last executing test programs: 1.872791573s ago: executing program 0 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="08800a00", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r6}, 0x18) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008"], 0x0) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c77c50615eb3866526e6f3d", @ANYRESHEX=r9, @ANYBLOB=',\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0xb, 0xe8b, 0xfffffffffffffffd}, 0x9, 0x10000000}, {{@in=@multicast1, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x2, 0x0, 0xf000000, 0xfffffffd}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.309305791s ago: executing program 0 (id=517): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x13, 0x9c, 0x9, 0x2d}}) 1.277536132s ago: executing program 0 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000008500000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x84880) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) getrusage(0x0, &(0x7f0000000540)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) listen(r2, 0x6) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=") bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYRESDEC=r6], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r7}, 0x10) unshare(0x8000000) r8 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r8, 0x0, 0xd, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r10}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 971.703416ms ago: executing program 1 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x52d35ce30131f272}) 949.554897ms ago: executing program 4 (id=522): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x2) 909.701687ms ago: executing program 0 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x16, 0x8, &(0x7f00000014c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001600)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff0af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x2f) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000015c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000000500)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44845) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000001400)=[{&(0x7f0000000380)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000680)="498a637ee1c8966bd5b90ae7831098875e0801de2c673a993be3067cf3fccb4ba21ebb7bc980386adcfaf04159b4529c3412cb457ef8db3e29a651cbdf592053f45b5dfff7470bdded85a8ba1fd05bb49f0d29f69a08b9df77123294ab43fc9a6d70e540a1e4a2d1ea68ba3f33075d0ba918a9e4978703c9c33c45fd81bac9f9dbffc0ba0ab2e7a190d4b9284525db57df7a472a7d0758804aaca0a6e0d8d27158adb9b8e9a0018124657274b7902f5e1d385063e0b8358920d6274515cf8da9a3cefe8fca317ec9a1b274a632", 0xcd}, {&(0x7f0000000780)="890d163c70043441aa4ef8761a7d4cda3e6dde8cc2daa1ed137f93254cb8282ba825a6d313c153f012de5a08911af5b797c00e33cfbeeb1f04467d3a23f46072c9ee47ddb78b63ae62cae77cb68004e31b0f448dcbe2955ddcf041e27543f72dd8ea3c6420e7", 0x66}, {&(0x7f00000005c0)="efa2ad366a6da94a09c6681fcb9152caec67cc7f9c", 0x15}, {&(0x7f0000000800)="cf37df00e776f78d2e9ddc1c069d", 0xe}, {&(0x7f0000000840)="97805a0aa9d4615c357f23b39f0383f88ef59686d3be804ed9d3594ebeeecf9a6d87e7bdbe49d95399b332539c6cfd9f2efb43f2fa9eb35c36835d22984e410f27172d3f13af8a209dd5223d432336a7d8b4d39988bdfd94fd22c925059d088ba0731d5092a550ce573dcacd8c301263b1dbf66ed8c15047def02d0b1e90ad256382d372899a5f8a17aac51debf07cd3d32ad10a5383a3864a348229e5eacd4629e0fa521a9e6ea99ebaab1b2725a98599780198fc3bb7125bbbf88bf195d4b300ab31ffb5124ad73a4aeefe25f46bd2d6bd3737eb54e876eaf1543af53e6e767fe38af1f52a89", 0xe7}, {&(0x7f0000000b00)="d38dea5aab4f1a8f79f5862d0d91a64c1d506a621e714e19a897534cb1981621ecb58dfb9814c6c3e895a3e5b867d9287ceeff41223f735775cff1afb871903388acebf2009be0ec7fc2fce8ef2b1f790c53a790c75a9e25434ed0e8245c175553b9d6375b6b06c220e71f8bc1bcb548191ed8b0931be87a98756a7226b7d430292631aeb5b26f37fa201a56e195cbd9f794c7682fd31dbc8edd106895097024150962fe0af54fe0892bf3d3460030f883988e449e358bbdcad28b77e815fa02c5b28703221ea90a992fdc3b7495eeb48a39c4cb", 0xd4}, {&(0x7f0000000940)="63aa7f619dee2bb88e431bf27aa3ebef70b065415f", 0x15}], 0x7, &(0x7f0000000c00)=[@authinfo={0x18, 0x84, 0x6, {0x82}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfffff001}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x6, 0x8000, 0x0, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @init={0x18, 0x84, 0x0, {0x8, 0x0, 0x3d21, 0x6}}], 0xe0, 0x40004}, {&(0x7f0000000d00)=@in6={0xa, 0x4e22, 0x6, @mcast2, 0x8001}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000d40)="25e7b660ff3a9f0db9465e16c138345bf149ea1ff3ec", 0x16}, {&(0x7f0000000d80)="bc81e7f73cd8fcb9225ba921117f006b33ebc1ff8b2d7fe8150149233956f5b96af3aa7b49fe2d9300c4075ecf61ae887cc3c5cb8dcd47ae57a40e320c7d209ddb7df3e4d65335c6bbc4eb76ea5e565290890ce537c327ca4f908ec291c75a2bd52c09ccd3b8811669d72ea4830bd18241b1e4cd1be69962ab9fa0066dc3e33a00a1e979ed1372b32c5536357330a3ea5cc8851db01f618f6733e48df544e4c07c50b1a79f88d916edee08b43384824aa0cc9dcf46c455321397e7511180055a1d908d51e203cbc6e5", 0xc9}, {&(0x7f0000000e80)="9ad9c992d1dbf6c0eb9e8862b18a4eaa422e8534bd02dacb2ff1548850018516567df53d3e23577ca315ee81880528ae18e2366005f7f72de325eae9ece2ffe5b6d4f770ae74e9c120b8c7fcfa459a1d79864ef11bec5c513213d96ada159c2910b819f1a2591fc9f45651d424c81fa68412af7f71a020dd21e1871de6b31014f42d6540289d39a92def720d774ee0d4f182d3c1c5b640e01661ea59780542fdfa8ce87482b7c2d5a5cb4c497f98ab4c6012e9e2ebd7bb54f131f0fc60b695efe7f7efd60d47a11a7170ab00f7ca8bc1f33e022f6244dd802075d1e9928a518e", 0xe0}, {&(0x7f0000000f80)="fbf1e69f5b29c19ee1e1961d17dd04e3e88ef7565d89df47adb682d7c2c2e647ba7fd4dba6aa3fa42a484edb7b31b2ed91a55693f8961bed00159f983de80d683cc5e6b78a1eba990b6cbb0900a4e30ac8b1ae2345e492b1b5d96a77b4bded7c161c8f0cfa84168393f8bfa1775d51eaf0846e33108c2be3d326a33eb1b819c7f8ba477b19d0092fa1d7dca029c7c82fb777b117670b7c388b84c7594591cbf6de876258127dd2d00805a6fc76c0f621c21094768129a89469216ff153f1ee07ac", 0xc1}], 0x4, 0x0, 0x0, 0x4000000}, {&(0x7f00000010c0)=@in6={0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001100)="48a16fe8a26d0894cb54012b786da63767c5e3417520499192b86e2a1544473f2179204de355f3ba49ed05beb957dd402a7510851a29e9604695cc5b133df6ec8be74ebdf09ba5fce7e8a3f8c2ee185d6cfa607ec20b1f1c0eb516c206b259258221e4a294dc22a88ab8ed6d863f6335a8881420ef8e82ef83d66681f4e79a17a6489d2b7cf8ba180b0da46e7210c64bfc880fda597b40ef23c5e7455ad199eedd6e22d1e66c37ecd6cad386776d6d59593127ed331d1f0506520ff4542c558c053eb332e03b7cf2d1edd5b5467dfc66bfb308ea5dd16d30a596abd1b42e48", 0xdf}, {&(0x7f0000001200)="033ee977a2e30af309d9e9dfe7002415f7eb39336de0e8ac87f5276225a783152c2d7b8c5d8f0b06c68fc42aa956c5fbb183dccfd348bd688daa5968dfb4afb5a5b733f8f40b5749f84e40772ea1b826bb1e476f3d683d00b0db6385a426bfc3205de62d12cc4c1d50214d442ef34d427d3da4e88b7c092e8abe6a329a195436852271000e4e7e539396e27b8442b80c72733a2350e3a47b9f8cc8af010216891f3138cc9366d712cdbdde7ec7e2c55dcb74ee3edf01d28ae27f141c4f6b7544d7ea558b2d2e81c81b7a3df0ec87eff20dba0ece799f299cb1", 0xd9}, {&(0x7f0000001300)="270665c6ed30eed80029ceb800323939bf0741dea82be79d29f909ee7de1afca9380f9b772aa62bb2357202904dee2405a2cf9ca7d42f0a1916adcc43a85f2bae816a1fbf2971401fc9d98605d9e5d32df5e3307dc86720c58536d93691fa141fd7a5fcaa2aefa9dc5f50acdfc042b8211741dd025960b24e6fbb7deffc45cd6c12efb7950377237b58fd06933bcaf36e4f13446ba9b", 0x96}], 0x3, 0x0, 0x0, 0x40050}], 0x3, 0x40054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(0xffffffffffffffff, r10, 0x80000) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 857.024428ms ago: executing program 4 (id=524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800ff0f00003335f2459d8a090000000000000000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003", @ANYRESOCT, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb00000000"], 0x1bc}}, 0x4804) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0xe) syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffe}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 852.401908ms ago: executing program 1 (id=525): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='sys_enter\x00'}, 0x18) fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1) 804.010159ms ago: executing program 3 (id=526): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 803.201269ms ago: executing program 3 (id=527): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 764.544609ms ago: executing program 1 (id=528): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 762.005269ms ago: executing program 2 (id=529): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x13, 0x9c, 0x9, 0x2d}}) 706.82766ms ago: executing program 2 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000ffe100ffffffe80040e3dc4f41972c8862eb760938fac7cfac06ec796b164cbd7baacedc43a1b65e83a311f2bb9399e360174418aba048963dd1d63746e382306cbb73b2f3681b2a2078b1bf2871dc14ceea93fff315f7c3631734f23b9335731e3fa5e5040f07527ff35f75b93bb03b8e629ec0b56ad41659d5c23bd179e3ca7d2b78cdd52c6fde2bfaa76dae6a69569cdfb9aa2b05c5edb3f55726f7ac76231dcaef861cd9048752e23c48b7f67f9063ea6badf9ce920f2c07a247345dfd15bca888dd230a", @ANYRES32=0x1, @ANYBLOB="01000100"/18, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000020000000200"/28], 0x50) dup2(r2, r2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 706.49095ms ago: executing program 3 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r4]) 705.95951ms ago: executing program 1 (id=532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800ff0f00003335f2459d8a090000000000000000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003", @ANYRESOCT, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb00000000"], 0x1bc}}, 0x4804) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0xe) syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 684.67571ms ago: executing program 0 (id=533): creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioprio_get$pid(0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x400000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x6, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000adf00000000000005a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500fc2700000000000000000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 656.932721ms ago: executing program 3 (id=534): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x2) 471.546893ms ago: executing program 2 (id=535): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 433.930344ms ago: executing program 1 (id=536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$vcsn(&(0x7f0000001380), 0x8000000000000001, 0x401c0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) msgsnd(0x0, &(0x7f0000001480)={0x3, "38160859a7f789181b40ecb239949815da0f37c259e9fbda7b809605ecc8903fa69ed9609721f855"}, 0x30, 0x0) 403.518074ms ago: executing program 3 (id=537): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1b8, 0x12, 0x60a, 0x1b8, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00', {}, {0xff}}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0x7, 'kmp\x00', "ac072d587a25cf11c2177e91f873695f0f388bcca4278a139bdadc8372a99355e041aed79619dc886e9965584f1644594932bb89045702e8330dfc88d05698900000342524529ae9b4c97e4841b9ef81c330fa45d445a68455e2430267bf0b94a70c185cf2a3f456165d34cc6a76446fdc173039d5dc5f2e9e02bff4acffce4a", 0x0, 0x2, {0x5}}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0x0, 0xf5}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kmem_cache_free\x00', r3, 0x0, 0xd22}, 0x17) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r1, 0x0, 0x2a, 0x2101, 0x0, 0x0) pwrite64(r1, &(0x7f0000000080)="3aec11d18e02ac51a8f483be7c784c50c86f5aa8fb898c3631f3d97782329d974aa2442c2c1e25a08117fe9d0fe6cf61e990d8952e0d2d88740f081efbe9d6e43265a83c18d91ced", 0x48, 0x5) 397.104565ms ago: executing program 0 (id=538): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) listen(r3, 0x5) fsmount(r0, 0x0, 0x0) (async) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) (async) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) (async) sendfile(r5, r5, 0x0, 0x1000000201005) 380.544435ms ago: executing program 4 (id=539): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='sys_enter\x00'}, 0x18) fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1) 334.324145ms ago: executing program 1 (id=540): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000015c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000000500)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44845) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000001400)=[{&(0x7f0000000380)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000680)="498a637ee1c8966bd5b90ae7831098875e0801de2c673a993be3067cf3fccb4ba21ebb7bc980386adcfaf04159b4529c3412cb457ef8db3e29a651cbdf592053f45b5dfff7470bdded85a8ba1fd05bb49f0d29f69a08b9df77123294ab43fc9a6d70e540a1e4a2d1ea68ba3f33075d0ba918a9e4978703c9c33c45fd81bac9f9dbffc0ba0ab2e7a190d4b9284525db57df7a472a7d0758804aaca0a6e0d8d27158adb9b8e9a0018124657274b7902f5e1d385063e0b8358920d6274515cf8da9a3cefe8fca317ec9a1b274a632", 0xcd}, {&(0x7f0000000780)="890d163c70043441aa4ef8761a7d4cda3e6dde8cc2daa1ed137f93254cb8282ba825a6d313c153f012de5a08911af5b797c00e33cfbeeb1f04467d3a23f46072c9ee47ddb78b63ae62cae77cb68004e31b0f448dcbe2955ddcf041e27543f72dd8ea3c6420e7", 0x66}, {&(0x7f00000005c0)="efa2ad366a6da94a09c6681fcb9152caec67cc7f9c", 0x15}, {&(0x7f0000000800)="cf37df00e776f78d2e9ddc1c069d", 0xe}, {&(0x7f0000000840)="97805a0aa9d4615c357f23b39f0383f88ef59686d3be804ed9d3594ebeeecf9a6d87e7bdbe49d95399b332539c6cfd9f2efb43f2fa9eb35c36835d22984e410f27172d3f13af8a209dd5223d432336a7d8b4d39988bdfd94fd22c925059d088ba0731d5092a550ce573dcacd8c301263b1dbf66ed8c15047def02d0b1e90ad256382d372899a5f8a17aac51debf07cd3d32ad10a5383a3864a348229e5eacd4629e0fa521a9e6ea99ebaab1b2725a98599780198fc3bb7125bbbf88bf195d4b300ab31ffb5124ad73a4aeefe25f46bd2d6bd3737eb54e876eaf1543af53e6e767fe38af1f52a89", 0xe7}, {&(0x7f0000000b00)="d38dea5aab4f1a8f79f5862d0d91a64c1d506a621e714e19a897534cb1981621ecb58dfb9814c6c3e895a3e5b867d9287ceeff41223f735775cff1afb871903388acebf2009be0ec7fc2fce8ef2b1f790c53a790c75a9e25434ed0e8245c175553b9d6375b6b06c220e71f8bc1bcb548191ed8b0931be87a98756a7226b7d430292631aeb5b26f37fa201a56e195cbd9f794c7682fd31dbc8edd106895097024150962fe0af54fe0892bf3d3460030f883988e449e358bbdcad28b77e815fa02c5b28703221ea90a992fdc3b7495eeb48a39c4cb", 0xd4}, {&(0x7f0000000940)="63aa7f619dee2bb88e431bf27aa3ebef70b065415f", 0x15}], 0x7, &(0x7f0000000c00)=[@authinfo={0x18, 0x84, 0x6, {0x82}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfffff001}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x6, 0x8000, 0x0, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @init={0x18, 0x84, 0x0, {0x8, 0x0, 0x3d21, 0x6}}], 0xe0, 0x40004}, {&(0x7f0000000d00)=@in6={0xa, 0x4e22, 0x6, @mcast2, 0x8001}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000d40)="25e7b660ff3a9f0db9465e16c138345bf149ea1ff3ec", 0x16}, {&(0x7f0000000d80)="bc81e7f73cd8fcb9225ba921117f006b33ebc1ff8b2d7fe8150149233956f5b96af3aa7b49fe2d9300c4075ecf61ae887cc3c5cb8dcd47ae57a40e320c7d209ddb7df3e4d65335c6bbc4eb76ea5e565290890ce537c327ca4f908ec291c75a2bd52c09ccd3b8811669d72ea4830bd18241b1e4cd1be69962ab9fa0066dc3e33a00a1e979ed1372b32c5536357330a3ea5cc8851db01f618f6733e48df544e4c07c50b1a79f88d916edee08b43384824aa0cc9dcf46c455321397e7511180055a1d908d51e203cbc6e5", 0xc9}, {&(0x7f0000000e80)="9ad9c992d1dbf6c0eb9e8862b18a4eaa422e8534bd02dacb2ff1548850018516567df53d3e23577ca315ee81880528ae18e2366005f7f72de325eae9ece2ffe5b6d4f770ae74e9c120b8c7fcfa459a1d79864ef11bec5c513213d96ada159c2910b819f1a2591fc9f45651d424c81fa68412af7f71a020dd21e1871de6b31014f42d6540289d39a92def720d774ee0d4f182d3c1c5b640e01661ea59780542fdfa8ce87482b7c2d5a5cb4c497f98ab4c6012e9e2ebd7bb54f131f0fc60b695efe7f7efd60d47a11a7170ab00f7ca8bc1f33e022f6244dd802075d1e9928a518e", 0xe0}, {&(0x7f0000000f80)="fbf1e69f5b29c19ee1e1961d17dd04e3e88ef7565d89df47adb682d7c2c2e647ba7fd4dba6aa3fa42a484edb7b31b2ed91a55693f8961bed00159f983de80d683cc5e6b78a1eba990b6cbb0900a4e30ac8b1ae2345e492b1b5d96a77b4bded7c161c8f0cfa84168393f8bfa1775d51eaf0846e33108c2be3d326a33eb1b819c7f8ba477b19d0092fa1d7dca029c7c82fb777b117670b7c388b84c7594591cbf6de876258127dd2d00805a6fc76c0f621c21094768129a89469216ff153f1ee07ac", 0xc1}], 0x4, 0x0, 0x0, 0x4000000}, {&(0x7f00000010c0)=@in6={0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001100)="48a16fe8a26d0894cb54012b786da63767c5e3417520499192b86e2a1544473f2179204de355f3ba49ed05beb957dd402a7510851a29e9604695cc5b133df6ec8be74ebdf09ba5fce7e8a3f8c2ee185d6cfa607ec20b1f1c0eb516c206b259258221e4a294dc22a88ab8ed6d863f6335a8881420ef8e82ef83d66681f4e79a17a6489d2b7cf8ba180b0da46e7210c64bfc880fda597b40ef23c5e7455ad199eedd6e22d1e66c37ecd6cad386776d6d59593127ed331d1f0506520ff4542c558c053eb332e03b7cf2d1edd5b5467dfc66bfb308ea5dd16d30a596abd1b42e48", 0xdf}, {&(0x7f0000001200)="033ee977a2e30af309d9e9dfe7002415f7eb39336de0e8ac87f5276225a783152c2d7b8c5d8f0b06c68fc42aa956c5fbb183dccfd348bd688daa5968dfb4afb5a5b733f8f40b5749f84e40772ea1b826bb1e476f3d683d00b0db6385a426bfc3205de62d12cc4c1d50214d442ef34d427d3da4e88b7c092e8abe6a329a195436852271000e4e7e539396e27b8442b80c72733a2350e3a47b9f8cc8af010216891f3138cc9366d712cdbdde7ec7e2c55dcb74ee3edf01d28ae27f141c4f6b7544d7ea558b2d2e81c81b7a3df0ec87eff20dba0ece799f299cb1", 0xd9}, {&(0x7f0000001300)="270665c6ed30eed80029ceb800323939bf0741dea82be79d29f909ee7de1afca9380f9b772aa62bb2357202904dee2405a2cf9ca7d42f0a1916adcc43a85f2bae816a1fbf2971401fc9d98605d9e5d32df5e3307dc86720c58536d93691fa141fd7a5fcaa2aefa9dc5f50acdfc042b8211741dd025960b24e6fbb7deffc45cd6c12efb7950377237b58fd06933bcaf36e4f13446ba9b", 0x96}], 0x3, 0x0, 0x0, 0x40050}], 0x3, 0x40054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(0xffffffffffffffff, r10, 0x80000) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 48.14387ms ago: executing program 4 (id=544): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 47.214799ms ago: executing program 2 (id=545): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {}, {}, {@barrier_val={'barrier', 0x3d, 0x6d62}}]}, 0x3, 0x469, &(0x7f0000000800)="$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") socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @random="9bd02d8445f6", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='sched\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'lock', ' ', 'io'}, 0x8) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000180)=""/105, 0x69}], 0x1, 0x9, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_clone(0x640c7000, 0x0, 0x700, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=546): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x30, 0x0, 0x200001001f1) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c26772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000000c0)="aa1d484ea0000000f7fc08fcd111fbdf2321d5bc27bd49eb067a0689fffb43f3f368654875e4cb5128ead3d2e4f813c4b39d0e793fc5ab0000000000", 0x3c}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xf, 0x7, 0x2, 0x7}) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x180, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r4, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x32, {0x2, 0x4e22, @multicast1}, 'geneve0\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x30) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_io_uring_setup(0x199, &(0x7f00000000c0)={0x0, 0x7e1f, 0x18800, 0x1, 0x1d3, 0x0, r8}, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r10, 0x3000) kernel console output (not intermixed with test programs): netdevsim0: renamed from eth0 [ 30.835236][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.844628][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.854018][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.889801][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.905086][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.913258][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.930957][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.943680][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.952544][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.968898][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.976113][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.995656][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.002793][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.018778][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.049909][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.064311][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.074633][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.081755][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.100202][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.114343][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.121490][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.146820][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.165062][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.172217][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.186044][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.198170][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.205368][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.225799][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.232948][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.242799][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.249919][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.280265][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.290849][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.301321][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.336740][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.347279][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.384033][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.396336][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.449682][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.474369][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.498317][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.520948][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.528202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.551719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.558825][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.592780][ T3303] veth0_vlan: entered promiscuous mode [ 31.598631][ T3310] veth0_vlan: entered promiscuous mode [ 31.614788][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.632671][ T3303] veth1_vlan: entered promiscuous mode [ 31.642073][ T3310] veth1_vlan: entered promiscuous mode [ 31.704983][ T3310] veth0_macvtap: entered promiscuous mode [ 31.717245][ T3303] veth0_macvtap: entered promiscuous mode [ 31.733459][ T3303] veth1_macvtap: entered promiscuous mode [ 31.745256][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.753504][ T3310] veth1_macvtap: entered promiscuous mode [ 31.766720][ T3309] veth0_vlan: entered promiscuous mode [ 31.778161][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.789076][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.802075][ T3309] veth1_vlan: entered promiscuous mode [ 31.816072][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.824558][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.847400][ T3309] veth0_macvtap: entered promiscuous mode [ 31.860182][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.869048][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.878014][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.886849][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.897541][ T3309] veth1_macvtap: entered promiscuous mode [ 31.904260][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.913150][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.921922][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.930792][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.955309][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.955323][ T29] audit: type=1400 audit(1750581146.360:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.hZqCkb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.993164][ T29] audit: type=1400 audit(1750581146.370:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.998104][ T3302] veth0_vlan: entered promiscuous mode [ 32.015236][ T29] audit: type=1400 audit(1750581146.370:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.hZqCkb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.045886][ T29] audit: type=1400 audit(1750581146.370:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.067732][ T29] audit: type=1400 audit(1750581146.370:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.hZqCkb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.094322][ T29] audit: type=1400 audit(1750581146.370:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.hZqCkb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.121821][ T29] audit: type=1400 audit(1750581146.370:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.145308][ T29] audit: type=1400 audit(1750581146.550:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.147402][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.168120][ T29] audit: type=1400 audit(1750581146.550:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.192748][ T3302] veth1_vlan: entered promiscuous mode [ 32.211145][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.229077][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.238948][ T3302] veth0_macvtap: entered promiscuous mode [ 32.247022][ T3302] veth1_macvtap: entered promiscuous mode [ 32.261213][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.269975][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278838][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287629][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.302725][ T29] audit: type=1400 audit(1750581146.700:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.335806][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.347059][ T3311] veth0_vlan: entered promiscuous mode [ 32.356636][ T3477] 9pnet: p9_errstr2errno: server reported unknown error [ 32.366261][ T3311] veth1_vlan: entered promiscuous mode [ 32.376982][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.393803][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.402684][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.411511][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.420256][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.461170][ T3311] veth0_macvtap: entered promiscuous mode [ 32.481279][ T3311] veth1_macvtap: entered promiscuous mode [ 32.488596][ T3484] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.502845][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.516953][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.538050][ T3311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.547016][ T3311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.555916][ T3311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.564745][ T3311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.675155][ T3494] 9pnet: p9_errstr2errno: server reported unknown error [ 32.733509][ T3497] loop0: detected capacity change from 0 to 512 [ 32.786188][ T3497] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.825011][ T3497] EXT4-fs (loop0): mount failed [ 32.883408][ T3505] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 32.890937][ T3505] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.947428][ C1] hrtimer: interrupt took 38077 ns [ 32.985797][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 32.994872][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.003756][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.029176][ T3517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.038067][ T3517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.047085][ T3517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.052401][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.064746][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.073613][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.120329][ T3522] 9pnet: p9_errstr2errno: server reported unknown error [ 33.127691][ T3517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.209052][ T3533] loop3: detected capacity change from 0 to 164 [ 33.216076][ T3533] iso9660: Bad value for 'uid' [ 33.220929][ T3533] iso9660: Bad value for 'uid' [ 33.298393][ T3537] IPVS: Error joining to the multicast group [ 33.336275][ T3539] netlink: 'syz.3.20': attribute type 9 has an invalid length. [ 33.382483][ T3543] 9pnet: p9_errstr2errno: server reported unknown error [ 33.648240][ T3552] 9pnet: p9_errstr2errno: server reported unknown error [ 33.688484][ T3554] 9pnet: p9_errstr2errno: server reported unknown error [ 33.837733][ T3562] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 33.845226][ T3562] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.911226][ T3568] loop3: detected capacity change from 0 to 512 [ 33.933386][ T3568] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.962551][ T3568] EXT4-fs (loop3): mount failed [ 34.022690][ T3574] bond1: entered promiscuous mode [ 34.027855][ T3574] bond1: entered allmulticast mode [ 34.034683][ T3574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.045303][ T3574] bond1 (unregistering): Released all slaves [ 35.050836][ T3609] loop4: detected capacity change from 0 to 164 [ 35.057533][ T3609] ======================================================= [ 35.057533][ T3609] WARNING: The mand mount option has been deprecated and [ 35.057533][ T3609] and is ignored by this kernel. Remove the mand [ 35.057533][ T3609] option from the mount to silence this warning. [ 35.057533][ T3609] ======================================================= [ 35.092607][ T3609] iso9660: Bad value for 'check' [ 35.569960][ T3616] loop3: detected capacity change from 0 to 512 [ 35.597527][ T3616] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.617974][ T3620] netlink: 'syz.4.49': attribute type 9 has an invalid length. [ 35.649648][ T3616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 35.664204][ T3616] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.672917][ T3616] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.47: attempt to clear invalid blocks 1024 len 1 [ 35.711581][ T3616] EXT4-fs (loop3): Remounting filesystem read-only [ 35.718611][ T3616] EXT4-fs (loop3): 1 truncate cleaned up [ 35.740620][ T3621] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 35.758101][ T3616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.831650][ T3616] bond1: entered promiscuous mode [ 35.836766][ T3616] bond1: entered allmulticast mode [ 35.850446][ T3616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.863730][ T3616] bond1 (unregistering): Released all slaves [ 35.923288][ T3626] bond1: entered promiscuous mode [ 35.928472][ T3626] bond1: entered allmulticast mode [ 35.934143][ T3626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.954058][ T3626] bond1 (unregistering): Released all slaves [ 35.967838][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.171019][ T3649] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 36.178493][ T3649] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.282087][ T3653] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 36.432963][ T3667] netlink: 'syz.2.63': attribute type 9 has an invalid length. [ 36.502161][ T3676] netlink: 'syz.0.65': attribute type 9 has an invalid length. [ 36.529722][ T3674] loop4: detected capacity change from 0 to 512 [ 36.561562][ T3675] bond1: entered promiscuous mode [ 36.566769][ T3675] bond1: entered allmulticast mode [ 36.573391][ T3674] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.582419][ T3675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.596319][ T3675] bond1 (unregistering): Released all slaves [ 36.609361][ T3674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 36.639237][ T3674] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.666919][ T3674] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.67: attempt to clear invalid blocks 1024 len 1 [ 36.690322][ T3674] EXT4-fs (loop4): Remounting filesystem read-only [ 36.708721][ T3674] EXT4-fs (loop4): 1 truncate cleaned up [ 36.723260][ T3674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.757833][ T3690] bond1: entered promiscuous mode [ 36.763121][ T3690] bond1: entered allmulticast mode [ 36.770199][ T3690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.781514][ T3690] bond1 (unregistering): Released all slaves [ 36.808995][ T3674] bond1: entered promiscuous mode [ 36.814190][ T3674] bond1: entered allmulticast mode [ 36.832304][ T3674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.857120][ T3674] bond1 (unregistering): Released all slaves [ 37.017039][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 37.499776][ T3702] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 37.507287][ T3702] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.593881][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 37.593969][ T29] audit: type=1326 audit(1750581152.000:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.616342][ T3707] netlink: 'syz.0.76': attribute type 9 has an invalid length. [ 37.647417][ T3705] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 37.695917][ T29] audit: type=1326 audit(1750581152.030:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.719421][ T29] audit: type=1326 audit(1750581152.030:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.742809][ T29] audit: type=1326 audit(1750581152.030:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.766124][ T29] audit: type=1326 audit(1750581152.030:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.789405][ T29] audit: type=1326 audit(1750581152.030:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.813294][ T29] audit: type=1326 audit(1750581152.040:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.836902][ T29] audit: type=1326 audit(1750581152.040:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.860160][ T29] audit: type=1326 audit(1750581152.040:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 37.883426][ T29] audit: type=1326 audit(1750581152.040:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 38.079967][ T3720] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 38.087551][ T3720] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.431173][ T3740] __nla_validate_parse: 41 callbacks suppressed [ 38.431191][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.446377][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.455222][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.531128][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.540163][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.549111][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.625975][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.634905][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.643850][ T3740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.654426][ T3750] loop3: detected capacity change from 0 to 512 [ 38.696057][ T3750] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.743726][ T3750] EXT4-fs (loop3): mount failed [ 38.788943][ T3755] loop4: detected capacity change from 0 to 512 [ 38.807538][ T3755] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.848202][ T3755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 38.868046][ T3755] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.880265][ T3757] loop3: detected capacity change from 0 to 512 [ 38.890682][ T3757] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.918278][ T3755] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.92: attempt to clear invalid blocks 1024 len 1 [ 38.941990][ T3760] 9pnet: p9_errstr2errno: server reported unknown error [ 38.981483][ T3755] EXT4-fs (loop4): Remounting filesystem read-only [ 38.988178][ T3757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 39.000464][ T3755] EXT4-fs (loop4): 1 truncate cleaned up [ 39.020829][ T3755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 39.021069][ T3762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.95'. [ 39.032990][ T3757] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.070410][ T3757] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.93: attempt to clear invalid blocks 1024 len 1 [ 39.076794][ T3762] Zero length message leads to an empty skb [ 39.130870][ T3755] bond1: entered promiscuous mode [ 39.136025][ T3755] bond1: entered allmulticast mode [ 39.142799][ T3757] EXT4-fs (loop3): Remounting filesystem read-only [ 39.163182][ T3757] EXT4-fs (loop3): 1 truncate cleaned up [ 39.179206][ T3755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.190698][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 39.225663][ T3755] bond1 (unregistering): Released all slaves [ 39.276811][ T3757] bond1: entered promiscuous mode [ 39.281973][ T3757] bond1: entered allmulticast mode [ 39.307761][ T3757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.324887][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.362719][ T3757] bond1 (unregistering): Released all slaves [ 39.485431][ T3777] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 39.572259][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.638000][ T3780] netlink: 'syz.3.99': attribute type 9 has an invalid length. [ 39.698711][ T3784] netlink: 'syz.4.101': attribute type 9 has an invalid length. [ 39.703021][ T3786] loop3: detected capacity change from 0 to 512 [ 39.752666][ T3786] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.791531][ T3792] loop4: detected capacity change from 0 to 164 [ 39.810395][ T3786] EXT4-fs (loop3): mount failed [ 39.836746][ T3792] iso9660: Bad value for 'uid' [ 39.841675][ T3792] iso9660: Bad value for 'uid' [ 39.899709][ T3799] netlink: 'syz.0.106': attribute type 9 has an invalid length. [ 40.011358][ T3811] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.371726][ T3825] nr0: tun_chr_ioctl cmd 1074025677 [ 40.377156][ T3825] nr0: linktype set to 1 [ 41.260305][ T3841] loop3: detected capacity change from 0 to 512 [ 41.352274][ T3846] loop4: detected capacity change from 0 to 164 [ 41.359381][ T3846] iso9660: Bad value for 'check' [ 41.612267][ T3841] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.760201][ T3841] EXT4-fs (loop3): mount failed [ 41.910704][ T3858] 9pnet: p9_errstr2errno: server reported unknown error [ 42.091021][ T3863] loop3: detected capacity change from 0 to 512 [ 42.110005][ T3863] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.151778][ T3863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 42.159859][ T3863] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.191613][ T3863] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.129: attempt to clear invalid blocks 1024 len 1 [ 42.274035][ T3863] EXT4-fs (loop3): Remounting filesystem read-only [ 42.281288][ T3863] EXT4-fs (loop3): 1 truncate cleaned up [ 42.294171][ T3863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 42.367311][ T3863] bond1: entered promiscuous mode [ 42.372502][ T3863] bond1: entered allmulticast mode [ 42.586001][ T3863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.658627][ T3863] bond1 (unregistering): Released all slaves [ 42.820140][ T3882] 9pnet: p9_errstr2errno: server reported unknown error [ 42.852763][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.871835][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 42.871852][ T29] audit: type=1326 audit(1750581157.250:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 42.901429][ T29] audit: type=1326 audit(1750581157.250:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 42.924780][ T29] audit: type=1326 audit(1750581157.250:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 42.948146][ T29] audit: type=1326 audit(1750581157.250:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 42.971484][ T29] audit: type=1326 audit(1750581157.250:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 42.994825][ T29] audit: type=1326 audit(1750581157.250:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 43.018191][ T29] audit: type=1326 audit(1750581157.250:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 43.041604][ T29] audit: type=1326 audit(1750581157.250:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 43.064959][ T29] audit: type=1326 audit(1750581157.250:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 43.088314][ T29] audit: type=1326 audit(1750581157.250:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 43.288540][ T3884] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.334249][ T3893] bond1: entered promiscuous mode [ 43.339451][ T3893] bond1: entered allmulticast mode [ 43.344997][ T3893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.533253][ T3893] bond1 (unregistering): Released all slaves [ 43.981903][ T3907] loop3: detected capacity change from 0 to 512 [ 44.080348][ T3907] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 44.096294][ T3907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 44.140381][ T3907] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.167132][ T3907] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.141: attempt to clear invalid blocks 1024 len 1 [ 44.197012][ T3916] __nla_validate_parse: 34 callbacks suppressed [ 44.197028][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 44.212270][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 44.293541][ T3907] EXT4-fs (loop3): Remounting filesystem read-only [ 44.303960][ T3907] EXT4-fs (loop3): 1 truncate cleaned up [ 44.310149][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 44.360667][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 44.414598][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 44.447928][ T3921] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.649866][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 44.990995][ T3912] syz.0.143 (3912) used greatest stack depth: 10120 bytes left [ 45.099887][ T3943] bond1: entered promiscuous mode [ 45.105090][ T3943] bond1: entered allmulticast mode [ 45.111690][ T3943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.122637][ T3943] bond1 (unregistering): Released all slaves [ 45.209765][ T3949] loop3: detected capacity change from 0 to 512 [ 45.227574][ T3949] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.267001][ T3949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 45.281084][ T3949] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.291921][ T3949] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.154: attempt to clear invalid blocks 1024 len 1 [ 45.311704][ T3949] EXT4-fs (loop3): Remounting filesystem read-only [ 45.318846][ T3952] bond1: entered promiscuous mode [ 45.324082][ T3952] bond1: entered allmulticast mode [ 45.324136][ T3954] loop4: detected capacity change from 0 to 512 [ 45.330400][ T3952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.345824][ T3952] bond1 (unregistering): Released all slaves [ 45.352448][ T3949] EXT4-fs (loop3): 1 truncate cleaned up [ 45.357363][ T3954] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.358692][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 45.380429][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.389400][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.398399][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.409200][ T3954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 45.418721][ T3954] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.438749][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.447743][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.456645][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.470167][ T3954] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.156: attempt to clear invalid blocks 1024 len 1 [ 45.486967][ T3954] EXT4-fs (loop4): Remounting filesystem read-only [ 45.494347][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 45.504706][ T3954] EXT4-fs (loop4): 1 truncate cleaned up [ 45.519784][ T3954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 45.548714][ T3964] bond1: entered promiscuous mode [ 45.553963][ T3964] bond1: entered allmulticast mode [ 45.559487][ T3964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.570214][ T3964] bond1 (unregistering): Released all slaves [ 45.586337][ T3954] bond1: entered promiscuous mode [ 45.591470][ T3954] bond1: entered allmulticast mode [ 45.597033][ T3954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.609587][ T3954] bond1 (unregistering): Released all slaves [ 45.688744][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 45.773835][ T3982] bond1: entered promiscuous mode [ 45.779000][ T3982] bond1: entered allmulticast mode [ 45.784636][ T3982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.798137][ T3982] bond1 (unregistering): Released all slaves [ 45.946086][ T3991] FAULT_INJECTION: forcing a failure. [ 45.946086][ T3991] name failslab, interval 1, probability 0, space 0, times 1 [ 45.958902][ T3991] CPU: 1 UID: 0 PID: 3991 Comm: syz.2.167 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 45.958938][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.958956][ T3991] Call Trace: [ 45.958963][ T3991] [ 45.958971][ T3991] __dump_stack+0x1d/0x30 [ 45.959041][ T3991] dump_stack_lvl+0xe8/0x140 [ 45.959066][ T3991] dump_stack+0x15/0x1b [ 45.959094][ T3991] should_fail_ex+0x265/0x280 [ 45.959135][ T3991] should_failslab+0x8c/0xb0 [ 45.959159][ T3991] kmem_cache_alloc_noprof+0x50/0x310 [ 45.959256][ T3991] ? security_file_alloc+0x32/0x100 [ 45.959281][ T3991] security_file_alloc+0x32/0x100 [ 45.959312][ T3991] init_file+0x5c/0x1d0 [ 45.959409][ T3991] alloc_empty_file+0x8b/0x200 [ 45.959447][ T3991] path_openat+0x68/0x2170 [ 45.959484][ T3991] ? _parse_integer_limit+0x170/0x190 [ 45.959519][ T3991] ? kstrtoull+0x111/0x140 [ 45.959612][ T3991] ? kstrtouint+0x76/0xc0 [ 45.959683][ T3991] do_filp_open+0x109/0x230 [ 45.959730][ T3991] do_sys_openat2+0xa6/0x110 [ 45.959759][ T3991] __x64_sys_openat+0xf2/0x120 [ 45.959863][ T3991] x64_sys_call+0x1af/0x2fb0 [ 45.959891][ T3991] do_syscall_64+0xd2/0x200 [ 45.959915][ T3991] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.960027][ T3991] ? clear_bhb_loop+0x40/0x90 [ 45.960096][ T3991] ? clear_bhb_loop+0x40/0x90 [ 45.960129][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.960155][ T3991] RIP: 0033:0x7f086efbe929 [ 45.960251][ T3991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.960321][ T3991] RSP: 002b:00007f086d627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 45.960351][ T3991] RAX: ffffffffffffffda RBX: 00007f086f1e5fa0 RCX: 00007f086efbe929 [ 45.960368][ T3991] RDX: 0000000000167483 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 45.960384][ T3991] RBP: 00007f086d627090 R08: 0000000000000000 R09: 0000000000000000 [ 45.960397][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.960409][ T3991] R13: 0000000000000001 R14: 00007f086f1e5fa0 R15: 00007ffc1b757528 [ 45.960428][ T3991] [ 46.208852][ T3993] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.234907][ T3995] bond1: entered promiscuous mode [ 46.240024][ T3995] bond1: entered allmulticast mode [ 46.258770][ T3997] loop3: detected capacity change from 0 to 512 [ 46.290626][ T3995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.345828][ T3995] bond1 (unregistering): Released all slaves [ 46.426786][ T4001] SELinux: Context system_u:object is not valid (left unmapped). [ 46.503535][ T3997] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.590266][ T4006] bond1: entered promiscuous mode [ 46.595471][ T4006] bond1: entered allmulticast mode [ 46.627207][ T4006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.629990][ T3997] EXT4-fs (loop3): mount failed [ 46.679767][ T4006] bond1 (unregistering): Released all slaves [ 46.809426][ T4028] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.860260][ T4027] loop3: detected capacity change from 0 to 1024 [ 46.897364][ T4027] EXT4-fs: Invalid commit interval 67108869, must be smaller than 21474836 [ 46.902245][ T4031] bond1: entered promiscuous mode [ 46.911208][ T4031] bond1: entered allmulticast mode [ 46.920363][ T4027] syz.3.178 (4027) used greatest stack depth: 9464 bytes left [ 46.945743][ T4031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.984899][ T4031] bond1 (unregistering): Released all slaves [ 47.135192][ T4038] loop4: detected capacity change from 0 to 512 [ 47.205745][ T4038] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.221515][ T4034] loop3: detected capacity change from 0 to 512 [ 47.231398][ T4038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 47.249718][ T4038] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.271412][ T4038] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.182: attempt to clear invalid blocks 1024 len 1 [ 47.293219][ T4038] EXT4-fs (loop4): Remounting filesystem read-only [ 47.301746][ T4038] EXT4-fs (loop4): 1 truncate cleaned up [ 47.313524][ T4034] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.357263][ T4038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.423486][ T4034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 47.564023][ T4034] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.630934][ T4061] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 47.660442][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.680216][ T4034] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.180: attempt to clear invalid blocks 1024 len 1 [ 47.821349][ T4034] EXT4-fs (loop3): Remounting filesystem read-only [ 47.844300][ T4034] EXT4-fs (loop3): 1 truncate cleaned up [ 47.850773][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.889765][ T4071] netlink: 'syz.2.195': attribute type 19 has an invalid length. [ 47.913988][ T4079] xt_hashlimit: max too large, truncated to 1048576 [ 47.990785][ T4083] loop4: detected capacity change from 0 to 512 [ 48.011514][ T4034] bond1: entered promiscuous mode [ 48.016746][ T4034] bond1: entered allmulticast mode [ 48.062811][ T4083] __quota_error: 221 callbacks suppressed [ 48.062832][ T4083] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 48.107527][ T4034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.132265][ T4083] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.172700][ T4034] bond1 (unregistering): Released all slaves [ 48.198144][ T4083] EXT4-fs (loop4): mount failed [ 48.306627][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 48.414109][ T29] audit: type=1326 audit(1750581162.820:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.443809][ T29] audit: type=1326 audit(1750581162.850:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.499511][ T29] audit: type=1326 audit(1750581162.870:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.522960][ T29] audit: type=1326 audit(1750581162.870:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.546314][ T29] audit: type=1326 audit(1750581162.870:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.569653][ T29] audit: type=1326 audit(1750581162.870:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.593007][ T29] audit: type=1326 audit(1750581162.870:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.616315][ T29] audit: type=1326 audit(1750581162.870:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.639720][ T29] audit: type=1326 audit(1750581162.880:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 48.754186][ T4112] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.652623][ T4159] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.809173][ T4170] __nla_validate_parse: 28 callbacks suppressed [ 49.809192][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 50.307029][ T4174] FAULT_INJECTION: forcing a failure. [ 50.307029][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 50.319721][ T4174] CPU: 1 UID: 0 PID: 4174 Comm: syz.2.229 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 50.319856][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.319874][ T4174] Call Trace: [ 50.319882][ T4174] [ 50.319892][ T4174] __dump_stack+0x1d/0x30 [ 50.319911][ T4174] dump_stack_lvl+0xe8/0x140 [ 50.319927][ T4174] dump_stack+0x15/0x1b [ 50.319941][ T4174] should_fail_ex+0x265/0x280 [ 50.320003][ T4174] ? __pfx_cond_bools_destroy+0x10/0x10 [ 50.320115][ T4174] should_failslab+0x8c/0xb0 [ 50.320146][ T4174] __kmalloc_noprof+0xa5/0x3e0 [ 50.320179][ T4174] ? hashtab_duplicate+0x55/0x360 [ 50.320207][ T4174] ? __pfx_cond_bools_destroy+0x10/0x10 [ 50.320275][ T4174] hashtab_duplicate+0x55/0x360 [ 50.320294][ T4174] ? __kmalloc_noprof+0x1dd/0x3e0 [ 50.320317][ T4174] ? cond_policydb_dup+0xa3/0x4e0 [ 50.320411][ T4174] ? __pfx_cond_bools_copy+0x10/0x10 [ 50.320439][ T4174] cond_policydb_dup+0xd2/0x4e0 [ 50.320469][ T4174] security_set_bools+0xa0/0x340 [ 50.320496][ T4174] sel_commit_bools_write+0x1ea/0x270 [ 50.320596][ T4174] vfs_writev+0x403/0x8b0 [ 50.320617][ T4174] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 50.320650][ T4174] ? mutex_lock+0xd/0x30 [ 50.320771][ T4174] do_writev+0xe7/0x210 [ 50.320793][ T4174] __x64_sys_writev+0x45/0x50 [ 50.320810][ T4174] x64_sys_call+0x2006/0x2fb0 [ 50.320828][ T4174] do_syscall_64+0xd2/0x200 [ 50.320844][ T4174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.320895][ T4174] ? clear_bhb_loop+0x40/0x90 [ 50.320941][ T4174] ? clear_bhb_loop+0x40/0x90 [ 50.320971][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.320990][ T4174] RIP: 0033:0x7f086efbe929 [ 50.321003][ T4174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.321018][ T4174] RSP: 002b:00007f086d627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 50.321035][ T4174] RAX: ffffffffffffffda RBX: 00007f086f1e5fa0 RCX: 00007f086efbe929 [ 50.321124][ T4174] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 50.321135][ T4174] RBP: 00007f086d627090 R08: 0000000000000000 R09: 0000000000000000 [ 50.321145][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.321156][ T4174] R13: 0000000000000000 R14: 00007f086f1e5fa0 R15: 00007ffc1b757528 [ 50.321173][ T4174] [ 50.591213][ T4177] FAULT_INJECTION: forcing a failure. [ 50.591213][ T4177] name failslab, interval 1, probability 0, space 0, times 0 [ 50.603967][ T4177] CPU: 0 UID: 0 PID: 4177 Comm: syz.2.230 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 50.604000][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.604044][ T4177] Call Trace: [ 50.604052][ T4177] [ 50.604061][ T4177] __dump_stack+0x1d/0x30 [ 50.604084][ T4177] dump_stack_lvl+0xe8/0x140 [ 50.604102][ T4177] dump_stack+0x15/0x1b [ 50.604118][ T4177] should_fail_ex+0x265/0x280 [ 50.604155][ T4177] should_failslab+0x8c/0xb0 [ 50.604260][ T4177] __kvmalloc_node_noprof+0x123/0x4e0 [ 50.604294][ T4177] ? io_alloc_cache_init+0x31/0xa0 [ 50.604326][ T4177] io_alloc_cache_init+0x31/0xa0 [ 50.604347][ T4177] io_ring_ctx_alloc+0x299/0x6a0 [ 50.604382][ T4177] io_uring_create+0x10f/0x610 [ 50.604487][ T4177] __se_sys_io_uring_setup+0x1f7/0x210 [ 50.604524][ T4177] __x64_sys_io_uring_setup+0x31/0x40 [ 50.604584][ T4177] x64_sys_call+0x184b/0x2fb0 [ 50.604619][ T4177] do_syscall_64+0xd2/0x200 [ 50.604648][ T4177] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.604682][ T4177] ? clear_bhb_loop+0x40/0x90 [ 50.604745][ T4177] ? clear_bhb_loop+0x40/0x90 [ 50.604771][ T4177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.604797][ T4177] RIP: 0033:0x7f086efbe929 [ 50.604813][ T4177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.604864][ T4177] RSP: 002b:00007f086d626fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 50.604889][ T4177] RAX: ffffffffffffffda RBX: 00007f086f1e5fa0 RCX: 00007f086efbe929 [ 50.604905][ T4177] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 50.604921][ T4177] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 50.604950][ T4177] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 50.604965][ T4177] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 50.604987][ T4177] [ 50.827624][ T4181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 50.851770][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 50.937930][ T4188] SELinux: failed to load policy [ 50.949667][ T4196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.966399][ T4196] SET target dimension over the limit! [ 51.091779][ T4204] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.229890][ T4223] netlink: 160 bytes leftover after parsing attributes in process `syz.0.247'. [ 51.367463][ T4232] bond1: entered promiscuous mode [ 51.372597][ T4232] bond1: entered allmulticast mode [ 51.377987][ T4232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.391342][ T4232] bond1 (unregistering): Released all slaves [ 51.581560][ T4239] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 51.784896][ T4244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.785492][ T4249] netlink: 'syz.3.257': attribute type 4 has an invalid length. [ 51.800580][ T4244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.962176][ T4258] FAULT_INJECTION: forcing a failure. [ 51.962176][ T4258] name failslab, interval 1, probability 0, space 0, times 0 [ 51.974991][ T4258] CPU: 0 UID: 0 PID: 4258 Comm: syz.4.261 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 51.975107][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.975185][ T4258] Call Trace: [ 51.975192][ T4258] [ 51.975199][ T4258] __dump_stack+0x1d/0x30 [ 51.975223][ T4258] dump_stack_lvl+0xe8/0x140 [ 51.975325][ T4258] dump_stack+0x15/0x1b [ 51.975346][ T4258] should_fail_ex+0x265/0x280 [ 51.975378][ T4258] should_failslab+0x8c/0xb0 [ 51.975401][ T4258] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 51.975490][ T4258] ? __d_alloc+0x3d/0x350 [ 51.975516][ T4258] __d_alloc+0x3d/0x350 [ 51.975619][ T4258] ? selinux_socket_post_create+0x214/0x2a0 [ 51.975662][ T4258] d_alloc_pseudo+0x1e/0x80 [ 51.975701][ T4258] alloc_file_pseudo+0x71/0x160 [ 51.975734][ T4258] ? alloc_fd+0x38a/0x3c0 [ 51.975772][ T4258] sock_alloc_file+0x9c/0x1e0 [ 51.975823][ T4258] __sys_socket+0x116/0x180 [ 51.975859][ T4258] __x64_sys_socket+0x3f/0x50 [ 51.975907][ T4258] x64_sys_call+0x285a/0x2fb0 [ 51.975934][ T4258] do_syscall_64+0xd2/0x200 [ 51.975956][ T4258] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.976019][ T4258] ? clear_bhb_loop+0x40/0x90 [ 51.976046][ T4258] ? clear_bhb_loop+0x40/0x90 [ 51.976074][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.976176][ T4258] RIP: 0033:0x7fb9e7f9e929 [ 51.976194][ T4258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.976216][ T4258] RSP: 002b:00007fb9e6607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 51.976265][ T4258] RAX: ffffffffffffffda RBX: 00007fb9e81c5fa0 RCX: 00007fb9e7f9e929 [ 51.976280][ T4258] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 51.976293][ T4258] RBP: 00007fb9e6607090 R08: 0000000000000000 R09: 0000000000000000 [ 51.976362][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.976375][ T4258] R13: 0000000000000000 R14: 00007fb9e81c5fa0 R15: 00007ffe5c0103a8 [ 51.976397][ T4258] [ 52.256626][ T4270] FAULT_INJECTION: forcing a failure. [ 52.256626][ T4270] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.269798][ T4270] CPU: 0 UID: 0 PID: 4270 Comm: syz.3.265 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 52.269827][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.269862][ T4270] Call Trace: [ 52.269871][ T4270] [ 52.269909][ T4270] __dump_stack+0x1d/0x30 [ 52.269933][ T4270] dump_stack_lvl+0xe8/0x140 [ 52.269952][ T4270] dump_stack+0x15/0x1b [ 52.269972][ T4270] should_fail_ex+0x265/0x280 [ 52.270054][ T4270] should_fail+0xb/0x20 [ 52.270082][ T4270] should_fail_usercopy+0x1a/0x20 [ 52.270239][ T4270] _copy_from_iter+0xcf/0xe40 [ 52.270257][ T4270] ? __build_skb_around+0x1a0/0x200 [ 52.270324][ T4270] ? __alloc_skb+0x223/0x320 [ 52.270364][ T4270] netlink_sendmsg+0x471/0x6b0 [ 52.270390][ T4270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.270471][ T4270] __sock_sendmsg+0x142/0x180 [ 52.270498][ T4270] ____sys_sendmsg+0x31e/0x4e0 [ 52.270539][ T4270] ___sys_sendmsg+0x17b/0x1d0 [ 52.270599][ T4270] __x64_sys_sendmsg+0xd4/0x160 [ 52.270729][ T4270] x64_sys_call+0x2999/0x2fb0 [ 52.270778][ T4270] do_syscall_64+0xd2/0x200 [ 52.270798][ T4270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.270838][ T4270] ? clear_bhb_loop+0x40/0x90 [ 52.270865][ T4270] ? clear_bhb_loop+0x40/0x90 [ 52.270893][ T4270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.270914][ T4270] RIP: 0033:0x7feb720ee929 [ 52.270933][ T4270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.271020][ T4270] RSP: 002b:00007feb70757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.271043][ T4270] RAX: ffffffffffffffda RBX: 00007feb72315fa0 RCX: 00007feb720ee929 [ 52.271058][ T4270] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 52.271074][ T4270] RBP: 00007feb70757090 R08: 0000000000000000 R09: 0000000000000000 [ 52.271087][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.271099][ T4270] R13: 0000000000000000 R14: 00007feb72315fa0 R15: 00007fffe95fb668 [ 52.271123][ T4270] [ 52.522091][ T4266] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.586322][ T4274] loop3: detected capacity change from 0 to 512 [ 52.610072][ T4274] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.616696][ T4274] EXT4-fs: Ignoring removed bh option [ 52.632343][ T4274] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.645469][ T4274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.670297][ T4274] EXT4-fs (loop3): 1 truncate cleaned up [ 52.678668][ T4274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.700840][ T4274] FAULT_INJECTION: forcing a failure. [ 52.700840][ T4274] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.714152][ T4274] CPU: 1 UID: 0 PID: 4274 Comm: syz.3.267 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 52.714186][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.714255][ T4274] Call Trace: [ 52.714263][ T4274] [ 52.714272][ T4274] __dump_stack+0x1d/0x30 [ 52.714296][ T4274] dump_stack_lvl+0xe8/0x140 [ 52.714319][ T4274] dump_stack+0x15/0x1b [ 52.714338][ T4274] should_fail_ex+0x265/0x280 [ 52.714378][ T4274] should_fail_alloc_page+0xf2/0x100 [ 52.714425][ T4274] __alloc_frozen_pages_noprof+0xff/0x360 [ 52.714467][ T4274] alloc_pages_mpol+0xb3/0x250 [ 52.714505][ T4274] folio_alloc_noprof+0x97/0x150 [ 52.714604][ T4274] filemap_alloc_folio_noprof+0x66/0x210 [ 52.714641][ T4274] __filemap_get_folio+0x28f/0x6b0 [ 52.714691][ T4274] ? ext4_get_group_info+0xba/0xe0 [ 52.714719][ T4274] ext4_mb_init_group+0xce/0x3f0 [ 52.714819][ T4274] ext4_mb_regular_allocator+0xb1a/0x2300 [ 52.714852][ T4274] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 52.714909][ T4274] ext4_mb_new_blocks+0x800/0x2050 [ 52.714992][ T4274] ? blk_mq_issue_direct+0x3b5/0x530 [ 52.715022][ T4274] ? ext4_get_branch+0x321/0x3a0 [ 52.715051][ T4274] ? __blk_mq_alloc_requests+0xd86/0xe30 [ 52.715085][ T4274] ext4_new_meta_blocks+0xc3/0x1b0 [ 52.715241][ T4274] ext4_ind_map_blocks+0xba3/0x14f0 [ 52.715291][ T4274] ext4_map_blocks+0x5d2/0xd70 [ 52.715353][ T4274] ext4_iomap_begin+0x93a/0xe00 [ 52.715384][ T4274] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 52.715454][ T4274] iomap_iter+0x335/0x730 [ 52.715495][ T4274] ? should_failslab+0x8c/0xb0 [ 52.715524][ T4274] __iomap_dio_rw+0x708/0x1250 [ 52.715575][ T4274] ? ext4_journal_check_start+0x11a/0x1b0 [ 52.715618][ T4274] iomap_dio_rw+0x40/0x90 [ 52.715675][ T4274] ext4_file_write_iter+0xad9/0xf00 [ 52.715710][ T4274] do_iter_readv_writev+0x421/0x4c0 [ 52.715737][ T4274] vfs_writev+0x2df/0x8b0 [ 52.715813][ T4274] __se_sys_pwritev2+0xfc/0x1c0 [ 52.715838][ T4274] __x64_sys_pwritev2+0x67/0x80 [ 52.715863][ T4274] x64_sys_call+0x1cea/0x2fb0 [ 52.715887][ T4274] do_syscall_64+0xd2/0x200 [ 52.715907][ T4274] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.715988][ T4274] ? clear_bhb_loop+0x40/0x90 [ 52.716046][ T4274] ? clear_bhb_loop+0x40/0x90 [ 52.716070][ T4274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.716094][ T4274] RIP: 0033:0x7feb720ee929 [ 52.716192][ T4274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.716212][ T4274] RSP: 002b:00007feb70757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 52.716233][ T4274] RAX: ffffffffffffffda RBX: 00007feb72315fa0 RCX: 00007feb720ee929 [ 52.716254][ T4274] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 52.716314][ T4274] RBP: 00007feb70757090 R08: 0000000030000000 R09: 0000000000000003 [ 52.716327][ T4274] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 52.716340][ T4274] R13: 0000000000000000 R14: 00007feb72315fa0 R15: 00007fffe95fb668 [ 52.716438][ T4274] [ 53.132272][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 53.141336][ T4286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.270'. [ 53.156895][ T4284] loop4: detected capacity change from 0 to 512 [ 53.179135][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.194555][ T4290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4290 comm=syz.0.273 [ 53.197108][ T4284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.250507][ T4284] EXT4-fs (loop4): 1 truncate cleaned up [ 53.269062][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 53.269080][ T29] audit: type=1326 audit(1750581167.670:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 53.303020][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 53.325888][ T4284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.349194][ T29] audit: type=1326 audit(1750581167.670:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.361031][ T4299] SELinux: Context Ü is not valid (left unmapped). [ 53.372637][ T29] audit: type=1326 audit(1750581167.670:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.402775][ T29] audit: type=1326 audit(1750581167.670:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.426265][ T29] audit: type=1326 audit(1750581167.670:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.449702][ T29] audit: type=1326 audit(1750581167.670:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.473074][ T29] audit: type=1326 audit(1750581167.670:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.474090][ T4299] loop3: detected capacity change from 0 to 128 [ 53.496470][ T29] audit: type=1326 audit(1750581167.670:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.496565][ T29] audit: type=1326 audit(1750581167.670:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.537771][ T4300] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 53.549451][ T29] audit: type=1326 audit(1750581167.670:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02790e929 code=0x7ffc0000 [ 53.634389][ T4299] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.655646][ T4299] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.663758][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 53.801420][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.914177][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.918618][ T4316] SELinux: failed to load policy [ 53.961643][ T4323] FAULT_INJECTION: forcing a failure. [ 53.961643][ T4323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.974916][ T4323] CPU: 0 UID: 0 PID: 4323 Comm: syz.0.282 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 53.974986][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.975001][ T4323] Call Trace: [ 53.975006][ T4323] [ 53.975014][ T4323] __dump_stack+0x1d/0x30 [ 53.975088][ T4323] dump_stack_lvl+0xe8/0x140 [ 53.975111][ T4323] dump_stack+0x15/0x1b [ 53.975128][ T4323] should_fail_ex+0x265/0x280 [ 53.975165][ T4323] should_fail+0xb/0x20 [ 53.975196][ T4323] should_fail_usercopy+0x1a/0x20 [ 53.975299][ T4323] _copy_from_user+0x1c/0xb0 [ 53.975322][ T4323] ___sys_sendmsg+0xc1/0x1d0 [ 53.975377][ T4323] __x64_sys_sendmsg+0xd4/0x160 [ 53.975436][ T4323] x64_sys_call+0x2999/0x2fb0 [ 53.975459][ T4323] do_syscall_64+0xd2/0x200 [ 53.975541][ T4323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.975569][ T4323] ? clear_bhb_loop+0x40/0x90 [ 53.975669][ T4323] ? clear_bhb_loop+0x40/0x90 [ 53.975693][ T4323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.975716][ T4323] RIP: 0033:0x7fe02790e929 [ 53.975758][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.975777][ T4323] RSP: 002b:00007fe025f56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.975869][ T4323] RAX: ffffffffffffffda RBX: 00007fe027b36080 RCX: 00007fe02790e929 [ 53.975883][ T4323] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000003 [ 53.975896][ T4323] RBP: 00007fe025f56090 R08: 0000000000000000 R09: 0000000000000000 [ 53.975909][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.975921][ T4323] R13: 0000000000000000 R14: 00007fe027b36080 R15: 00007ffe37d16e08 [ 53.975942][ T4323] [ 53.976319][ T4324] FAULT_INJECTION: forcing a failure. [ 53.976319][ T4324] name failslab, interval 1, probability 0, space 0, times 0 [ 54.046167][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 54.047190][ T4324] CPU: 1 UID: 0 PID: 4324 Comm: syz.3.285 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 54.047232][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.047252][ T4324] Call Trace: [ 54.047261][ T4324] [ 54.047272][ T4324] __dump_stack+0x1d/0x30 [ 54.047304][ T4324] dump_stack_lvl+0xe8/0x140 [ 54.047341][ T4324] dump_stack+0x15/0x1b [ 54.047365][ T4324] should_fail_ex+0x265/0x280 [ 54.047494][ T4324] should_failslab+0x8c/0xb0 [ 54.047592][ T4324] kmem_cache_alloc_noprof+0x50/0x310 [ 54.047630][ T4324] ? skb_clone+0x151/0x1f0 [ 54.047659][ T4324] skb_clone+0x151/0x1f0 [ 54.047686][ T4324] pfkey_sendmsg+0x2cc/0x900 [ 54.047795][ T4324] ? avc_has_perm+0xd3/0x150 [ 54.047848][ T4324] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 54.047904][ T4324] __sock_sendmsg+0x142/0x180 [ 54.047940][ T4324] ____sys_sendmsg+0x31e/0x4e0 [ 54.048071][ T4324] ___sys_sendmsg+0x17b/0x1d0 [ 54.048141][ T4324] __x64_sys_sendmsg+0xd4/0x160 [ 54.048201][ T4324] x64_sys_call+0x2999/0x2fb0 [ 54.048281][ T4324] do_syscall_64+0xd2/0x200 [ 54.048307][ T4324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.048351][ T4324] ? clear_bhb_loop+0x40/0x90 [ 54.048381][ T4324] ? clear_bhb_loop+0x40/0x90 [ 54.048446][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.048476][ T4324] RIP: 0033:0x7feb720ee929 [ 54.048497][ T4324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.048523][ T4324] RSP: 002b:00007feb70757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.048580][ T4324] RAX: ffffffffffffffda RBX: 00007feb72315fa0 RCX: 00007feb720ee929 [ 54.048643][ T4324] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 54.048671][ T4324] RBP: 00007feb70757090 R08: 0000000000000000 R09: 0000000000000000 [ 54.048690][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.048708][ T4324] R13: 0000000000000000 R14: 00007feb72315fa0 R15: 00007fffe95fb668 [ 54.048737][ T4324] [ 54.204851][ T4335] FAULT_INJECTION: forcing a failure. [ 54.204851][ T4335] name failslab, interval 1, probability 0, space 0, times 0 [ 54.212943][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 54.213523][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.2.286 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 54.213611][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.213630][ T4335] Call Trace: [ 54.213639][ T4335] [ 54.213652][ T4335] __dump_stack+0x1d/0x30 [ 54.213683][ T4335] dump_stack_lvl+0xe8/0x140 [ 54.213712][ T4335] dump_stack+0x15/0x1b [ 54.213762][ T4335] should_fail_ex+0x265/0x280 [ 54.213810][ T4335] should_failslab+0x8c/0xb0 [ 54.213844][ T4335] __kmalloc_node_noprof+0xa9/0x410 [ 54.213886][ T4335] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 54.213974][ T4335] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 54.214090][ T4335] ? selinux_capable+0x1f9/0x270 [ 54.214126][ T4335] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.214174][ T4335] __vmalloc_noprof+0x83/0xc0 [ 54.214253][ T4335] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.214323][ T4335] bpf_prog_alloc_no_stats+0x47/0x390 [ 54.214430][ T4335] ? bpf_prog_alloc+0x2a/0x150 [ 54.214476][ T4335] bpf_prog_alloc+0x3c/0x150 [ 54.214583][ T4335] bpf_prog_load+0x514/0x1070 [ 54.214653][ T4335] ? security_bpf+0x2b/0x90 [ 54.214685][ T4335] __sys_bpf+0x51d/0x790 [ 54.214741][ T4335] __x64_sys_bpf+0x41/0x50 [ 54.214782][ T4335] x64_sys_call+0x2478/0x2fb0 [ 54.214838][ T4335] do_syscall_64+0xd2/0x200 [ 54.214865][ T4335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.214904][ T4335] ? clear_bhb_loop+0x40/0x90 [ 54.214937][ T4335] ? clear_bhb_loop+0x40/0x90 [ 54.215094][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.215129][ T4335] RIP: 0033:0x7f086efbe929 [ 54.215151][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.215178][ T4335] RSP: 002b:00007f086d627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.215205][ T4335] RAX: ffffffffffffffda RBX: 00007f086f1e5fa0 RCX: 00007f086efbe929 [ 54.215224][ T4335] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 54.215243][ T4335] RBP: 00007f086d627090 R08: 0000000000000000 R09: 0000000000000000 [ 54.215261][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.215359][ T4335] R13: 0000000000000000 R14: 00007f086f1e5fa0 R15: 00007ffc1b757528 [ 54.215388][ T4335] [ 54.215399][ T4335] syz.2.286: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 54.283520][ T4337] loop3: detected capacity change from 0 to 512 [ 54.284162][ T4335] ,cpuset= [ 54.324653][ T4337] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 54.329714][ T4335] /,mems_allowed=0 [ 54.339363][ T4337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 54.346311][ T4335] [ 54.346326][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.2.286 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 54.346359][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.346401][ T4335] Call Trace: [ 54.346412][ T4335] [ 54.346423][ T4335] __dump_stack+0x1d/0x30 [ 54.346455][ T4335] dump_stack_lvl+0xe8/0x140 [ 54.346485][ T4335] dump_stack+0x15/0x1b [ 54.346580][ T4335] warn_alloc+0x12b/0x1a0 [ 54.346625][ T4335] ? should_failslab+0x8c/0xb0 [ 54.346683][ T4335] __vmalloc_node_range_noprof+0x497/0xe00 [ 54.346744][ T4335] ? selinux_capable+0x1f9/0x270 [ 54.346823][ T4335] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.346870][ T4335] __vmalloc_noprof+0x83/0xc0 [ 54.346911][ T4335] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.347004][ T4335] bpf_prog_alloc_no_stats+0x47/0x390 [ 54.347120][ T4335] ? bpf_prog_alloc+0x2a/0x150 [ 54.347178][ T4335] bpf_prog_alloc+0x3c/0x150 [ 54.347221][ T4335] bpf_prog_load+0x514/0x1070 [ 54.347356][ T4335] ? security_bpf+0x2b/0x90 [ 54.347387][ T4335] __sys_bpf+0x51d/0x790 [ 54.347441][ T4335] __x64_sys_bpf+0x41/0x50 [ 54.347481][ T4335] x64_sys_call+0x2478/0x2fb0 [ 54.347511][ T4335] do_syscall_64+0xd2/0x200 [ 54.347561][ T4335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.347600][ T4335] ? clear_bhb_loop+0x40/0x90 [ 54.347631][ T4335] ? clear_bhb_loop+0x40/0x90 [ 54.347668][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.347698][ T4335] RIP: 0033:0x7f086efbe929 [ 54.347722][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.347752][ T4335] RSP: 002b:00007f086d627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.347778][ T4335] RAX: ffffffffffffffda RBX: 00007f086f1e5fa0 RCX: 00007f086efbe929 [ 54.347796][ T4335] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 54.347816][ T4335] RBP: 00007f086d627090 R08: 0000000000000000 R09: 0000000000000000 [ 54.347834][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.347851][ T4335] R13: 0000000000000000 R14: 00007f086f1e5fa0 R15: 00007ffc1b757528 [ 54.347881][ T4335] [ 54.347907][ T4335] Mem-Info: [ 54.359196][ T4337] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.362456][ T4335] active_anon:5450 inactive_anon:0 isolated_anon:0 [ 54.362456][ T4335] active_file:23735 inactive_file:2218 isolated_file:0 [ 54.362456][ T4335] unevictable:1 dirty:371 writeback:0 [ 54.362456][ T4335] slab_reclaimable:3031 slab_unreclaimable:13814 [ 54.362456][ T4335] mapped:30429 shmem:222 pagetables:1160 [ 54.362456][ T4335] sec_pagetables:0 bounce:0 [ 54.362456][ T4335] kernel_misc_reclaimable:0 [ 54.362456][ T4335] free:1872843 free_pcp:21828 free_cma:0 [ 54.378441][ T4335] Node 0 active_anon:21800kB inactive_anon:0kB active_file:94940kB inactive_file:8872kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:121716kB dirty:1484kB writeback:0kB shmem:888kB writeback_tmp:0kB kernel_stack:3488kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 54.384204][ T4337] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.287: attempt to clear invalid blocks 1024 len 1 [ 54.394125][ T4335] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.406478][ T4337] EXT4-fs (loop3): Remounting filesystem read-only [ 54.415446][ T4335] lowmem_reserve[]: 0 2882 7860 7860 [ 54.427679][ T4337] EXT4-fs (loop3): 1 truncate cleaned up [ 54.428840][ T4335] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 54.433275][ T4337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 54.436162][ T4335] lowmem_reserve[]: 0 0 4978 [ 54.518236][ T4337] bond1: entered promiscuous mode [ 54.520844][ T4335] 4978 [ 54.520858][ T4335] Node 0 Normal free:4525856kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21800kB inactive_anon:0kB active_file:94940kB inactive_file:8872kB unevictable:4kB writepending:1600kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:83720kB local_pcp:41176kB free_cma:0kB [ 54.525343][ T4337] bond1: entered allmulticast mode [ 54.529992][ T4335] lowmem_reserve[]: 0 [ 54.535387][ T4337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.540619][ T4335] 0 0 0 [ 54.540649][ T4335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.156498][ T4335] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 55.172748][ T4335] Node 0 Normal: 2107*4kB (UM) 1387*8kB (UME) 979*16kB (UME) 690*32kB (UME) 453*64kB (UME) 175*128kB (UME) 59*256kB (UME) 23*512kB (UME) 3*1024kB (M) 6*2048kB (UME) 1069*4096kB (UM) = 4529524kB [ 55.192120][ T4335] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 55.201516][ T4335] 26197 total pagecache pages [ 55.206229][ T4335] 33 pages in swap cache [ 55.210679][ T4335] Free swap = 124864kB [ 55.214895][ T4335] Total swap = 124996kB [ 55.219049][ T4335] 2097051 pages RAM [ 55.222917][ T4335] 0 pages HighMem/MovableOnly [ 55.227694][ T4335] 80810 pages reserved [ 55.243999][ T4337] bond1 (unregistering): Released all slaves [ 55.393602][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 55.435130][ T4356] loop4: detected capacity change from 0 to 512 [ 55.454146][ T4356] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 55.479897][ T4356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 55.489060][ T4356] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.496720][ T4356] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.294: attempt to clear invalid blocks 1024 len 1 [ 55.511672][ T4356] EXT4-fs (loop4): Remounting filesystem read-only [ 55.534447][ T4356] EXT4-fs (loop4): 1 truncate cleaned up [ 55.540836][ T4356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 55.562073][ T4362] bond1: entered promiscuous mode [ 55.567264][ T4362] bond1: entered allmulticast mode [ 55.575716][ T4362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.593956][ T4362] bond1 (unregistering): Released all slaves [ 55.609434][ T4356] bond1: entered promiscuous mode [ 55.614638][ T4356] bond1: entered allmulticast mode [ 55.620016][ T4356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.633151][ T4356] bond1 (unregistering): Released all slaves [ 55.634200][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.648215][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.657161][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.675958][ T4370] bond1: entered promiscuous mode [ 55.681073][ T4370] bond1: entered allmulticast mode [ 55.682284][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.695620][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.704627][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.715024][ T4370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.729036][ T4370] bond1 (unregistering): Released all slaves [ 55.749322][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 55.759468][ T4377] block device autoloading is deprecated and will be removed. [ 55.776624][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.785641][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.794655][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 55.865113][ T4390] openvswitch: netlink: Message has 6 unknown bytes. [ 55.937764][ T4392] loop2: detected capacity change from 0 to 512 [ 55.965333][ T4392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.992936][ T4394] netlink: 830 bytes leftover after parsing attributes in process `syz.0.308'. [ 56.002139][ T4394] bond_slave_0: entered promiscuous mode [ 56.007855][ T4394] bond_slave_1: entered promiscuous mode [ 56.066606][ T4392] EXT4-fs (loop2): 1 truncate cleaned up [ 56.083391][ T4392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.133328][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.256848][ T4419] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 57.309853][ T4423] loop4: detected capacity change from 0 to 512 [ 57.425941][ T4423] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.930505][ T4423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 57.930604][ T4423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.935177][ T4423] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.315: attempt to clear invalid blocks 1024 len 1 [ 57.935324][ T4423] EXT4-fs (loop4): Remounting filesystem read-only [ 57.935630][ T4423] EXT4-fs (loop4): 1 truncate cleaned up [ 57.936092][ T4423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.073925][ T4423] bond1: entered promiscuous mode [ 58.074001][ T4423] bond1: entered allmulticast mode [ 58.074183][ T4423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.105075][ T4423] bond1 (unregistering): Released all slaves [ 58.365395][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 58.481152][ T4440] bond1: entered promiscuous mode [ 58.481175][ T4440] bond1: entered allmulticast mode [ 58.481388][ T4440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.485355][ T4440] bond1 (unregistering): Released all slaves [ 58.575230][ T4443] loop2: detected capacity change from 0 to 512 [ 58.592180][ T4443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 58.592350][ T4443] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 58.592624][ T4443] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 58.592923][ T4443] EXT4-fs (loop2): 2 truncates cleaned up [ 58.600497][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.604002][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 58.604022][ T29] audit: type=1400 audit(1750581173.010:1396): avc: denied { ioctl } for pid=4442 comm="+}[@" path="socket:[7401]" dev="sockfs" ino=7401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.637136][ T29] audit: type=1400 audit(1750581173.040:1397): avc: denied { bind } for pid=4446 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.638308][ T29] audit: type=1400 audit(1750581173.040:1398): avc: denied { setopt } for pid=4446 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.640206][ T29] audit: type=1400 audit(1750581173.040:1399): avc: denied { ioctl } for pid=4446 comm="syz.4.320" path="socket:[7409]" dev="sockfs" ino=7409 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.849856][ T29] audit: type=1400 audit(1750581173.250:1400): avc: denied { tracepoint } for pid=4452 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.958734][ T4447] loop4: detected capacity change from 0 to 1024 [ 59.003034][ T29] audit: type=1400 audit(1750581173.410:1401): avc: denied { read write } for pid=4456 comm="syz.1.324" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.026667][ T29] audit: type=1400 audit(1750581173.410:1402): avc: denied { open } for pid=4456 comm="syz.1.324" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.032424][ T4447] EXT4-fs: Ignoring removed nobh option [ 59.056144][ T4447] EXT4-fs: Ignoring removed bh option [ 59.064602][ T29] audit: type=1400 audit(1750581173.470:1403): avc: denied { ioctl } for pid=4456 comm="syz.1.324" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.075449][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.140657][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.161483][ T4466] cgroup: release_agent respecified [ 59.182976][ T4466] loop3: detected capacity change from 0 to 1024 [ 59.216204][ T4466] EXT4-fs: Ignoring removed orlov option [ 59.241433][ T4466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.275924][ T4466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 59.282510][ T4466] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.290367][ T4466] vhci_hcd vhci_hcd.0: Device attached [ 59.334466][ T29] audit: type=1326 audit(1750581173.720:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086efbe929 code=0x7ffc0000 [ 59.357985][ T29] audit: type=1326 audit(1750581173.720:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086efbe929 code=0x7ffc0000 [ 59.386899][ T4470] vhci_hcd: connection closed [ 59.387202][ T51] vhci_hcd: stop threads [ 59.396353][ T51] vhci_hcd: release socket [ 59.401041][ T51] vhci_hcd: disconnect device [ 59.432168][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.607276][ T4479] loop2: detected capacity change from 0 to 164 [ 59.615425][ T4479] iso9660: Bad value for 'uid' [ 59.620440][ T4479] iso9660: Bad value for 'uid' [ 59.683942][ T4480] loop4: detected capacity change from 0 to 164 [ 59.690869][ T4480] iso9660: Bad value for 'check' [ 60.076920][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.422131][ T4491] loop3: detected capacity change from 0 to 164 [ 60.454297][ T4491] iso9660: Bad value for 'check' [ 60.574033][ T4509] loop2: detected capacity change from 0 to 512 [ 60.793653][ T4509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.853825][ T4508] random: crng reseeded on system resumption [ 60.929188][ T4509] EXT4-fs (loop2): 1 truncate cleaned up [ 60.954229][ T4509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.051461][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.746414][ T4602] loop4: detected capacity change from 0 to 164 [ 61.753629][ T4602] iso9660: Bad value for 'check' [ 62.040356][ T4605] loop3: detected capacity change from 0 to 512 [ 62.157524][ T4608] loop2: detected capacity change from 0 to 128 [ 62.193048][ T4607] bridge_slave_0: left allmulticast mode [ 62.198826][ T4607] bridge_slave_0: left promiscuous mode [ 62.204714][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.228113][ T4607] bridge_slave_1: left allmulticast mode [ 62.233874][ T4607] bridge_slave_1: left promiscuous mode [ 62.239538][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.249444][ T4605] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.277232][ T4608] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.300310][ T4607] bond0: (slave bond_slave_0): Releasing backup interface [ 62.303660][ T4605] EXT4-fs (loop3): mount failed [ 62.327641][ T4608] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.330454][ T4607] bond0: (slave bond_slave_1): Releasing backup interface [ 62.411555][ T4607] team0: Port device team_slave_0 removed [ 62.467615][ T4607] team0: Port device team_slave_1 removed [ 62.524788][ T4620] loop4: detected capacity change from 0 to 512 [ 62.533325][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.540907][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.561478][ T4620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.580703][ T4622] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 62.608690][ T4620] EXT4-fs (loop4): 1 truncate cleaned up [ 62.628355][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.638067][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.648199][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.805133][ T4629] loop3: detected capacity change from 0 to 512 [ 62.820993][ T4617] __nla_validate_parse: 4 callbacks suppressed [ 62.821044][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 62.872368][ T4629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.890405][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.914816][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.929508][ T4629] EXT4-fs (loop3): 1 truncate cleaned up [ 62.962262][ T4629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.156320][ T4644] loop2: detected capacity change from 0 to 164 [ 63.235552][ T4644] iso9660: Bad value for 'uid' [ 63.240500][ T4644] iso9660: Bad value for 'uid' [ 63.294263][ T4641] loop4: detected capacity change from 0 to 512 [ 63.342786][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 63.367799][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 63.376753][ T4644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.361'. [ 63.397662][ T4641] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 63.438945][ T4641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 63.450925][ T4641] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.458019][ T4641] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.360: attempt to clear invalid blocks 1024 len 1 [ 63.479898][ T4641] EXT4-fs (loop4): Remounting filesystem read-only [ 63.505194][ T4641] EXT4-fs (loop4): 1 truncate cleaned up [ 63.514808][ T4641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 63.575747][ T4641] bond1: entered promiscuous mode [ 63.581350][ T4641] bond1: entered allmulticast mode [ 63.586941][ T4641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.597599][ T4641] bond1 (unregistering): Released all slaves [ 63.685923][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.728071][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 63.728088][ T29] audit: type=1400 audit(1750581178.130:1770): avc: denied { map } for pid=4664 comm="syz.2.368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.758673][ T29] audit: type=1400 audit(1750581178.130:1771): avc: denied { read write } for pid=4664 comm="syz.2.368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.783600][ T4663] FAULT_INJECTION: forcing a failure. [ 63.783600][ T4663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.786278][ T29] audit: type=1400 audit(1750581178.150:1772): avc: denied { ioctl } for pid=4664 comm="syz.2.368" path="socket:[7660]" dev="sockfs" ino=7660 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.797481][ T4663] CPU: 1 UID: 0 PID: 4663 Comm: syz.0.369 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 63.797522][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.797540][ T4663] Call Trace: [ 63.797549][ T4663] [ 63.797559][ T4663] __dump_stack+0x1d/0x30 [ 63.797591][ T4663] dump_stack_lvl+0xe8/0x140 [ 63.797619][ T4663] dump_stack+0x15/0x1b [ 63.797691][ T4663] should_fail_ex+0x265/0x280 [ 63.797738][ T4663] should_fail+0xb/0x20 [ 63.797777][ T4663] should_fail_usercopy+0x1a/0x20 [ 63.797879][ T4663] _copy_from_user+0x1c/0xb0 [ 63.797909][ T4663] restore_altstack+0x4b/0x2d0 [ 63.797944][ T4663] ? __set_task_blocked+0x23a/0x2a0 [ 63.797977][ T4663] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 63.798020][ T4663] ? __rcu_read_unlock+0x4f/0x70 [ 63.798051][ T4663] ? bpf_trace_run2+0x124/0x1c0 [ 63.798086][ T4663] ? fpu__clear_user_states+0x63/0x1e0 [ 63.798201][ T4663] ? __bpf_trace_sys_enter+0x10/0x30 [ 63.798232][ T4663] ? trace_sys_enter+0xd0/0x110 [ 63.798268][ T4663] x64_sys_call+0x2e8a/0x2fb0 [ 63.798339][ T4663] do_syscall_64+0xd2/0x200 [ 63.798430][ T4663] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.798467][ T4663] ? clear_bhb_loop+0x40/0x90 [ 63.798503][ T4663] ? clear_bhb_loop+0x40/0x90 [ 63.798534][ T4663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.798576][ T4663] RIP: 0033:0x7fe0278aab19 [ 63.798600][ T4663] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 63.798655][ T4663] RSP: 002b:00007fe025f76a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 63.798682][ T4663] RAX: ffffffffffffffda RBX: 00007fe027b35fa0 RCX: 00007fe0278aab19 [ 63.798700][ T4663] RDX: 00007fe025f76a80 RSI: 00007fe025f76bb0 RDI: 0000000000000021 [ 63.798717][ T4663] RBP: 00007fe025f77090 R08: 0000000000000000 R09: 0000000000000000 [ 63.798735][ T4663] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 63.798769][ T4663] R13: 0000000000000000 R14: 00007fe027b35fa0 R15: 00007ffe37d16e08 [ 63.798846][ T4663] [ 63.804036][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 63.822264][ T29] audit: type=1400 audit(1750581178.150:1773): avc: denied { read } for pid=4664 comm="syz.2.368" dev="sockfs" ino=7660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.074910][ T29] audit: type=1400 audit(1750581178.440:1774): avc: denied { validate_trans } for pid=4670 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.094021][ T4679] netlink: 'syz.0.372': attribute type 4 has an invalid length. [ 64.116256][ T4668] bond1: entered promiscuous mode [ 64.121486][ T4668] bond1: entered allmulticast mode [ 64.138998][ T29] audit: type=1400 audit(1750581178.530:1775): avc: denied { mount } for pid=4681 comm="syz.2.374" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.161897][ T4668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.201109][ T4668] bond1 (unregistering): Released all slaves [ 64.286108][ T4690] loop2: detected capacity change from 0 to 2048 [ 64.322800][ T4690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.350574][ T4686] bond1: entered promiscuous mode [ 64.355782][ T4686] bond1: entered allmulticast mode [ 64.361276][ T4686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.390847][ T4702] loop4: detected capacity change from 0 to 164 [ 64.397863][ T4702] iso9660: Bad value for 'check' [ 64.485058][ T4686] bond1 (unregistering): Released all slaves [ 64.550193][ T29] audit: type=1400 audit(1750581178.910:1776): avc: denied { read append } for pid=4689 comm="syz.2.378" path="/68/file0/memory.swap.current" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.574645][ T29] audit: type=1326 audit(1750581178.940:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 64.598083][ T29] audit: type=1326 audit(1750581178.950:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7feb720ee929 code=0x7ffc0000 [ 64.621538][ T29] audit: type=1400 audit(1750581178.950:1779): avc: denied { create } for pid=4685 comm="syz.3.375" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.702650][ T4561] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 64.819074][ T4561] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.831407][ T4561] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.831407][ T4561] [ 64.841196][ T4561] EXT4-fs (loop2): Total free blocks count 0 [ 64.847288][ T4561] EXT4-fs (loop2): Free/Dirty block details [ 64.847307][ T4561] EXT4-fs (loop2): free_blocks=66060288 [ 64.847324][ T4561] EXT4-fs (loop2): dirty_blocks=16 [ 64.847339][ T4561] EXT4-fs (loop2): Block reservation details [ 64.847378][ T4561] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 64.849111][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.089181][ T4728] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 65.192261][ T4733] loop3: detected capacity change from 0 to 512 [ 65.203768][ T4733] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 65.215247][ T4733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 65.223462][ T4733] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.231157][ T4733] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.393: attempt to clear invalid blocks 1024 len 1 [ 65.247303][ T4733] EXT4-fs (loop3): Remounting filesystem read-only [ 65.256981][ T4733] EXT4-fs (loop3): 1 truncate cleaned up [ 65.264419][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 65.280689][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 65.289603][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 65.316701][ T4733] bond1: entered promiscuous mode [ 65.321896][ T4733] bond1: entered allmulticast mode [ 65.327587][ T4733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.352550][ T4733] bond1 (unregistering): Released all slaves [ 65.427509][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 65.692491][ T4770] FAULT_INJECTION: forcing a failure. [ 65.692491][ T4770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.705682][ T4770] CPU: 1 UID: 0 PID: 4770 Comm: +}[@ Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 65.705796][ T4770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.705812][ T4770] Call Trace: [ 65.705820][ T4770] [ 65.705828][ T4770] __dump_stack+0x1d/0x30 [ 65.705852][ T4770] dump_stack_lvl+0xe8/0x140 [ 65.705953][ T4770] dump_stack+0x15/0x1b [ 65.705972][ T4770] should_fail_ex+0x265/0x280 [ 65.706024][ T4770] should_fail+0xb/0x20 [ 65.706101][ T4770] should_fail_usercopy+0x1a/0x20 [ 65.706182][ T4770] _copy_from_iter+0xcf/0xe40 [ 65.706206][ T4770] ? __build_skb_around+0x1a0/0x200 [ 65.706245][ T4770] ? __alloc_skb+0x223/0x320 [ 65.706304][ T4770] netlink_sendmsg+0x471/0x6b0 [ 65.706384][ T4770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.706411][ T4770] __sock_sendmsg+0x142/0x180 [ 65.706445][ T4770] ____sys_sendmsg+0x31e/0x4e0 [ 65.706619][ T4770] ___sys_sendmsg+0x17b/0x1d0 [ 65.706678][ T4770] __x64_sys_sendmsg+0xd4/0x160 [ 65.706858][ T4770] x64_sys_call+0x2999/0x2fb0 [ 65.706926][ T4770] do_syscall_64+0xd2/0x200 [ 65.706950][ T4770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.707036][ T4770] ? clear_bhb_loop+0x40/0x90 [ 65.707065][ T4770] ? clear_bhb_loop+0x40/0x90 [ 65.707090][ T4770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.707111][ T4770] RIP: 0033:0x7feb720ee929 [ 65.707126][ T4770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.707199][ T4770] RSP: 002b:00007feb70736038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.707305][ T4770] RAX: ffffffffffffffda RBX: 00007feb72316080 RCX: 00007feb720ee929 [ 65.707352][ T4770] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 65.707369][ T4770] RBP: 00007feb70736090 R08: 0000000000000000 R09: 0000000000000000 [ 65.707385][ T4770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.707400][ T4770] R13: 0000000000000000 R14: 00007feb72316080 R15: 00007fffe95fb668 [ 65.707425][ T4770] [ 65.924415][ T4769] loop2: detected capacity change from 0 to 512 [ 65.945878][ T4769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.994337][ T4769] EXT4-fs (loop2): 1 truncate cleaned up [ 66.017957][ T4769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.070501][ T4780] cgroup: release_agent respecified [ 66.091303][ T4780] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 66.097926][ T4780] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.105802][ T4780] vhci_hcd vhci_hcd.0: Device attached [ 66.116805][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 66.176794][ T4788] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.195744][ T4784] vhci_hcd: connection closed [ 66.203980][ T31] vhci_hcd: stop threads [ 66.213048][ T31] vhci_hcd: release socket [ 66.217550][ T31] vhci_hcd: disconnect device [ 66.230017][ T4783] bond1: entered promiscuous mode [ 66.235362][ T4783] bond1: entered allmulticast mode [ 66.240964][ T4783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.254577][ T4783] bond1 (unregistering): Released all slaves [ 66.264748][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.472365][ T4794] loop2: detected capacity change from 0 to 512 [ 66.527597][ T4794] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 66.609795][ T4794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 66.670606][ T4794] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.719261][ T4794] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.407: attempt to clear invalid blocks 1024 len 1 [ 66.858831][ T4805] FAULT_INJECTION: forcing a failure. [ 66.858831][ T4805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.872513][ T4805] CPU: 1 UID: 0 PID: 4805 Comm: syz.4.411 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 66.872604][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.872616][ T4805] Call Trace: [ 66.872624][ T4805] [ 66.872634][ T4805] __dump_stack+0x1d/0x30 [ 66.872661][ T4805] dump_stack_lvl+0xe8/0x140 [ 66.872731][ T4805] dump_stack+0x15/0x1b [ 66.872752][ T4805] should_fail_ex+0x265/0x280 [ 66.872891][ T4805] should_fail+0xb/0x20 [ 66.872919][ T4805] should_fail_usercopy+0x1a/0x20 [ 66.872953][ T4805] _copy_from_user+0x1c/0xb0 [ 66.873003][ T4805] copy_from_sockptr_offset+0x66/0xa0 [ 66.873043][ T4805] do_ip6t_set_ctl+0x5d1/0x840 [ 66.873128][ T4805] ? kstrtoull+0x111/0x140 [ 66.873164][ T4805] ? __rcu_read_unlock+0x4f/0x70 [ 66.873199][ T4805] nf_setsockopt+0x196/0x1b0 [ 66.873226][ T4805] ipv6_setsockopt+0x11a/0x130 [ 66.873250][ T4805] tcp_setsockopt+0x98/0xb0 [ 66.873325][ T4805] sock_common_setsockopt+0x66/0x80 [ 66.873408][ T4805] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 66.873444][ T4805] __sys_setsockopt+0x181/0x200 [ 66.873533][ T4805] __x64_sys_setsockopt+0x64/0x80 [ 66.873643][ T4805] x64_sys_call+0x2bd5/0x2fb0 [ 66.873664][ T4805] do_syscall_64+0xd2/0x200 [ 66.873681][ T4805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.873783][ T4805] ? clear_bhb_loop+0x40/0x90 [ 66.873804][ T4805] ? clear_bhb_loop+0x40/0x90 [ 66.873828][ T4805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.873880][ T4805] RIP: 0033:0x7fb9e7f9e929 [ 66.873899][ T4805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.873990][ T4805] RSP: 002b:00007fb9e6607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.874009][ T4805] RAX: ffffffffffffffda RBX: 00007fb9e81c5fa0 RCX: 00007fb9e7f9e929 [ 66.874025][ T4805] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 66.874037][ T4805] RBP: 00007fb9e6607090 R08: 0000000000000400 R09: 0000000000000000 [ 66.874069][ T4805] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 66.874092][ T4805] R13: 0000000000000000 R14: 00007fb9e81c5fa0 R15: 00007ffe5c0103a8 [ 66.874114][ T4805] [ 67.282031][ T4794] EXT4-fs (loop2): Remounting filesystem read-only [ 67.312175][ T4794] EXT4-fs (loop2): 1 truncate cleaned up [ 67.339776][ T4794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 67.451082][ T4808] loop3: detected capacity change from 0 to 512 [ 67.483063][ T4794] bond2: entered promiscuous mode [ 67.488183][ T4794] bond2: entered allmulticast mode [ 67.503424][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 67.531465][ T4794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.542736][ T4794] bond2 (unregistering): Released all slaves [ 67.554497][ T4808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.556650][ T4825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4825 comm=syz.1.416 [ 67.582323][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.589855][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.602490][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.610013][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.665602][ T4808] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.829802][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 67.982355][ T4808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.013866][ T4834] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.097558][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 68.257119][ T4858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.429'. [ 68.336470][ T4860] loop3: detected capacity change from 0 to 512 [ 68.356639][ T4860] /dev/loop3: Can't open blockdev [ 68.393397][ T4860] bond1: entered promiscuous mode [ 68.398649][ T4860] bond1: entered allmulticast mode [ 68.404474][ T4860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.428700][ T4860] bond1 (unregistering): Released all slaves [ 68.694905][ T4884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.436'. [ 68.703985][ T4884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.436'. [ 68.740155][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 68.740173][ T29] audit: type=1400 audit(1750581183.140:2294): avc: denied { open } for pid=4892 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.765854][ T29] audit: type=1400 audit(1750581183.140:2295): avc: denied { kernel } for pid=4892 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.785318][ T29] audit: type=1400 audit(1750581183.140:2296): avc: denied { create } for pid=4892 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.805972][ T29] audit: type=1400 audit(1750581183.140:2297): avc: denied { relabelfrom } for pid=4892 comm="syz.0.444" name="NETLINK" dev="sockfs" ino=8787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.830368][ T29] audit: type=1400 audit(1750581183.140:2298): avc: denied { relabelto } for pid=4892 comm="syz.0.444" name="NETLINK" dev="sockfs" ino=8787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 68.855277][ T29] audit: type=1400 audit(1750581183.140:2299): avc: denied { write } for pid=4892 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.874606][ T29] audit: type=1400 audit(1750581183.140:2300): avc: denied { execute } for pid=4892 comm="syz.0.444" path="/83/file1" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.897115][ T29] audit: type=1400 audit(1750581183.140:2301): avc: denied { create } for pid=4892 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.899094][ T4876] infiniband syz!: set active [ 68.916687][ T29] audit: type=1400 audit(1750581183.140:2302): avc: denied { read } for pid=4892 comm="syz.0.444" dev="nsfs" ino=4026532686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.921412][ T4876] infiniband syz!: added team_slave_0 [ 68.942450][ T29] audit: type=1400 audit(1750581183.140:2303): avc: denied { open } for pid=4892 comm="syz.0.444" path="net:[4026532686]" dev="nsfs" ino=4026532686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.992638][ T4876] RDS/IB: syz!: added [ 69.014038][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 69.024871][ T4876] smc: adding ib device syz! with port count 1 [ 69.031152][ T4876] smc: ib device syz! port 1 has pnetid [ 69.066145][ T4904] team_slave_0: entered promiscuous mode [ 69.071897][ T4904] team_slave_1: entered promiscuous mode [ 69.088818][ T4904] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 69.167671][ T4904] 9pnet_fd: Insufficient options for proto=fd [ 69.217645][ T4919] loop3: detected capacity change from 0 to 512 [ 69.233605][ T4919] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.263587][ T4919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 69.288939][ T4919] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.297238][ T4919] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.454: attempt to clear invalid blocks 1024 len 1 [ 69.313602][ T4919] EXT4-fs (loop3): Remounting filesystem read-only [ 69.328398][ T4919] EXT4-fs (loop3): 1 truncate cleaned up [ 69.346042][ T4919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.404254][ T4919] bond1: entered promiscuous mode [ 69.409375][ T4919] bond1: entered allmulticast mode [ 69.415205][ T4919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.435454][ T4919] bond1 (unregistering): Released all slaves [ 69.513030][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.543999][ T4932] netlink: 68 bytes leftover after parsing attributes in process `syz.3.458'. [ 69.555266][ T4932] netlink: 9 bytes leftover after parsing attributes in process `syz.3.458'. [ 69.562900][ T4933] netlink: 9 bytes leftover after parsing attributes in process `syz.3.458'. [ 69.588148][ T4932] 0·: renamed from hsr_slave_1 (while UP) [ 69.614108][ T4932] 0·: entered allmulticast mode [ 69.619677][ T4932] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 69.635403][ T4933] 1·: renamed from c0· (while UP) [ 69.653747][ T4939] FAULT_INJECTION: forcing a failure. [ 69.653747][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 69.666603][ T4939] CPU: 0 UID: 0 PID: 4939 Comm: syz.1.461 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 69.666701][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.666718][ T4939] Call Trace: [ 69.666727][ T4939] [ 69.666737][ T4939] __dump_stack+0x1d/0x30 [ 69.666834][ T4939] dump_stack_lvl+0xe8/0x140 [ 69.666859][ T4939] dump_stack+0x15/0x1b [ 69.666880][ T4939] should_fail_ex+0x265/0x280 [ 69.666946][ T4939] ? audit_log_d_path+0x8d/0x150 [ 69.666987][ T4939] should_failslab+0x8c/0xb0 [ 69.667017][ T4939] __kmalloc_cache_noprof+0x4c/0x320 [ 69.667089][ T4939] audit_log_d_path+0x8d/0x150 [ 69.667185][ T4939] audit_log_d_path_exe+0x42/0x70 [ 69.667229][ T4939] audit_log_task+0x1e9/0x250 [ 69.667312][ T4939] audit_seccomp+0x61/0x100 [ 69.667342][ T4939] ? __seccomp_filter+0x68c/0x10d0 [ 69.667373][ T4939] __seccomp_filter+0x69d/0x10d0 [ 69.667405][ T4939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.667430][ T4939] ? vfs_write+0x75e/0x8e0 [ 69.667491][ T4939] __secure_computing+0x82/0x150 [ 69.667519][ T4939] syscall_trace_enter+0xcf/0x1e0 [ 69.667560][ T4939] do_syscall_64+0xac/0x200 [ 69.667635][ T4939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.667678][ T4939] ? clear_bhb_loop+0x40/0x90 [ 69.667707][ T4939] ? clear_bhb_loop+0x40/0x90 [ 69.667736][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.667762][ T4939] RIP: 0033:0x7f69f327e929 [ 69.667781][ T4939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.667855][ T4939] RSP: 002b:00007f69f18e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 69.667878][ T4939] RAX: ffffffffffffffda RBX: 00007f69f34a5fa0 RCX: 00007f69f327e929 [ 69.667890][ T4939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 69.667901][ T4939] RBP: 00007f69f18e7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.667913][ T4939] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000001 [ 69.667928][ T4939] R13: 0000000000000000 R14: 00007f69f34a5fa0 R15: 00007fffe63fc928 [ 69.667994][ T4939] [ 69.668291][ T4933] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 69.932326][ T4952] loop3: detected capacity change from 0 to 164 [ 69.939244][ T4954] cgroup: release_agent respecified [ 69.946474][ T4952] iso9660: Bad value for 'uid' [ 69.948783][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 69.951320][ T4952] iso9660: Bad value for 'uid' [ 69.969328][ T4954] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 69.975939][ T4954] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 69.983907][ T4954] vhci_hcd vhci_hcd.0: Device attached [ 69.993474][ T4956] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 70.009620][ T4957] vhci_hcd: connection closed [ 70.019402][ T31] vhci_hcd: stop threads [ 70.028494][ T31] vhci_hcd: release socket [ 70.033043][ T31] vhci_hcd: disconnect device [ 70.055906][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 70.083325][ T4956] 9pnet_fd: Insufficient options for proto=fd [ 70.315635][ T4969] loop2: detected capacity change from 0 to 512 [ 70.332956][ T4969] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.409358][ T4976] loop3: detected capacity change from 0 to 1024 [ 70.423894][ T4969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 70.475367][ T4969] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.713408][ T4969] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.472: attempt to clear invalid blocks 1024 len 1 [ 70.877509][ T4969] EXT4-fs (loop2): Remounting filesystem read-only [ 70.933760][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.953243][ T4969] EXT4-fs (loop2): 1 truncate cleaned up [ 70.985669][ T4969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 71.004232][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.248266][ T4969] bond2: entered promiscuous mode [ 71.253463][ T4969] bond2: entered allmulticast mode [ 71.327147][ T4969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.439356][ T4969] bond2 (unregistering): Released all slaves [ 71.673871][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 71.968909][ T5019] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 72.109243][ T5022] loop3: detected capacity change from 0 to 164 [ 72.148065][ T5022] iso9660: Bad value for 'uid' [ 72.153003][ T5022] iso9660: Bad value for 'uid' [ 73.161974][ T5170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.244981][ T5181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.278923][ T5177] bond1: entered promiscuous mode [ 73.284423][ T5177] bond1: entered allmulticast mode [ 73.303672][ T5177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.329460][ T5183] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.348989][ T5177] bond1 (unregistering): Released all slaves [ 73.377310][ T5188] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 73.529055][ T5204] __nla_validate_parse: 7 callbacks suppressed [ 73.529072][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.544574][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.553598][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.572335][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.581445][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.590588][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.608088][ T5207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.643757][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.653027][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.662159][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.691770][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.701918][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.765567][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 73.765585][ T29] audit: type=1400 audit(1750581188.170:2775): avc: denied { read } for pid=5215 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.767343][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 73.814796][ T5222] team_slave_0: entered promiscuous mode [ 73.820633][ T5222] team_slave_1: entered promiscuous mode [ 73.827845][ T5222] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 73.854415][ T29] audit: type=1326 audit(1750581188.260:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 73.881255][ T29] audit: type=1326 audit(1750581188.280:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 73.897477][ T5226] bond1: entered promiscuous mode [ 73.904747][ T29] audit: type=1326 audit(1750581188.280:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 73.909723][ T5226] bond1: entered allmulticast mode [ 73.921067][ T5226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.933290][ T29] audit: type=1326 audit(1750581188.280:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 73.968419][ T29] audit: type=1326 audit(1750581188.280:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 73.991818][ T29] audit: type=1326 audit(1750581188.280:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 74.015201][ T29] audit: type=1326 audit(1750581188.280:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 74.038757][ T29] audit: type=1326 audit(1750581188.280:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 74.062392][ T29] audit: type=1326 audit(1750581188.280:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69f327e929 code=0x7ffc0000 [ 74.088721][ T5226] bond1 (unregistering): Released all slaves [ 74.093237][ T5229] 9pnet_fd: Insufficient options for proto=fd [ 74.157550][ T5236] loop4: detected capacity change from 0 to 512 [ 74.184274][ T5236] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.206675][ T5236] EXT4-fs (loop4): mount failed [ 74.342814][ T5255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.378114][ T5257] 9pnet_fd: Insufficient options for proto=fd [ 74.422916][ T5244] loop4: detected capacity change from 0 to 512 [ 74.454425][ T5244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.486952][ T5265] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 74.503325][ T5244] EXT4-fs (loop4): 1 truncate cleaned up [ 74.521933][ T5244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.535195][ T5267] loop3: detected capacity change from 0 to 512 [ 74.604298][ T5267] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.622610][ T5267] EXT4-fs (loop3): mount failed [ 74.675959][ T5274] block device autoloading is deprecated and will be removed. [ 74.714862][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.739550][ T5280] FAULT_INJECTION: forcing a failure. [ 74.739550][ T5280] name failslab, interval 1, probability 0, space 0, times 0 [ 74.752512][ T5280] CPU: 1 UID: 0 PID: 5280 Comm: syz.3.537 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 74.752549][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.752565][ T5280] Call Trace: [ 74.752575][ T5280] [ 74.752585][ T5280] __dump_stack+0x1d/0x30 [ 74.752609][ T5280] dump_stack_lvl+0xe8/0x140 [ 74.752685][ T5280] dump_stack+0x15/0x1b [ 74.752703][ T5280] should_fail_ex+0x265/0x280 [ 74.752771][ T5280] should_failslab+0x8c/0xb0 [ 74.752799][ T5280] kmem_cache_alloc_noprof+0x50/0x310 [ 74.752830][ T5280] ? security_file_alloc+0x32/0x100 [ 74.752856][ T5280] security_file_alloc+0x32/0x100 [ 74.752896][ T5280] init_file+0x5c/0x1d0 [ 74.752923][ T5280] alloc_empty_file+0x8b/0x200 [ 74.752996][ T5280] path_openat+0x68/0x2170 [ 74.753029][ T5280] ? _parse_integer_limit+0x170/0x190 [ 74.753088][ T5280] ? kstrtoull+0x111/0x140 [ 74.753123][ T5280] ? kstrtouint+0x76/0xc0 [ 74.753181][ T5280] do_filp_open+0x109/0x230 [ 74.753226][ T5280] do_sys_openat2+0xa6/0x110 [ 74.753285][ T5280] __x64_sys_openat+0xf2/0x120 [ 74.753317][ T5280] x64_sys_call+0x1af/0x2fb0 [ 74.753345][ T5280] do_syscall_64+0xd2/0x200 [ 74.753364][ T5280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.753471][ T5280] ? clear_bhb_loop+0x40/0x90 [ 74.753496][ T5280] ? clear_bhb_loop+0x40/0x90 [ 74.753526][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.753551][ T5280] RIP: 0033:0x7feb720ed290 [ 74.753566][ T5280] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 74.753586][ T5280] RSP: 002b:00007feb70756f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 74.753606][ T5280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb720ed290 [ 74.753622][ T5280] RDX: 0000000000000000 RSI: 00007feb72170c51 RDI: 00000000ffffff9c [ 74.753638][ T5280] RBP: 00007feb72170c51 R08: 0000000000000000 R09: 0000000000000000 [ 74.753654][ T5280] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.753669][ T5280] R13: 0000000000000000 R14: 00007feb72315fa0 R15: 00007fffe95fb668 [ 74.753695][ T5280] [ 75.059072][ T5301] syz!: rxe_newlink: already configured on team_slave_0 [ 75.144140][ T5302] loop2: detected capacity change from 0 to 512 [ 75.157258][ T5302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.175076][ T5302] EXT4-fs (loop2): 1 orphan inode deleted [ 75.180974][ T5302] EXT4-fs (loop2): 1 truncate cleaned up [ 75.187201][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.205543][ T5289] ================================================================== [ 75.213710][ T5289] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 75.221860][ T5289] [ 75.224209][ T5289] write to 0xffff88811a554ca8 of 8 bytes by task 5285 on cpu 0: [ 75.231883][ T5289] filemap_splice_read+0x47e/0x6b0 [ 75.237048][ T5289] splice_direct_to_actor+0x26f/0x680 [ 75.242462][ T5289] do_splice_direct+0xda/0x150 [ 75.247270][ T5289] do_sendfile+0x380/0x650 [ 75.251732][ T5289] __x64_sys_sendfile64+0x105/0x150 [ 75.256978][ T5289] x64_sys_call+0xb39/0x2fb0 [ 75.261614][ T5289] do_syscall_64+0xd2/0x200 [ 75.266154][ T5289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.272095][ T5289] [ 75.274449][ T5289] write to 0xffff88811a554ca8 of 8 bytes by task 5289 on cpu 1: [ 75.282114][ T5289] filemap_splice_read+0x47e/0x6b0 [ 75.287378][ T5289] splice_direct_to_actor+0x26f/0x680 [ 75.292819][ T5289] do_splice_direct+0xda/0x150 [ 75.297639][ T5289] do_sendfile+0x380/0x650 [ 75.302198][ T5289] __x64_sys_sendfile64+0x105/0x150 [ 75.307433][ T5289] x64_sys_call+0xb39/0x2fb0 [ 75.312061][ T5289] do_syscall_64+0xd2/0x200 [ 75.316682][ T5289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.322694][ T5289] [ 75.325065][ T5289] value changed: 0x0000000001348000 -> 0x000000000134b000 [ 75.332381][ T5289] [ 75.334722][ T5289] Reported by Kernel Concurrency Sanitizer on: [ 75.340891][ T5289] CPU: 1 UID: 0 PID: 5289 Comm: syz.0.538 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 75.353334][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.363414][ T5289] ================================================================== [ 75.371909][ T5308] loop4: detected capacity change from 0 to 2048 [ 75.422452][ T5308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.441599][ T5308] sg_write: data in/out 124/12 bytes for SCSI command 0x75-- guessing data in; [ 75.441599][ T5308] program syz.4.546 not setting count and/or reply_len properly [ 75.733647][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.207076][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.