit(1753552497.956:12989): avc: denied { read write } for pid=6055 comm="syz.3.786" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.570924][ T29] audit: type=1400 audit(1753552497.956:12990): avc: denied { open } for pid=6055 comm="syz.3.786" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.576775][ T6054] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.785: corrupted in-inode xattr: invalid ea_ino [ 108.595080][ T29] audit: type=1400 audit(1753552497.956:12991): avc: denied { ioctl } for pid=6055 comm="syz.3.786" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.628581][ T6054] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.785: couldn't read orphan inode 15 (err -117) [ 108.635689][ T29] audit: type=1400 audit(1753552497.956:12992): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.648881][ T6054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.668811][ T29] audit: type=1400 audit(1753552497.956:12993): avc: denied { mounton } for pid=6055 comm="syz.3.786" path="/157/file2" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.668848][ T29] audit: type=1400 audit(1753552497.986:12994): avc: denied { read write } for pid=6055 comm="syz.3.786" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.766164][ T6067] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.773809][ T6054] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.785444][ T6054] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 108.795786][ T6054] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.785: Corrupt directory, running e2fsck is recommended [ 108.798691][ T6070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.809057][ T6067] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 108.873516][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.958406][ T6079] loop2: detected capacity change from 0 to 512 [ 108.977984][ T6079] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 108.999241][ T6084] loop1: detected capacity change from 0 to 512 [ 109.004144][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 109.006840][ T6077] lo speed is unknown, defaulting to 1000 [ 109.048989][ T6084] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.794: corrupted xattr block 95: invalid header [ 109.066708][ T6084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.794: bg 0: block 7: invalid block bitmap [ 109.090478][ T6084] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.099437][ T6077] dummy0 speed is unknown, defaulting to 1000 [ 109.123213][ T6084] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.794: corrupted xattr block 95: invalid header [ 109.141419][ T6084] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 109.159782][ T6084] EXT4-fs (loop1): 1 orphan inode deleted [ 109.166620][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.194217][ T6093] loop2: detected capacity change from 0 to 128 [ 109.215436][ T6093] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.259256][ T6093] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.277398][ T6097] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 109.303336][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.312746][ T6097] team0: Port device hsr_slave_0 added [ 109.320130][ T6082] lo speed is unknown, defaulting to 1000 [ 109.358119][ T6101] loop1: detected capacity change from 0 to 2048 [ 109.377664][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.388974][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.410572][ T6082] dummy0 speed is unknown, defaulting to 1000 [ 109.479106][ T6107] loop2: detected capacity change from 0 to 512 [ 109.531904][ T6112] netlink: 'syz.3.805': attribute type 4 has an invalid length. [ 109.562039][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.802: iget: bad i_size value: 38620345925642 [ 109.598913][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.802: couldn't read orphan inode 15 (err -117) [ 109.670642][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.738423][ T6119] loop4: detected capacity change from 0 to 512 [ 109.747080][ T6119] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 109.753376][ T6107] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 109.801072][ T6107] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.802: bg 0: block 5: invalid block bitmap [ 109.821967][ T6107] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 109.834686][ T6107] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.834686][ T6107] [ 109.844456][ T6107] EXT4-fs (loop2): Total free blocks count 0 [ 109.850584][ T6107] EXT4-fs (loop2): Free/Dirty block details [ 109.856898][ T6107] EXT4-fs (loop2): free_blocks=0 [ 109.862039][ T6107] EXT4-fs (loop2): dirty_blocks=2 [ 109.866481][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 109.867166][ T6107] EXT4-fs (loop2): Block reservation details [ 109.882184][ T6107] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 109.905699][ T6123] bond0: entered promiscuous mode [ 109.911131][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.931504][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'. [ 109.949763][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.959424][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.989258][ T6123] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 110.006151][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.013448][ T6132] IPv6: NLM_F_CREATE should be set when creating new route [ 110.020736][ T6132] IPv6: NLM_F_CREATE should be set when creating new route [ 110.034679][ T6135] loop2: detected capacity change from 0 to 128 [ 110.045223][ T6135] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.051816][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.059645][ T6135] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.075681][ T6123] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 110.120883][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.139720][ T5219] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.155944][ T5219] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.168311][ T5219] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.168311][ T5219] [ 110.178035][ T5219] EXT4-fs (loop1): Total free blocks count 0 [ 110.184089][ T5219] EXT4-fs (loop1): Free/Dirty block details [ 110.190090][ T5219] EXT4-fs (loop1): free_blocks=2415919104 [ 110.196520][ T5219] EXT4-fs (loop1): dirty_blocks=8224 [ 110.202280][ T5219] EXT4-fs (loop1): Block reservation details [ 110.208446][ T5219] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 110.218982][ T5219] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 110.244100][ T6122] lo speed is unknown, defaulting to 1000 [ 110.308449][ T6122] dummy0 speed is unknown, defaulting to 1000 [ 110.362902][ T6146] loop1: detected capacity change from 0 to 1024 [ 110.399114][ T6146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.541490][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.615063][ T6157] lo speed is unknown, defaulting to 1000 [ 110.703882][ T6157] dummy0 speed is unknown, defaulting to 1000 [ 110.816791][ T6170] loop1: detected capacity change from 0 to 512 [ 110.832615][ T6170] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 111.447264][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.828'. [ 111.521935][ T6195] loop1: detected capacity change from 0 to 2048 [ 111.532966][ T6195] ext3: Unknown parameter 'obj_role' [ 111.572443][ T6199] loop4: detected capacity change from 0 to 1024 [ 111.612588][ T6193] lo speed is unknown, defaulting to 1000 [ 111.660375][ T6193] dummy0 speed is unknown, defaulting to 1000 [ 111.660617][ T6199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.698622][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.817286][ T6210] loop2: detected capacity change from 0 to 512 [ 111.840254][ T6210] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 111.913221][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.920867][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.955291][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.962808][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.970355][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.977918][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.985425][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.993003][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.001560][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.010704][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.018350][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.025842][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.087081][ T6219] netlink: 'syz.0.839': attribute type 3 has an invalid length. [ 112.116302][ T6214] wireguard0: entered promiscuous mode [ 112.122271][ T6214] wireguard0: entered allmulticast mode [ 112.535949][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.543433][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.551023][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.558566][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.566089][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.573640][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.581467][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.588961][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.596454][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.603871][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.611758][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.619465][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.627296][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.634839][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.642258][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.764664][ T3370] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 113.143175][ T6247] SELinux: policydb version 647411499 does not match my version range 15-34 [ 113.156579][ T6240] lo speed is unknown, defaulting to 1000 [ 113.164969][ T6247] SELinux: failed to load policy [ 113.169268][ T6249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.849'. [ 113.210103][ T6240] dummy0 speed is unknown, defaulting to 1000 [ 113.356603][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.853'. [ 113.398116][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 113.398217][ T29] audit: type=1400 audit(1753552502.926:14106): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.430903][ T29] audit: type=1400 audit(1753552502.926:14107): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.462888][ T29] audit: type=1400 audit(1753552502.966:14108): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.496739][ T29] audit: type=1400 audit(1753552503.016:14109): avc: denied { prog_load } for pid=6266 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.515958][ T29] audit: type=1400 audit(1753552503.016:14110): avc: denied { bpf } for pid=6266 comm="syz.3.854" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.536815][ T29] audit: type=1400 audit(1753552503.026:14111): avc: denied { create } for pid=6260 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.559148][ T29] audit: type=1400 audit(1753552503.056:14112): avc: denied { perfmon } for pid=6266 comm="syz.3.854" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.573878][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.852'. [ 113.580086][ T29] audit: type=1400 audit(1753552503.056:14113): avc: denied { bpf } for pid=6266 comm="syz.3.854" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.609655][ T29] audit: type=1400 audit(1753552503.056:14114): avc: denied { map_create } for pid=6266 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.629653][ T29] audit: type=1400 audit(1753552503.056:14115): avc: denied { map_read map_write } for pid=6266 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.651004][ T6273] loop4: detected capacity change from 0 to 512 [ 113.661369][ T6273] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 113.699662][ T6275] loop3: detected capacity change from 0 to 2048 [ 113.707735][ T6275] ext3: Unknown parameter 'obj_role' [ 113.738451][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 114.179917][ T6291] loop4: detected capacity change from 0 to 8192 [ 114.901404][ T6311] loop2: detected capacity change from 0 to 2048 [ 114.915236][ T6311] ext3: Unknown parameter 'obj_role' [ 114.949222][ T6298] lo speed is unknown, defaulting to 1000 [ 114.969001][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'. [ 114.988567][ T6298] dummy0 speed is unknown, defaulting to 1000 [ 115.137375][ T6314] loop3: detected capacity change from 0 to 512 [ 115.150863][ T6314] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 115.435263][ T6318] loop4: detected capacity change from 0 to 512 [ 115.458491][ T6318] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.470292][ T6318] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 115.480427][ T6318] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.871: Corrupt directory, running e2fsck is recommended [ 115.506107][ T6325] loop2: detected capacity change from 0 to 512 [ 115.564438][ T6318] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 115.565457][ T6325] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.584417][ T6325] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 115.595170][ T6325] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.873: Corrupt directory, running e2fsck is recommended [ 115.611738][ T6325] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 115.620731][ T6318] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.871: corrupted in-inode xattr: invalid ea_ino [ 115.743809][ T6325] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.873: corrupted in-inode xattr: invalid ea_ino [ 115.781218][ T6318] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.871: couldn't read orphan inode 15 (err -117) [ 115.808007][ T6325] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.873: couldn't read orphan inode 15 (err -117) [ 115.864975][ T6318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.879420][ T6325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.895801][ T6336] loop3: detected capacity change from 0 to 128 [ 115.903512][ T6336] vfat: Unknown parameter '€' [ 115.953407][ T6318] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.965089][ T6318] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 115.975344][ T6318] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.871: Corrupt directory, running e2fsck is recommended [ 115.988693][ T6337] xt_CT: No such helper "pptp" [ 116.016351][ T6325] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.028280][ T6325] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 116.038527][ T6325] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.873: Corrupt directory, running e2fsck is recommended [ 116.084740][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.136977][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.361936][ T6348] loop1: detected capacity change from 0 to 512 [ 116.384956][ T6348] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.880: corrupted xattr block 95: invalid header [ 116.412229][ T6347] loop2: detected capacity change from 0 to 512 [ 116.429098][ T6345] lo speed is unknown, defaulting to 1000 [ 116.480478][ T6347] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.879: corrupted xattr block 95: invalid header [ 116.493815][ T6345] dummy0 speed is unknown, defaulting to 1000 [ 116.507018][ T6343] lo speed is unknown, defaulting to 1000 [ 116.518199][ T6348] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.880: bg 0: block 7: invalid block bitmap [ 116.534192][ T6348] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 116.544968][ T6348] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.880: corrupted xattr block 95: invalid header [ 116.588298][ T6356] loop3: detected capacity change from 0 to 512 [ 116.597463][ T6348] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 116.607670][ T6348] EXT4-fs (loop1): 1 orphan inode deleted [ 116.610793][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 116.614404][ T6347] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.879: bg 0: block 7: invalid block bitmap [ 116.645916][ T6356] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 116.654583][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.670923][ T6347] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 116.693977][ T6347] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.879: corrupted xattr block 95: invalid header [ 116.707266][ T6343] dummy0 speed is unknown, defaulting to 1000 [ 116.754329][ T6347] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 116.761005][ T6354] loop4: detected capacity change from 0 to 1024 [ 116.787710][ T6347] EXT4-fs (loop2): 1 orphan inode deleted [ 116.796869][ T6354] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 116.806871][ T6354] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 116.816959][ T6354] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 116.817855][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.924363][ T6354] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.882: unexpected bad inode w/o EXT4_IGET_BAD [ 116.938065][ T6354] EXT4-fs (loop4): no journal found [ 116.945957][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.019858][ T6375] loop1: detected capacity change from 0 to 1024 [ 117.046773][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.074737][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.150310][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.162813][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 117.240629][ T6387] netlink: 256 bytes leftover after parsing attributes in process `syz.2.892'. [ 117.361500][ T6384] xt_CT: No such helper "pptp" [ 117.415760][ T6390] xt_CT: No such helper "pptp" [ 118.412313][ T6415] loop3: detected capacity change from 0 to 1024 [ 118.434815][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 118.445726][ T6417] SELinux: policydb string length 2130706440 does not match expected length 8 [ 118.454884][ T6417] SELinux: failed to load policy [ 118.463988][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 118.464003][ T29] audit: type=1400 audit(1753552507.956:15028): avc: denied { mounton } for pid=6414 comm="syz.3.898" path="/183/file1" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.492992][ T29] audit: type=1400 audit(1753552507.956:15029): avc: denied { map_create } for pid=6416 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.512237][ T29] audit: type=1400 audit(1753552507.956:15030): avc: denied { map_read map_write } for pid=6416 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.532264][ T29] audit: type=1400 audit(1753552507.956:15031): avc: denied { prog_load } for pid=6416 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.552019][ T29] audit: type=1400 audit(1753552507.956:15032): avc: denied { bpf } for pid=6416 comm="syz.4.899" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.572620][ T29] audit: type=1400 audit(1753552507.956:15033): avc: denied { perfmon } for pid=6416 comm="syz.4.899" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.593614][ T29] audit: type=1400 audit(1753552507.956:15034): avc: denied { prog_run } for pid=6416 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.612955][ T29] audit: type=1400 audit(1753552507.976:15035): avc: denied { load_policy } for pid=6416 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.633266][ T29] audit: type=1400 audit(1753552507.986:15036): avc: denied { open } for pid=6416 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.652790][ T29] audit: type=1400 audit(1753552507.986:15037): avc: denied { perfmon } for pid=6416 comm="syz.4.899" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.710802][ T6415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.753603][ T6415] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.834781][ T6427] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 118.857579][ T6427] team0: Port device dummy0 added [ 118.872700][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 118.961544][ T6427] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 118.973754][ T6427] team0: Port device dummy0 removed [ 118.980730][ T6427] dummy0: entered promiscuous mode [ 118.991182][ T6427] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 119.156667][ T6445] loop2: detected capacity change from 0 to 164 [ 119.252526][ T6451] loop4: detected capacity change from 0 to 512 [ 119.258344][ T6447] lo speed is unknown, defaulting to 1000 [ 119.291979][ T6456] loop1: detected capacity change from 0 to 512 [ 119.311150][ T6456] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 119.396471][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.468562][ T6447] dummy0 speed is unknown, defaulting to 1000 [ 119.473372][ T6451] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.909: corrupted xattr block 95: invalid header [ 119.550061][ T6459] xt_CT: No such helper "pptp" [ 119.564106][ T6451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.909: bg 0: block 7: invalid block bitmap [ 119.637555][ T6451] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 119.681971][ T6451] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.909: corrupted xattr block 95: invalid header [ 119.765454][ T6451] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 119.777883][ T6451] EXT4-fs (loop4): 1 orphan inode deleted [ 119.806176][ T6451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.046692][ T6476] loop1: detected capacity change from 0 to 2048 [ 120.073241][ T6476] ext3: Unknown parameter 'obj_role' [ 120.210575][ T6486] loop3: detected capacity change from 0 to 512 [ 120.228196][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.238645][ T6486] EXT4-fs: quotafile must be on filesystem root [ 120.274935][ T6493] loop1: detected capacity change from 0 to 512 [ 120.316430][ T6493] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 120.695743][ T6502] tc_dump_action: action bad kind [ 120.784574][ T6505] lo speed is unknown, defaulting to 1000 [ 120.808885][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 120.862484][ T6505] dummy0 speed is unknown, defaulting to 1000 [ 120.873329][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 120.882295][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 121.023681][ T6517] loop2: detected capacity change from 0 to 2048 [ 121.045757][ T6517] ext3: Unknown parameter 'obj_role' [ 121.136029][ T6517] siw: device registration error -23 [ 121.143185][ T6525] loop1: detected capacity change from 0 to 1024 [ 121.151840][ T6525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.166661][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.178604][ T6527] netlink: 'syz.4.941': attribute type 10 has an invalid length. [ 121.196501][ T6527] team0: Port device dummy0 added [ 121.229130][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.261351][ T6527] netlink: 'syz.4.941': attribute type 10 has an invalid length. [ 121.274842][ T6527] team0: Port device dummy0 removed [ 121.285734][ T6527] dummy0: entered promiscuous mode [ 121.328596][ T6537] netlink: 256 bytes leftover after parsing attributes in process `syz.1.943'. [ 121.353429][ T6541] loop2: detected capacity change from 0 to 1024 [ 121.362971][ T6541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.472597][ T6549] loop2: detected capacity change from 0 to 512 [ 121.509821][ T6549] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 121.586070][ T6549] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.947: invalid indirect mapped block 2683928664 (level 1) [ 121.606837][ T6549] EXT4-fs (loop2): 1 truncate cleaned up [ 121.839033][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 121.849135][ T6563] FAULT_INJECTION: forcing a failure. [ 121.849135][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 121.862889][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.1.954 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 121.862934][ T6563] Tainted: [W]=WARN [ 121.862943][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.862994][ T6563] Call Trace: [ 121.863002][ T6563] [ 121.863009][ T6563] __dump_stack+0x1d/0x30 [ 121.863033][ T6563] dump_stack_lvl+0xe8/0x140 [ 121.863059][ T6563] dump_stack+0x15/0x1b [ 121.863083][ T6563] should_fail_ex+0x265/0x280 [ 121.863122][ T6563] should_failslab+0x8c/0xb0 [ 121.863209][ T6563] kmem_cache_alloc_noprof+0x50/0x310 [ 121.863241][ T6563] ? skb_clone+0x151/0x1f0 [ 121.863268][ T6563] skb_clone+0x151/0x1f0 [ 121.863294][ T6563] __netlink_deliver_tap+0x2c9/0x500 [ 121.863322][ T6563] ? netlink_attachskb+0x2d1/0x610 [ 121.863373][ T6563] netlink_sendskb+0x126/0x150 [ 121.863409][ T6563] netlink_unicast+0x28a/0x680 [ 121.863446][ T6563] netlink_ack+0x4c8/0x500 [ 121.863524][ T6563] netlink_rcv_skb+0x192/0x220 [ 121.863564][ T6563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.863616][ T6563] rtnetlink_rcv+0x1c/0x30 [ 121.863637][ T6563] netlink_unicast+0x5a8/0x680 [ 121.863680][ T6563] netlink_sendmsg+0x58b/0x6b0 [ 121.863726][ T6563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.863776][ T6563] __sock_sendmsg+0x142/0x180 [ 121.863811][ T6563] ____sys_sendmsg+0x345/0x4e0 [ 121.863846][ T6563] ___sys_sendmsg+0x17b/0x1d0 [ 121.863898][ T6563] __sys_sendmmsg+0x178/0x300 [ 121.863939][ T6563] __x64_sys_sendmmsg+0x57/0x70 [ 121.863964][ T6563] x64_sys_call+0x2f2f/0x2fb0 [ 121.864034][ T6563] do_syscall_64+0xd2/0x200 [ 121.864065][ T6563] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.864135][ T6563] ? clear_bhb_loop+0x40/0x90 [ 121.864219][ T6563] ? clear_bhb_loop+0x40/0x90 [ 121.864247][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.864268][ T6563] RIP: 0033:0x7fd56f59e9a9 [ 121.864288][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.864312][ T6563] RSP: 002b:00007fd56dbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.864367][ T6563] RAX: ffffffffffffffda RBX: 00007fd56f7c5fa0 RCX: 00007fd56f59e9a9 [ 121.864422][ T6563] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 121.864447][ T6563] RBP: 00007fd56dbff090 R08: 0000000000000000 R09: 0000000000000000 [ 121.864464][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.864477][ T6563] R13: 0000000000000000 R14: 00007fd56f7c5fa0 R15: 00007fff6ceb2be8 [ 121.864497][ T6563] [ 122.139409][ T6564] loop2: detected capacity change from 0 to 256 [ 122.149037][ T6564] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.164164][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 122.173115][ T6564] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.181694][ T6564] FAT-fs (loop2): Filesystem has been set read-only [ 122.190327][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 122.216879][ T6564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6564 comm=syz.2.953 [ 122.239485][ T6571] FAULT_INJECTION: forcing a failure. [ 122.239485][ T6571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.252976][ T6571] CPU: 1 UID: 0 PID: 6571 Comm: syz.3.957 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 122.253057][ T6571] Tainted: [W]=WARN [ 122.253065][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.253142][ T6571] Call Trace: [ 122.253150][ T6571] [ 122.253160][ T6571] __dump_stack+0x1d/0x30 [ 122.253244][ T6571] dump_stack_lvl+0xe8/0x140 [ 122.253348][ T6571] dump_stack+0x15/0x1b [ 122.253369][ T6571] should_fail_ex+0x265/0x280 [ 122.253408][ T6571] should_fail_alloc_page+0xf2/0x100 [ 122.253440][ T6571] __alloc_frozen_pages_noprof+0xff/0x360 [ 122.253486][ T6571] alloc_pages_mpol+0xb3/0x250 [ 122.253554][ T6571] vma_alloc_folio_noprof+0x1aa/0x300 [ 122.253595][ T6571] handle_mm_fault+0xec2/0x2be0 [ 122.253644][ T6571] ? mas_walk+0xf2/0x120 [ 122.253692][ T6571] do_user_addr_fault+0x636/0x1090 [ 122.253736][ T6571] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 122.253846][ T6571] exc_page_fault+0x62/0xa0 [ 122.253884][ T6571] asm_exc_page_fault+0x26/0x30 [ 122.254010][ T6571] RIP: 0033:0x7f0c624a0ca3 [ 122.254027][ T6571] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 122.254045][ T6571] RSP: 002b:00007f0c60c3e4a0 EFLAGS: 00010206 [ 122.254061][ T6571] RAX: 0000000000010000 RBX: 00007f0c60c3e540 RCX: 00007f0c5881f000 [ 122.254074][ T6571] RDX: 00007f0c60c3e6e0 RSI: 0000000000000007 RDI: 00007f0c60c3e5e0 [ 122.254086][ T6571] RBP: 000000000000004d R08: 0000000000000009 R09: 000000000000019f [ 122.254098][ T6571] R10: 00000000000001ba R11: 00007f0c60c3e540 R12: 0000000000000001 [ 122.254144][ T6571] R13: 00007f0c6267c880 R14: 0000000000000050 R15: 00007f0c60c3e5e0 [ 122.254171][ T6571] [ 122.431849][ T6571] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 122.442413][ T3309] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 122.450600][ T6571] loop3: detected capacity change from 0 to 1024 [ 122.453712][ T3309] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 122.460600][ T6571] EXT4-fs: Ignoring removed nobh option [ 122.475096][ T6571] EXT4-fs: Ignoring removed bh option [ 122.583347][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 122.611249][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.622545][ T6580] netlink: 6 bytes leftover after parsing attributes in process `syz.0.961'. [ 122.708330][ T6588] loop3: detected capacity change from 0 to 512 [ 122.728269][ T6588] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.775430][ T6588] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 103 vs 96 free clusters [ 122.800245][ T6596] loop1: detected capacity change from 0 to 512 [ 122.822956][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.902014][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.963406][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 123.015069][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.136779][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.476468][ T29] kauditd_printk_skb: 1525 callbacks suppressed [ 123.476539][ T29] audit: type=1400 audit(1753552513.006:16561): avc: denied { map_create } for pid=6623 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.502698][ T29] audit: type=1400 audit(1753552513.006:16562): avc: denied { perfmon } for pid=6623 comm="syz.0.976" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.628885][ T12] bridge_slave_1: left allmulticast mode [ 123.634756][ T12] bridge_slave_1: left promiscuous mode [ 123.640575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.684596][ T12] bridge_slave_0: left allmulticast mode [ 123.690372][ T12] bridge_slave_0: left promiscuous mode [ 123.696100][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.709915][ T29] audit: type=1400 audit(1753552513.066:16563): avc: denied { write } for pid=6613 comm="syz.3.975" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.735605][ T29] audit: type=1400 audit(1753552513.066:16564): avc: denied { connect } for pid=6613 comm="syz.3.975" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.758438][ T29] audit: type=1400 audit(1753552513.066:16565): avc: denied { name_connect } for pid=6613 comm="syz.3.975" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.760548][ T6616] loop3: detected capacity change from 0 to 32768 [ 123.781045][ T29] audit: type=1400 audit(1753552513.076:16566): avc: denied { map_read map_write } for pid=6623 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.807616][ T29] audit: type=1400 audit(1753552513.076:16567): avc: denied { prog_load } for pid=6623 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.826876][ T29] audit: type=1400 audit(1753552513.076:16568): avc: denied { bpf } for pid=6623 comm="syz.0.976" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.847652][ T29] audit: type=1400 audit(1753552513.076:16569): avc: denied { perfmon } for pid=6623 comm="syz.0.976" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.868938][ T29] audit: type=1400 audit(1753552513.076:16570): avc: denied { bpf } for pid=6623 comm="syz.0.976" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.934446][ T6616] loop3: p1 p3 < > [ 123.993228][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.120975][ T12] bond_slave_0: left promiscuous mode [ 124.157169][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.413585][ T12] bond_slave_1: left promiscuous mode [ 124.597483][ T12] $Hÿ (unregistering): Released all slaves [ 124.934467][ T6619] lo speed is unknown, defaulting to 1000 [ 125.121785][ T6632] loop4: detected capacity change from 0 to 1024 [ 125.135725][ T6632] EXT4-fs: Ignoring removed bh option [ 125.424649][ T6619] dummy0 speed is unknown, defaulting to 1000 [ 125.532256][ T12] hsr_slave_0: left promiscuous mode [ 125.547727][ T12] hsr_slave_1: left promiscuous mode [ 125.565536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.574825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.594381][ T6646] FAULT_INJECTION: forcing a failure. [ 125.594381][ T6646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.610553][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.4.981 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 125.610594][ T6646] Tainted: [W]=WARN [ 125.610602][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.610619][ T6646] Call Trace: [ 125.610627][ T6646] [ 125.610648][ T6646] __dump_stack+0x1d/0x30 [ 125.610714][ T6646] dump_stack_lvl+0xe8/0x140 [ 125.610739][ T6646] dump_stack+0x15/0x1b [ 125.610759][ T6646] should_fail_ex+0x265/0x280 [ 125.610867][ T6646] should_fail_alloc_page+0xf2/0x100 [ 125.610899][ T6646] __alloc_frozen_pages_noprof+0xff/0x360 [ 125.610946][ T6646] alloc_pages_mpol+0xb3/0x250 [ 125.610989][ T6646] alloc_migration_target_by_mpol+0x11b/0x280 [ 125.611078][ T6646] migrate_pages_batch+0x2e4/0x17d0 [ 125.611141][ T6646] ? update_and_free_hugetlb_folio+0xee/0x1b0 [ 125.611183][ T6646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 125.611230][ T6646] ? __folio_put+0x5e/0x150 [ 125.611264][ T6646] ? hugetlb_cgroup_migrate+0x190/0x1b0 [ 125.611302][ T6646] migrate_pages+0xf5f/0x1770 [ 125.611404][ T6646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 125.611461][ T6646] __se_sys_mbind+0x975/0xac0 [ 125.611541][ T6646] __x64_sys_mbind+0x78/0x90 [ 125.611571][ T6646] x64_sys_call+0x14af/0x2fb0 [ 125.611599][ T6646] do_syscall_64+0xd2/0x200 [ 125.611793][ T6646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.611830][ T6646] ? clear_bhb_loop+0x40/0x90 [ 125.611857][ T6646] ? clear_bhb_loop+0x40/0x90 [ 125.611938][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.611960][ T6646] RIP: 0033:0x7f8fde2fe9a9 [ 125.611979][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.612073][ T6646] RSP: 002b:00007f8fdc967038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 125.612091][ T6646] RAX: ffffffffffffffda RBX: 00007f8fde525fa0 RCX: 00007f8fde2fe9a9 [ 125.612204][ T6646] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 125.612217][ T6646] RBP: 00007f8fdc967090 R08: 0000000000000000 R09: 0000000000000002 [ 125.612228][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.612302][ T6646] R13: 0000000000000000 R14: 00007f8fde525fa0 R15: 00007fff362d8cf8 [ 125.612377][ T6646] [ 125.877561][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.886350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.897816][ T12] veth0_macvtap: left promiscuous mode [ 125.924289][ T12] veth1_vlan: left promiscuous mode [ 125.934176][ T12] veth0_vlan: left promiscuous mode [ 126.115280][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.134970][ T12] team0 (unregistering): Port device team_slave_0 removed [ 126.190812][ T6605] lo speed is unknown, defaulting to 1000 [ 126.299545][ T6605] dummy0 speed is unknown, defaulting to 1000 [ 126.303142][ T6656] xt_CT: No such helper "pptp" [ 126.696015][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 126.890683][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.898266][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.941562][ T6678] loop1: detected capacity change from 0 to 512 [ 126.954182][ T6605] bridge_slave_0: entered allmulticast mode [ 126.986354][ T6605] bridge_slave_0: entered promiscuous mode [ 127.031509][ T6678] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 127.066444][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.071600][ T6681] loop4: detected capacity change from 0 to 1024 [ 127.074106][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.074730][ T6605] bridge_slave_1: entered allmulticast mode [ 127.088396][ T6681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.101759][ T6605] bridge_slave_1: entered promiscuous mode [ 127.131453][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.145041][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.177961][ T6605] team0: Port device team_slave_0 added [ 127.188918][ T6605] team0: Port device team_slave_1 added [ 127.219913][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.227873][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.255783][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.317701][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.324813][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.336765][ T6690] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 127.336765][ T6690] The task syz.3.992 (6690) triggered the difference, watch for misbehavior. [ 127.351233][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.383975][ T6691] FAULT_INJECTION: forcing a failure. [ 127.383975][ T6691] name failslab, interval 1, probability 0, space 0, times 0 [ 127.397842][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.4.994 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 127.397882][ T6691] Tainted: [W]=WARN [ 127.397889][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.397904][ T6691] Call Trace: [ 127.397911][ T6691] [ 127.397920][ T6691] __dump_stack+0x1d/0x30 [ 127.397974][ T6691] dump_stack_lvl+0xe8/0x140 [ 127.397992][ T6691] dump_stack+0x15/0x1b [ 127.398008][ T6691] should_fail_ex+0x265/0x280 [ 127.398041][ T6691] should_failslab+0x8c/0xb0 [ 127.398069][ T6691] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 127.398140][ T6691] ? scm_fp_dup+0x40/0x200 [ 127.398162][ T6691] kmemdup_noprof+0x2b/0x70 [ 127.398188][ T6691] scm_fp_dup+0x40/0x200 [ 127.398213][ T6691] unix_stream_read_generic+0x6ac/0x13a0 [ 127.398295][ T6691] unix_stream_recvmsg+0xc3/0xf0 [ 127.398421][ T6691] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 127.398548][ T6691] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 127.398634][ T6691] sock_recvmsg_nosec+0x104/0x130 [ 127.398661][ T6691] ____sys_recvmsg+0x26f/0x280 [ 127.398694][ T6691] ___sys_recvmsg+0x11f/0x370 [ 127.398737][ T6691] do_recvmmsg+0x1ef/0x540 [ 127.398791][ T6691] ? __traceiter_sys_enter+0x5c/0x80 [ 127.398847][ T6691] __x64_sys_recvmmsg+0xe5/0x170 [ 127.398872][ T6691] x64_sys_call+0x1c6a/0x2fb0 [ 127.398893][ T6691] do_syscall_64+0xd2/0x200 [ 127.398912][ T6691] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.399012][ T6691] ? clear_bhb_loop+0x40/0x90 [ 127.399035][ T6691] ? clear_bhb_loop+0x40/0x90 [ 127.399061][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.399088][ T6691] RIP: 0033:0x7f8fde2fe9a9 [ 127.399132][ T6691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.399156][ T6691] RSP: 002b:00007f8fdc946038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.399180][ T6691] RAX: ffffffffffffffda RBX: 00007f8fde526080 RCX: 00007f8fde2fe9a9 [ 127.399191][ T6691] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000009 [ 127.399203][ T6691] RBP: 00007f8fdc946090 R08: 0000000000000000 R09: 0000000000000000 [ 127.399214][ T6691] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 127.399225][ T6691] R13: 0000000000000000 R14: 00007f8fde526080 R15: 00007fff362d8cf8 [ 127.399329][ T6691] [ 127.780598][ T6699] loop1: detected capacity change from 0 to 1024 [ 127.798540][ T6605] hsr_slave_0: entered promiscuous mode [ 127.808331][ T6605] hsr_slave_1: entered promiscuous mode [ 127.888250][ T6699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 127.888789][ T6698] lo speed is unknown, defaulting to 1000 [ 127.900606][ T6699] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.900606][ T6699] [ 127.916079][ T6699] EXT4-fs (loop1): Total free blocks count 0 [ 127.922311][ T6699] EXT4-fs (loop1): Free/Dirty block details [ 127.928352][ T6699] EXT4-fs (loop1): free_blocks=0 [ 127.933390][ T6699] EXT4-fs (loop1): dirty_blocks=0 [ 127.938496][ T6699] EXT4-fs (loop1): Block reservation details [ 127.944775][ T6699] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 127.995426][ T6698] dummy0 speed is unknown, defaulting to 1000 [ 128.044493][ T6699] SELinux: policydb string length 1392508936 does not match expected length 8 [ 128.060348][ T6699] SELinux: failed to load policy [ 128.091602][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 128.135983][ T6710] IPVS: Unknown mcast interface: vcan0 [ 128.221309][ T6605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.278059][ T6605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.309011][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 128.429501][ T6605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.489130][ T6605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.499900][ T29] kauditd_printk_skb: 11303 callbacks suppressed [ 128.499964][ T29] audit: type=1400 audit(1753552518.026:27820): avc: denied { sys_module } for pid=6723 comm="syz.0.1006" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 128.528612][ T29] audit: type=1400 audit(1753552518.026:27821): avc: denied { module_request } for pid=6723 comm="syz.0.1006" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 128.604875][ T6724] lo speed is unknown, defaulting to 1000 [ 128.688786][ T29] audit: type=1400 audit(1753552518.086:27822): avc: denied { create } for pid=6605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.710112][ T29] audit: type=1400 audit(1753552518.086:27823): avc: denied { write } for pid=6605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.731182][ T29] audit: type=1400 audit(1753552518.086:27824): avc: denied { read } for pid=6605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.752144][ T29] audit: type=1400 audit(1753552518.096:27825): avc: denied { read } for pid=6605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.772808][ T29] audit: type=1400 audit(1753552518.096:27826): avc: denied { write } for pid=6605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.793504][ T29] audit: type=1400 audit(1753552518.116:27827): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.802560][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.817808][ T29] audit: type=1400 audit(1753552518.116:27828): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.848836][ T29] audit: type=1400 audit(1753552518.136:27829): avc: denied { read } for pid=6605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.853017][ T6724] dummy0 speed is unknown, defaulting to 1000 [ 128.898089][ T6743] loop1: detected capacity change from 0 to 1024 [ 128.911381][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.935687][ T6743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.939438][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.949813][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.985254][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.992677][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.048121][ T6605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.058942][ T6605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.153205][ T6762] loop1: detected capacity change from 0 to 128 [ 129.162472][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.184240][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.196278][ T6762] EXT4-fs: Ignoring removed nobh option [ 129.231525][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 129.247467][ T6770] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 129.255909][ T6770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1015'. [ 129.264732][ T6765] vhci_hcd: invalid port number 96 [ 129.270327][ T6765] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 129.273145][ T6762] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.299339][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.318490][ T6762] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1016'. [ 129.381968][ T6779] netlink: 'syz.1.1016': attribute type 27 has an invalid length. [ 129.399569][ T6777] FAULT_INJECTION: forcing a failure. [ 129.399569][ T6777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.413596][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.0.1018 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 129.413631][ T6777] Tainted: [W]=WARN [ 129.413639][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.413695][ T6777] Call Trace: [ 129.413703][ T6777] [ 129.413712][ T6777] __dump_stack+0x1d/0x30 [ 129.413787][ T6777] dump_stack_lvl+0xe8/0x140 [ 129.413813][ T6777] dump_stack+0x15/0x1b [ 129.413836][ T6777] should_fail_ex+0x265/0x280 [ 129.413876][ T6777] should_fail_alloc_page+0xf2/0x100 [ 129.413911][ T6777] __alloc_frozen_pages_noprof+0xff/0x360 [ 129.414034][ T6777] alloc_pages_mpol+0xb3/0x250 [ 129.414063][ T6777] vma_alloc_folio_noprof+0x1aa/0x300 [ 129.414102][ T6777] do_wp_page+0x673/0x2400 [ 129.414127][ T6777] ? __rcu_read_lock+0x37/0x50 [ 129.414226][ T6777] handle_mm_fault+0x77d/0x2be0 [ 129.414330][ T6777] ? mas_walk+0xf2/0x120 [ 129.414445][ T6777] do_user_addr_fault+0x636/0x1090 [ 129.414607][ T6777] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 129.414651][ T6777] exc_page_fault+0x62/0xa0 [ 129.414689][ T6777] asm_exc_page_fault+0x26/0x30 [ 129.414713][ T6777] RIP: 0033:0x7f65b4d00d50 [ 129.414801][ T6777] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 129.414824][ T6777] RSP: 002b:00007f65b349e4a0 EFLAGS: 00010202 [ 129.414899][ T6777] RAX: 0000000000012005 RBX: 00007f65b349e540 RCX: 0000000000000101 [ 129.414915][ T6777] RDX: 000000000000a1ff RSI: 0000000000000800 RDI: 00007f65b349e5e0 [ 129.414930][ T6777] RBP: 0000000000000102 R08: 00007f65ab07f000 R09: 0000000000000004 [ 129.414945][ T6777] R10: 0000200000001282 R11: 00000000000005ab R12: 0000000000000601 [ 129.414960][ T6777] R13: 00007f65b4edc880 R14: 0000000000000015 R15: 00007f65b349e5e0 [ 129.414984][ T6777] [ 129.604008][ T6777] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 129.694066][ T6605] veth0_vlan: entered promiscuous mode [ 129.702456][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 129.728434][ T6605] veth1_vlan: entered promiscuous mode [ 129.756278][ T6605] veth0_macvtap: entered promiscuous mode [ 129.765783][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 129.781786][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 0 [ 129.785261][ T6605] veth1_macvtap: entered promiscuous mode [ 129.811986][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 1024 [ 129.818291][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.829703][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 129.842118][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.850133][ T3303] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum [ 129.862159][ T6605] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.871711][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 129.878230][ T6605] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.893797][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 0 [ 129.903260][ T6605] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.926859][ T6605] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.103990][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 1024 [ 130.127669][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.143340][ T3303] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum [ 130.209887][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.225654][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 0 [ 130.251759][ T6805] loop4: detected capacity change from 0 to 512 [ 130.263746][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 1024 [ 130.281818][ T6805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.291430][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.307116][ T3303] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum [ 130.417621][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.433516][ T3303] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /204/mnt/lost+found: directory fails checksum at offset 0 [ 130.458493][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.496953][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.542814][ T3303] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 130.650332][ T6805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 130.675571][ T6805] System zones: 0-2, 18-18, 34-34 [ 130.691296][ T6805] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.849855][ T6817] loop5: detected capacity change from 0 to 512 [ 130.856758][ T6805] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 130.886867][ T6805] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 130.901151][ T6805] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.901151][ T6805] [ 130.910882][ T6805] EXT4-fs (loop4): Total free blocks count 0 [ 130.916975][ T6805] EXT4-fs (loop4): Free/Dirty block details [ 130.922948][ T6805] EXT4-fs (loop4): free_blocks=39626 [ 130.928428][ T6805] EXT4-fs (loop4): dirty_blocks=16 [ 130.933691][ T6805] EXT4-fs (loop4): Block reservation details [ 130.939793][ T6805] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 130.946565][ T3491] ================================================================== [ 130.954711][ T3491] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 130.962650][ T3491] [ 130.965003][ T3491] read-write to 0xffff888100482af0 of 8 bytes by task 6817 on cpu 0: [ 130.973119][ T3491] __filemap_add_folio+0x5b9/0x7d0 [ 130.978265][ T3491] filemap_add_folio+0x98/0x1b0 [ 130.983243][ T3491] __filemap_get_folio+0x31e/0x6b0 [ 130.988411][ T3491] bdev_getblk+0x16e/0x3d0 [ 130.992874][ T3491] ext4_sb_breadahead_unmovable+0x45/0x180 [ 130.998728][ T3491] ext4_group_desc_init+0x59f/0x14e0 [ 131.004139][ T3491] ext4_fill_super+0x1dbb/0x34e0 [ 131.009119][ T3491] get_tree_bdev_flags+0x291/0x300 [ 131.014292][ T3491] get_tree_bdev+0x1f/0x30 [ 131.019973][ T3491] ext4_get_tree+0x1c/0x30 [ 131.024602][ T3491] vfs_get_tree+0x54/0x1d0 [ 131.029074][ T3491] do_new_mount+0x207/0x680 [ 131.033633][ T3491] path_mount+0x4a4/0xb20 [ 131.038002][ T3491] __se_sys_mount+0x28f/0x2e0 [ 131.042745][ T3491] __x64_sys_mount+0x67/0x80 [ 131.047367][ T3491] x64_sys_call+0xd36/0x2fb0 [ 131.052594][ T3491] do_syscall_64+0xd2/0x200 [ 131.057206][ T3491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.063371][ T3491] [ 131.065800][ T3491] read to 0xffff888100482af0 of 8 bytes by task 3491 on cpu 1: [ 131.073380][ T3491] nr_blockdev_pages+0x7e/0xd0 [ 131.078184][ T3491] si_meminfo+0x87/0xd0 [ 131.082368][ T3491] update_defense_level+0x47/0x5c0 [ 131.087517][ T3491] defense_work_handler+0x1f/0x80 [ 131.092823][ T3491] process_scheduled_works+0x4cb/0x9d0 [ 131.098346][ T3491] worker_thread+0x582/0x770 [ 131.103012][ T3491] kthread+0x486/0x510 [ 131.107115][ T3491] ret_from_fork+0xda/0x150 [ 131.111750][ T3491] ret_from_fork_asm+0x1a/0x30 [ 131.116559][ T3491] [ 131.118905][ T3491] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 131.126058][ T3491] [ 131.128398][ T3491] Reported by Kernel Concurrency Sanitizer on: [ 131.134583][ T3491] CPU: 1 UID: 0 PID: 3491 Comm: kworker/1:5 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 131.148675][ T3491] Tainted: [W]=WARN [ 131.152493][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.162745][ T3491] Workqueue: events_long defense_work_handler [ 131.168844][ T3491] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.196393][ T6817] EXT4-fs (loop5): orphan cleanup on readonly fs [ 131.256269][ T6817] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.970: bg 0: block 248: padding at end of block bitmap is not set [ 131.277806][ T12] smc: removing ib device syz1 [ 131.297351][ T6817] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.970: Failed to acquire dquot type 1 [ 131.303651][ T3379] syz1: Port: 1 Link DOWN [ 131.364882][ T6817] EXT4-fs (loop5): 1 truncate cleaned up [ 131.388628][ T6817] syz.5.970 (6817) used greatest stack depth: 9312 bytes left [ 131.770447][ T5228] bridge_slave_1: left allmulticast mode [ 131.776204][ T5228] bridge_slave_1: left promiscuous mode [ 131.782426][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.792202][ T5228] bridge_slave_0: left allmulticast mode [ 131.798137][ T5228] bridge_slave_0: left promiscuous mode [ 131.805752][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.878049][ T5228] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.887111][ T5228] bond_slave_0: left promiscuous mode [ 131.894750][ T5228] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.904574][ T5228] bond_slave_1: left promiscuous mode [ 131.911529][ T5228] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 131.921324][ T5228] dummy0: left promiscuous mode [ 131.926949][ T5228] $Hÿ (unregistering): Released all slaves [ 131.936286][ T5228] bond0 (unregistering): Released all slaves [ 131.947240][ T3379] dummy0 speed is unknown, defaulting to 1000 [ 131.953452][ T3379] syz2: Port: 1 Link DOWN [ 132.071505][ T5228] team0 (unregistering): Port device hsr_slave_0 removed [ 132.090955][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 132.104305][ T5228] team0 (unregistering): Port device team_slave_0 removed [ 132.117551][ T5227] smc: removing ib device syz! [ 132.367667][ T5228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.426904][ T5228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.487788][ T5228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.547410][ T5228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.620865][ T5228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.686970][ T5228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.736607][ T5228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.788222][ T5228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.817293][ T6815] EXT4-fs unmount: 23 callbacks suppressed [ 132.817308][ T6815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.850292][ T5228] bridge_slave_1: left allmulticast mode [ 132.856099][ T5228] bridge_slave_1: left promiscuous mode [ 132.861894][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.870130][ T5228] bridge_slave_0: left allmulticast mode [ 132.875893][ T5228] bridge_slave_0: left promiscuous mode [ 132.881573][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.889954][ T5228] bridge_slave_1: left allmulticast mode [ 132.895680][ T5228] bridge_slave_1: left promiscuous mode [ 132.901386][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.909278][ T5228] bridge_slave_0: left allmulticast mode [ 132.914998][ T5228] bridge_slave_0: left promiscuous mode [ 132.921038][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.036745][ T5228] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.045590][ T5228] bond_slave_0: left promiscuous mode [ 133.052164][ T5228] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.061075][ T5228] bond_slave_1: left promiscuous mode [ 133.068029][ T5228] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 133.076536][ T5228] dummy0: left promiscuous mode [ 133.082205][ T5228] $Hÿ (unregistering): Released all slaves [ 133.186054][ T5228] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.195765][ T5228] bond_slave_0: left promiscuous mode [ 133.202520][ T5228] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.211511][ T5228] bond_slave_1: left promiscuous mode [ 133.217792][ T5228] $Hÿ (unregistering): Released all slaves [ 133.226934][ T5228] bond0 (unregistering): Released all slaves [ 133.288453][ T5228] tipc: Disabling bearer [ 133.293470][ T5228] tipc: Left network mode [ 133.302956][ T5228] hsr_slave_0: left promiscuous mode [ 133.308943][ T5228] hsr_slave_1: left promiscuous mode [ 133.314783][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.322227][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.329862][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.337727][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.347806][ T5228] hsr_slave_0: left promiscuous mode [ 133.353490][ T5228] hsr_slave_1: left promiscuous mode [ 133.362381][ T5228] veth1_macvtap: left promiscuous mode [ 133.368240][ T5228] veth0_macvtap: left promiscuous mode [ 133.374465][ T5228] veth1_macvtap: left promiscuous mode [ 133.379947][ T5228] veth0_macvtap: left promiscuous mode [ 133.385525][ T5228] veth1_vlan: left promiscuous mode [ 133.390796][ T5228] veth0_vlan: left promiscuous mode [ 133.468569][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 133.478600][ T5228] team0 (unregistering): Port device team_slave_0 removed [ 133.534547][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 133.544764][ T5228] team0 (unregistering): Port device team_slave_0 removed [ 133.574897][ T3393] lo speed is unknown, defaulting to 1000 [ 133.580669][ T3393] infiniband syz0: ib_query_port failed (-19) [ 134.037032][ T5228] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.106382][ T5228] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.176807][ T5228] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.226415][ T5228] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.278042][ T5228] bridge_slave_1: left allmulticast mode [ 134.283830][ T5228] bridge_slave_1: left promiscuous mode [ 134.289723][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.297783][ T5228] bridge_slave_0: left allmulticast mode [ 134.304241][ T5228] bridge_slave_0: left promiscuous mode [ 134.310632][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.395925][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.406679][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.416193][ T5228] bond0 (unregistering): Released all slaves [ 134.457746][ T5228] hsr_slave_0: left promiscuous mode [ 134.463462][ T5228] hsr_slave_1: left promiscuous mode [ 134.469276][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.476772][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.484644][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.492077][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.502136][ T5228] veth1_macvtap: left promiscuous mode [ 134.507778][ T5228] veth0_macvtap: left promiscuous mode [ 134.514152][ T5228] veth1_vlan: left promiscuous mode [ 134.520395][ T5228] veth0_vlan: left promiscuous mode [ 134.587649][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 134.598174][ T5228] team0 (unregistering): Port device team_slave_0 removed