last executing test programs: 4.342735127s ago: executing program 3 (id=1097): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000207585f842ac367e34c4c58356229d8f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000280)=r5}, 0x20) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={0x0, r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x7e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000000000010000000000000000000200000100000000000000002277937fb3bc3c04b810fbd5e1c54d4d50d680d925f6248c80fee4c67be34a2c48757692f015a6c5b929cea4a268e5c39a5b4181bcca117eb73a184e709c48df5c83d078ebe4ae6a0df43fab640be8cce980c45508e6815944d362f83db4a2d4d0e5183513ad98566482b48a4039987bafb0b435ebf5dee562eba3973dec962eeaba1acf5e84d37a2f8fd76daba95982d6f74b4c81c526ece2853e6131c33205287ae3690b62a0128f105a67e79f17e36905e4d488514e858396836680113cd55bb7bda71891bf2e803c00"/241], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r11}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=r10], 0x48}}, 0x0) 3.648678177s ago: executing program 4 (id=1106): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x4000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x800401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x9, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca4, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x0, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x5, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xfffe, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x4, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 3.422681281s ago: executing program 3 (id=1108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.346722841s ago: executing program 3 (id=1110): r0 = timerfd_create(0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.303467042s ago: executing program 4 (id=1111): ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) accept4$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3.245096253s ago: executing program 3 (id=1112): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x804) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x5409, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000020c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @loopback, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa0}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)="c4", 0x1}], 0x1}}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="bba3efce36a39177c854bbbbbbbbbbaaaaaaaaaa2386dd603000bb00082b00fc02000000000000000037364ff9063d5489a717f7000000000000fe8000000000000000000000000000aa0000000000089078"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.650487762s ago: executing program 3 (id=1120): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semget(0x3, 0x1, 0x206) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$netlink(0x10, 0x3, 0x0) semget(0x3, 0x3, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.285815807s ago: executing program 0 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4d4, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x488, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x3ac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.985042371s ago: executing program 4 (id=1124): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x804) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x5409, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000020c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @loopback, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa0}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)="c4", 0x1}], 0x1}}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="bba3efce36a39177c854bbbbbbbbbbaaaaaaaaaa2386dd603000bb00082b00fc02000000000000000037364ff9063d5489a717f7000000000000fe8000000000000000000000000000aa0000000000089078"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.185105683s ago: executing program 4 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xb7, &(0x7f0000001780)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8000088a8f0ff08004bd300a100640000520190787f00000100000000070f60ffffffff00000000ac1e010186450000000300119dc9caddd163c6626c39b6a1eaef872223546e38b0f1b80504b02505117e65517de9c43930b00343046a77c7071165a6c3bd2004a16a67437d6cca4f5f9404010003009078000700054a16072c006600f80211000d7f000001ac1e0c01071378e0000001e0000002ffffffffac1414aa004b7e514709"], 0x0) 1.135406393s ago: executing program 4 (id=1131): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20000000002}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000ef73f4a6c718e96a9f00"], 0x8) close(r0) 1.114124134s ago: executing program 0 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 999.735605ms ago: executing program 0 (id=1135): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 967.907096ms ago: executing program 4 (id=1137): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semget(0x3, 0x1, 0x206) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$netlink(0x10, 0x3, 0x0) semget(0x3, 0x3, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 951.667396ms ago: executing program 0 (id=1138): creat(&(0x7f00000000c0)='./file0\x00', 0x8b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) 878.163837ms ago: executing program 0 (id=1140): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 531.649402ms ago: executing program 2 (id=1145): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x60c80, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121840, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 498.284503ms ago: executing program 1 (id=1146): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 455.614114ms ago: executing program 3 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ae, &(0x7f0000000800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x4}, 0x880, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)={0x1, 0x6, [@broadcast, @random="c2f494ab1667", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="4ffa2ac0d04d", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @broadcast]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 382.150975ms ago: executing program 2 (id=1148): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4008800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000000000010000000000000000000200000100000000000000002277937fb3bc3c04b810fbd5e1c54d4d50d680d925f6248c80fee4c67be34a2c48757692f015a6c5b929cea4a268e5c39a5b4181bcca117eb73a184e709c48df5c83d078ebe4ae6a0df43fab640be8cce980c45508e6815944d362f83db4a2d4d0e5183513ad98566482b48a4039987bafb0b435ebf5dee562eba3973dec96"], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000040000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=r2], 0x48}}, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 367.284205ms ago: executing program 1 (id=1149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20000000002}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000ef73f4a6c718e96a9f00"], 0x8) close(r0) 326.992555ms ago: executing program 2 (id=1150): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x4000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="040100001a00210a00000000ffdbdf25ac1414bb000000000000000000000000ac14142b0000000000000000000000000000000000020000000000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000400000000000000000000800000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffff0a000100390000000000000014000e"], 0x104}}, 0x810) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x800401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x9, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca4, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x0, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x5, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xfffe, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x4, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 283.917466ms ago: executing program 1 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007300)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x2, 0x4, 0x434, 0x6, 0x4, 0xffffdfa5, 0x4, 0xfff, 0x70, 0x7, 0xfffffffb, 0x0, 0x1, 0x400, 0x9, 0x998, 0x3, 0xff, 0x0, 0xc, 0x7, 0x80000000, 0x0, 0xffff, 0x2, 0x0, 0x2, 0x10, 0x1, 0x4dfc56a4, 0x3e67, 0x3, 0x9, 0x0, 0x1, 0x9, 0x9, 0xa, 0x10001, 0x7, 0x5, 0x4, 0x9, 0x1ff, 0xffffffed, 0x0, 0x0, 0x3, 0xb5a, 0x9, 0x2, 0x1ff, 0x4000, 0x0, 0x9, 0x800, 0x10000, 0x80, 0x8, 0x1, 0x2, 0x40, 0x4, 0x0, 0x7, 0x9, 0xac3, 0x3, 0x8767, 0x8, 0x3, 0x7, 0xffffff01, 0x3613, 0x10000, 0x7e, 0x5, 0x2dd4, 0x3, 0x81, 0x4, 0x6, 0x4, 0x4, 0x4, 0x9, 0x3, 0x2, 0x8, 0x0, 0x6, 0x3, 0x3, 0x1, 0xb, 0x9, 0xbc, 0xe, 0x5, 0x9, 0x5, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0x7, 0x7, 0x4, 0x3, 0x7, 0x5f, 0x6, 0xfffffff7, 0x1000000, 0x48, 0x7, 0x81, 0x400, 0x1, 0x1, 0xe, 0x7, 0x7, 0x6, 0x3ce1, 0xffffffc0, 0x1, 0x5, 0x6, 0x100, 0xb7a1f420, 0x0, 0x8, 0x4, 0x7, 0x10, 0x4, 0x2, 0x3, 0x7, 0x3ff, 0x4, 0xf79, 0x9, 0x82, 0x7fffffff, 0x9, 0x7495, 0x3, 0x1000, 0x2, 0xe000000, 0x6039c791, 0xffffffff, 0xff, 0x3, 0x8, 0x10, 0x7, 0x100, 0x10, 0x3, 0x80000000, 0x7, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8, 0x1ff, 0x6, 0x6, 0x6, 0x0, 0x8, 0x2, 0xffff106e, 0x1cccf7d2, 0x4, 0x8, 0x8, 0x80000001, 0x8000, 0x0, 0x3, 0x200, 0x8001, 0x7, 0x9, 0x5, 0x2, 0x727, 0xc, 0xc495, 0x0, 0x3ff, 0x1000000, 0xffff, 0xe, 0x8000, 0xfffffff9, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x5, 0x2, 0x10001, 0x1, 0x80000000, 0x9, 0x8, 0x100, 0x8, 0x3, 0xf8, 0x8, 0x2, 0xd, 0x8000, 0x3, 0x6, 0x200, 0x2, 0x3, 0x2, 0x1, 0xd, 0x100, 0x2, 0x9, 0xfffffff8, 0x7, 0x1000, 0x5, 0x3, 0x4, 0x2, 0x45, 0xa, 0x7fff, 0x9, 0x618, 0x6, 0x1, 0x5, 0x4, 0x5ace, 0x8, 0x3, 0x48d, 0x5f1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x5, 0x7f, 0xc, 0x800}, 0x6, 0x40000, 0x5}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}}, 0x0) 256.192956ms ago: executing program 1 (id=1152): r0 = socket(0x10, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1fe, 0x14140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x18008}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000e4ffffff000000000000000000020000000000b9"], 0x0, 0x11, 0x0, 0xffffffff, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000700000000000000c30002000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) close(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r3 = creat(0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e8ffffb604000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x385d, @void, @value}, 0x94) acct(0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d0000000100000007000000bf97c4475bf8559c520918fd308d"]) socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x337) r6 = fcntl$getown(r1, 0x9) syz_open_procfs(r6, &(0x7f0000000040)='coredump_filter\x00') bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) io_uring_enter(r7, 0xe50, 0x4a54, 0x28, 0x0, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 193.577447ms ago: executing program 1 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 192.972297ms ago: executing program 2 (id=1154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x40000, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 122.748178ms ago: executing program 1 (id=1155): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r7, 0x3, &(0x7f0000000140)={0x82e4, 0x4a18}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 92.802339ms ago: executing program 2 (id=1156): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000002000000000000000000bbff020000000000000000000000000001"], 0x0) 18.45257ms ago: executing program 0 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semget(0x3, 0x1, 0x206) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$netlink(0x10, 0x3, 0x0) semget(0x3, 0x3, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 2 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4d4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x488, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x3ac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\n']) kernel console output (not intermixed with test programs): 332] loop4: detected capacity change from 0 to 512 [ 79.894560][ T5332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.928654][ T5332] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.940848][ T5332] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.622: corrupted inode contents [ 79.948741][ T5341] FAULT_INJECTION: forcing a failure. [ 79.948741][ T5341] name failslab, interval 1, probability 0, space 0, times 0 [ 79.966535][ T5341] CPU: 1 UID: 0 PID: 5341 Comm: syz.2.624 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 79.966562][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 79.966574][ T5341] Call Trace: [ 79.966582][ T5341] [ 79.966591][ T5341] __dump_stack+0x1d/0x30 [ 79.966615][ T5341] dump_stack_lvl+0xe8/0x140 [ 79.966645][ T5341] dump_stack+0x15/0x1b [ 79.966689][ T5341] should_fail_ex+0x265/0x280 [ 79.966669][ T5311] loop1: detected capacity change from 0 to 512 [ 79.966721][ T5341] ? prog_array_map_alloc+0x33/0x120 [ 79.966810][ T5341] should_failslab+0x8c/0xb0 [ 79.966853][ T5341] __kmalloc_cache_noprof+0x4c/0x320 [ 79.966953][ T5341] prog_array_map_alloc+0x33/0x120 [ 79.966996][ T5341] map_create+0x843/0xb90 [ 79.967035][ T5341] ? security_bpf+0x2b/0x90 [ 79.967144][ T5341] __sys_bpf+0x5ab/0x790 [ 79.967221][ T5341] __x64_sys_bpf+0x41/0x50 [ 79.967325][ T5341] x64_sys_call+0x2478/0x2fb0 [ 79.967353][ T5341] do_syscall_64+0xd0/0x1a0 [ 79.967392][ T5341] ? clear_bhb_loop+0x40/0x90 [ 79.967453][ T5341] ? clear_bhb_loop+0x40/0x90 [ 79.967481][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.967508][ T5341] RIP: 0033:0x7ff39678e969 [ 79.967565][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.967582][ T5341] RSP: 002b:00007ff394df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.967605][ T5341] RAX: ffffffffffffffda RBX: 00007ff3969b5fa0 RCX: 00007ff39678e969 [ 79.967622][ T5341] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000000 [ 79.967645][ T5341] RBP: 00007ff394df7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.967661][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.967676][ T5341] R13: 0000000000000000 R14: 00007ff3969b5fa0 R15: 00007fff3ac39148 [ 79.967746][ T5341] [ 79.993615][ T5332] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.622: mark_inode_dirty error [ 80.000893][ T5311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.002280][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 80.038129][ T5311] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.067053][ T5332] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.622: corrupted inode contents [ 80.098348][ T5311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 80.234448][ T5311] EXT4-fs (loop1): 1 truncate cleaned up [ 80.262219][ T5311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.315978][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.428573][ T5358] bond1: entered promiscuous mode [ 80.433974][ T5358] bond1: entered allmulticast mode [ 80.434403][ T5358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.446748][ T5358] bond1 (unregistering): Released all slaves [ 80.606080][ T5365] syzkaller0: entered promiscuous mode [ 80.606107][ T5365] syzkaller0: entered allmulticast mode [ 80.612263][ T5368] IPv6: syztnl0: Disabled Multicast RS [ 80.629326][ T5368] loop0: detected capacity change from 0 to 128 [ 80.676054][ T5368] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.676461][ T5368] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.445605][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 81.445620][ T29] audit: type=1400 audit(1747286089.013:691): avc: denied { ioctl } for pid=5376 comm="syz.4.632" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.676979][ T29] audit: type=1400 audit(1747286089.243:692): avc: denied { map } for pid=5380 comm="syz.4.633" path="socket:[9870]" dev="sockfs" ino=9870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.742156][ T5383] syzkaller0: entered promiscuous mode [ 81.748033][ T5383] syzkaller0: entered allmulticast mode [ 81.772259][ T5389] loop3: detected capacity change from 0 to 512 [ 81.822590][ T5389] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.852261][ T5389] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.637: corrupted inode contents [ 81.890194][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.897823][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.909371][ T5389] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.637: mark_inode_dirty error [ 81.931354][ T5382] bridge0: entered allmulticast mode [ 81.945866][ T5389] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.637: corrupted inode contents [ 82.214334][ T29] audit: type=1400 audit(1747286089.783:693): avc: denied { execute } for pid=5403 comm="syz.0.642" name="file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.238427][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 82.343500][ T29] audit: type=1400 audit(1747286089.813:694): avc: denied { execute_no_trans } for pid=5403 comm="syz.0.642" path="/108/file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.343591][ T29] audit: type=1326 audit(1747286089.823:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 82.343637][ T29] audit: type=1326 audit(1747286089.823:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 82.343667][ T29] audit: type=1326 audit(1747286089.833:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 82.343770][ T29] audit: type=1326 audit(1747286089.833:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 82.343864][ T29] audit: type=1326 audit(1747286089.833:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 82.343893][ T29] audit: type=1326 audit(1747286089.833:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 82.367544][ T5420] loop4: detected capacity change from 0 to 512 [ 82.422593][ T5420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 82.422632][ T5420] System zones: 1-12 [ 82.447352][ T5420] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.647: corrupted xattr block 255: invalid header [ 82.526397][ T5427] loop1: detected capacity change from 0 to 512 [ 82.526940][ T5427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.591079][ T5427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.596393][ T5420] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 82.597076][ T5420] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.647: corrupted xattr block 255: invalid header [ 82.602068][ T5420] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 82.627564][ T5427] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 82.628099][ T5427] EXT4-fs (loop1): 1 truncate cleaned up [ 82.638031][ T5427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.661508][ T5425] bond1: entered promiscuous mode [ 82.661534][ T5425] bond1: entered allmulticast mode [ 82.661773][ T5425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.721347][ T5425] bond1 (unregistering): Released all slaves [ 82.764383][ T5431] loop3: detected capacity change from 0 to 2048 [ 83.089008][ T5446] bond2: entered promiscuous mode [ 83.094524][ T5446] bond2: entered allmulticast mode [ 83.121225][ T5446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.132236][ T5446] bond2 (unregistering): Released all slaves [ 83.155539][ T5455] loop1: detected capacity change from 0 to 1024 [ 83.239959][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 83.249311][ T5465] bond1: entered promiscuous mode [ 83.254681][ T5465] bond1: entered allmulticast mode [ 83.262582][ T5465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.281045][ T5465] bond1 (unregistering): Released all slaves [ 83.327191][ T5469] loop2: detected capacity change from 0 to 2048 [ 83.340041][ T5471] syzkaller0: entered promiscuous mode [ 83.346674][ T5471] syzkaller0: entered allmulticast mode [ 83.413375][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 83.558282][ T5488] loop0: detected capacity change from 0 to 2048 [ 83.567435][ T5492] loop3: detected capacity change from 0 to 2048 [ 83.625030][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.633272][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.641164][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.647283][ T5497] loop1: detected capacity change from 0 to 1024 [ 83.649495][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.664017][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.671872][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.679839][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.687645][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.695636][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.703633][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.711530][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.719473][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.727411][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.735357][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.743278][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.751398][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.759312][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.767234][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.775086][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.783007][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.790894][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.798779][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.806957][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.814841][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.822820][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.831225][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.839051][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.847207][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.855180][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.863011][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.870969][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.878846][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.886880][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.894860][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.902682][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.910542][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.918417][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.926512][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.934481][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.942555][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.950568][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.958613][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.966573][ T3390] hid-generic 0000:0000:20000000.0016: unknown main item tag 0x0 [ 83.977466][ T3390] hid-generic 0000:0000:20000000.0016: hidraw0: HID v0.01 Device [syz0] on syz1 [ 84.010425][ T5504] fido_id[5504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.078838][ T5508] loop1: detected capacity change from 0 to 1024 [ 84.110065][ T5512] bond1: entered promiscuous mode [ 84.115535][ T5512] bond1: entered allmulticast mode [ 84.124932][ T5512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.125770][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 84.147843][ T5512] bond1 (unregistering): Released all slaves [ 84.207088][ T5521] loop0: detected capacity change from 0 to 1024 [ 84.246504][ T5527] netlink: 52 bytes leftover after parsing attributes in process `syz.3.680'. [ 84.309946][ T5532] loop3: detected capacity change from 0 to 1024 [ 84.347501][ T5537] bond2: entered promiscuous mode [ 84.353022][ T5537] bond2: entered allmulticast mode [ 84.353872][ T5537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.357387][ T5537] bond2 (unregistering): Released all slaves [ 84.434935][ T5551] loop3: detected capacity change from 0 to 128 [ 84.447276][ T5551] FAT-fs (loop3): Directory bread(block 162) failed [ 84.454296][ T5551] FAT-fs (loop3): Directory bread(block 163) failed [ 84.462308][ T5544] loop0: detected capacity change from 0 to 2048 [ 84.468947][ T5551] FAT-fs (loop3): Directory bread(block 164) failed [ 84.489084][ T5551] FAT-fs (loop3): Directory bread(block 165) failed [ 84.517782][ T5551] FAT-fs (loop3): Directory bread(block 166) failed [ 84.524853][ T5551] FAT-fs (loop3): Directory bread(block 167) failed [ 84.531764][ T5551] FAT-fs (loop3): Directory bread(block 168) failed [ 84.551385][ T5551] FAT-fs (loop3): Directory bread(block 169) failed [ 84.559712][ T5559] bond2: entered promiscuous mode [ 84.565035][ T5559] bond2: entered allmulticast mode [ 84.572523][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 84.587458][ T5563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.693'. [ 84.599701][ T5559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.640641][ T5559] bond2 (unregistering): Released all slaves [ 84.657552][ T5551] FAT-fs (loop3): Directory bread(block 162) failed [ 84.664488][ T5551] FAT-fs (loop3): Directory bread(block 163) failed [ 84.664960][ T5571] loop2: detected capacity change from 0 to 1024 [ 84.672102][ T5551] bio_check_eod: 9 callbacks suppressed [ 84.672117][ T5551] syz.3.688: attempt to access beyond end of device [ 84.672117][ T5551] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 84.698266][ T5551] syz.3.688: attempt to access beyond end of device [ 84.698266][ T5551] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 84.741476][ T5551] syz.3.688: attempt to access beyond end of device [ 84.741476][ T5551] loop3: rw=3, sector=234, nr_sectors = 6 limit=128 [ 84.754935][ T5551] syz.3.688: attempt to access beyond end of device [ 84.754935][ T5551] loop3: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 84.771769][ T5551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.688'. [ 84.780962][ T5551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 84.790024][ T5551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.688'. [ 84.810508][ T5551] syz.3.688: attempt to access beyond end of device [ 84.810508][ T5551] loop3: rw=3, sector=242, nr_sectors = 6 limit=128 [ 84.824303][ T5551] syz.3.688: attempt to access beyond end of device [ 84.824303][ T5551] loop3: rw=2051, sector=248, nr_sectors = 2 limit=128 [ 84.855958][ T5579] loop4: detected capacity change from 0 to 512 [ 84.871308][ T5579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.900871][ T5579] EXT4-fs (loop4): 1 truncate cleaned up [ 84.942325][ T5582] loop2: detected capacity change from 0 to 1024 [ 85.092553][ T5594] loop1: detected capacity change from 0 to 512 [ 85.150084][ T5603] bond1: entered promiscuous mode [ 85.155259][ T5603] bond1: entered allmulticast mode [ 85.168155][ T5603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.178735][ T5594] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.201200][ T5603] bond1 (unregistering): Released all slaves [ 85.222050][ T5594] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.705: corrupted inode contents [ 85.250407][ T5608] bond1: entered promiscuous mode [ 85.255572][ T5608] bond1: entered allmulticast mode [ 85.267098][ T5594] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.705: mark_inode_dirty error [ 85.304938][ T5608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.318814][ T5594] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.705: corrupted inode contents [ 85.364269][ T5608] bond1 (unregistering): Released all slaves [ 85.408032][ T5614] hsr0 speed is unknown, defaulting to 1000 [ 85.581187][ T5620] loop3: detected capacity change from 0 to 512 [ 85.643495][ T5620] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.686039][ T5620] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.714: corrupted inode contents [ 85.749040][ T5620] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.714: mark_inode_dirty error [ 85.780920][ T5620] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.714: corrupted inode contents [ 85.887819][ T5639] loop1: detected capacity change from 0 to 512 [ 85.904732][ T5639] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.911417][ T5639] EXT4-fs: Ignoring removed bh option [ 85.922479][ T5639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.945844][ T5639] EXT4-fs (loop1): 1 truncate cleaned up [ 86.092732][ T5648] syzkaller0: entered promiscuous mode [ 86.099067][ T5648] syzkaller0: entered allmulticast mode [ 86.138338][ T5650] hsr0 speed is unknown, defaulting to 1000 [ 86.206526][ T5657] bond1: entered promiscuous mode [ 86.212443][ T5657] bond1: entered allmulticast mode [ 86.218040][ T5657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.235834][ T5657] bond1 (unregistering): Released all slaves [ 86.242472][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x1 [ 86.251585][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.261210][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.270592][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.279218][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.287213][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.296004][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.304525][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.313261][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.322113][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x2 [ 86.332047][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.340205][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.348428][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x4 [ 86.357872][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.366139][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.375314][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.384871][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.393450][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x2 [ 86.401546][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.410534][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.419649][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.427914][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.435719][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.444236][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.452190][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.459969][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.467812][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.476196][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.484403][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.492256][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.500170][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.508906][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.516879][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.524794][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.532632][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.541198][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.549150][ T2969] hid-generic 0000:0000:20000000.0017: unknown main item tag 0x0 [ 86.557163][ T2969] hid-generic 0000:0000:20000000.0017: item fetching failed at offset 41/43 [ 86.566845][ T2969] hid-generic 0000:0000:20000000.0017: probe with driver hid-generic failed with error -22 [ 86.603677][ T5664] loop1: detected capacity change from 0 to 512 [ 86.702722][ T5664] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.720138][ T5664] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.731: corrupted inode contents [ 86.747914][ T5664] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.731: mark_inode_dirty error [ 86.761382][ T5664] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.731: corrupted inode contents [ 86.897502][ T5668] bond1: entered promiscuous mode [ 86.903223][ T5668] bond1: entered allmulticast mode [ 86.916050][ T5668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.935114][ T5668] bond1 (unregistering): Released all slaves [ 87.345627][ T5692] loop3: detected capacity change from 0 to 512 [ 87.352493][ T5692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.362223][ T5692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.376879][ T5692] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.063477][ T5692] EXT4-fs (loop3): 1 truncate cleaned up [ 88.188314][ T5691] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 88.282515][ T5694] 9pnet_fd: Insufficient options for proto=fd [ 88.289581][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 88.289597][ T29] audit: type=1400 audit(1747286095.833:790): avc: denied { read write } for pid=5689 comm="syz.4.741" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.321277][ T29] audit: type=1400 audit(1747286095.833:791): avc: denied { open } for pid=5689 comm="syz.4.741" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.346237][ T29] audit: type=1400 audit(1747286095.843:792): avc: denied { connect } for pid=5689 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.541517][ T5701] bond1: entered promiscuous mode [ 88.546793][ T5701] bond1: entered allmulticast mode [ 88.555867][ T5701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.566214][ T5701] bond1 (unregistering): Released all slaves [ 88.569850][ T5711] loop4: detected capacity change from 0 to 512 [ 88.664274][ T5711] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.685523][ T5711] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.746: corrupted inode contents [ 88.706941][ T5711] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.746: mark_inode_dirty error [ 88.723104][ T29] audit: type=1326 audit(1747286096.283:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.748790][ T29] audit: type=1326 audit(1747286096.283:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.757401][ T5711] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.746: corrupted inode contents [ 88.772937][ T29] audit: type=1326 audit(1747286096.283:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.808936][ T29] audit: type=1326 audit(1747286096.283:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.833364][ T29] audit: type=1326 audit(1747286096.283:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.857563][ T29] audit: type=1326 audit(1747286096.283:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.883086][ T29] audit: type=1326 audit(1747286096.283:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 88.920282][ T5721] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 88.970592][ T5713] vhci_hcd: invalid port number 65 [ 88.977209][ T5726] FAULT_INJECTION: forcing a failure. [ 88.977209][ T5726] name failslab, interval 1, probability 0, space 0, times 0 [ 88.990074][ T5726] CPU: 1 UID: 0 PID: 5726 Comm: syz.0.753 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 88.990191][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 88.990207][ T5726] Call Trace: [ 88.990214][ T5726] [ 88.990224][ T5726] __dump_stack+0x1d/0x30 [ 88.990250][ T5726] dump_stack_lvl+0xe8/0x140 [ 88.990275][ T5726] dump_stack+0x15/0x1b [ 88.990292][ T5726] should_fail_ex+0x265/0x280 [ 88.990506][ T5726] should_failslab+0x8c/0xb0 [ 88.990616][ T5726] kmem_cache_alloc_noprof+0x50/0x310 [ 88.990637][ T5726] ? getname_flags+0x80/0x3b0 [ 88.990670][ T5726] getname_flags+0x80/0x3b0 [ 88.990764][ T5726] do_sys_openat2+0x60/0x110 [ 88.990793][ T5726] __x64_sys_openat+0xf2/0x120 [ 88.990818][ T5726] x64_sys_call+0x1af/0x2fb0 [ 88.990845][ T5726] do_syscall_64+0xd0/0x1a0 [ 88.990895][ T5726] ? clear_bhb_loop+0x40/0x90 [ 88.990922][ T5726] ? clear_bhb_loop+0x40/0x90 [ 88.990942][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.990962][ T5726] RIP: 0033:0x7f5aa9a0d2d0 [ 88.991079][ T5726] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 88.991102][ T5726] RSP: 002b:00007f5aa8076f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 88.991129][ T5726] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5aa9a0d2d0 [ 88.991142][ T5726] RDX: 0000000000000002 RSI: 00007f5aa8076fa0 RDI: 00000000ffffff9c [ 88.991153][ T5726] RBP: 00007f5aa8076fa0 R08: 0000000000000000 R09: 0000000000000000 [ 88.991166][ T5726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 88.991182][ T5726] R13: 0000000000000000 R14: 00007f5aa9c35fa0 R15: 00007fffeaeab658 [ 88.991266][ T5726] [ 89.201406][ T5728] vhci_hcd: invalid port number 65 [ 89.441814][ T5743] loop1: detected capacity change from 0 to 512 [ 89.448966][ T5743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.516049][ T5743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.559551][ T5743] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.574905][ T5743] EXT4-fs (loop1): 1 truncate cleaned up [ 89.586258][ T5743] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 89.695490][ T5749] 9pnet_fd: Insufficient options for proto=fd [ 89.871201][ T5749] __nla_validate_parse: 2 callbacks suppressed [ 89.871216][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 89.948876][ T5770] netlink: 52 bytes leftover after parsing attributes in process `syz.4.769'. [ 89.989890][ T5768] hsr0 speed is unknown, defaulting to 1000 [ 90.108540][ T5766] vhci_hcd: invalid port number 65 [ 90.321533][ T5795] loop1: detected capacity change from 0 to 512 [ 90.376198][ T5795] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.399925][ T5797] syzkaller0: entered promiscuous mode [ 90.406268][ T5797] syzkaller0: entered allmulticast mode [ 90.434997][ T5801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.781'. [ 90.448376][ T5795] netlink: 'syz.1.776': attribute type 4 has an invalid length. [ 90.492045][ T5803] loop0: detected capacity change from 0 to 512 [ 90.536851][ T5803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 90.546224][ T5803] System zones: 1-12 [ 90.564448][ T5803] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.782: corrupted xattr block 255: invalid header [ 90.579142][ T5803] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 90.589297][ T5803] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.782: corrupted xattr block 255: invalid header [ 90.604459][ T5803] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 90.719040][ T5812] loop2: detected capacity change from 0 to 512 [ 90.747007][ T5812] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.774923][ T5812] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.786: corrupted inode contents [ 90.819732][ T5812] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.786: mark_inode_dirty error [ 90.848406][ T5820] loop1: detected capacity change from 0 to 1024 [ 90.869373][ T5812] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.786: corrupted inode contents [ 91.043177][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 91.100119][ T5818] vhci_hcd: invalid port number 65 [ 91.275901][ T5838] loop2: detected capacity change from 0 to 1024 [ 91.285422][ T5838] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 91.339965][ T5850] loop0: detected capacity change from 0 to 1024 [ 91.508769][ T5867] hsr0 speed is unknown, defaulting to 1000 [ 91.528851][ T5870] sd 0:0:1:0: device reset [ 91.601933][ T5876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.810'. [ 91.668806][ T5875] hsr0 speed is unknown, defaulting to 1000 [ 91.692967][ T5864] vhci_hcd: invalid port number 65 [ 91.776164][ T5886] loop1: detected capacity change from 0 to 1024 [ 91.787477][ T5886] EXT4-fs: Ignoring removed nobh option [ 91.793475][ T5886] EXT4-fs: Ignoring removed bh option [ 91.800129][ T5888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=5888 comm=syz.4.816 [ 91.849733][ T5886] FAULT_INJECTION: forcing a failure. [ 91.849733][ T5886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.856212][ T5893] bond2: entered promiscuous mode [ 91.863692][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.1.814 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 91.863727][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.863743][ T5886] Call Trace: [ 91.863752][ T5886] [ 91.863764][ T5886] __dump_stack+0x1d/0x30 [ 91.863792][ T5886] dump_stack_lvl+0xe8/0x140 [ 91.863817][ T5886] dump_stack+0x15/0x1b [ 91.863845][ T5886] should_fail_ex+0x265/0x280 [ 91.863900][ T5886] should_fail_alloc_page+0xf2/0x100 [ 91.863942][ T5886] __alloc_frozen_pages_noprof+0xff/0x360 [ 91.863981][ T5886] alloc_pages_mpol+0xb3/0x250 [ 91.864056][ T5886] folio_alloc_noprof+0x97/0x150 [ 91.864087][ T5886] filemap_alloc_folio_noprof+0x66/0x210 [ 91.864124][ T5886] __filemap_get_folio+0x28f/0x650 [ 91.864235][ T5886] ext4_convert_inline_data_to_extent+0x1f0/0x7b0 [ 91.864278][ T5886] ext4_try_to_write_inline_data+0x54/0x90 [ 91.864309][ T5886] ext4_write_begin+0x14b/0xc30 [ 91.864362][ T5886] ext4_da_write_begin+0x1e8/0x580 [ 91.864389][ T5886] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 91.864482][ T5886] generic_perform_write+0x181/0x490 [ 91.864529][ T5886] ext4_buffered_write_iter+0x1ee/0x3c0 [ 91.864618][ T5886] ext4_file_write_iter+0x383/0xf00 [ 91.864656][ T5886] ? exc_page_fault+0x54/0xc0 [ 91.864746][ T5886] ? _parse_integer_limit+0x170/0x190 [ 91.864819][ T5886] do_iter_readv_writev+0x421/0x4c0 [ 91.864861][ T5886] vfs_writev+0x2c9/0x870 [ 91.864903][ T5886] __se_sys_pwritev2+0xfc/0x1c0 [ 91.864944][ T5886] __x64_sys_pwritev2+0x67/0x80 [ 91.865007][ T5886] x64_sys_call+0x1cea/0x2fb0 [ 91.865034][ T5886] do_syscall_64+0xd0/0x1a0 [ 91.865064][ T5886] ? clear_bhb_loop+0x40/0x90 [ 91.865222][ T5886] ? clear_bhb_loop+0x40/0x90 [ 91.865274][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.865302][ T5886] RIP: 0033:0x7fe14275e969 [ 91.865322][ T5886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.865346][ T5886] RSP: 002b:00007fe140dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.865371][ T5886] RAX: ffffffffffffffda RBX: 00007fe142985fa0 RCX: 00007fe14275e969 [ 91.865403][ T5886] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 91.865420][ T5886] RBP: 00007fe140dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.865436][ T5886] R10: 0000000000000bfd R11: 0000000000000246 R12: 0000000000000001 [ 91.865453][ T5886] R13: 0000000000000000 R14: 00007fe142985fa0 R15: 00007ffdb31bc5c8 [ 91.865479][ T5886] [ 92.128221][ T5893] bond2: entered allmulticast mode [ 92.133825][ T5893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.159054][ T5893] bond2 (unregistering): Released all slaves [ 92.179956][ T5907] netlink: 52 bytes leftover after parsing attributes in process `syz.0.823'. [ 92.220192][ T5909] loop0: detected capacity change from 0 to 512 [ 92.250994][ T5909] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.279231][ T5909] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.824: corrupted inode contents [ 92.301856][ T5909] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.824: mark_inode_dirty error [ 92.318872][ T5909] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.824: corrupted inode contents [ 92.373587][ T5919] loop1: detected capacity change from 0 to 512 [ 92.413667][ T5919] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.426776][ T5919] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.829: corrupted inode contents [ 92.446812][ T5919] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.829: mark_inode_dirty error [ 92.461437][ T5919] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.829: corrupted inode contents [ 92.822513][ T5926] capability: warning: `syz.1.830' uses deprecated v2 capabilities in a way that may be insecure [ 92.843757][ T5922] 9pnet_fd: Insufficient options for proto=fd [ 93.059032][ T5932] loop3: detected capacity change from 0 to 512 [ 93.074048][ T5933] rdma_op ffff88810a852d80 conn xmit_rdma 0000000000000000 [ 93.137133][ T5931] hsr0 speed is unknown, defaulting to 1000 [ 93.139932][ T5932] EXT4-fs (loop3): 1 orphan inode deleted [ 93.208992][ T3417] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 93.212302][ T5932] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.290106][ T5941] netlink: 52 bytes leftover after parsing attributes in process `syz.4.834'. [ 93.317298][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 93.317316][ T29] audit: type=1400 audit(1747286100.883:954): avc: denied { append } for pid=5930 comm="syz.3.831" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.446280][ T5948] FAULT_INJECTION: forcing a failure. [ 93.446280][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 93.459457][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.4.835 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 93.459553][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 93.459570][ T5948] Call Trace: [ 93.459577][ T5948] [ 93.459586][ T5948] __dump_stack+0x1d/0x30 [ 93.459612][ T5948] dump_stack_lvl+0xe8/0x140 [ 93.459638][ T5948] dump_stack+0x15/0x1b [ 93.459656][ T5948] should_fail_ex+0x265/0x280 [ 93.459759][ T5948] should_failslab+0x8c/0xb0 [ 93.459807][ T5948] kmem_cache_alloc_node_noprof+0x57/0x320 [ 93.459834][ T5948] ? __alloc_skb+0x101/0x320 [ 93.459952][ T5948] __alloc_skb+0x101/0x320 [ 93.459990][ T5948] netlink_alloc_large_skb+0xba/0xf0 [ 93.460029][ T5948] netlink_sendmsg+0x3cf/0x6b0 [ 93.460123][ T5948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.460158][ T5948] __sock_sendmsg+0x142/0x180 [ 93.460194][ T5948] ____sys_sendmsg+0x31e/0x4e0 [ 93.460225][ T5948] ___sys_sendmsg+0x17b/0x1d0 [ 93.460317][ T5948] __x64_sys_sendmsg+0xd4/0x160 [ 93.460417][ T5948] x64_sys_call+0x2999/0x2fb0 [ 93.460443][ T5948] do_syscall_64+0xd0/0x1a0 [ 93.460470][ T5948] ? clear_bhb_loop+0x40/0x90 [ 93.460493][ T5948] ? clear_bhb_loop+0x40/0x90 [ 93.460526][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.460546][ T5948] RIP: 0033:0x7fac2c8ee969 [ 93.460561][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.460582][ T5948] RSP: 002b:00007fac2af36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.460606][ T5948] RAX: ffffffffffffffda RBX: 00007fac2cb16080 RCX: 00007fac2c8ee969 [ 93.460688][ T5948] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 93.460701][ T5948] RBP: 00007fac2af36090 R08: 0000000000000000 R09: 0000000000000000 [ 93.460715][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.460731][ T5948] R13: 0000000000000000 R14: 00007fac2cb16080 R15: 00007ffc000f1938 [ 93.460756][ T5948] [ 93.667288][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a769000: rx timeout, send abort [ 93.674048][ T5950] loop2: detected capacity change from 0 to 1024 [ 93.675717][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a768000: rx timeout, send abort [ 93.690399][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a769000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.704898][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a768000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.719273][ T29] audit: type=1400 audit(1747286101.233:955): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.727830][ T5945] hsr0 speed is unknown, defaulting to 1000 [ 93.741690][ T29] audit: type=1400 audit(1747286101.233:956): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.741727][ T29] audit: type=1400 audit(1747286101.233:957): avc: denied { write } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.755660][ T5947] bond2: entered promiscuous mode [ 93.771472][ T29] audit: type=1400 audit(1747286101.233:958): avc: denied { add_name } for pid=2988 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.792403][ T5947] bond2: entered allmulticast mode [ 93.798220][ T29] audit: type=1400 audit(1747286101.233:959): avc: denied { create } for pid=2988 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.818713][ T5947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.824459][ T29] audit: type=1400 audit(1747286101.233:960): avc: denied { append open } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.876071][ T29] audit: type=1400 audit(1747286101.233:961): avc: denied { getattr } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.902638][ T5947] bond2 (unregistering): Released all slaves [ 93.936458][ T5955] bond1: entered promiscuous mode [ 93.941840][ T5955] bond1: entered allmulticast mode [ 93.947531][ T5955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.960220][ T5955] bond1 (unregistering): Released all slaves [ 94.108736][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x1 [ 94.117233][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.125872][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.134025][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.142181][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.150197][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.158503][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.166928][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.174927][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.183307][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x2 [ 94.191658][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.199719][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.207860][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x4 [ 94.215861][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.223764][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.231719][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.239954][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.247983][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x2 [ 94.256485][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.265161][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.273169][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.295576][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.303519][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.311504][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.319483][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.327289][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.335132][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.343142][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.351347][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.359363][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.367449][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.375929][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.384445][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.392792][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.400920][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.409493][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.417361][ T3390] hid-generic 0000:0000:20000000.0018: unknown main item tag 0x0 [ 94.425889][ T3390] hid-generic 0000:0000:20000000.0018: item fetching failed at offset 41/43 [ 94.439754][ T3390] hid-generic 0000:0000:20000000.0018: probe with driver hid-generic failed with error -22 [ 94.581498][ T5977] loop1: detected capacity change from 0 to 512 [ 94.597080][ T5977] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.676491][ T5977] EXT4-fs (loop1): shut down requested (0) [ 94.721134][ T5975] 9pnet_fd: Insufficient options for proto=fd [ 94.776758][ T29] audit: type=1326 audit(1747286102.343:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 94.897484][ T29] audit: type=1326 audit(1747286102.363:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 95.012216][ T5990] bond2: entered promiscuous mode [ 95.018322][ T5990] bond2: entered allmulticast mode [ 95.024898][ T5990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.035631][ T5990] bond2 (unregistering): Released all slaves [ 95.040106][ T5987] vhci_hcd: invalid port number 65 [ 95.128411][ T5998] FAULT_INJECTION: forcing a failure. [ 95.128411][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.142541][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.2.853 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 95.142622][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 95.142640][ T5998] Call Trace: [ 95.142647][ T5998] [ 95.142656][ T5998] __dump_stack+0x1d/0x30 [ 95.142691][ T5998] dump_stack_lvl+0xe8/0x140 [ 95.142718][ T5998] dump_stack+0x15/0x1b [ 95.142738][ T5998] should_fail_ex+0x265/0x280 [ 95.142795][ T5998] should_fail+0xb/0x20 [ 95.142906][ T5998] should_fail_usercopy+0x1a/0x20 [ 95.142928][ T5998] _copy_from_user+0x1c/0xb0 [ 95.142960][ T5998] ___sys_sendmsg+0xc1/0x1d0 [ 95.143007][ T5998] __x64_sys_sendmsg+0xd4/0x160 [ 95.143112][ T5998] x64_sys_call+0x2999/0x2fb0 [ 95.143136][ T5998] do_syscall_64+0xd0/0x1a0 [ 95.143218][ T5998] ? clear_bhb_loop+0x40/0x90 [ 95.143247][ T5998] ? clear_bhb_loop+0x40/0x90 [ 95.143276][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.143304][ T5998] RIP: 0033:0x7ff39678e969 [ 95.143324][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.143401][ T5998] RSP: 002b:00007ff394df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.143425][ T5998] RAX: ffffffffffffffda RBX: 00007ff3969b5fa0 RCX: 00007ff39678e969 [ 95.143439][ T5998] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 95.143456][ T5998] RBP: 00007ff394df7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.143472][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.143521][ T5998] R13: 0000000000000000 R14: 00007ff3969b5fa0 R15: 00007fff3ac39148 [ 95.143547][ T5998] [ 95.212632][ T5997] bond2: entered promiscuous mode [ 95.323296][ T5997] bond2: entered allmulticast mode [ 95.330467][ T5997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.402081][ T5997] bond2 (unregistering): Released all slaves [ 95.599982][ T6021] bond2: entered promiscuous mode [ 95.606097][ T6021] bond2: entered allmulticast mode [ 95.612917][ T6021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.615911][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.862'. [ 95.631425][ T6021] bond2 (unregistering): Released all slaves [ 95.735717][ T6027] syzkaller0: entered promiscuous mode [ 95.741268][ T6027] syzkaller0: entered allmulticast mode [ 95.878444][ T6039] loop2: detected capacity change from 0 to 512 [ 95.885771][ T6039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.949646][ T6039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.964190][ T6035] 9pnet_fd: Insufficient options for proto=fd [ 95.973322][ T6039] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 95.988246][ T6039] EXT4-fs (loop2): 1 truncate cleaned up [ 96.095695][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 96.125631][ T6055] bond2: entered promiscuous mode [ 96.130823][ T6055] bond2: entered allmulticast mode [ 96.137505][ T6055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.148910][ T6055] bond2 (unregistering): Released all slaves [ 96.250538][ T6061] loop1: detected capacity change from 0 to 512 [ 96.272112][ T6061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 96.289147][ T6061] System zones: 1-12 [ 96.294828][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 96.303995][ T6061] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.875: corrupted xattr block 255: invalid header [ 96.317972][ T6061] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 96.330477][ T6061] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.875: corrupted xattr block 255: invalid header [ 96.346219][ T6061] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 96.400720][ T6066] loop3: detected capacity change from 0 to 512 [ 96.461623][ T6066] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.515465][ T6066] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.876: corrupted inode contents [ 96.551375][ T6076] loop1: detected capacity change from 0 to 512 [ 96.563480][ T6066] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.876: mark_inode_dirty error [ 96.585382][ T6066] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.876: corrupted inode contents [ 96.618670][ T6076] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.640426][ T6076] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.880: corrupted inode contents [ 96.660935][ T6076] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.880: mark_inode_dirty error [ 96.672852][ T6076] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.880: corrupted inode contents [ 96.759072][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.883'. [ 96.874389][ T6091] syzkaller0: entered promiscuous mode [ 96.880006][ T6091] syzkaller0: entered allmulticast mode [ 96.897350][ T6092] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 96.906074][ T6092] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 96.945963][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 96.965646][ T6098] loop2: detected capacity change from 0 to 1024 [ 97.027193][ T6106] loop2: detected capacity change from 0 to 512 [ 97.088898][ T6106] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.122381][ T6106] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.890: corrupted inode contents [ 97.136221][ T6118] loop4: detected capacity change from 0 to 512 [ 97.144128][ T6106] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.890: mark_inode_dirty error [ 97.158576][ T6118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 97.168050][ T6118] System zones: 1-12 [ 97.172413][ T6106] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.890: corrupted inode contents [ 97.185902][ T6118] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.895: corrupted xattr block 255: invalid header [ 97.200415][ T6118] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 97.226052][ T6118] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.895: corrupted xattr block 255: invalid header [ 97.239664][ T6118] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 97.443617][ T6134] loop1: detected capacity change from 0 to 512 [ 97.450451][ T6134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.460364][ T6134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.503719][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 97.517587][ T6134] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.534100][ T6134] EXT4-fs (loop1): 1 truncate cleaned up [ 97.544118][ T6134] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.821461][ T6148] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 97.829877][ T6148] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 97.842456][ T6147] loop2: detected capacity change from 0 to 512 [ 97.886239][ T6147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.967455][ T6147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.056282][ T6147] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.084000][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 98.112653][ T6147] EXT4-fs (loop2): 1 truncate cleaned up [ 98.357837][ T6178] bond2: entered promiscuous mode [ 98.362931][ T6178] bond2: entered allmulticast mode [ 98.406232][ T6178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.420014][ T6178] bond2 (unregistering): Released all slaves [ 98.506608][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 98.531167][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 98.540111][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 98.577493][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 98.577511][ T29] audit: type=1400 audit(1747286106.143:1003): avc: denied { ioctl } for pid=6193 comm="syz.4.918" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12394 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.613305][ T6196] sctp: [Deprecated]: syz.1.915 (pid 6196) Use of int in max_burst socket option. [ 98.613305][ T6196] Use struct sctp_assoc_value instead [ 98.632665][ T29] audit: type=1400 audit(1747286106.173:1004): avc: denied { shutdown } for pid=6185 comm="syz.1.915" laddr=::1 lport=55699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.655414][ T29] audit: type=1400 audit(1747286106.183:1005): avc: denied { getopt } for pid=6185 comm="syz.1.915" laddr=::1 lport=55699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.697057][ T29] audit: type=1400 audit(1747286106.243:1006): avc: denied { create } for pid=6185 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.717578][ T29] audit: type=1400 audit(1747286106.243:1007): avc: denied { write } for pid=6185 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.776712][ T29] audit: type=1400 audit(1747286106.343:1008): avc: denied { connect } for pid=6205 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.797270][ T6204] loop4: detected capacity change from 0 to 512 [ 98.831318][ T29] audit: type=1400 audit(1747286106.363:1009): avc: denied { ioctl } for pid=6205 comm="syz.1.922" path="socket:[12206]" dev="sockfs" ino=12206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.859260][ T6204] EXT4-fs mount: 87 callbacks suppressed [ 98.859278][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.882107][ T6204] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.893853][ T6204] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.921: corrupted inode contents [ 98.913151][ T6204] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.921: mark_inode_dirty error [ 98.931180][ T29] audit: type=1326 audit(1747286106.493:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 98.955359][ T29] audit: type=1326 audit(1747286106.493:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 98.956244][ T6204] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.921: corrupted inode contents [ 98.979427][ T29] audit: type=1326 audit(1747286106.493:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 99.020328][ T6210] loop3: detected capacity change from 0 to 2048 [ 99.116441][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.152117][ T6210] loop3: p1 < > p4 [ 99.182960][ T6210] loop3: p4 size 8388608 extends beyond EOD, truncated [ 99.212339][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.225250][ T3006] loop3: p1 < > p4 [ 99.234629][ T3006] loop3: p4 size 8388608 extends beyond EOD, truncated [ 99.248716][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 99.300176][ T3006] loop3: p1 < > p4 [ 99.310628][ T3006] loop3: p4 size 8388608 extends beyond EOD, truncated [ 99.314561][ T6235] loop4: detected capacity change from 0 to 128 [ 99.326274][ T6235] FAT-fs (loop4): Directory bread(block 162) failed [ 99.334080][ T6235] FAT-fs (loop4): Directory bread(block 163) failed [ 99.340853][ T6235] FAT-fs (loop4): Directory bread(block 164) failed [ 99.349590][ T6235] FAT-fs (loop4): Directory bread(block 165) failed [ 99.373418][ T6235] FAT-fs (loop4): Directory bread(block 166) failed [ 99.394153][ T6235] FAT-fs (loop4): Directory bread(block 167) failed [ 99.402417][ T6235] FAT-fs (loop4): Directory bread(block 168) failed [ 99.411394][ T6235] FAT-fs (loop4): Directory bread(block 169) failed [ 99.461648][ T6235] FAT-fs (loop4): Directory bread(block 162) failed [ 99.480638][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 99.480953][ T3780] udevd[3780]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 99.502300][ T6241] netlink: 'syz.3.931': attribute type 10 has an invalid length. [ 99.502707][ T6235] FAT-fs (loop4): Directory bread(block 163) failed [ 99.517147][ T6241] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.541721][ T6235] syz.4.929: attempt to access beyond end of device [ 99.541721][ T6235] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 99.556157][ T6235] syz.4.929: attempt to access beyond end of device [ 99.556157][ T6235] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 99.571730][ T6242] syz.4.929: attempt to access beyond end of device [ 99.571730][ T6242] loop4: rw=3, sector=234, nr_sectors = 6 limit=128 [ 99.586251][ T6242] syz.4.929: attempt to access beyond end of device [ 99.586251][ T6242] loop4: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 99.633271][ T6245] siw: device registration error -23 [ 99.796724][ T6260] loop3: detected capacity change from 0 to 512 [ 99.818490][ T6260] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.827466][ T6260] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.937: bad orphan inode 13 [ 99.838796][ T6260] ext4_test_bit(bit=12, block=18) = 1 [ 99.844365][ T6260] is_bad_inode(inode)=0 [ 99.848778][ T6260] NEXT_ORPHAN(inode)=2130706432 [ 99.854648][ T6260] max_ino=32 [ 99.857898][ T6260] i_nlink=1 [ 99.879938][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.897471][ T6258] bond0: entered promiscuous mode [ 99.902662][ T6258] dummy0: entered promiscuous mode [ 100.012736][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.049864][ T6270] loop1: detected capacity change from 0 to 512 [ 100.058894][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.086699][ T6270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.165631][ T6270] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.181929][ T6270] EXT4-fs (loop1): 1 truncate cleaned up [ 100.189666][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.205628][ T6270] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 100.306603][ T6290] FAULT_INJECTION: forcing a failure. [ 100.306603][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 100.319834][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.4.946 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 100.319860][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.319872][ T6290] Call Trace: [ 100.319880][ T6290] [ 100.319917][ T6290] __dump_stack+0x1d/0x30 [ 100.319937][ T6290] dump_stack_lvl+0xe8/0x140 [ 100.319955][ T6290] dump_stack+0x15/0x1b [ 100.319972][ T6290] should_fail_ex+0x265/0x280 [ 100.320014][ T6290] should_failslab+0x8c/0xb0 [ 100.320124][ T6290] kmem_cache_alloc_node_noprof+0x57/0x320 [ 100.320150][ T6290] ? __alloc_skb+0x101/0x320 [ 100.320190][ T6290] __alloc_skb+0x101/0x320 [ 100.320256][ T6290] ? audit_log_start+0x365/0x6c0 [ 100.320286][ T6290] audit_log_start+0x380/0x6c0 [ 100.320318][ T6290] audit_seccomp+0x48/0x100 [ 100.320448][ T6290] ? __seccomp_filter+0x68c/0x10d0 [ 100.320469][ T6290] __seccomp_filter+0x69d/0x10d0 [ 100.320495][ T6290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.320520][ T6290] ? vfs_write+0x75e/0x8d0 [ 100.320608][ T6290] __secure_computing+0x82/0x150 [ 100.320734][ T6290] syscall_trace_enter+0xcf/0x1e0 [ 100.320757][ T6290] do_syscall_64+0xaa/0x1a0 [ 100.320855][ T6290] ? clear_bhb_loop+0x40/0x90 [ 100.320876][ T6290] ? clear_bhb_loop+0x40/0x90 [ 100.320901][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.320924][ T6290] RIP: 0033:0x7fac2c8ee969 [ 100.320956][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.320976][ T6290] RSP: 002b:00007fac2af57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 100.321000][ T6290] RAX: ffffffffffffffda RBX: 00007fac2cb15fa0 RCX: 00007fac2c8ee969 [ 100.321015][ T6290] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00002000007fd000 [ 100.321029][ T6290] RBP: 00007fac2af57090 R08: 0000200000ffe000 R09: 0000000000000000 [ 100.321040][ T6290] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 100.321075][ T6290] R13: 0000000000000000 R14: 00007fac2cb15fa0 R15: 00007ffc000f1938 [ 100.321096][ T6290] [ 100.683539][ T6301] __nla_validate_parse: 14 callbacks suppressed [ 100.683583][ T6301] netlink: 52 bytes leftover after parsing attributes in process `syz.3.951'. [ 100.706895][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 100.791146][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x1 [ 100.799265][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.807183][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.815531][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.823531][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.828457][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.831778][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.849948][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.858355][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.866615][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.875123][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x2 [ 100.883662][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.891800][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.899915][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x4 [ 100.907859][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.915758][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.923828][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.931702][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.939681][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x2 [ 100.947777][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.955645][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.963437][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.971606][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.979581][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.987419][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 100.995300][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.003309][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.011193][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.019005][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.026817][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.034711][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.042823][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.050856][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.058905][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.066696][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.074732][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.082742][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.090856][ T36] hid-generic 0000:0000:20000000.0019: unknown main item tag 0x0 [ 101.098725][ T36] hid-generic 0000:0000:20000000.0019: item fetching failed at offset 41/43 [ 101.117119][ T36] hid-generic 0000:0000:20000000.0019: probe with driver hid-generic failed with error -22 [ 101.184286][ T6316] loop3: detected capacity change from 0 to 1024 [ 101.248652][ T6308] 9pnet_fd: Insufficient options for proto=fd [ 101.275010][ T6316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.308030][ T6326] hsr0 speed is unknown, defaulting to 1000 [ 101.316693][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.348788][ T6329] FAULT_INJECTION: forcing a failure. [ 101.348788][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 101.361573][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.4.960 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 101.361608][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.361652][ T6329] Call Trace: [ 101.361661][ T6329] [ 101.361730][ T6329] __dump_stack+0x1d/0x30 [ 101.361756][ T6329] dump_stack_lvl+0xe8/0x140 [ 101.361852][ T6329] dump_stack+0x15/0x1b [ 101.361892][ T6329] should_fail_ex+0x265/0x280 [ 101.361926][ T6329] should_failslab+0x8c/0xb0 [ 101.361966][ T6329] __kvmalloc_node_noprof+0x126/0x4d0 [ 101.362047][ T6329] ? io_alloc_cache_init+0x31/0xa0 [ 101.362113][ T6329] io_alloc_cache_init+0x31/0xa0 [ 101.362142][ T6329] io_ring_ctx_alloc+0x299/0x650 [ 101.362224][ T6329] io_uring_create+0x10f/0x610 [ 101.362256][ T6329] __se_sys_io_uring_setup+0x1f7/0x210 [ 101.362302][ T6329] __x64_sys_io_uring_setup+0x31/0x40 [ 101.362417][ T6329] x64_sys_call+0x184b/0x2fb0 [ 101.362437][ T6329] do_syscall_64+0xd0/0x1a0 [ 101.362467][ T6329] ? clear_bhb_loop+0x40/0x90 [ 101.362505][ T6329] ? clear_bhb_loop+0x40/0x90 [ 101.362593][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.362651][ T6329] RIP: 0033:0x7fac2c8ee969 [ 101.362667][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.362689][ T6329] RSP: 002b:00007fac2af35fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 101.362714][ T6329] RAX: ffffffffffffffda RBX: 00007fac2cb16080 RCX: 00007fac2c8ee969 [ 101.362730][ T6329] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 101.362858][ T6329] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 101.362869][ T6329] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 101.362884][ T6329] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 101.362908][ T6329] [ 101.692001][ T6339] loop3: detected capacity change from 0 to 1024 [ 101.705634][ T6328] syzkaller0: entered promiscuous mode [ 101.711311][ T6328] syzkaller0: entered allmulticast mode [ 101.725695][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.798421][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.967154][ T6359] loop4: detected capacity change from 0 to 512 [ 101.973964][ T6359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.053450][ T6359] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.071307][ T6359] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 102.086660][ T6359] EXT4-fs (loop4): 1 truncate cleaned up [ 102.093013][ T6359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.108251][ T6359] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.341323][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.428797][ T6378] hsr0 speed is unknown, defaulting to 1000 [ 102.509685][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.552146][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.593736][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 102.619656][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x1 [ 102.627701][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.635810][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.645611][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.649735][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x1 [ 102.653958][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.662840][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.662873][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.671192][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.679509][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679591][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679621][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679649][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679678][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679704][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679730][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x2 [ 102.679777][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679805][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679860][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x4 [ 102.679889][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679915][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.679943][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.680019][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.680046][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x2 [ 102.680074][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.680100][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.680151][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.688972][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.696987][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.705896][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.713567][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.721927][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.730470][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.730497][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.739752][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x2 [ 102.746896][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.755734][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 102.763658][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763692][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763718][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763747][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763867][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763918][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763946][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763971][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.763996][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.764045][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.764067][ T36] hid-generic 0000:0000:20000000.001B: unknown main item tag 0x0 [ 102.764093][ T36] hid-generic 0000:0000:20000000.001B: item fetching failed at offset 41/43 [ 102.774453][ T36] hid-generic 0000:0000:20000000.001B: probe with driver hid-generic failed with error -22 [ 102.782038][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.061000][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x4 [ 103.069641][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.077475][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.085465][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.094245][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.102222][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x2 [ 103.110338][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.118517][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.127306][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.135795][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.143880][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.151683][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.160437][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.168379][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.176368][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.185440][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.193366][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.201450][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.209415][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.217977][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.225968][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.233868][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.242230][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.250838][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.258997][ T3389] hid-generic 0000:0000:20000000.001A: unknown main item tag 0x0 [ 103.266945][ T3389] hid-generic 0000:0000:20000000.001A: item fetching failed at offset 41/43 [ 103.276789][ T3389] hid-generic 0000:0000:20000000.001A: probe with driver hid-generic failed with error -22 [ 103.705445][ T6421] bond2: entered promiscuous mode [ 103.710753][ T6421] bond2: entered allmulticast mode [ 103.721641][ T6421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.745784][ T6421] bond2 (unregistering): Released all slaves [ 103.938029][ T6426] syzkaller0: entered promiscuous mode [ 103.944614][ T6426] syzkaller0: entered allmulticast mode [ 104.076856][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 104.093257][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 104.093346][ T29] audit: type=1326 audit(1747286111.663:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 104.115811][ T6445] netlink: 'syz.4.1005': attribute type 5 has an invalid length. [ 104.137938][ T29] audit: type=1326 audit(1747286111.693:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 104.161756][ T29] audit: type=1326 audit(1747286111.693:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 104.185451][ T29] audit: type=1326 audit(1747286111.703:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324e3e969 code=0x7ffc0000 [ 104.212528][ T6451] loop1: detected capacity change from 0 to 512 [ 104.231455][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.241302][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.283619][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.300658][ T6458] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 104.309232][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.323271][ T6451] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.342750][ T6459] sctp: [Deprecated]: syz.0.1007 (pid 6459) Use of int in max_burst socket option. [ 104.342750][ T6459] Use struct sctp_assoc_value instead [ 104.359143][ T6445] loop4: detected capacity change from 0 to 512 [ 104.363301][ T6449] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.1006: corrupted inode contents [ 104.395325][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.405841][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.415511][ T6445] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.425933][ T6445] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 104.434071][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.448165][ T6449] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.1006: mark_inode_dirty error [ 104.464260][ T6449] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.1006: corrupted inode contents [ 104.464897][ T6445] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 104.487998][ T6445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 104.504997][ T6445] System zones: 0-2, 18-18, 34-34 [ 104.518849][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 104.529588][ T6445] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.553799][ T6445] EXT4-fs (loop4): 1 truncate cleaned up [ 104.587887][ T6473] syzkaller0: entered promiscuous mode [ 104.593631][ T6473] syzkaller0: entered allmulticast mode [ 104.600333][ T6445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.620153][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.685523][ T29] audit: type=1400 audit(1747286112.253:1263): avc: denied { ioctl } for pid=6443 comm="syz.4.1005" path="/218/file1/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.754793][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.898945][ T29] audit: type=1400 audit(1747286112.463:1264): avc: denied { mount } for pid=6509 comm="syz.2.1030" name="/" dev="mqueue" ino=2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.906748][ T6501] bond2: entered promiscuous mode [ 104.927607][ T6501] bond2: entered allmulticast mode [ 104.946044][ T6501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.961141][ T6501] bond2 (unregistering): Released all slaves [ 104.982615][ T6507] bond1: entered promiscuous mode [ 104.988665][ T6507] bond1: entered allmulticast mode [ 104.995513][ T6507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.005921][ T6507] bond1 (unregistering): Released all slaves [ 105.019808][ T6510] vlan2: entered allmulticast mode [ 105.025616][ T6510] bond0: entered allmulticast mode [ 105.030903][ T6510] bond_slave_0: entered allmulticast mode [ 105.036745][ T6510] bond_slave_1: entered allmulticast mode [ 105.189193][ T6527] bond1: entered promiscuous mode [ 105.195788][ T6527] bond1: entered allmulticast mode [ 105.238530][ T6533] loop0: detected capacity change from 0 to 512 [ 105.313223][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.323920][ T6527] bond1 (unregistering): Released all slaves [ 105.434063][ T6533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.473975][ T6533] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.519737][ T6533] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1039: corrupted inode contents [ 105.535890][ T6543] loop2: detected capacity change from 0 to 512 [ 105.567303][ T6533] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.1039: mark_inode_dirty error [ 105.581608][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.602911][ T6543] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.614054][ T6533] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1039: corrupted inode contents [ 105.638442][ T6543] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.1043: corrupted inode contents [ 105.672233][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.683603][ T6543] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.1043: mark_inode_dirty error [ 105.716266][ T6543] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.1043: corrupted inode contents [ 105.730360][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.742337][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.782967][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.796608][ T6555] __nla_validate_parse: 5 callbacks suppressed [ 105.796665][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.812292][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.823870][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.852935][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.862777][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.875240][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.886517][ T6560] sctp: [Deprecated]: syz.3.1047 (pid 6560) Use of int in max_burst socket option. [ 105.886517][ T6560] Use struct sctp_assoc_value instead [ 105.930884][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.939940][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.953667][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 105.968179][ T6566] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 106.141424][ T6579] loop4: detected capacity change from 0 to 512 [ 106.161883][ T29] audit: type=1326 audit(1747286113.723:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 106.162229][ T6579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.186476][ T29] audit: type=1326 audit(1747286113.723:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 106.204365][ T6585] loop1: detected capacity change from 0 to 256 [ 106.227781][ T29] audit: type=1326 audit(1747286113.773:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 106.234350][ T6579] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.259124][ T29] audit: type=1326 audit(1747286113.773:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 106.276879][ T6579] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1057: corrupted inode contents [ 106.338261][ T6579] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.1057: mark_inode_dirty error [ 106.351849][ T6579] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1057: corrupted inode contents [ 106.363448][ T6594] loop2: detected capacity change from 0 to 128 [ 106.373864][ T6594] FAT-fs (loop2): Directory bread(block 162) failed [ 106.380697][ T6594] FAT-fs (loop2): Directory bread(block 163) failed [ 106.391108][ T6594] FAT-fs (loop2): Directory bread(block 164) failed [ 106.401119][ T6594] FAT-fs (loop2): Directory bread(block 165) failed [ 106.409464][ T6594] FAT-fs (loop2): Directory bread(block 166) failed [ 106.418156][ T6594] FAT-fs (loop2): Directory bread(block 167) failed [ 106.420967][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.436678][ T6594] FAT-fs (loop2): Directory bread(block 168) failed [ 106.444226][ T6594] FAT-fs (loop2): Directory bread(block 169) failed [ 106.468883][ T6596] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1064'. [ 106.534123][ T6594] FAT-fs (loop2): Directory bread(block 162) failed [ 106.558537][ T6594] FAT-fs (loop2): Directory bread(block 163) failed [ 106.574637][ T6594] syz.2.1062: attempt to access beyond end of device [ 106.574637][ T6594] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 106.628829][ T6594] syz.2.1062: attempt to access beyond end of device [ 106.628829][ T6594] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 106.664919][ T6613] syz.2.1062: attempt to access beyond end of device [ 106.664919][ T6613] loop2: rw=3, sector=234, nr_sectors = 6 limit=128 [ 106.696487][ T6613] syz.2.1062: attempt to access beyond end of device [ 106.696487][ T6613] loop2: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 106.892937][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x1 [ 106.901186][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.909254][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.917259][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.925204][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.933229][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.941376][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.950594][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.959068][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.967174][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x2 [ 106.976143][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.984202][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 106.992117][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x4 [ 107.000616][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.008676][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.016848][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.024738][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.032795][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x2 [ 107.040861][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.048963][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.057448][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.065841][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.074383][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.082878][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.092026][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.100508][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.108488][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.117678][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.125868][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.133956][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.141898][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.149868][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.157970][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.165970][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.174044][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.181895][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.190094][ T36] hid-generic 0000:0000:20000000.001C: unknown main item tag 0x0 [ 107.198256][ T36] hid-generic 0000:0000:20000000.001C: item fetching failed at offset 41/43 [ 107.207967][ T36] hid-generic 0000:0000:20000000.001C: probe with driver hid-generic failed with error -22 [ 108.648646][ T6650] loop2: detected capacity change from 0 to 1024 [ 108.686011][ T6648] bond1: entered promiscuous mode [ 108.691195][ T6648] bond1: entered allmulticast mode [ 108.709941][ T6648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.728218][ T6645] 9pnet_fd: Insufficient options for proto=fd [ 108.735142][ T6656] loop0: detected capacity change from 0 to 512 [ 108.757367][ T6650] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1079: Failed to acquire dquot type 0 [ 108.761523][ T6648] bond1 (unregistering): Released all slaves [ 108.780782][ T6650] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 108.797076][ T6650] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.1079: corrupted inode contents [ 108.805647][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.823901][ T6656] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.835595][ T6650] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.1079: mark_inode_dirty error [ 108.873287][ T6650] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.1079: corrupted inode contents [ 108.935659][ T6656] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1074: corrupted inode contents [ 108.979139][ T6656] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.1074: mark_inode_dirty error [ 108.991163][ T6650] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.1079: mark_inode_dirty error [ 109.005921][ T6656] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1074: corrupted inode contents [ 109.018466][ T6650] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.1079: corrupted inode contents [ 109.034896][ T6650] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 109.048952][ T6670] capability: warning: `syz.1.1081' uses 32-bit capabilities (legacy support in use) [ 109.103126][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 109.103142][ T29] audit: type=1400 audit(1747286116.633:1304): avc: denied { ioctl } for pid=6664 comm="syz.1.1081" path="socket:[14003]" dev="sockfs" ino=14003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.145025][ T6650] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.1079: corrupted inode contents [ 109.164890][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.190126][ T6650] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.1079: mark_inode_dirty error [ 109.276162][ T6677] loop4: detected capacity change from 0 to 512 [ 109.283320][ T6677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.394950][ T6677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.411075][ T6650] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 109.586268][ T6677] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.601749][ T6677] EXT4-fs (loop4): 1 truncate cleaned up [ 109.609305][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.627044][ T6677] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.069332][ T6677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 110.074372][ T6685] loop0: detected capacity change from 0 to 512 [ 110.091777][ T6685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.194333][ T6685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.225576][ T6685] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 110.242216][ T6685] EXT4-fs (loop0): 1 truncate cleaned up [ 110.249485][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.287278][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.324565][ T6685] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.339845][ T6650] EXT4-fs (loop2): 1 truncate cleaned up [ 110.429955][ T6650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.469599][ T6692] loop1: detected capacity change from 0 to 128 [ 110.544472][ T6692] FAT-fs (loop1): Directory bread(block 162) failed [ 110.551292][ T6692] FAT-fs (loop1): Directory bread(block 163) failed [ 110.622797][ T6692] FAT-fs (loop1): Directory bread(block 164) failed [ 110.625570][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.643198][ T6692] FAT-fs (loop1): Directory bread(block 165) failed [ 110.650443][ T6692] FAT-fs (loop1): Directory bread(block 166) failed [ 110.675607][ T6692] FAT-fs (loop1): Directory bread(block 167) failed [ 110.682275][ T6692] FAT-fs (loop1): Directory bread(block 168) failed [ 110.700391][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x1 [ 110.708494][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.717146][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.725238][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.733219][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.741408][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.750240][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.758326][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.766942][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.774803][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x2 [ 110.782669][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.783852][ T6692] FAT-fs (loop1): Directory bread(block 169) failed [ 110.791467][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.805091][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x4 [ 110.813814][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.821797][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.829894][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.838160][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.847071][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x2 [ 110.849468][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'. [ 110.855472][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.872326][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.880529][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.889503][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.897558][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.905730][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.905734][ T6698] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 110.914407][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.922852][ T6698] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 110.930999][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.940591][ T6698] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1079: Failed to acquire dquot type 0 [ 110.961180][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.970333][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.979738][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.987821][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 110.996148][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.005657][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.014751][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.024386][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.034314][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.043106][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.052089][ T3389] hid-generic 0000:0000:20000000.001D: unknown main item tag 0x0 [ 111.060770][ T3389] hid-generic 0000:0000:20000000.001D: item fetching failed at offset 41/43 [ 111.110204][ T3389] hid-generic 0000:0000:20000000.001D: probe with driver hid-generic failed with error -22 [ 111.127457][ T6692] FAT-fs (loop1): Directory bread(block 162) failed [ 111.136630][ T6692] FAT-fs (loop1): Directory bread(block 163) failed [ 111.151554][ T6692] syz.1.1088: attempt to access beyond end of device [ 111.151554][ T6692] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 111.180994][ T6692] syz.1.1088: attempt to access beyond end of device [ 111.180994][ T6692] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 111.213191][ T6707] syz.1.1088: attempt to access beyond end of device [ 111.213191][ T6707] loop1: rw=3, sector=234, nr_sectors = 6 limit=128 [ 111.237137][ T6707] syz.1.1088: attempt to access beyond end of device [ 111.237137][ T6707] loop1: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 111.256346][ T6709] bond2: entered promiscuous mode [ 111.261518][ T6709] bond2: entered allmulticast mode [ 111.286602][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 111.303872][ T6709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.320014][ T6709] bond2 (unregistering): Released all slaves [ 111.350020][ T29] audit: type=1326 audit(1747286118.913:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.0.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9a0e969 code=0x7ffc0000 [ 111.374622][ T29] audit: type=1326 audit(1747286118.913:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.0.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5aa9a0e969 code=0x7ffc0000 [ 111.398455][ T29] audit: type=1326 audit(1747286118.913:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.0.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9a0e969 code=0x7ffc0000 [ 111.422423][ T29] audit: type=1326 audit(1747286118.913:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.0.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5aa9a0e969 code=0x7ffc0000 [ 111.446511][ T29] audit: type=1326 audit(1747286118.913:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.0.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9a0e969 code=0x7ffc0000 [ 111.471071][ T29] audit: type=1326 audit(1747286118.913:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.0.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9a0e969 code=0x7ffc0000 [ 111.537692][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.870033][ T6738] loop2: detected capacity change from 0 to 512 [ 111.877162][ T6738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.975506][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x1 [ 111.983575][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 111.991839][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.000758][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.009894][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.017877][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.028027][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.037935][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.047045][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.056912][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x2 [ 112.065545][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.075216][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.084583][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x4 [ 112.092461][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.101072][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.109435][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.118017][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.126425][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x2 [ 112.134598][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.142823][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.150910][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.158813][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.166987][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.175154][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.183380][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.191239][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.199655][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.207577][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.215507][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.224113][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.232173][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.232900][ T6740] hsr0 speed is unknown, defaulting to 1000 [ 112.240214][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.240245][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.240273][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.240301][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.240390][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.240418][ T1043] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0 [ 112.240466][ T1043] hid-generic 0000:0000:20000000.001E: item fetching failed at offset 41/43 [ 112.251378][ T6738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.317359][ T1043] hid-generic 0000:0000:20000000.001E: probe with driver hid-generic failed with error -22 [ 112.329328][ T6738] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 112.346773][ T6738] EXT4-fs (loop2): 1 truncate cleaned up [ 112.352925][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.371751][ T29] audit: type=1400 audit(1747286119.893:1311): avc: denied { mount } for pid=6739 comm="syz.1.1105" name="/" dev="ramfs" ino=13161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.476290][ T6745] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 112.549372][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.624236][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 112.671981][ T6763] loop4: detected capacity change from 0 to 1024 [ 112.763271][ T6763] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1111: Failed to acquire dquot type 0 [ 112.841673][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 112.851187][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 112.857810][ T6774] syzkaller0: entered promiscuous mode [ 112.866392][ T6774] syzkaller0: entered allmulticast mode [ 112.902943][ T6763] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 112.925053][ T6763] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.1111: corrupted inode contents [ 112.964838][ T6763] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.1111: mark_inode_dirty error [ 112.983340][ T6765] sctp: [Deprecated]: syz.3.1112 (pid 6765) Use of int in max_burst socket option. [ 112.983340][ T6765] Use struct sctp_assoc_value instead [ 113.003560][ T6763] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.1111: corrupted inode contents [ 113.018563][ T6763] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.1111: mark_inode_dirty error [ 113.025424][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 113.047982][ T6763] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.1111: corrupted inode contents [ 113.063194][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 113.072232][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 113.085526][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 113.095100][ T6763] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 113.108055][ T6781] bond2: entered promiscuous mode [ 113.113353][ T6781] bond2: entered allmulticast mode [ 113.119043][ T6781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.129475][ T6781] bond2 (unregistering): Released all slaves [ 113.139352][ T6763] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.1111: corrupted inode contents [ 113.163259][ T6763] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.1111: mark_inode_dirty error [ 113.173514][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 113.186113][ T6763] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 113.196167][ T6763] EXT4-fs (loop4): 1 truncate cleaned up [ 113.202481][ T6763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.241431][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x1 [ 113.249969][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.258533][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.267201][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.275592][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.283651][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.291500][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.299395][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.307475][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.315344][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x2 [ 113.323221][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.331998][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.340022][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x4 [ 113.348003][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.355804][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.364069][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.372285][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.380458][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x2 [ 113.388427][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.396669][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.404693][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.412741][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.420749][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.428733][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.436726][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.444986][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.452884][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.460794][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.468680][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.476947][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.484833][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.492824][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.501242][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.509497][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.517372][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.525347][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.533124][ T1043] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0 [ 113.541220][ T1043] hid-generic 0000:0000:20000000.001F: item fetching failed at offset 41/43 [ 113.573572][ T1043] hid-generic 0000:0000:20000000.001F: probe with driver hid-generic failed with error -22 [ 113.745991][ T6799] loop3: detected capacity change from 0 to 512 [ 113.752716][ T6799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.846351][ T6799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.903406][ T6799] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 113.929711][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.939856][ T6799] EXT4-fs (loop3): 1 truncate cleaned up [ 114.050495][ T6805] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 114.051396][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.313803][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 114.313821][ T29] audit: type=1326 audit(1747286121.883:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.379812][ T29] audit: type=1326 audit(1747286121.913:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.405702][ T29] audit: type=1326 audit(1747286121.913:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.430108][ T29] audit: type=1326 audit(1747286121.913:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.455911][ T29] audit: type=1326 audit(1747286121.913:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.475387][ T6799] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.480201][ T29] audit: type=1326 audit(1747286121.923:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.514350][ T6814] sctp: [Deprecated]: syz.4.1124 (pid 6814) Use of int in max_burst socket option. [ 114.514350][ T6814] Use struct sctp_assoc_value instead [ 114.530247][ T29] audit: type=1326 audit(1747286121.923:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.556587][ T29] audit: type=1326 audit(1747286121.923:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.580587][ T29] audit: type=1326 audit(1747286121.923:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.605778][ T29] audit: type=1326 audit(1747286121.923:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14275e969 code=0x7ffc0000 [ 114.879357][ T6837] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 115.075601][ T6855] sctp: [Deprecated]: syz.1.1136 (pid 6855) Use of int in max_burst socket option. [ 115.075601][ T6855] Use struct sctp_assoc_value instead [ 115.240428][ T6860] loop4: detected capacity change from 0 to 512 [ 115.248336][ T6860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.276868][ T6860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.354766][ T6860] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 115.403655][ T6860] EXT4-fs (loop4): 1 truncate cleaned up [ 115.458682][ T6860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.472296][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.486084][ T6860] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 115.535340][ T6879] loop3: detected capacity change from 0 to 128 [ 115.548669][ T6879] FAT-fs (loop3): Directory bread(block 162) failed [ 115.555572][ T6879] FAT-fs (loop3): Directory bread(block 163) failed [ 115.607079][ T6879] FAT-fs (loop3): Directory bread(block 164) failed [ 115.615385][ T6885] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 115.633121][ T6879] FAT-fs (loop3): Directory bread(block 165) failed [ 115.654313][ T6879] FAT-fs (loop3): Directory bread(block 166) failed [ 115.678816][ T6879] FAT-fs (loop3): Directory bread(block 167) failed [ 115.701093][ T6879] FAT-fs (loop3): Directory bread(block 168) failed [ 115.725237][ T6879] FAT-fs (loop3): Directory bread(block 169) failed [ 115.833840][ T6879] FAT-fs (loop3): Directory bread(block 162) failed [ 115.854853][ T6879] FAT-fs (loop3): Directory bread(block 163) failed [ 115.862714][ T6879] syz.3.1147: attempt to access beyond end of device [ 115.862714][ T6879] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 115.934138][ T6879] syz.3.1147: attempt to access beyond end of device [ 115.934138][ T6879] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 115.964509][ T6901] syz.3.1147: attempt to access beyond end of device [ 115.964509][ T6901] loop3: rw=3, sector=234, nr_sectors = 6 limit=128 [ 116.093373][ T6901] syz.3.1147: attempt to access beyond end of device [ 116.093373][ T6901] loop3: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 116.978080][ T6910] loop0: detected capacity change from 0 to 512 [ 116.985324][ T6910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.154806][ T6910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.186981][ T6908] 9pnet_fd: Insufficient options for proto=fd [ 117.249523][ T6910] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 117.265499][ T6910] EXT4-fs (loop0): 1 truncate cleaned up [ 117.271887][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.293135][ T6896] ================================================================== [ 117.301387][ T6896] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 117.311445][ T6896] [ 117.313967][ T6896] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 117.322420][ T6896] tick_do_update_jiffies64+0x113/0x1c0 [ 117.328027][ T6896] tick_nohz_handler+0x7f/0x2d0 [ 117.333003][ T6896] __hrtimer_run_queues+0x20f/0x5a0 [ 117.338510][ T6896] hrtimer_interrupt+0x21a/0x460 [ 117.343574][ T6896] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 117.349598][ T6896] sysvec_apic_timer_interrupt+0x32/0x80 [ 117.355280][ T6896] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.361304][ T6896] [ 117.363644][ T6896] read to 0xffffffff868099c0 of 8 bytes by task 6896 on cpu 1: [ 117.371317][ T6896] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 117.377782][ T6896] count_shadow_nodes+0x6a/0x230 [ 117.382762][ T6896] do_shrink_slab+0x63/0x680 [ 117.387379][ T6896] shrink_slab+0x448/0x760 [ 117.391828][ T6896] shrink_node+0x6c3/0x2110 [ 117.396549][ T6896] do_try_to_free_pages+0x3f6/0xcd0 [ 117.401787][ T6896] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 117.407754][ T6896] try_charge_memcg+0x3ab/0x870 [ 117.412645][ T6896] obj_cgroup_charge_pages+0xb7/0x1a0 [ 117.418068][ T6896] __memcg_kmem_charge_page+0x9f/0x170 [ 117.423645][ T6896] __alloc_frozen_pages_noprof+0x188/0x360 [ 117.429599][ T6896] alloc_pages_mpol+0xb3/0x250 [ 117.434400][ T6896] alloc_pages_noprof+0x90/0x130 [ 117.439367][ T6896] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 117.445217][ T6896] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 117.450634][ T6896] ip_set_alloc+0x1f/0x30 [ 117.455322][ T6896] hash_netiface_create+0x282/0x740 [ 117.460570][ T6896] ip_set_create+0x3cc/0x960 [ 117.465197][ T6896] nfnetlink_rcv_msg+0x4c6/0x590 [ 117.470155][ T6896] netlink_rcv_skb+0x120/0x220 [ 117.474967][ T6896] nfnetlink_rcv+0x16b/0x1690 [ 117.479870][ T6896] netlink_unicast+0x5a1/0x670 [ 117.484689][ T6896] netlink_sendmsg+0x58b/0x6b0 [ 117.489485][ T6896] __sock_sendmsg+0x142/0x180 [ 117.494223][ T6896] ____sys_sendmsg+0x31e/0x4e0 [ 117.499075][ T6896] ___sys_sendmsg+0x17b/0x1d0 [ 117.503784][ T6896] __x64_sys_sendmsg+0xd4/0x160 [ 117.508767][ T6896] x64_sys_call+0x2999/0x2fb0 [ 117.514424][ T6896] do_syscall_64+0xd0/0x1a0 [ 117.519330][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.525443][ T6896] [ 117.527949][ T6896] value changed: 0x00000000ffffb869 -> 0x00000000ffffb86a [ 117.535256][ T6896] [ 117.537640][ T6896] Reported by Kernel Concurrency Sanitizer on: [ 117.543985][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.1.1155 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 117.556852][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.567010][ T6896] ================================================================== [ 117.693198][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.847883][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.