last executing test programs: 6.763786203s ago: executing program 4 (id=351): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x0, &(0x7f0000000040), 0x0, 0x804, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xfffc}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {0x0, 0xb, 0x0, 0x6}, {0x0, 0x401}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x4000080) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100}, 0x0, {0x3}, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_usb_connect(0x1, 0x24, &(0x7f0000000440)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001580)="516d1570d9199697f557462d52223f551a36f5def0eea39ec107ce6bb4e52a6a9f033e3336716041eb21e2dab918bd191c31f19da4872eacd870980f8b49e581b18688d9936ba254ebe6bda1e548a9c7aa3e12076a997741144016c57f0bd310ac1475acf340", 0x66) 6.242696621s ago: executing program 4 (id=361): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6c, 0xe, 0x3, 0x32}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5, 0x6}, {0x2, 0x4, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ptrace$getregs(0xc, r1, 0x3490, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.126376653s ago: executing program 4 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='percpu_create_chunk\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0xfffffffffffffe51, &(0x7f00000006c0)}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2ab, &(0x7f0000000840)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000000000000000000320000000a000000ff0100000000000000000000000000010000000000020000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ac1414bb0000000000000000000000000000000004"], 0x1fc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000b00)="c769b11f866f5937a71491fd067e2f19228a54cec744414a279f726ff555d2a6a583bb520b7b43b650a04c39033077d60535bead3c53f4e52d73a34e986b0e7d4f7ccf27a3d8dca7800518c07bdbe4ffdbd26f2b8ab21ec5b64b454324f6f00a17788f170eca48bc40bf8f35cf467802c502d5bfbbb5eea6ca52f627310579", 0x7f}], 0x1) 4.940510299s ago: executing program 4 (id=375): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)=0x7ffc) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 3.306404133s ago: executing program 2 (id=392): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000), 0x2, 0x5af, &(0x7f0000000180)="$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") write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.273463073s ago: executing program 4 (id=393): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)=0x7ffc) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 3.207494874s ago: executing program 2 (id=395): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc18010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) io_setup(0x8, &(0x7f0000004200)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000009000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=r4, @ANYBLOB="d69a122d182c16d5c10000000005000000bf91000000000000b70200000000000085000000a6000000b700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000080), 0x3, r4}, 0x38) 2.82372457s ago: executing program 3 (id=397): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6c, 0xe, 0x3, 0x32}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5, 0x6}, {0x2, 0x4, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ptrace$getregs(0xc, r1, 0x3490, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.517218284s ago: executing program 3 (id=399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7, 0x5, 0x1c, @loopback, @empty, 0x8000, 0x7826, 0x6, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x0, 0x7, {{0x17, 0x4, 0x1, 0x17, 0x5c, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0xd7, 0x1, 0x3, [{@multicast1, 0x6}]}, @lsrr={0x83, 0x23, 0x28, [@private=0xa010102, @local, @multicast1, @multicast1, @empty, @multicast2, @remote, @private=0xa010102]}, @cipso={0x86, 0x18, 0x1, [{0x5, 0x12, "6ce61353a5d668cd2863ea9926520a65"}]}]}}}}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x6}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) 2.302254517s ago: executing program 3 (id=400): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x0, &(0x7f0000000040), 0x0, 0x804, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xfffc}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {0x0, 0xb, 0x0, 0x6}, {0x0, 0x401}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x4000080) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100}, 0x0, {0x3}, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_usb_connect(0x1, 0x24, &(0x7f0000000440)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e"], 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001580)="516d1570d9199697f557462d52223f551a36f5def0eea39ec107ce6bb4e52a6a9f033e3336716041eb21e2dab918bd191c31f19da4872eacd870980f8b49e581b18688d9936ba254ebe6bda1e548a9c7aa3e12076a997741144016c57f0bd310ac1475acf340", 0x66) 2.207306409s ago: executing program 2 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000400008803c00008124000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f0000010000000000000000140002007767320000"], 0x68}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r10], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r12}, 0x10) 2.11642812s ago: executing program 0 (id=402): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) 2.07181384s ago: executing program 2 (id=403): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioperm(0x2, 0xf4, 0x371) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESHEX=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0) 1.940378062s ago: executing program 4 (id=404): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.897324563s ago: executing program 2 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1.717206386s ago: executing program 3 (id=406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, 0x100, 0xae}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0xeb64d656001b2f26) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6066b400000087fffc010000000000000000000000000000fe800080"], 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) 1.651808857s ago: executing program 0 (id=407): mkdir(&(0x7f0000000300)='./bus\x00', 0x290) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) fcntl$notify(r0, 0x402, 0x8000003d) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="bed4000200000000ffff08002000d6fb59398f00", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0xf3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x969}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1200820, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0x8000) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {&(0x7f0000000540)}], 0x2, 0x0) 1.599280647s ago: executing program 3 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='percpu_create_chunk\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0xfffffffffffffe51, &(0x7f00000006c0)}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2ab, &(0x7f0000000840)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000000000000000000320000000a000000ff0100000000000000000000000000010000000000020000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ac1414bb0000000000000000000000000000000004"], 0x1fc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x60, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0xfd914868f264ef56, 0x0, 0x18}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1f}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000b00)="c769b11f866f5937a71491fd067e2f19228a54cec744414a279f726ff555d2a6a583bb520b7b43b650a04c39033077d60535bead3c53f4e52d73a34e986b0e7d4f7ccf27a3d8dca7800518c07bdbe4ffdbd26f2b8ab21ec5b64b454324f6f00a17788f170eca48bc40bf8f35cf467802c502d5bfbbb5eea6ca52f6273105791ef094e7401fc25362eedd01aef6773a332f", 0x91}], 0x1) 1.066184725s ago: executing program 1 (id=411): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffc) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 864.646778ms ago: executing program 1 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000009000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=r0, @ANYBLOB="d69a122d182c16d5c10000000005000000bf91000000000000b70200000000000085000000a6000000b700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000080), 0x3, r0}, 0x38) 825.989439ms ago: executing program 0 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000400008803c00008124000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f0000010000000000000000140002007767320000"], 0x68}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r10], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r12}, 0x10) 712.57095ms ago: executing program 0 (id=414): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) unshare(0x6a040000) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffc) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 712.20736ms ago: executing program 1 (id=415): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x5, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810d8, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x6, 0xffffffff, 0x7ff, 0xe1d9, 0x1101, 0xfb}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x6}, [@alu={0x0, 0x1, 0xb, 0xb, 0x0, 0x30, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x6b, &(0x7f00000002c0)=""/107, 0x40f00, 0x8, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x1, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=[r2, r2, r2, r2, r2, r8], &(0x7f0000000580)=[{0x2, 0x3, 0x6, 0x9}], 0x10, 0x3, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpriority(0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000040001801c0002801800018008000100030000000c0001"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r10, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x128}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 710.31867ms ago: executing program 3 (id=416): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x0, &(0x7f0000000040), 0x0, 0x804, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xfffc}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {0x0, 0xb, 0x0, 0x6}, {0x0, 0x401}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x4000080) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100}, 0x0, {0x3}, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_usb_connect(0x1, 0x24, &(0x7f0000000440)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e"], 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001580)="516d1570d9199697f557462d52223f551a36f5def0eea39ec107ce6bb4e52a6a9f033e3336716041eb21e2dab918bd191c31f19da4872eacd870980f8b49e581b18688d9936ba254ebe6bda1e548a9c7aa3e12076a997741144016c57f0bd310ac1475acf340", 0x66) 644.412641ms ago: executing program 2 (id=417): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) 232.445967ms ago: executing program 1 (id=418): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x242c00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r1, 0x0, 0xb3000828) rt_sigsuspend(0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000011907800000000ff1411ff00004e2000089078"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c3fdbbbcf63537dff8a2e1f90861", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sync() r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000480)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8001}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) 188.675808ms ago: executing program 0 (id=419): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x242c00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r1, 0x0, 0xb3000828) rt_sigsuspend(0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000011907800000000ff1411ff00004e2000089078"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c3fdbbbcf63537dff8a2e1f90861", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sync() r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000480)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8001}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) 82.905359ms ago: executing program 1 (id=420): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb8, 0x30, 0x1, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {0x6}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x1}, {}, {0x0, 0xfe}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x9}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {}, {0x0, 0xdd86}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {0x0, 0x80000}, {}, {}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='f2fs_lookup_extent_tree_start\x00', r1, 0x0, 0xa0}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r7, &(0x7f0000000040)=0xfd0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x25, &(0x7f0000000500)=@raw=[@map_val={0x18, 0x5fcc8a0e56624db4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000640)='GPL\x00', 0x0, 0xd2, &(0x7f0000000680)=""/210, 0x41100, 0x20, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xd, 0xc, 0xa99a}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840)=[{0x5, 0x1, 0xa, 0x6}, {0x4, 0x4, 0x7, 0x6}], 0x10, 0x7, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xff, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3ff, 0x2cc}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 50.257039ms ago: executing program 0 (id=421): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x55b, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWvpyKZBVN0AwCk1N7ceLtRq1fUzLWSfQgdxnmMLWRb723m/uXi2oH+MfOHwZUkiiUGXK2uM9bPz1Hm9que+MHnQVhzsmb+enXHIxUkHXorTLMTVYuHRsIKO7p4EDMfhRT/qnAAAAAAAAAAAAAAAACcZxt8wjbqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFz/CQAA//+9UsII") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x7}, 0x1100, 0x5dd8, 0x203a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x70de, 0x100) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) add_key(&(0x7f0000000380)='id_legacy\x00', 0x0, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x7}, 0x0, 0xfffffffffffffff8, 0x800000, 0x7, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) r5 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f00000003c0), 0x0, 0x8) tkill(r5, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x40000006}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = dup(0xffffffffffffffff) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) 0s ago: executing program 1 (id=422): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffc) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) kernel console output (not intermixed with test programs): ded mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.181303][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.192715][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.203796][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.203817][ T3313] veth0_vlan: entered promiscuous mode [ 32.226676][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.237180][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.248790][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.269072][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.277944][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.286795][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295659][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.310114][ T3451] loop3: detected capacity change from 0 to 128 [ 32.317851][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.328489][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.338447][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.349078][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.362315][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.386533][ T3322] veth0_vlan: entered promiscuous mode [ 32.394159][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.404669][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.414603][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.425111][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.436829][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.440967][ T3451] 9p: Unknown Cache mode or invalid value n [ 32.445550][ T3313] veth1_vlan: entered promiscuous mode [ 32.468950][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477800][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.486574][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.495501][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512537][ T3322] veth1_vlan: entered promiscuous mode [ 32.533201][ T3313] veth0_macvtap: entered promiscuous mode [ 32.559011][ T3313] veth1_macvtap: entered promiscuous mode [ 32.572742][ T3322] veth0_macvtap: entered promiscuous mode [ 32.600855][ T3322] veth1_macvtap: entered promiscuous mode [ 32.613081][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.623770][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.633697][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.644233][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.654200][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.664758][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.684150][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.699465][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.710001][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.718659][ C1] hrtimer: interrupt took 58753 ns [ 32.719860][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.730320][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 32.730337][ T29] audit: type=1400 audit(1747002381.692:109): avc: denied { map_create } for pid=3458 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.735414][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.770508][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.774133][ T29] audit: type=1400 audit(1747002381.702:110): avc: denied { map_read map_write } for pid=3458 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.781013][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.810595][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.821086][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.832786][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.891781][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.902428][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.912345][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.922821][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.924106][ T29] audit: type=1400 audit(1747002381.872:111): avc: denied { read } for pid=3456 comm="syz.3.6" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.932745][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.955572][ T29] audit: type=1400 audit(1747002381.872:112): avc: denied { open } for pid=3456 comm="syz.3.6" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.966056][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.989842][ T29] audit: type=1400 audit(1747002381.892:113): avc: denied { ioctl } for pid=3456 comm="syz.3.6" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.028234][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.036777][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.045635][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.054422][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063268][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.074259][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.084772][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.094743][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.105310][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.115237][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.125759][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.135637][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.146120][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.157123][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.192296][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.201287][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.210091][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.219088][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.477961][ T29] audit: type=1400 audit(1747002382.432:114): avc: denied { write } for pid=3472 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.497089][ T29] audit: type=1400 audit(1747002382.432:115): avc: denied { read write } for pid=3472 comm="syz.4.5" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.521112][ T29] audit: type=1400 audit(1747002382.432:116): avc: denied { open } for pid=3472 comm="syz.4.5" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.546019][ T29] audit: type=1400 audit(1747002382.432:117): avc: denied { create } for pid=3472 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.565301][ T29] audit: type=1400 audit(1747002382.432:118): avc: denied { shutdown } for pid=3472 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.670724][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.772968][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.934767][ T3486] loop4: detected capacity change from 0 to 8192 [ 34.221163][ T3493] loop1: detected capacity change from 0 to 512 [ 34.251321][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.264154][ T3493] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.539834][ T3496] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 35.187900][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.551684][ T3511] loop0: detected capacity change from 0 to 512 [ 35.808712][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.895195][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.982390][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 35.998889][ T3521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.059261][ T3528] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.147687][ T3530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.169817][ T3530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.183437][ T3530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 36.325049][ T3532] xt_hashlimit: max too large, truncated to 1048576 [ 36.332691][ T3532] Cannot find set identified by id 0 to match [ 36.360738][ T3477] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.453941][ T3477] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.486391][ T3477] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.535706][ T3477] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.627226][ T3477] syz.2.3 (3477) used greatest stack depth: 10872 bytes left [ 36.753795][ T3538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.838920][ T3538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.855413][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 36.924536][ T3538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.053444][ T3538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.064831][ T3552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 37.073921][ T3542] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 37.167777][ T3538] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.206564][ T3538] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.232878][ T3538] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.247022][ T3538] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.334231][ T3549] loop3: detected capacity change from 0 to 512 [ 37.373408][ T3549] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.387629][ T3549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.413559][ T3562] loop2: detected capacity change from 0 to 512 [ 37.428088][ T3549] EXT4-fs (loop3): 1 truncate cleaned up [ 37.444054][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.461206][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.478002][ T3562] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.771039][ T3577] loop0: detected capacity change from 0 to 512 [ 37.904113][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.916930][ T3577] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.161551][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 38.161626][ T29] audit: type=1400 audit(1747002387.122:695): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.215967][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.613099][ T29] audit: type=1400 audit(1747002387.572:696): avc: denied { read } for pid=3574 comm="syz.1.32" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.700910][ T29] audit: type=1400 audit(1747002387.612:697): avc: denied { open } for pid=3574 comm="syz.1.32" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.725246][ T29] audit: type=1400 audit(1747002387.612:698): avc: denied { ioctl } for pid=3574 comm="syz.1.32" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.751019][ T29] audit: type=1400 audit(1747002387.612:699): avc: denied { watch watch_reads } for pid=3582 comm="syz.3.33" path="/7" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.921562][ T29] audit: type=1400 audit(1747002387.742:700): avc: denied { execute } for pid=3582 comm="syz.3.33" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.934460][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.964301][ T29] audit: type=1400 audit(1747002387.912:701): avc: denied { read write } for pid=3582 comm="syz.3.33" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.523404][ T29] audit: type=1400 audit(1747002388.042:702): avc: denied { open } for pid=3582 comm="syz.3.33" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.586898][ T3597] netlink: 88 bytes leftover after parsing attributes in process `syz.2.35'. [ 39.691988][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.706419][ T3601] loop2: detected capacity change from 0 to 2048 [ 39.743017][ T3601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.762147][ T3601] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.809862][ T29] audit: type=1400 audit(1747002388.762:703): avc: denied { create } for pid=3596 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.921516][ T29] audit: type=1400 audit(1747002388.792:704): avc: denied { write } for pid=3596 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.163472][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 40.231776][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1271 with error 117 [ 40.244482][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.244482][ T37] [ 40.611860][ T3596] syz.2.35 (3596) used greatest stack depth: 9496 bytes left [ 40.645888][ T3614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.658309][ T3608] syz.2.35 (3608) used greatest stack depth: 9288 bytes left [ 40.724765][ T3614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.747658][ T3601] syz.2.35 (3601) used greatest stack depth: 6016 bytes left [ 40.755443][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1287 with max blocks 1 with error 28 [ 40.767979][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.767979][ T12] [ 40.777678][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 40.783758][ T12] EXT4-fs (loop2): Free/Dirty block details [ 40.789655][ T12] EXT4-fs (loop2): free_blocks=0 [ 40.794670][ T12] EXT4-fs (loop2): dirty_blocks=16 [ 40.799807][ T12] EXT4-fs (loop2): Block reservation details [ 40.837933][ T3614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.926040][ T3614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.081250][ T3626] atomic_op ffff88811982bd28 conn xmit_atomic 0000000000000000 [ 41.088269][ T3614] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.129159][ T3629] loop0: detected capacity change from 0 to 128 [ 41.134286][ T3614] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.147486][ T3629] EXT4-fs: Ignoring removed nobh option [ 41.171532][ T3629] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.224150][ T3614] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.238208][ T3629] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.260444][ T3614] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.289086][ T3629] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 41.299269][ T3629] batman_adv: batadv0: Adding interface: team0 [ 41.305589][ T3629] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.330893][ T3629] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 41.345867][ T3629] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 41.353616][ T3629] netlink: 2 bytes leftover after parsing attributes in process `syz.0.42'. [ 41.368254][ T3629] team0: entered promiscuous mode [ 41.373554][ T3629] team_slave_0: entered promiscuous mode [ 41.379380][ T3629] team_slave_1: entered promiscuous mode [ 41.387398][ T3629] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.415147][ T3629] batman_adv: batadv0: Interface activated: team0 [ 41.421769][ T3629] batman_adv: batadv0: Interface deactivated: team0 [ 41.428489][ T3629] batman_adv: batadv0: Removing interface: team0 [ 41.443178][ T3637] netlink: 56 bytes leftover after parsing attributes in process `syz.4.45'. [ 41.452079][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 41.461206][ T3629] bridge0: port 3(team0) entered blocking state [ 41.467581][ T3629] bridge0: port 3(team0) entered disabled state [ 41.478479][ T3629] team0: entered allmulticast mode [ 41.483799][ T3629] team_slave_0: entered allmulticast mode [ 41.489580][ T3629] team_slave_1: entered allmulticast mode [ 41.497009][ T3629] bridge0: port 3(team0) entered blocking state [ 41.503431][ T3629] bridge0: port 3(team0) entered forwarding state [ 41.520751][ T3637] loop4: detected capacity change from 0 to 2048 [ 41.538741][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.583096][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.620483][ T3633] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 41.627548][ T3637] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.653883][ T3643] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 41.735935][ T3637] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #16: comm syz.4.45: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 41.770936][ T3637] binfmt_misc: register: failed to install interpreter file ./file2 [ 42.180866][ T3350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 42.209778][ T3350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 42.222658][ T3350] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.222658][ T3350] [ 42.261320][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 42.274285][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.274285][ T37] [ 42.284212][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 42.290247][ T37] EXT4-fs (loop4): Free/Dirty block details [ 42.296213][ T37] EXT4-fs (loop4): free_blocks=0 [ 42.301177][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 42.306547][ T37] EXT4-fs (loop4): Block reservation details [ 42.442638][ T3662] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.464607][ T3659] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 42.493845][ T3662] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.581096][ T3670] loop2: detected capacity change from 0 to 512 [ 42.612334][ T3670] EXT4-fs: Ignoring removed nobh option [ 42.619893][ T3662] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.659362][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.54: corrupted inode contents [ 42.684404][ T3662] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.695650][ T3670] EXT4-fs (loop2): Remounting filesystem read-only [ 42.721595][ T3670] EXT4-fs (loop2): 1 truncate cleaned up [ 42.741600][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.752258][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.783567][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.841803][ T3670] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.852599][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 42.862193][ T3670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.031872][ T3679] netlink: 88 bytes leftover after parsing attributes in process `syz.2.56'. [ 43.078065][ T3679] loop2: detected capacity change from 0 to 2048 [ 43.087235][ T3675] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 43.124038][ T3679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.163013][ T3679] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.198259][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 43.198274][ T29] audit: type=1400 audit(1747002392.152:795): avc: denied { create } for pid=3678 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.311509][ T29] audit: type=1400 audit(1747002392.192:796): avc: denied { write } for pid=3678 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.331910][ T29] audit: type=1400 audit(1747002392.202:797): avc: denied { tracepoint } for pid=3682 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.351646][ T29] audit: type=1400 audit(1747002392.242:798): avc: denied { create } for pid=3678 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.371792][ T29] audit: type=1400 audit(1747002392.262:799): avc: denied { write } for pid=3678 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.391759][ T29] audit: type=1400 audit(1747002392.262:800): avc: denied { nlmsg_write } for pid=3678 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.412217][ T29] audit: type=1400 audit(1747002392.262:801): avc: denied { write } for pid=3678 comm="syz.2.56" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.433706][ T29] audit: type=1400 audit(1747002392.262:802): avc: denied { add_name } for pid=3678 comm="syz.2.56" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.454205][ T29] audit: type=1400 audit(1747002392.262:803): avc: denied { create } for pid=3678 comm="syz.2.56" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.474493][ T29] audit: type=1400 audit(1747002392.262:804): avc: denied { read write } for pid=3678 comm="syz.2.56" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.654979][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 43.681583][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1984 with error 117 [ 43.694284][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.694284][ T37] [ 44.566207][ T3700] netlink: 56 bytes leftover after parsing attributes in process `syz.4.59'. [ 44.575166][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 44.596035][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.654777][ T3702] loop2: detected capacity change from 0 to 512 [ 44.663537][ T3702] ======================================================= [ 44.663537][ T3702] WARNING: The mand mount option has been deprecated and [ 44.663537][ T3702] and is ignored by this kernel. Remove the mand [ 44.663537][ T3702] option from the mount to silence this warning. [ 44.663537][ T3702] ======================================================= [ 44.715517][ T3703] loop4: detected capacity change from 0 to 2048 [ 44.804157][ T3702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.827076][ T3702] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.862593][ T3703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.883148][ T3702] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.901583][ T3703] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.949422][ T3700] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #16: comm syz.4.59: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 44.969394][ T3700] binfmt_misc: register: failed to install interpreter file ./file2 [ 45.037185][ T3713] loop0: detected capacity change from 0 to 512 [ 45.063361][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.242281][ T3713] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.416241][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 45.443162][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 45.455882][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.455882][ T12] [ 45.506114][ T3662] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.524873][ T3432] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 45.525033][ T3662] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.537645][ T3432] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.537645][ T3432] [ 45.555748][ T3432] EXT4-fs (loop4): Total free blocks count 0 [ 45.561792][ T3432] EXT4-fs (loop4): Free/Dirty block details [ 45.566075][ T3662] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.567716][ T3432] EXT4-fs (loop4): free_blocks=0 [ 45.567734][ T3432] EXT4-fs (loop4): dirty_blocks=2048 [ 45.586368][ T3432] EXT4-fs (loop4): Block reservation details [ 45.590246][ T3662] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.636059][ T3722] loop2: detected capacity change from 0 to 512 [ 45.732076][ T3729] loop3: detected capacity change from 0 to 512 [ 45.751487][ T3729] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 45.771030][ T3732] netlink: 'syz.4.63': attribute type 2 has an invalid length. [ 45.778788][ T3732] netlink: 132 bytes leftover after parsing attributes in process `syz.4.63'. [ 45.989537][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 46.043250][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 46.070497][ T3739] hsr_slave_1 (unregistering): left promiscuous mode [ 46.272615][ T3744] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.453711][ T3744] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.587870][ T3744] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.710471][ T3744] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.835942][ T3744] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.862285][ T3744] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.884773][ T3744] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.905017][ T3744] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.036126][ T3756] netlink: 88 bytes leftover after parsing attributes in process `syz.2.74'. [ 47.100592][ T3756] loop2: detected capacity change from 0 to 2048 [ 47.177765][ T3756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.242029][ T3756] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.306366][ T3759] veth1_to_bond: entered allmulticast mode [ 47.328628][ T3759] veth1_to_bond: entered promiscuous mode [ 47.508403][ T3759] veth1_to_bond: left promiscuous mode [ 47.514243][ T3759] veth1_to_bond: left allmulticast mode [ 47.632907][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 47.706736][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1291 with error 117 [ 47.719537][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.719537][ T12] [ 48.210744][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 48.210770][ T29] audit: type=1400 audit(1747002397.162:856): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.231792][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.254945][ T29] audit: type=1400 audit(1747002397.212:857): avc: denied { watch watch_reads } for pid=3784 comm="syz.1.78" path="/14" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.382273][ T3793] loop3: detected capacity change from 0 to 512 [ 48.498129][ T29] audit: type=1400 audit(1747002397.452:858): avc: denied { create } for pid=3798 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.517437][ T29] audit: type=1400 audit(1747002397.452:859): avc: denied { getopt } for pid=3798 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.550036][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.601547][ T29] audit: type=1400 audit(1747002397.502:860): avc: denied { write } for pid=3792 comm="syz.3.80" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.662797][ T29] audit: type=1326 audit(1747002397.622:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba19e969 code=0x7ffc0000 [ 48.695304][ T29] audit: type=1326 audit(1747002397.622:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba19e969 code=0x7ffc0000 [ 48.718628][ T29] audit: type=1326 audit(1747002397.642:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe6ba19e969 code=0x7ffc0000 [ 48.741860][ T29] audit: type=1326 audit(1747002397.642:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba19e969 code=0x7ffc0000 [ 48.765575][ T29] audit: type=1326 audit(1747002397.642:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ba19e969 code=0x7ffc0000 [ 48.848582][ T3797] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 49.435436][ T3821] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.526727][ T3821] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.629005][ T3821] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.673668][ T3821] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.763091][ T3821] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.775630][ T3821] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.788391][ T3821] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.801943][ T3821] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.877831][ T3834] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 50.015606][ T3836] loop0: detected capacity change from 0 to 8192 [ 50.046219][ T3836] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.062651][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 50.076600][ T3836] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 50.085689][ T3836] FAT-fs (loop0): Filesystem has been set read-only [ 50.113140][ T3836] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1044) [ 50.143952][ T3836] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1044) [ 50.175089][ T3842] loop4: detected capacity change from 0 to 8192 [ 50.187934][ T3842] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.201125][ T3842] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 50.210141][ T3842] FAT-fs (loop4): Filesystem has been set read-only [ 50.232146][ T3842] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1044) [ 50.257557][ T3842] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1044) [ 50.356062][ T3847] loop0: detected capacity change from 0 to 8192 [ 50.400196][ T3847] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.412787][ T3847] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 50.421828][ T3847] FAT-fs (loop0): Filesystem has been set read-only [ 50.441372][ T3847] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1044) [ 50.462048][ T3847] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1044) [ 50.588652][ T3853] FAULT_INJECTION: forcing a failure. [ 50.588652][ T3853] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.602076][ T3853] CPU: 0 UID: 0 PID: 3853 Comm: syz.3.101 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 50.602109][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.602125][ T3853] Call Trace: [ 50.602132][ T3853] [ 50.602139][ T3853] __dump_stack+0x1d/0x30 [ 50.602199][ T3853] dump_stack_lvl+0xe8/0x140 [ 50.602224][ T3853] dump_stack+0x15/0x1b [ 50.602245][ T3853] should_fail_ex+0x265/0x280 [ 50.602280][ T3853] should_fail_alloc_page+0xf2/0x100 [ 50.602384][ T3853] __alloc_frozen_pages_noprof+0xff/0x360 [ 50.602418][ T3853] alloc_pages_mpol+0xb3/0x250 [ 50.602447][ T3853] alloc_migration_target_by_mpol+0x11b/0x240 [ 50.602486][ T3853] migrate_pages_batch+0x2e4/0x17d0 [ 50.602543][ T3853] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 50.602581][ T3853] ? __walk_page_range+0x324/0x340 [ 50.602657][ T3853] migrate_pages+0xf99/0x17f0 [ 50.602700][ T3853] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 50.602744][ T3853] __se_sys_mbind+0x975/0xac0 [ 50.602776][ T3853] __x64_sys_mbind+0x78/0x90 [ 50.602811][ T3853] x64_sys_call+0x14af/0x2fb0 [ 50.602838][ T3853] do_syscall_64+0xd0/0x1a0 [ 50.602867][ T3853] ? clear_bhb_loop+0x25/0x80 [ 50.602893][ T3853] ? clear_bhb_loop+0x25/0x80 [ 50.602920][ T3853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.602987][ T3853] RIP: 0033:0x7f3587ece969 [ 50.603012][ T3853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.603034][ T3853] RSP: 002b:00007f3586537038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 50.603132][ T3853] RAX: ffffffffffffffda RBX: 00007f35880f5fa0 RCX: 00007f3587ece969 [ 50.603184][ T3853] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 50.603199][ T3853] RBP: 00007f3586537090 R08: 0000000000000000 R09: 0000000000000002 [ 50.603214][ T3853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.603245][ T3853] R13: 0000000000000000 R14: 00007f35880f5fa0 R15: 00007ffdf2277028 [ 50.603268][ T3853] [ 50.891785][ T3862] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.932315][ T3865] loop3: detected capacity change from 0 to 512 [ 50.977110][ T3868] loop1: detected capacity change from 0 to 512 [ 50.996290][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.010899][ T3862] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.022494][ T3868] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.039754][ T3868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.073391][ T3862] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.099350][ T3860] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 51.144563][ T3862] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.173766][ T3879] loop2: detected capacity change from 0 to 2048 [ 51.186962][ T3877] netlink: 'syz.1.108': attribute type 13 has an invalid length. [ 51.204053][ T3879] loop2: p1 < > p4 [ 51.213078][ T3879] loop2: p4 size 8388608 extends beyond EOD, truncated [ 51.252915][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.260297][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.299384][ T3888] netlink: 88 bytes leftover after parsing attributes in process `syz.4.113'. [ 51.358864][ T3891] loop4: detected capacity change from 0 to 2048 [ 51.373021][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.377714][ T3891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.392978][ T3891] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.397592][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.440822][ T3877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.449889][ T3877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.459067][ T3877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.468258][ T3877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.552640][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 51.657713][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 591 with error 117 [ 51.670931][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.670931][ T12] [ 52.231253][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.246121][ T3907] FAULT_INJECTION: forcing a failure. [ 52.246121][ T3907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.259615][ T3907] CPU: 1 UID: 0 PID: 3907 Comm: syz.3.118 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 52.259683][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 52.259698][ T3907] Call Trace: [ 52.259704][ T3907] [ 52.259712][ T3907] __dump_stack+0x1d/0x30 [ 52.259738][ T3907] dump_stack_lvl+0xe8/0x140 [ 52.259761][ T3907] dump_stack+0x15/0x1b [ 52.259782][ T3907] should_fail_ex+0x265/0x280 [ 52.259869][ T3907] should_fail+0xb/0x20 [ 52.259964][ T3907] should_fail_usercopy+0x1a/0x20 [ 52.259987][ T3907] _copy_from_user+0x1c/0xb0 [ 52.260013][ T3907] ___sys_sendmsg+0xc1/0x1d0 [ 52.260095][ T3907] __x64_sys_sendmsg+0xd4/0x160 [ 52.260124][ T3907] x64_sys_call+0x2999/0x2fb0 [ 52.260149][ T3907] do_syscall_64+0xd0/0x1a0 [ 52.260175][ T3907] ? clear_bhb_loop+0x25/0x80 [ 52.260274][ T3907] ? clear_bhb_loop+0x25/0x80 [ 52.260300][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.260380][ T3907] RIP: 0033:0x7f3587ece969 [ 52.260395][ T3907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.260423][ T3907] RSP: 002b:00007f3586537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.260452][ T3907] RAX: ffffffffffffffda RBX: 00007f35880f5fa0 RCX: 00007f3587ece969 [ 52.260466][ T3907] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000003 [ 52.260480][ T3907] RBP: 00007f3586537090 R08: 0000000000000000 R09: 0000000000000000 [ 52.260492][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.260502][ T3907] R13: 0000000000000000 R14: 00007f35880f5fa0 R15: 00007ffdf2277028 [ 52.260519][ T3907] [ 52.567470][ T3917] loop1: detected capacity change from 0 to 512 [ 52.901781][ T3925] loop3: detected capacity change from 0 to 512 [ 52.908908][ T3925] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.034143][ T3925] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.122: Failed to acquire dquot type 0 [ 53.068254][ T3925] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.132094][ T3939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.127'. [ 53.141033][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 53.152615][ T3938] netlink: 'syz.2.126': attribute type 13 has an invalid length. [ 53.165108][ T3925] EXT4-fs (loop3): 1 truncate cleaned up [ 53.175852][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.218922][ T3925] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.122: corrupted xattr block 19: bad e_name length [ 53.254276][ T3938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.261662][ T3938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.278835][ T3941] loop1: detected capacity change from 0 to 2048 [ 53.289253][ T3925] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 53.309869][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 53.309884][ T29] audit: type=1400 audit(1747002402.262:1835): avc: denied { remove_name } for pid=3919 comm="syz.3.122" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.338976][ T29] audit: type=1400 audit(1747002402.262:1836): avc: denied { rename } for pid=3919 comm="syz.3.122" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.364078][ T3925] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.122: corrupted xattr block 19: bad e_name length [ 53.395860][ T3925] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 53.405741][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.419453][ T3925] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.429947][ T3925] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 53.439439][ T3925] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.122: Failed to acquire dquot type 0 [ 53.452060][ T29] audit: type=1400 audit(1747002402.322:1837): avc: denied { write } for pid=3919 comm="syz.3.122" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 53.453221][ T3941] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.475195][ T29] audit: type=1400 audit(1747002402.372:1838): avc: denied { unlink } for pid=3919 comm="syz.3.122" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.509707][ T3942] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.520406][ T3942] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 53.530266][ T3942] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.122: Failed to acquire dquot type 0 [ 53.572746][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.580986][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.595060][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.627309][ T3949] netlink: 88 bytes leftover after parsing attributes in process `syz.3.128'. [ 53.648107][ T3938] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.656681][ T3938] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.665174][ T3938] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.673726][ T3938] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.705012][ T3949] loop3: detected capacity change from 0 to 2048 [ 53.747637][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.748304][ T3953] netlink: 56 bytes leftover after parsing attributes in process `syz.2.129'. [ 53.760962][ T3949] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.768726][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 53.818254][ T3953] loop2: detected capacity change from 0 to 2048 [ 53.841321][ T3953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.859974][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 53.875696][ T3953] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.923271][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 53.936175][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.936175][ T12] [ 53.949233][ T3432] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 53.968648][ T3432] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 121 with error 117 [ 53.981279][ T3432] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.981279][ T3432] [ 54.009668][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 54.022543][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.022543][ T12] [ 54.032415][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 54.038422][ T12] EXT4-fs (loop1): Free/Dirty block details [ 54.044438][ T12] EXT4-fs (loop1): free_blocks=0 [ 54.049393][ T12] EXT4-fs (loop1): dirty_blocks=2048 [ 54.054758][ T12] EXT4-fs (loop1): Block reservation details [ 54.151597][ T29] audit: type=1400 audit(1747002403.102:1839): avc: denied { name_bind } for pid=3959 comm="syz.4.131" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.173692][ T29] audit: type=1400 audit(1747002403.102:1840): avc: denied { node_bind } for pid=3959 comm="syz.4.131" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.391948][ T3970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3970 comm=syz.4.134 [ 54.471582][ T3957] FAULT_INJECTION: forcing a failure. [ 54.471582][ T3957] name failslab, interval 1, probability 0, space 0, times 0 [ 54.484292][ T3957] CPU: 0 UID: 0 PID: 3957 Comm: syz.2.129 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 54.484385][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.484400][ T3957] Call Trace: [ 54.484408][ T3957] [ 54.484415][ T3957] __dump_stack+0x1d/0x30 [ 54.484513][ T3957] dump_stack_lvl+0xe8/0x140 [ 54.484532][ T3957] dump_stack+0x15/0x1b [ 54.484547][ T3957] should_fail_ex+0x265/0x280 [ 54.484579][ T3957] ? __iomap_dio_rw+0x14b/0x1250 [ 54.484604][ T3957] should_failslab+0x8c/0xb0 [ 54.484673][ T3957] __kmalloc_cache_noprof+0x4c/0x320 [ 54.484694][ T3957] __iomap_dio_rw+0x14b/0x1250 [ 54.484713][ T3957] ? ext4_mark_iloc_dirty+0xd3f/0xda0 [ 54.484765][ T3957] ? ext4_journal_check_start+0x11a/0x1b0 [ 54.484822][ T3957] iomap_dio_rw+0x40/0x90 [ 54.484841][ T3957] ext4_file_write_iter+0xad9/0xf00 [ 54.484869][ T3957] ? ext4_file_write_iter+0x690/0xf00 [ 54.484952][ T3957] do_iter_readv_writev+0x41e/0x4c0 [ 54.485069][ T3957] vfs_writev+0x2c9/0x870 [ 54.485116][ T3957] ? mutex_lock+0xd/0x30 [ 54.485155][ T3957] do_writev+0xe7/0x210 [ 54.485276][ T3957] __x64_sys_writev+0x45/0x50 [ 54.485377][ T3957] x64_sys_call+0x2006/0x2fb0 [ 54.485480][ T3957] do_syscall_64+0xd0/0x1a0 [ 54.485508][ T3957] ? clear_bhb_loop+0x25/0x80 [ 54.485534][ T3957] ? clear_bhb_loop+0x25/0x80 [ 54.485598][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.485624][ T3957] RIP: 0033:0x7fe6ba19e969 [ 54.485676][ T3957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.485693][ T3957] RSP: 002b:00007fe6b87e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 54.485711][ T3957] RAX: ffffffffffffffda RBX: 00007fe6ba3c6080 RCX: 00007fe6ba19e969 [ 54.485723][ T3957] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 000000000000000b [ 54.485751][ T3957] RBP: 00007fe6b87e6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.485762][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.485775][ T3957] R13: 0000000000000000 R14: 00007fe6ba3c6080 R15: 00007ffe114b1cd8 [ 54.485796][ T3957] [ 54.725718][ T3975] loop4: detected capacity change from 0 to 512 [ 54.749576][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 54.773092][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 54.785989][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.785989][ T37] [ 54.816892][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 54.829710][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.829710][ T12] [ 54.839459][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 54.845528][ T12] EXT4-fs (loop2): Free/Dirty block details [ 54.851507][ T12] EXT4-fs (loop2): free_blocks=0 [ 54.856490][ T12] EXT4-fs (loop2): dirty_blocks=2048 [ 54.861890][ T12] EXT4-fs (loop2): Block reservation details [ 54.868084][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 137 with max blocks 1 with error 117 [ 54.880650][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.880650][ T37] [ 54.905010][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.016699][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.029417][ T3984] netlink: 'syz.2.139': attribute type 13 has an invalid length. [ 55.059182][ T3862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.074908][ T3862] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.091329][ T3988] FAULT_INJECTION: forcing a failure. [ 55.091329][ T3988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.104632][ T3988] CPU: 0 UID: 0 PID: 3988 Comm: syz.4.140 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 55.104667][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.104680][ T3988] Call Trace: [ 55.104686][ T3988] [ 55.104693][ T3988] __dump_stack+0x1d/0x30 [ 55.104715][ T3988] dump_stack_lvl+0xe8/0x140 [ 55.104734][ T3988] dump_stack+0x15/0x1b [ 55.104750][ T3988] should_fail_ex+0x265/0x280 [ 55.104802][ T3988] should_fail+0xb/0x20 [ 55.104830][ T3988] should_fail_usercopy+0x1a/0x20 [ 55.104899][ T3988] _copy_from_user+0x1c/0xb0 [ 55.104920][ T3988] ___sys_sendmsg+0xc1/0x1d0 [ 55.104954][ T3988] __sys_sendmmsg+0x178/0x300 [ 55.104984][ T3988] __x64_sys_sendmmsg+0x57/0x70 [ 55.105003][ T3988] x64_sys_call+0x2f2f/0x2fb0 [ 55.105040][ T3988] do_syscall_64+0xd0/0x1a0 [ 55.105062][ T3988] ? clear_bhb_loop+0x25/0x80 [ 55.105084][ T3988] ? clear_bhb_loop+0x25/0x80 [ 55.105105][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.105126][ T3988] RIP: 0033:0x7faea8dfe969 [ 55.105203][ T3988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.105221][ T3988] RSP: 002b:00007faea7467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.105239][ T3988] RAX: ffffffffffffffda RBX: 00007faea9025fa0 RCX: 00007faea8dfe969 [ 55.105251][ T3988] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 55.105324][ T3988] RBP: 00007faea7467090 R08: 0000000000000000 R09: 0000000000000000 [ 55.105336][ T3988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.105347][ T3988] R13: 0000000000000000 R14: 00007faea9025fa0 R15: 00007fff91fda808 [ 55.105366][ T3988] [ 55.108395][ T3862] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.234563][ T3990] FAULT_INJECTION: forcing a failure. [ 55.234563][ T3990] name failslab, interval 1, probability 0, space 0, times 0 [ 55.288864][ T3862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.293173][ T3990] CPU: 1 UID: 0 PID: 3990 Comm: syz.3.142 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 55.293206][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.293222][ T3990] Call Trace: [ 55.293228][ T3990] [ 55.293238][ T3990] __dump_stack+0x1d/0x30 [ 55.293267][ T3990] dump_stack_lvl+0xe8/0x140 [ 55.293343][ T3990] dump_stack+0x15/0x1b [ 55.293366][ T3990] should_fail_ex+0x265/0x280 [ 55.293407][ T3990] should_failslab+0x8c/0xb0 [ 55.293445][ T3990] kmem_cache_alloc_noprof+0x50/0x310 [ 55.293545][ T3990] ? flock_lock_inode+0x135/0xf60 [ 55.293578][ T3990] flock_lock_inode+0x135/0xf60 [ 55.293674][ T3990] ? file_has_perm+0x324/0x370 [ 55.293714][ T3990] locks_lock_inode_wait+0x6f/0x2a0 [ 55.293742][ T3990] ? selinux_file_lock+0x38/0x50 [ 55.293785][ T3990] __se_sys_flock+0x2f1/0x3b0 [ 55.293833][ T3990] __x64_sys_flock+0x31/0x40 [ 55.293859][ T3990] x64_sys_call+0x2eed/0x2fb0 [ 55.293913][ T3990] do_syscall_64+0xd0/0x1a0 [ 55.293959][ T3990] ? clear_bhb_loop+0x25/0x80 [ 55.293987][ T3990] ? clear_bhb_loop+0x25/0x80 [ 55.294014][ T3990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.294096][ T3990] RIP: 0033:0x7f3587ece969 [ 55.294112][ T3990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.294134][ T3990] RSP: 002b:00007f3586537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 55.294157][ T3990] RAX: ffffffffffffffda RBX: 00007f35880f5fa0 RCX: 00007f3587ece969 [ 55.294173][ T3990] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 55.294188][ T3990] RBP: 00007f3586537090 R08: 0000000000000000 R09: 0000000000000000 [ 55.294204][ T3990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.294219][ T3990] R13: 0000000000000000 R14: 00007f35880f5fa0 R15: 00007ffdf2277028 [ 55.294307][ T3990] [ 55.529200][ T3999] loop0: detected capacity change from 0 to 128 [ 55.582252][ T3999] 9p: Unknown uid 00000000004294967295 [ 55.594497][ T4007] FAULT_INJECTION: forcing a failure. [ 55.594497][ T4007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.607790][ T4007] CPU: 0 UID: 0 PID: 4007 Comm: syz.4.149 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 55.607827][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.607842][ T4007] Call Trace: [ 55.607849][ T4007] [ 55.607857][ T4007] __dump_stack+0x1d/0x30 [ 55.607942][ T4007] dump_stack_lvl+0xe8/0x140 [ 55.607964][ T4007] dump_stack+0x15/0x1b [ 55.607981][ T4007] should_fail_ex+0x265/0x280 [ 55.608011][ T4007] should_fail+0xb/0x20 [ 55.608119][ T4007] should_fail_usercopy+0x1a/0x20 [ 55.608137][ T4007] strncpy_from_user+0x25/0x230 [ 55.608172][ T4007] strncpy_from_bpfptr+0x43/0x50 [ 55.608196][ T4007] bpf_prog_load+0x884/0x1070 [ 55.608231][ T4007] ? security_bpf+0x2b/0x90 [ 55.608321][ T4007] __sys_bpf+0x51d/0x790 [ 55.608389][ T4007] __x64_sys_bpf+0x41/0x50 [ 55.608477][ T4007] x64_sys_call+0x2478/0x2fb0 [ 55.608541][ T4007] do_syscall_64+0xd0/0x1a0 [ 55.608569][ T4007] ? clear_bhb_loop+0x25/0x80 [ 55.608595][ T4007] ? clear_bhb_loop+0x25/0x80 [ 55.608622][ T4007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.608714][ T4007] RIP: 0033:0x7faea8dfe969 [ 55.608731][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.608752][ T4007] RSP: 002b:00007faea7467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.608777][ T4007] RAX: ffffffffffffffda RBX: 00007faea9025fa0 RCX: 00007faea8dfe969 [ 55.608792][ T4007] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 55.608806][ T4007] RBP: 00007faea7467090 R08: 0000000000000000 R09: 0000000000000000 [ 55.608869][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.608883][ T4007] R13: 0000000000000001 R14: 00007faea9025fa0 R15: 00007fff91fda808 [ 55.608906][ T4007] [ 55.803646][ T4003] loop2: detected capacity change from 0 to 4096 [ 55.812938][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.882982][ T4014] loop3: detected capacity change from 0 to 128 [ 55.891099][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.009932][ T4024] loop2: detected capacity change from 0 to 512 [ 56.020904][ T4027] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.031079][ T4024] journal_path: Non-blockdev passed as './bus' [ 56.037344][ T4024] EXT4-fs: error: could not find journal device path [ 56.180633][ T4027] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.255470][ T4034] syz.2.152: attempt to access beyond end of device [ 56.255470][ T4034] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 56.454467][ T4027] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.597125][ T4027] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.921184][ T4044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.160'. [ 56.923078][ T4041] loop2: detected capacity change from 0 to 512 [ 56.930260][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 56.954594][ T4041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.962619][ T4043] netlink: 'syz.1.157': attribute type 13 has an invalid length. [ 56.977501][ T4041] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.996648][ T4044] loop3: detected capacity change from 0 to 2048 [ 57.020984][ T4041] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 57.050300][ T4041] bond1: entered promiscuous mode [ 57.055791][ T4041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.085772][ T4044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.097960][ T4044] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.117751][ T4044] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #16: comm syz.3.160: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 57.136971][ T4044] binfmt_misc: register: failed to install interpreter file ./file2 [ 57.163055][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.300972][ T4066] FAULT_INJECTION: forcing a failure. [ 57.300972][ T4066] name failslab, interval 1, probability 0, space 0, times 0 [ 57.313831][ T4066] CPU: 1 UID: 0 PID: 4066 Comm: syz.2.166 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 57.313915][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.313931][ T4066] Call Trace: [ 57.313939][ T4066] [ 57.313949][ T4066] __dump_stack+0x1d/0x30 [ 57.314024][ T4066] dump_stack_lvl+0xe8/0x140 [ 57.314049][ T4066] dump_stack+0x15/0x1b [ 57.314069][ T4066] should_fail_ex+0x265/0x280 [ 57.314181][ T4066] ? kobject_uevent_env+0x1c0/0x570 [ 57.314219][ T4066] should_failslab+0x8c/0xb0 [ 57.314256][ T4066] __kmalloc_cache_noprof+0x4c/0x320 [ 57.314280][ T4066] kobject_uevent_env+0x1c0/0x570 [ 57.314328][ T4066] ? device_pm_check_callbacks+0x683/0x6a0 [ 57.314424][ T4066] kobject_uevent+0x1d/0x30 [ 57.314454][ T4066] device_del+0x710/0x790 [ 57.314486][ T4066] device_unregister+0x15/0x40 [ 57.314552][ T4066] bdi_unregister+0x307/0x3a0 [ 57.314585][ T4066] del_gendisk+0x2e7/0x5f0 [ 57.314629][ T4066] loop_remove+0x26/0x80 [ 57.314669][ T4066] loop_control_ioctl+0x3b3/0x3f0 [ 57.314705][ T4066] ? __pfx_loop_control_ioctl+0x10/0x10 [ 57.314732][ T4066] __se_sys_ioctl+0xcb/0x140 [ 57.314822][ T4066] __x64_sys_ioctl+0x43/0x50 [ 57.314915][ T4066] x64_sys_call+0x19a8/0x2fb0 [ 57.314936][ T4066] do_syscall_64+0xd0/0x1a0 [ 57.314957][ T4066] ? clear_bhb_loop+0x25/0x80 [ 57.315058][ T4066] ? clear_bhb_loop+0x25/0x80 [ 57.315164][ T4066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.315191][ T4066] RIP: 0033:0x7fe6ba19e969 [ 57.315209][ T4066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.315231][ T4066] RSP: 002b:00007fe6b8807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.315266][ T4066] RAX: ffffffffffffffda RBX: 00007fe6ba3c5fa0 RCX: 00007fe6ba19e969 [ 57.315281][ T4066] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 57.315296][ T4066] RBP: 00007fe6b8807090 R08: 0000000000000000 R09: 0000000000000000 [ 57.315321][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.315336][ T4066] R13: 0000000000000000 R14: 00007fe6ba3c5fa0 R15: 00007ffe114b1cd8 [ 57.315358][ T4066] [ 57.572546][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 57.614001][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 57.626721][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.626721][ T37] [ 57.631972][ T4072] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 57.656753][ T4073] loop4: detected capacity change from 0 to 512 [ 57.689869][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 57.702733][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.702733][ T37] [ 57.712511][ T37] EXT4-fs (loop3): Total free blocks count 0 [ 57.718520][ T37] EXT4-fs (loop3): Free/Dirty block details [ 57.724454][ T37] EXT4-fs (loop3): free_blocks=0 [ 57.729405][ T37] EXT4-fs (loop3): dirty_blocks=2048 [ 57.734783][ T37] EXT4-fs (loop3): Block reservation details [ 57.753480][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.913718][ T4073] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.243924][ T4095] FAULT_INJECTION: forcing a failure. [ 58.243924][ T4095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.257326][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: syz.2.175 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 58.257361][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.257412][ T4095] Call Trace: [ 58.257418][ T4095] [ 58.257426][ T4095] __dump_stack+0x1d/0x30 [ 58.257447][ T4095] dump_stack_lvl+0xe8/0x140 [ 58.257465][ T4095] dump_stack+0x15/0x1b [ 58.257499][ T4095] should_fail_ex+0x265/0x280 [ 58.257540][ T4095] should_fail+0xb/0x20 [ 58.257624][ T4095] should_fail_usercopy+0x1a/0x20 [ 58.257647][ T4095] strncpy_from_user+0x25/0x230 [ 58.257679][ T4095] ? kmem_cache_alloc_noprof+0x186/0x310 [ 58.257714][ T4095] ? getname_flags+0x80/0x3b0 [ 58.257800][ T4095] getname_flags+0xae/0x3b0 [ 58.257841][ T4095] user_path_at+0x28/0x130 [ 58.257860][ T4095] __se_sys_mount+0x25b/0x2e0 [ 58.257884][ T4095] ? fput+0x8f/0xc0 [ 58.257936][ T4095] __x64_sys_mount+0x67/0x80 [ 58.257967][ T4095] x64_sys_call+0xd36/0x2fb0 [ 58.258003][ T4095] do_syscall_64+0xd0/0x1a0 [ 58.258024][ T4095] ? clear_bhb_loop+0x25/0x80 [ 58.258125][ T4095] ? clear_bhb_loop+0x25/0x80 [ 58.258149][ T4095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.258169][ T4095] RIP: 0033:0x7fe6ba19e969 [ 58.258183][ T4095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.258282][ T4095] RSP: 002b:00007fe6b8807038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.258305][ T4095] RAX: ffffffffffffffda RBX: 00007fe6ba3c5fa0 RCX: 00007fe6ba19e969 [ 58.258320][ T4095] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 58.258331][ T4095] RBP: 00007fe6b8807090 R08: 0000200000000440 R09: 0000000000000000 [ 58.258395][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.258442][ T4095] R13: 0000000000000000 R14: 00007fe6ba3c5fa0 R15: 00007ffe114b1cd8 [ 58.258465][ T4095] [ 58.471458][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 58.471477][ T29] audit: type=1400 audit(1747002407.422:2377): avc: denied { create } for pid=4092 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.497066][ T29] audit: type=1400 audit(1747002407.422:2378): avc: denied { setopt } for pid=4092 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.516450][ T29] audit: type=1400 audit(1747002407.422:2379): avc: denied { ioctl } for pid=4092 comm="syz.3.174" path="socket:[7700]" dev="sockfs" ino=7700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.573740][ T4100] netlink: 596 bytes leftover after parsing attributes in process `syz.2.178'. [ 58.596921][ T4104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.179'. [ 58.605961][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 58.621829][ T29] audit: type=1400 audit(1747002407.572:2380): avc: denied { mount } for pid=4101 comm="syz.1.177" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.638358][ T4104] loop3: detected capacity change from 0 to 2048 [ 58.653071][ T29] audit: type=1400 audit(1747002407.612:2381): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.703260][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.715533][ T4104] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.753342][ T4104] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #16: comm syz.3.179: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 58.781109][ T4113] FAULT_INJECTION: forcing a failure. [ 58.781109][ T4113] name failslab, interval 1, probability 0, space 0, times 0 [ 58.793875][ T4113] CPU: 0 UID: 0 PID: 4113 Comm: syz.1.182 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 58.793953][ T4113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.793969][ T4113] Call Trace: [ 58.793977][ T4113] [ 58.793987][ T4113] __dump_stack+0x1d/0x30 [ 58.794009][ T4113] dump_stack_lvl+0xe8/0x140 [ 58.794027][ T4113] dump_stack+0x15/0x1b [ 58.794044][ T4113] should_fail_ex+0x265/0x280 [ 58.794088][ T4113] should_failslab+0x8c/0xb0 [ 58.794125][ T4113] kmem_cache_alloc_noprof+0x50/0x310 [ 58.794163][ T4113] ? alloc_vfsmnt+0x2d/0x350 [ 58.794181][ T4113] alloc_vfsmnt+0x2d/0x350 [ 58.794207][ T4113] vfs_create_mount+0x49/0x250 [ 58.794283][ T4113] __se_sys_fsmount+0x2d9/0x580 [ 58.794314][ T4113] __x64_sys_fsmount+0x43/0x50 [ 58.794347][ T4113] x64_sys_call+0x2a6a/0x2fb0 [ 58.794373][ T4113] do_syscall_64+0xd0/0x1a0 [ 58.794472][ T4113] ? clear_bhb_loop+0x25/0x80 [ 58.794499][ T4113] ? clear_bhb_loop+0x25/0x80 [ 58.794526][ T4113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.794621][ T4113] RIP: 0033:0x7f0489f5e969 [ 58.794638][ T4113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.794655][ T4113] RSP: 002b:00007f04885c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 58.794672][ T4113] RAX: ffffffffffffffda RBX: 00007f048a185fa0 RCX: 00007f0489f5e969 [ 58.794683][ T4113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 58.794728][ T4113] RBP: 00007f04885c7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.794743][ T4113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.794758][ T4113] R13: 0000000000000000 R14: 00007f048a185fa0 R15: 00007fff3ad284d8 [ 58.794781][ T4113] [ 58.998437][ T4104] binfmt_misc: register: failed to install interpreter file ./file2 [ 59.045672][ T4107] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 59.084726][ T29] audit: type=1400 audit(1747002408.042:2382): avc: denied { create } for pid=4105 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.117151][ T29] audit: type=1400 audit(1747002408.042:2383): avc: denied { connect } for pid=4105 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.185506][ T4119] FAULT_INJECTION: forcing a failure. [ 59.185506][ T4119] name failslab, interval 1, probability 0, space 0, times 0 [ 59.198235][ T4119] CPU: 1 UID: 0 PID: 4119 Comm: syz.2.184 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 59.198270][ T4119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.198285][ T4119] Call Trace: [ 59.198292][ T4119] [ 59.198301][ T4119] __dump_stack+0x1d/0x30 [ 59.198362][ T4119] dump_stack_lvl+0xe8/0x140 [ 59.198386][ T4119] dump_stack+0x15/0x1b [ 59.198404][ T4119] should_fail_ex+0x265/0x280 [ 59.198435][ T4119] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 59.198469][ T4119] should_failslab+0x8c/0xb0 [ 59.198547][ T4119] __kmalloc_cache_noprof+0x4c/0x320 [ 59.198575][ T4119] bpf_prog_alloc_no_stats+0xc4/0x390 [ 59.198611][ T4119] bpf_prog_alloc+0x3c/0x150 [ 59.198639][ T4119] bpf_prog_load+0x514/0x1070 [ 59.198703][ T4119] ? security_bpf+0x2b/0x90 [ 59.198728][ T4119] __sys_bpf+0x51d/0x790 [ 59.198766][ T4119] __x64_sys_bpf+0x41/0x50 [ 59.198795][ T4119] x64_sys_call+0x2478/0x2fb0 [ 59.198861][ T4119] do_syscall_64+0xd0/0x1a0 [ 59.198885][ T4119] ? clear_bhb_loop+0x25/0x80 [ 59.198983][ T4119] ? clear_bhb_loop+0x25/0x80 [ 59.199009][ T4119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.199036][ T4119] RIP: 0033:0x7fe6ba19e969 [ 59.199097][ T4119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.199119][ T4119] RSP: 002b:00007fe6b8807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.199142][ T4119] RAX: ffffffffffffffda RBX: 00007fe6ba3c5fa0 RCX: 00007fe6ba19e969 [ 59.199157][ T4119] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 59.199168][ T4119] RBP: 00007fe6b8807090 R08: 0000000000000000 R09: 0000000000000000 [ 59.199179][ T4119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.199190][ T4119] R13: 0000000000000000 R14: 00007fe6ba3c5fa0 R15: 00007ffe114b1cd8 [ 59.199207][ T4119] [ 59.432578][ T29] audit: type=1400 audit(1747002408.392:2384): avc: denied { create } for pid=4122 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.485891][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 59.523931][ T4131] netlink: 596 bytes leftover after parsing attributes in process `syz.2.190'. [ 59.542192][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1134 with error 117 [ 59.554880][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.554880][ T37] [ 59.603518][ T4139] netlink: 'syz.2.193': attribute type 13 has an invalid length. [ 59.634440][ T4142] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 59.652380][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.681943][ T29] audit: type=1400 audit(1747002408.632:2385): avc: denied { mounton } for pid=4143 comm="syz.3.189" path="/44/file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.714578][ T4142] netlink: 'syz.1.194': attribute type 10 has an invalid length. [ 59.723790][ T4142] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.764955][ T29] audit: type=1400 audit(1747002408.662:2386): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.829114][ T4027] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.852312][ T4027] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.866489][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 59.893960][ T4027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.916446][ T4027] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.919732][ T4154] loop2: detected capacity change from 0 to 512 [ 59.977687][ T4159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.200'. [ 59.986694][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 60.021015][ T4159] loop1: detected capacity change from 0 to 2048 [ 60.082458][ T4159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.125401][ T4159] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.172882][ T4159] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.200: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 60.199924][ T4159] binfmt_misc: register: failed to install interpreter file ./file2 [ 60.262467][ T4161] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 60.311783][ T4173] netlink: 596 bytes leftover after parsing attributes in process `syz.3.203'. [ 60.578903][ T3432] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 60.611838][ T4180] vlan0: entered allmulticast mode [ 60.621646][ T3432] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 60.634409][ T3432] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.634409][ T3432] [ 60.663951][ T4170] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 60.679272][ T3432] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 60.692129][ T3432] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.692129][ T3432] [ 60.701837][ T3432] EXT4-fs (loop1): Total free blocks count 0 [ 60.707873][ T3432] EXT4-fs (loop1): Free/Dirty block details [ 60.713906][ T3432] EXT4-fs (loop1): free_blocks=0 [ 60.713926][ T3432] EXT4-fs (loop1): dirty_blocks=2048 [ 60.713941][ T3432] EXT4-fs (loop1): Block reservation details [ 60.785662][ T4185] netlink: 88 bytes leftover after parsing attributes in process `syz.3.207'. [ 60.845113][ T4189] netlink: 88 bytes leftover after parsing attributes in process `syz.0.209'. [ 60.864449][ T4185] loop3: detected capacity change from 0 to 2048 [ 60.913498][ T4185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.961555][ T4185] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.083365][ T409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 61.156414][ T409] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 321 with error 117 [ 61.168999][ T409] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.168999][ T409] [ 61.482896][ T4209] loop1: detected capacity change from 0 to 512 [ 61.490277][ T4209] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 61.578533][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.648039][ T4215] netlink: 'syz.1.216': attribute type 13 has an invalid length. [ 61.739615][ T4222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.762459][ T4222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.791199][ T4222] loop2: detected capacity change from 0 to 256 [ 61.797835][ T4221] FAULT_INJECTION: forcing a failure. [ 61.797835][ T4221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.811027][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.1.218 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 61.811059][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 61.811074][ T4221] Call Trace: [ 61.811081][ T4221] [ 61.811141][ T4221] __dump_stack+0x1d/0x30 [ 61.811224][ T4221] dump_stack_lvl+0xe8/0x140 [ 61.811246][ T4221] dump_stack+0x15/0x1b [ 61.811262][ T4221] should_fail_ex+0x265/0x280 [ 61.811376][ T4221] should_fail+0xb/0x20 [ 61.811412][ T4221] should_fail_usercopy+0x1a/0x20 [ 61.811434][ T4221] _copy_to_user+0x20/0xa0 [ 61.811497][ T4221] simple_read_from_buffer+0xb5/0x130 [ 61.811525][ T4221] proc_fail_nth_read+0x100/0x140 [ 61.811556][ T4221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.811611][ T4221] vfs_read+0x19d/0x6f0 [ 61.811651][ T4221] ? __rcu_read_unlock+0x4f/0x70 [ 61.811670][ T4221] ? __fget_files+0x184/0x1c0 [ 61.811757][ T4221] ksys_read+0xda/0x1a0 [ 61.811787][ T4221] __x64_sys_read+0x40/0x50 [ 61.811814][ T4221] x64_sys_call+0x2d77/0x2fb0 [ 61.811838][ T4221] do_syscall_64+0xd0/0x1a0 [ 61.811859][ T4221] ? clear_bhb_loop+0x25/0x80 [ 61.811926][ T4221] ? clear_bhb_loop+0x25/0x80 [ 61.812002][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.812027][ T4221] RIP: 0033:0x7f0489f5d37c [ 61.812044][ T4221] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.812064][ T4221] RSP: 002b:00007f04885c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.812085][ T4221] RAX: ffffffffffffffda RBX: 00007f048a185fa0 RCX: 00007f0489f5d37c [ 61.812179][ T4221] RDX: 000000000000000f RSI: 00007f04885c70a0 RDI: 0000000000000007 [ 61.812239][ T4221] RBP: 00007f04885c7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.812253][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.812266][ T4221] R13: 0000000000000000 R14: 00007f048a185fa0 R15: 00007fff3ad284d8 [ 61.812288][ T4221] [ 61.827045][ T4222] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 61.933957][ T4216] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 62.085355][ T4230] loop1: detected capacity change from 0 to 512 [ 62.094385][ T4230] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 62.107322][ T409] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 337 with max blocks 1 with error 117 [ 62.119931][ T409] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.119931][ T409] [ 62.138568][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.235134][ T4239] veth1_to_bond: entered allmulticast mode [ 62.241232][ T4239] veth1_to_bond: entered promiscuous mode [ 62.248114][ T4239] veth1_to_bond: left promiscuous mode [ 62.253696][ T4239] veth1_to_bond: left allmulticast mode [ 62.300354][ T4244] netlink: 'syz.0.227': attribute type 13 has an invalid length. [ 62.354046][ T4244] bridge0: port 3(team0) entered disabled state [ 62.360529][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.367902][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.380825][ T4247] loop1: detected capacity change from 0 to 2048 [ 62.394631][ T4247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.412644][ T4247] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.432222][ T4247] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.228: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 62.451256][ T4247] binfmt_misc: register: failed to install interpreter file ./file2 [ 62.457991][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.469950][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.508588][ T4244] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.517332][ T4244] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.525829][ T4244] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.534232][ T4244] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.995109][ T4264] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 63.006766][ T409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 63.028902][ T409] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 63.041702][ T409] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.041702][ T409] [ 63.079786][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 63.092764][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.092764][ T12] [ 63.102720][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 63.108736][ T12] EXT4-fs (loop1): Free/Dirty block details [ 63.114687][ T12] EXT4-fs (loop1): free_blocks=0 [ 63.119717][ T12] EXT4-fs (loop1): dirty_blocks=2048 [ 63.125162][ T12] EXT4-fs (loop1): Block reservation details [ 63.171481][ T4273] veth1_to_bond: entered allmulticast mode [ 63.177550][ T4273] veth1_to_bond: entered promiscuous mode [ 63.184536][ T4273] veth1_to_bond: left promiscuous mode [ 63.190148][ T4273] veth1_to_bond: left allmulticast mode [ 63.236559][ T4275] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 63.427486][ T4291] netlink: 'syz.0.242': attribute type 13 has an invalid length. [ 63.451488][ T4289] loop1: detected capacity change from 0 to 512 [ 63.492807][ T4289] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 63.587919][ T4302] loop1: detected capacity change from 0 to 2048 [ 63.637736][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.734065][ T4302] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.782711][ T4302] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.245: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 63.802824][ T4308] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 63.820567][ T4312] veth1_to_bond: entered allmulticast mode [ 63.828779][ T4302] binfmt_misc: register: failed to install interpreter file ./file2 [ 63.849832][ T4312] veth1_to_bond: entered promiscuous mode [ 63.859060][ T4312] veth1_to_bond: left promiscuous mode [ 63.864852][ T4312] veth1_to_bond: left allmulticast mode [ 63.878643][ T4314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.974436][ T4314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.022581][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 64.022599][ T29] audit: type=1400 audit(1747002412.982:2993): avc: denied { open } for pid=4319 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.074245][ T29] audit: type=1400 audit(1747002412.982:2994): avc: denied { perfmon } for pid=4319 comm="syz.0.249" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.095216][ T29] audit: type=1400 audit(1747002412.982:2995): avc: denied { kernel } for pid=4319 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.110525][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 64.115198][ T29] audit: type=1400 audit(1747002412.982:2996): avc: denied { tracepoint } for pid=4319 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.137981][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1064 with error 117 [ 64.148856][ T29] audit: type=1400 audit(1747002412.982:2997): avc: denied { prog_load } for pid=4313 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.161651][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.161651][ T12] [ 64.180547][ T29] audit: type=1400 audit(1747002412.982:2998): avc: denied { bpf } for pid=4313 comm="syz.4.248" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.210729][ T29] audit: type=1400 audit(1747002412.982:2999): avc: denied { prog_run } for pid=4313 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.229728][ T29] audit: type=1400 audit(1747002413.022:3000): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.254193][ T29] audit: type=1400 audit(1747002413.022:3001): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.278330][ T29] audit: type=1400 audit(1747002413.022:3002): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.319306][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1080 with max blocks 2 with error 28 [ 64.331866][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.331866][ T12] [ 64.341613][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 64.347621][ T12] EXT4-fs (loop1): Free/Dirty block details [ 64.353558][ T12] EXT4-fs (loop1): free_blocks=0 [ 64.358552][ T12] EXT4-fs (loop1): dirty_blocks=16 [ 64.363755][ T12] EXT4-fs (loop1): Block reservation details [ 64.381021][ T4314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.516470][ T4314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.541676][ T4335] __nla_validate_parse: 9 callbacks suppressed [ 64.541694][ T4335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.253'. [ 64.556858][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 64.634468][ T4342] loop1: detected capacity change from 0 to 2048 [ 64.654913][ T4314] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.674857][ T4342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.706555][ T4347] loop3: detected capacity change from 0 to 512 [ 64.718823][ T4314] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.727327][ T4347] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 64.731873][ T4314] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.744191][ T4342] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.770409][ T4335] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.253: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 64.808043][ T4335] binfmt_misc: register: failed to install interpreter file ./file2 [ 64.819119][ T4349] netlink: 'syz.3.257': attribute type 13 has an invalid length. [ 64.888710][ T4314] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.943509][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.950770][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.998133][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.009195][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.037448][ T4349] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.045974][ T4349] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.054469][ T4349] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.062949][ T4349] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.203649][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 65.218764][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 65.231590][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.231590][ T12] [ 65.267562][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 65.280355][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.280355][ T12] [ 65.290127][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 65.296143][ T12] EXT4-fs (loop1): Free/Dirty block details [ 65.302133][ T12] EXT4-fs (loop1): free_blocks=0 [ 65.307091][ T12] EXT4-fs (loop1): dirty_blocks=2048 [ 65.312422][ T12] EXT4-fs (loop1): Block reservation details [ 65.397441][ T4365] mmap: syz.1.262 (4365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.605811][ T4373] syz.2.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.656032][ T4373] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 65.679488][ T4373] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.696204][ T4380] netlink: 'syz.1.269': attribute type 13 has an invalid length. [ 65.724305][ T4382] netlink: 88 bytes leftover after parsing attributes in process `syz.0.270'. [ 65.877546][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.886203][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.900391][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 66.154336][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.176952][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.196496][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 66.304667][ T4405] loop4: detected capacity change from 0 to 164 [ 66.316855][ T4405] Unable to read rock-ridge attributes [ 66.340864][ T4405] Unable to read rock-ridge attributes [ 66.616930][ T4415] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 66.626307][ T4415] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.714723][ T4421] loop3: detected capacity change from 0 to 512 [ 66.722357][ T4421] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 66.740261][ T4423] netlink: 56 bytes leftover after parsing attributes in process `syz.1.285'. [ 66.749322][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 66.804381][ T4423] loop1: detected capacity change from 0 to 2048 [ 66.875152][ T4423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.891823][ T4423] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.932264][ T4423] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.285: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 66.969825][ T4423] binfmt_misc: register: failed to install interpreter file ./file2 [ 67.027312][ T4436] netlink: 56 bytes leftover after parsing attributes in process `syz.4.290'. [ 67.036422][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 67.109130][ T4436] loop4: detected capacity change from 0 to 2048 [ 67.178587][ T4447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.188461][ T4447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.197412][ T4447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.293'. [ 67.219521][ T4436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.235142][ T4436] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.254022][ T4436] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #16: comm syz.4.290: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 67.325607][ T4436] binfmt_misc: register: failed to install interpreter file ./file2 [ 67.393083][ T4455] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 67.438118][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 67.454927][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 67.467979][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.467979][ T12] [ 67.507210][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 67.520151][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.520151][ T12] [ 67.529838][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 67.535865][ T12] EXT4-fs (loop1): Free/Dirty block details [ 67.541847][ T12] EXT4-fs (loop1): free_blocks=0 [ 67.546881][ T12] EXT4-fs (loop1): dirty_blocks=2048 [ 67.552261][ T12] EXT4-fs (loop1): Block reservation details [ 67.624856][ T4463] loop3: detected capacity change from 0 to 512 [ 67.633109][ T4463] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 67.754832][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 67.775564][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 67.788376][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.788376][ T12] [ 67.798688][ T4470] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 67.852806][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 67.865697][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.865697][ T37] [ 67.875457][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 67.881583][ T37] EXT4-fs (loop4): Free/Dirty block details [ 67.887607][ T37] EXT4-fs (loop4): free_blocks=0 [ 67.892609][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 67.897905][ T37] EXT4-fs (loop4): Block reservation details [ 67.918759][ T4478] veth1_to_bond: entered allmulticast mode [ 67.926109][ T4478] veth1_to_bond: entered promiscuous mode [ 67.936807][ T4478] veth1_to_bond: left promiscuous mode [ 67.942633][ T4478] veth1_to_bond: left allmulticast mode [ 68.063823][ T4488] loop4: detected capacity change from 0 to 2048 [ 68.103166][ T4488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.117111][ T4488] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.132612][ T4488] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #16: comm syz.4.307: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 68.151518][ T4488] binfmt_misc: register: failed to install interpreter file ./file2 [ 68.173560][ T4497] 9pnet_fd: Insufficient options for proto=fd [ 68.322531][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.331267][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.390240][ T4507] loop3: detected capacity change from 0 to 512 [ 68.404261][ T4507] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 68.448140][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 68.462899][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 68.475609][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.475609][ T12] [ 68.508386][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 68.521152][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.521152][ T12] [ 68.530951][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 68.537007][ T12] EXT4-fs (loop4): Free/Dirty block details [ 68.543108][ T12] EXT4-fs (loop4): free_blocks=0 [ 68.548075][ T12] EXT4-fs (loop4): dirty_blocks=2048 [ 68.553477][ T12] EXT4-fs (loop4): Block reservation details [ 68.591614][ T4516] veth1_to_bond: entered allmulticast mode [ 68.597588][ T4516] veth1_to_bond: entered promiscuous mode [ 68.604283][ T4516] veth1_to_bond: left promiscuous mode [ 68.610051][ T4516] veth1_to_bond: left allmulticast mode [ 68.621020][ T4518] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 68.806397][ T4531] loop4: detected capacity change from 0 to 512 [ 69.010691][ T4538] loop2: detected capacity change from 0 to 2048 [ 69.034096][ T29] kauditd_printk_skb: 965 callbacks suppressed [ 69.034113][ T29] audit: type=1326 audit(1747002417.992:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0489f55927 code=0x7ffc0000 [ 69.063679][ T29] audit: type=1326 audit(1747002417.992:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0489efab39 code=0x7ffc0000 [ 69.087159][ T29] audit: type=1326 audit(1747002417.992:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0489f5e969 code=0x7ffc0000 [ 69.374982][ T29] audit: type=1326 audit(1747002418.052:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0489f55927 code=0x7ffc0000 [ 69.398402][ T29] audit: type=1326 audit(1747002418.052:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0489efab39 code=0x7ffc0000 [ 69.421735][ T29] audit: type=1326 audit(1747002418.052:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0489f5e969 code=0x7ffc0000 [ 69.445222][ T29] audit: type=1326 audit(1747002418.052:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0489f55927 code=0x7ffc0000 [ 69.468537][ T29] audit: type=1326 audit(1747002418.052:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0489efab39 code=0x7ffc0000 [ 69.491836][ T29] audit: type=1326 audit(1747002418.052:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0489f5e969 code=0x7ffc0000 [ 69.515309][ T29] audit: type=1326 audit(1747002418.062:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0489f55927 code=0x7ffc0000 [ 70.020605][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.054148][ T4538] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.120771][ T4538] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #16: comm syz.2.324: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 70.164769][ T4558] loop3: detected capacity change from 0 to 512 [ 70.172694][ T4558] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 70.221083][ T4538] binfmt_misc: register: failed to install interpreter file ./file2 [ 70.265799][ T4564] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 70.283024][ T4565] veth1_to_bond: entered allmulticast mode [ 70.289054][ T4561] veth1_to_bond: entered promiscuous mode [ 70.295693][ T4561] veth1_to_bond: left promiscuous mode [ 70.301437][ T4561] veth1_to_bond: left allmulticast mode [ 70.486065][ T409] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 70.506648][ T4577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.525671][ T4577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.538804][ T409] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1409 with error 117 [ 70.551618][ T409] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.551618][ T409] [ 70.594338][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.660826][ T4582] __nla_validate_parse: 4 callbacks suppressed [ 70.660842][ T4582] netlink: 88 bytes leftover after parsing attributes in process `syz.3.335'. [ 70.686877][ T4582] loop3: detected capacity change from 0 to 2048 [ 70.718800][ T4582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.734501][ T4582] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.766996][ T4588] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 70.794264][ T4588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.955204][ T4598] loop1: detected capacity change from 0 to 512 [ 70.962959][ T4598] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 70.988729][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 71.029139][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1497 with error 117 [ 71.041984][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.041984][ T12] [ 71.125803][ T4601] veth1_to_bond: entered allmulticast mode [ 71.148047][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1513 with max blocks 1 with error 28 [ 71.160755][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.160755][ T12] [ 71.162216][ T4606] veth1_to_bond: entered promiscuous mode [ 71.170498][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 71.182263][ T12] EXT4-fs (loop3): Free/Dirty block details [ 71.188195][ T12] EXT4-fs (loop3): free_blocks=0 [ 71.193192][ T12] EXT4-fs (loop3): dirty_blocks=16 [ 71.198342][ T12] EXT4-fs (loop3): Block reservation details [ 71.202614][ T4609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.343'. [ 71.213365][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 71.300898][ T4608] binfmt_misc: register: failed to install interpreter file ./file2 [ 71.343353][ T4601] veth1_to_bond: left promiscuous mode [ 71.349032][ T4601] veth1_to_bond: left allmulticast mode [ 71.654805][ T4628] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 71.720678][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.729761][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.783525][ T4642] loop1: detected capacity change from 0 to 512 [ 71.791087][ T4642] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 71.948679][ T4654] netlink: 56 bytes leftover after parsing attributes in process `syz.0.356'. [ 71.957879][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 71.979714][ T4656] veth1_to_bond: entered allmulticast mode [ 71.986969][ T4656] veth1_to_bond: entered promiscuous mode [ 71.993116][ T4654] binfmt_misc: register: failed to install interpreter file ./file2 [ 72.003536][ T4656] veth1_to_bond: left promiscuous mode [ 72.009198][ T4656] veth1_to_bond: left allmulticast mode [ 72.055740][ T4659] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 72.329842][ T4667] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 72.341095][ T4667] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.397035][ T4673] netlink: 88 bytes leftover after parsing attributes in process `syz.4.363'. [ 72.498933][ T4675] loop4: detected capacity change from 0 to 2048 [ 72.634286][ T4664] loop1: detected capacity change from 0 to 8192 [ 72.662230][ T4675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.682724][ T4675] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.701107][ T4685] loop2: detected capacity change from 0 to 512 [ 72.712727][ T4664] loop1: p1 p3 p4 [ 72.719240][ T4664] loop1: p1 size 8390912 extends beyond EOD, truncated [ 72.768678][ T4664] loop1: p3 size 589824 extends beyond EOD, truncated [ 72.863239][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 72.907156][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 390 with error 117 [ 72.919827][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.919827][ T51] [ 72.937872][ T4694] veth1_to_bond: entered allmulticast mode [ 72.976903][ T4694] veth1_to_bond: entered promiscuous mode [ 72.987623][ T4694] veth1_to_bond: left promiscuous mode [ 72.993438][ T4694] veth1_to_bond: left allmulticast mode [ 73.004814][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 73.148707][ T4704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.372'. [ 73.157798][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 73.227568][ T4704] loop1: detected capacity change from 0 to 2048 [ 73.240374][ T4706] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 73.302343][ T4704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.332639][ T4704] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.410304][ T4704] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.372: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 73.504366][ T4704] binfmt_misc: register: failed to install interpreter file ./file2 [ 73.579286][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.683312][ T4701] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 73.832950][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 73.854497][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 73.867277][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.867277][ T12] [ 73.899905][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 73.912848][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.912848][ T12] [ 73.922524][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 73.928559][ T12] EXT4-fs (loop1): Free/Dirty block details [ 73.934498][ T12] EXT4-fs (loop1): free_blocks=0 [ 73.939461][ T12] EXT4-fs (loop1): dirty_blocks=2048 [ 73.944829][ T12] EXT4-fs (loop1): Block reservation details [ 74.088368][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 74.196924][ T4746] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 74.324027][ T4744] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 74.661820][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 74.661853][ T29] audit: type=1400 audit(1747002423.622:4593): avc: denied { setopt } for pid=4756 comm="syz.1.389" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.701468][ T29] audit: type=1400 audit(1747002423.642:4594): avc: denied { read } for pid=4756 comm="syz.1.389" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.829611][ T4762] loop1: detected capacity change from 0 to 2048 [ 74.882811][ T4762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.895038][ T4762] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.938502][ T4761] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #16: comm syz.1.390: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 74.967787][ T4761] binfmt_misc: register: failed to install interpreter file ./file2 [ 74.980151][ T29] audit: type=1400 audit(1747002423.932:4595): avc: denied { ioctl } for pid=4766 comm="syz.3.391" path="socket:[10190]" dev="sockfs" ino=10190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.045919][ T29] audit: type=1400 audit(1747002423.982:4596): avc: denied { write } for pid=4766 comm="syz.3.391" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.114400][ T29] audit: type=1400 audit(1747002424.072:4597): avc: denied { execute } for pid=4766 comm="syz.3.391" path="/92/blkio.bfq.avg_queue_size" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.218574][ T4770] loop2: detected capacity change from 0 to 1024 [ 75.242576][ T4770] EXT4-fs (loop2): unsupported inode size: 16384 [ 75.248993][ T4770] EXT4-fs (loop2): blocksize: 1024 [ 75.503288][ T29] audit: type=1400 audit(1747002424.452:4598): avc: denied { write } for pid=4773 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.763804][ T4784] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 75.835339][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 75.862425][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 75.875138][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.875138][ T12] [ 75.908969][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 714 with error 28 [ 75.921736][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.921736][ T12] [ 75.931486][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 75.937497][ T12] EXT4-fs (loop1): Free/Dirty block details [ 75.943495][ T12] EXT4-fs (loop1): free_blocks=0 [ 75.948602][ T12] EXT4-fs (loop1): dirty_blocks=720 [ 75.953843][ T12] EXT4-fs (loop1): Block reservation details [ 76.008248][ T29] audit: type=1400 audit(1747002424.962:4599): avc: denied { module_request } for pid=4787 comm="syz.3.399" kmod="netdev-veth0_macvtap" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.026666][ T4788] __nla_validate_parse: 3 callbacks suppressed [ 76.026688][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 76.069177][ T29] audit: type=1400 audit(1747002424.962:4600): avc: denied { sys_module } for pid=4787 comm="syz.3.399" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.131682][ T29] audit: type=1400 audit(1747002425.092:4601): avc: denied { read } for pid=4781 comm="syz.0.396" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.165968][ T29] audit: type=1400 audit(1747002425.122:4602): avc: denied { open } for pid=4781 comm="syz.0.396" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.232533][ T4798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.262166][ T4798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.311077][ T4801] veth1_to_bond: entered allmulticast mode [ 76.329958][ T4801] veth1_to_bond: entered promiscuous mode [ 76.341247][ T4801] veth1_to_bond: left promiscuous mode [ 76.346973][ T4801] veth1_to_bond: left allmulticast mode [ 76.848838][ T4815] Zero length message leads to an empty skb [ 76.928211][ T4820] netlink: 56 bytes leftover after parsing attributes in process `syz.3.408'. [ 76.937172][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 76.987800][ T4821] loop3: detected capacity change from 0 to 2048 [ 77.034549][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.073403][ T4821] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.110197][ T4827] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 77.123769][ T4820] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #16: comm syz.3.408: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 77.233028][ T4820] binfmt_misc: register: failed to install interpreter file ./file2 [ 77.706060][ T4835] veth1_to_bond: entered allmulticast mode [ 77.722877][ T4835] veth1_to_bond: entered promiscuous mode [ 77.732260][ T4835] veth1_to_bond: left promiscuous mode [ 77.737885][ T4835] veth1_to_bond: left allmulticast mode [ 77.823977][ T133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 77.853966][ T4810] syz.2.405 (4810) used greatest stack depth: 5952 bytes left [ 77.872031][ T133] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 77.884789][ T133] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.884789][ T133] [ 77.975565][ T3432] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1543 with error 28 [ 77.988448][ T3432] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.988448][ T3432] [ 77.998219][ T3432] EXT4-fs (loop3): Total free blocks count 0 [ 78.004271][ T3432] EXT4-fs (loop3): Free/Dirty block details [ 78.010211][ T3432] EXT4-fs (loop3): free_blocks=0 [ 78.015275][ T3432] EXT4-fs (loop3): dirty_blocks=1552 [ 78.020622][ T3432] EXT4-fs (loop3): Block reservation details [ 78.180857][ T4842] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 78.210077][ T4847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.252009][ T4847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.607381][ T2990] ================================================================== [ 78.615534][ T2990] BUG: KCSAN: data-race in evdev_pass_values / evdev_poll [ 78.622686][ T2990] [ 78.625029][ T2990] write to 0xffff8881034b4008 of 4 bytes by task 4858 on cpu 1: [ 78.632682][ T2990] evdev_pass_values+0x3d4/0x510 [ 78.637653][ T2990] evdev_events+0x8e/0xd0 [ 78.642012][ T2990] input_pass_values+0x120/0x390 [ 78.646983][ T2990] input_event_dispose+0x248/0x320 [ 78.652121][ T2990] input_handle_event+0x9e8/0xa20 [ 78.657175][ T2990] input_inject_event+0xba/0xf0 [ 78.662042][ T2990] evdev_write+0x1fa/0x290 [ 78.666488][ T2990] vfs_write+0x266/0x8d0 [ 78.670760][ T2990] ksys_write+0xda/0x1a0 [ 78.675034][ T2990] __x64_sys_write+0x40/0x50 [ 78.679659][ T2990] x64_sys_call+0x2cdd/0x2fb0 [ 78.684401][ T2990] do_syscall_64+0xd0/0x1a0 [ 78.688928][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.694845][ T2990] [ 78.697184][ T2990] read to 0xffff8881034b4008 of 4 bytes by task 2990 on cpu 0: [ 78.704754][ T2990] evdev_poll+0xc4/0x100 [ 78.709027][ T2990] do_select+0x8ee/0xf40 [ 78.713302][ T2990] core_sys_select+0x3b2/0x600 [ 78.718097][ T2990] __se_sys_pselect6+0x216/0x280 [ 78.723077][ T2990] __x64_sys_pselect6+0x78/0x90 [ 78.727957][ T2990] x64_sys_call+0x1caa/0x2fb0 [ 78.732655][ T2990] do_syscall_64+0xd0/0x1a0 [ 78.737184][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.743106][ T2990] [ 78.745439][ T2990] value changed: 0x00000002 -> 0x00000004 [ 78.751167][ T2990] [ 78.753502][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 78.759667][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: acpid Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 78.771667][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 78.781748][ T2990] ==================================================================