last executing test programs: 3.36836722s ago: executing program 3 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.674514384s ago: executing program 4 (id=348): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x40, 0x0, 0x8000, 0x5, 0x400000000000000, 0x0, 0xfffd, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 1.615766376s ago: executing program 4 (id=349): ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000000)="875c13fab76beaf3d616fa51f39eaabc80c28df17731afb2354badfef6b5524fbe7b8c", &(0x7f0000000040)="c44601b8a640c869f7464c346bd4e497347b296c5e2b6564e20dd97ef3c3c4ef83cb4f0ed5b7c857226a182f5d91cfa6491ec559108ca0ffe13089ee9c98bd7b446609465beedfe2241beac74daf9d9e6e04618337cc2ddb949f53958a42ab"}}, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.540202107s ago: executing program 4 (id=351): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003b80)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="cf35ee593f69202c577080f98c7e18f0332fc9508354e60306d14c8e5c3da87d449f8d5ed529c65c1581243798aac8102e1d7cdc695ba0a22d8fd54c51d60b28a21fcae2115e78474ebfbe18a664470c089f3c4a", @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=r0, @ANYBLOB="41365925681df524a5c537b532ac090154bb7609f6c1aa2001586ba2d429b859e31b7acb828a20f823c52b64d98cc464b2f7b6576c8312980829596c84b76bf352af758307f94f8b835bd0ad1939b147ff17511f6cf6be32cf77f0e4988f78b03b7995421cfca80a27b9ce597674115622164b486c74c263eb3b5528a6fb3b1026bae14129967114474f49e1c6fa1008fd427b4519a0612ed4e9fb192fbdb134fe253f91a120476a2cd7185075bb1217c6a89acd3b9f996bc8d3234c6dc78b60a14f409a7028614bc617190bf238ff799dd160463523d31b3b0a9d264da0a46cfbf1b99f39eaf72a5fdcc6e523238f7d2a0f457bdd486c6e6cc2b5bea9228745e7660dd7d9f76c401a76d5104068d08abe09d4dcbbd21e4d021800a8ff13960d3b8a9f6625c2df66353f03d03423287cd7aaa9d205eef889f27df22adfa680464ec1edb5ba531f63749e33b5451831b9d75ec0fca403aceab3a8ecf502f0bfcef49512c358bb2bf20b37906b9230906945656cf8f0e10aafd51983aa78c9d527a4b424e81ae3bad1739944f200bcd09557879de5205df63dd1836fad3fba5367670a0c90582fdac9bea7897179cc08f1ca5dd70229440c2dcdba1049e60444d753f33c98456dd23721887f8d718cc7eb60092aaaeb702bcc4d535bf7d7b0ab1c520cd90f590697142f2f719d141b107aea9ebbceea71decd8841044039f2587dd6697966a734b8ed68f940ceaedc5150956abaf3dae0c8b8cf76b37d8d84085de893329b39d15442849bc2c8b92d3013eaa5e53f085252b4b387150ef8d642f35fe808211a53adb6a199e13a36e846bc90783606f68f504a7e1cdef795c0df73ef318328199a2751b0eb5d1ea10cf113896acad78a8e223a4b4f25fd6d4a119f098403db2d4b76da65944b8a7385bf31ee8311d92e74007e5c373d2e881e5b0b906b2c7bc2facc05c8aa6bb02345cc0ba4de6fe87999a13189e7f001537fb82978871662aa40ae8b2200f17c436a5f9ff3fed14e34e79b1386bdf85b66ed9f3ba80d07d1be7376b12688ad9ceea6424b53405d85731c963521f2e7b8a95fce51f2b0ba356cfd2a48a05ac64f0ea0292f5cef32db0ba4a1927afc4c0a1f257037b50541a080c08b45ae95393df29fd6052a1c3c2b8fcfe881a5b68dfda52f49d968be0ced8f4c22c10f685d9a2c04a3441f2a007db190796d393287536d02a464e66a86c21a7957578b5cbd2d2e229d4f10fe62d06bc0532c1f5f654a9d7cc40d3efb38e72969b0935d31381a2d9d29d1c4cc6369116c4e460e89bcc7611e2f9136dc7c9accab662b5d03b7837c490b11c5e48a90f0602e814be1dc24878105c8b0a88b5a9c228596347aa6bff6e8917c8134b3096de2d1191e53905bc1a9d7588fd40981244d6b468c4f931f001b1187568bc7d84458b769b1e35942f47643276bb1369a56f78b4474dc464f1fb36b5faa228b83f413879bc16d63b71a6b772c58a0fc60a8c6b5ea787e41235d1361097c22d879c1093f19b73b5d259efcca80f19b480878e22be0595561a950b20858326f56211cbfbebfd52b79d884cac0722f9009cd06f394baa72c8b052ad77b0b0b1b22742b13ba250567ae0dc399dd912af0c71b9fe173d1baa367c33330af5f46104f7a6cc42c794c8a624b04d38369d9171f181d99815d3fe4ccaf264a2751ab8a8a323c658da16146497413f58012075534d50e0d3f25170bc04f14b8052de24acfdc0a877fa338416cba4961879b018410e055e3bc36ad69de04e080dbc5dba0ae37f525cbc77ec97e1b3d5b26a2f3820789d3105d80131d937c87c081e806db99b034f728152b65dd99cfd8dde4e6c08435c4a29fa99cb3e9a6227a0a6b2b2aef304844da3ba770daa711fd4f0a1784f397ec38ba66a164d84ccce0471dc04e20bb250f184dd2410e0b081e04fa09eda4c21e47075e1a9c7b8778aef91c61626c1472a7860eb6f336ab2b9b0e30114dbca334b75968bb3fa5a1ad999e08ad661c56ea8863198747a10df27c0a171e53fddec78e863ce1aa258e4fa817a293da94d0a89606bb90c73839b2cbaf0dbb324da4ac93bc18fe1f747896b144901069269f9562395f857c565eccd9c643281a32f946bb1adcd5715b995873324c6765ee224ca32acac06a304023101212a2573b7ae35c5029cb354cfb64486cec867e12f8ea0192a861ef421afe8d893190913535d2b98e5d90d225d38260555e1999caf11796bcbdfd2d0fab50f9d39a3f34ab147eb38a668b3b90dac22385a596de5d37efa4a16b49faa7ccc20f08b2cef7e977b3b1538d2919912dbe747dae1c947198d6a6e3c9cc7d5495f3f0da52bd5ec215da2791ff8df71793be8da58b53eac77ead74d010a31865439d771a8fa3f66f95391668bc6fe9f1f2c0fad53d867474199e854e5c675b83a9590f1b47339ca79bc43d50ade71ccc63102ed6ba29dea778b766b8c280ac2d381174426f80d784c6810933f403ec408a8f7b380d5377959ebe7234676738bc606cdbdc0c63867d0bbbce016aaf8c1a568a4a61be9c2c8a77df70fdb16f14aa60f0e45b7342bb5321052a27a9b4223f57d303ba6c7c5f6e40bc515dc79efc8c6f3509fb56e32a791fd5d3cc6a27db31f02b2cbfae3bee6ca139497b08300956cd36e9c578289d6830484d24b589dc772f8d43f70f8e68a71d6fdcc67ff206b260069b59636fa0ca353b754f7f7db5247610fe5b057dad8e0a59b462396f689f28910e97bc0f4681b3b667db71757b653123e595dadec4b294a451633bfe7df4f910c4f5de2a2b379361a6e368f8e3e2fb57522c7ca99fb019424b4b06a11dc7f7ff1f5fe808e581dc2f11ce7301264edad2b07cf0d59c2e6f4fe422bb3ba4fa33079993576151565c2c44ae16128cc70c09847e6fe6f85726a2c18a9231e8c6cc2139581cf1ead0370b9c89fcd1e48d401235756bdd685be9833e89ac260b800c309a47e387ae59b4fbd72e3338fa96e4e2675563bcd24cc6c3009e8dd4571b54003e3e6106766850fd8972463e7d04bb16a2d54cf73a955232daf586a4cbf776bc167488a1c39e7ad7fd39565118da35c15bfa72fd3992e1cbf7334dac8c607570e3989b3a28c10dbee41bed74ff42614c16b32d9a6c7e705857d3246c1c4727412c9764d2c83b6545f8de8d548fabb36d8e7211729bc40d394470afe64c79d6ec32a5eadb6cb48b40d44ad9feb8b18684a4aab2d2cf632e51ff21728c6769ec52ec401fe745316786b7a192a52c96ba2ddcd719ccd56af5e17aa116719635201c24ccb20b8d931c63f26f71aefe4bd7faf8f482fa9862889dc45e0aa9fe1c9eb455a4f643622fdcf2b6338c9967960f8769a89b5b1c4c17262f3f956cf55a03c0be74b9e939dd0795c56a4d19efaea69f61fcdb8d91ee48c1fb3be25be8def5a0711618074a5c9a7d5984aaa8e422cb7a7683f0e80f045bcc34c5d853de870f3ebcb2de9c775967b598625a28de7c8ca12f92d389a6cafa5639ed4bf7cbcd794b128fdbcb039dc7bd7c0d5c01e34bd46b383b25cd79e5aa420c77d19407efb14fc6f1e2b23cd1008388c3ed650bc389d4473722976a760e40a30eba419de142941c60baf9538319962c7197eef2988dd1e8c71ee399d9d6b8eaf3a00f9a26a77e22bb01450368cb9bc5e399f954918d7349a17651bca7d667aef9118f76f64af659e0fd677c7491996c386030f7d8ee4f31467a9271d27ec115726f31939a9da91ac009ecb179795cd5455222330264873e2e5ab1405f7fc91f579c35e0bbd0e0f87eeec55dc9f9e44af70cc7e829f02a15ddf3806333dfd90605aab629f05265c25a0b9f41c40033fa68fed2e9c2697794206eb0e83d1d67532537b243327dcbe091994af2f6c884c9802bc9fc87e31b215e87166155cfa1b303b127f85a07ebe0c1dce96bf4bda87b63c8e96e3cb00c4a39ef1c441e9df8b7d5707ac681346d6de3714b587735f25b9183ba84ff2e59484afb2777c4dc716950ddb4351ad9b9694d99e61fff1fce9777482fba4d9435f1342d9d0911a1100b75cae6722a7ebf19337ce20647e8aab188f7c940fd7befa10cb3cdcaabc591bbdec5c799e32bdb8f502dbfc4d8583662a7179cc84ec77a80348cde57a65af4fdecb7e858541e8854f03ae8445cc3723991069a80b7b6c8d47a798627e666be4355a10ae387de45ce0b2056b03f26960c939e114c3878bb0d5db528ec59eb2f7290d4f32dec8228eb4d09a88df0d3e2d2a03f2660e9d2dfc8bb1e2b383ab7c3c0abdc14a7f12755323966d172fcd228265eab9649c3d47e6fd1a9eceec6c0f26d53b6a7707e7b6dbe28d56676acd4355a12fe4ef7532364ff416c181552cd6fdfa7884e87fd4a40e92315fec43e82597ec552c1ff0a8512f58f1a13ccc9412c46680b501f6b9d5a27d4e76a6f09942ad3f8dad6aafcffc5f73bcae65815878bb86bc995ab839197505b050750e441f20252cdb76027b514a2ae34c6999b91422902b6b1c26fccea35827a8f4723421fd897e50b7ae5c76729ca42f6901ac3716b4a207c90cbad10a9d2e1f5fbb97fd3f6a38598e3d2d70f8b489e91282e003b087bc431abeae1937c174a66a165b5c075c5b208f59174c15646ff49080dbaf23a6ed61fe131c9ca5db6817cf4321f02bbcc73c43e971b3d3226bac90552d5d92ed015d4879c2996d87a70ebb0eef9ba5a6b269f69daf6108d2cd8bea39314275b91c44181741e03f5988b5f0fddd796ef0b7084d66b186b9f703a765494e0365c30ed4a1b07f666d4d17886078a71bc8f0e527a8dcf78e79416f02b890c024b004473a157de696ca96887235d8e07e31c3b254d94d9dddae24b837dcb2c56aa43df0703d13ae01e623b9554c5b96a28b9713271ff56a5be1f622083a1e8334d94a37d5836f8a5e19ba6ac493e78c575f96314617a0cbb4f1c5d9faca0c14a3bb2bb6b1f7c0fad6760b907636a806463e320178d80736462c708f5a20dfb5ab2ac2cae0a5c1419c8b1902e44a6cb7ff384400857d698fa9e45d73da8625af062575cd7574c1dddea49527c6a092be8e26dcce2620dff5837f48da25c449b1e6c4b2f5f538bec03e15e97d565af7776e6c89ab7252b5354e6bf13c4c49ac7a19742cb1f1876fdc04aa50642ad7227bd069507c7370ef08666377dbe664dc77cdf1045b5c2f8083d360f697c66d85d425c5dfe926af47a4368ad16819d762bfde68ba58aad4adf1ac6fdf74a48bc4e85d57095a0060d574dd5ad7d4e621d06e5b091c4c251dd9cb1cc9206cd8f8d351307466f79285535be9c1c668c055ec6047de0c3f9bfe50ca30bab2264f091e2b34d8e7f72cc4632244f16957fa1fffcc38e669ad1dafd4c5e99e442983dc64f1b324a923829f0247c4292f387bf5e6a3deb3da4bd992384a8a47127cd3962e22ee606ddf5bb29232d6932e7e4a4980a67f15e31fe8e4cef92d54e3ff443c2fa5c9332fd3755e400ad5a285de1dd73696ab1559fba9956f51eb29c4090b8f6b9c95d64b6905eaf923bf2715fcf47ff4801ecd7aadc4ed338865ee0a8696e554782d74b36e51f9def19cb63e72820faec859ded224013df127d38013975907b4dc2edf2fc2a6018634bb936386e9fdc9c85e2055ddfbc0e04bd21a7260356ec8fc374bfe33f4f21558345e38332579c8f81134bb910d007bea16705a489ea9365a921b906108e99c2e686572e9f301de78cf62c958244062750868babe9455a69247d00990bd131a20b7dfc04c53926f99db0d5c7eb6e21960517e93f3c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="e05e7706a6a66abc2488932b509ac20809da69e3e1b01aca0d7948609372edf89343955d649f374aef7ae006828ad626aae4939e0a836b6b40ae8a59d3e1b3840e6e90f5282a228676f1535daa7ff917fa6fbd8a34cbda10af61cc7f0d698c017106be1f82fafc6da10e3ebd8f0a53e1bd0b3c48c0733a4f1ca593cb8da26e91", @ANYRES64=r0, @ANYRESDEC, @ANYRES8, @ANYRES64=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x4251, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae46463208004500001c000000000038f20d251e0001e000000111109078e0000001"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) 1.512033857s ago: executing program 1 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 1.261089311s ago: executing program 1 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, 0x0}, 0x20) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2001, 0x40, 0x1, 0x41, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x56, 0x1, 0x4, 0xfc, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407ffe, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x2000, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x3514e082}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0xd0000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000002, 0x4000006}, 0x1384, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20) 1.245321261s ago: executing program 3 (id=356): unshare(0x2a060400) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48c4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1120, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa0880400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x1e1242, 0xfe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000373400000000000007000000000000", @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4f90}, 0x18) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000001a8279393eb3a3334725478aa72fa85690c46d2059d9b8cce48482f537a0c53f3387205f880c8641348d5b55ea42a2fe34434857ef5f1743a40c0091ea520d5fa922fd8a4befcdf82c1cb06cacb6b19aca93eb3012321506b440b8fd667480912fe18cd8979093fe11e7ec4f24207ac8d81bf69f47b42a700403e9d7f25aaed62750a15bf6dee5d7cd7c7172b4c03f6ff636e676694bf57451"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000cfc900"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x43, 0xa0, 0x108, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x98, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vcan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7, 0x400, 0x2, 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.209472141s ago: executing program 0 (id=358): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6f9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8002, 0xa277, 0x0, 0x7, 0x0, 0x1, 0xfffd, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x48004) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 1.177446772s ago: executing program 3 (id=360): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="89000000120081ae08061cdc030ec080000000000000b29c1b2e701343850000000004c00e72f750372ddb117b9bd531353a0093b837dc6cc01e32ef2ec8c7a6bdad446b9bbc7a46e3988285dcdf12f213d3b63a9388a06f83deca0b5f0809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000e43d57aa918045fc", 0x89}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) 1.101063293s ago: executing program 1 (id=361): ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000000)="875c13fab76beaf3d616fa51f39eaabc80c28df17731afb2354badfef6b5524fbe7b8c", &(0x7f0000000040)="c44601b8a640c869f7464c346bd4e497347b296c5e2b6564e20dd97ef3c3c4ef83cb4f0ed5b7c857226a182f5d91cfa6491ec559108ca0ffe13089ee9c98bd7b446609465beedfe2241beac74daf9d9e6e04618337cc2ddb949f53958a42ab"}}, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.100195733s ago: executing program 3 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x5102, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0, [@dstopts={0x84}], "83098ece0f967fda"}}}}}}}, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) inotify_rm_watch(r1, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x31b, &(0x7f0000000640)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x50, 0x0, @fd=r4, 0x7, 0x0, 0x7, 0x1, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.095814333s ago: executing program 4 (id=363): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000018110000", @ANYRES32=r8, @ANYRESOCT=r8], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="630b000600000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) syz_emit_ethernet(0x54, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @local, @void, {@llc_tr={0x11, {@llc={0x4, 0x0, '^', "6a1f89dd8d2ae901a23586385b64d4d524661887d2875bdcf8e89f51c597371b5b14b949a7ec74b68bea43193db41eb2418210838678f913d50f8b11b15e766bac0570"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x556, 0xf4d, 0x4db, 0x19f]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) flistxattr(r10, 0x0, 0x0) 1.020274524s ago: executing program 1 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffff0000}, 0x800, 0x0, 0xff, 0x3, 0x7}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x800, 0x0, 0x1, 0x1, 0x0, 0x6}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mkdir(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xd0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x144, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.020012974s ago: executing program 3 (id=365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 1.018551055s ago: executing program 0 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000200001002abd7000000000000200000000000001000000"], 0x24}}, 0x0) 952.517455ms ago: executing program 3 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 897.995096ms ago: executing program 0 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 778.945398ms ago: executing program 0 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) accept4$unix(r4, &(0x7f00000010c0), &(0x7f0000001140)=0x6e, 0x180800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000700)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r7, 0x0, 0x0) socket(0x29, 0x2, 0x5) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 572.57783ms ago: executing program 1 (id=372): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="89000000120081ae08061cdc030ec080000000000000b29c1b2e701343850000000004c00e72f750372ddb117b9bd531353a0093b837dc6cc01e32ef2ec8c7a6bdad446b9bbc7a46e3988285dcdf12f213d3b63a9388a06f83deca0b5f0809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000e43d57aa918045fc", 0x89}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) 567.905091ms ago: executing program 2 (id=373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, 0x0}, 0x20) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2001, 0x40, 0x1, 0x41, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x56, 0x1, 0x4, 0xfc, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407ffe, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x2000, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x3514e082}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0xd0000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000002, 0x4000006}, 0x1384, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20) 440.628693ms ago: executing program 2 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) 439.667183ms ago: executing program 2 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264000000"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) 286.350515ms ago: executing program 4 (id=376): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6f9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8002, 0xa277, 0x0, 0x7, 0x0, 0x1, 0xfffd, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x48004) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 214.589246ms ago: executing program 2 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 196.952526ms ago: executing program 0 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000200001002abd7000000000000200000000000001000000"], 0x24}}, 0x0) 180.647737ms ago: executing program 1 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (fail_nth: 2) 143.244398ms ago: executing program 2 (id=380): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) 142.659967ms ago: executing program 0 (id=381): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001811", @ANYRES32=r7, @ANYRESOCT=r7], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="630b000600000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @local, @void, {@llc_tr={0x11, {@llc={0x4, 0x0, '^', "6a1f89dd8d2ae901a23586385b64d4d524661887d2875bdcf8e89f51c597371b5b14b949a7ec74b68bea43193db41eb2418210838678f913d50f8b11b15e766bac057099ec"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x556, 0xf4d, 0x4db, 0x19f]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) flistxattr(r8, 0x0, 0x0) 45.468619ms ago: executing program 4 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a32"], 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001d00)={0x53, 0xfffffffffffffffe, 0x0, 0xf1, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10024, 0x1, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 0s ago: executing program 2 (id=383): unshare(0x2a060400) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48c4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1120, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa0880400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x1e1242, 0xfe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000373400000000000007000000000000", @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4f90}, 0x18) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000001a8279393eb3a3334725478aa72fa85690c46d2059d9b8cce48482f537a0c53f3387205f880c8641348d5b55ea42a2fe34434857ef5f1743a40c0091ea520d5fa922fd8a4befcdf82c1cb06cacb6b19aca93eb3012321506b440b8fd667480912fe18cd8979093fe11e7ec4f24207ac8d81bf69f47b42a700403e9d7f25aaed62750a15bf6dee5d7cd7c7172b4c03f6ff636e676694bf57451"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000cfc900"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x43, 0xa0, 0x108, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x98, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vcan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7, 0x400, 0x2, 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 26.864689][ T29] audit: type=1400 audit(1747176530.894:65): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.865807][ T3305] cgroup: Unknown subsys name 'net' [ 26.887514][ T29] audit: type=1400 audit(1747176530.894:66): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.915288][ T29] audit: type=1400 audit(1747176530.914:67): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.034696][ T3305] cgroup: Unknown subsys name 'cpuset' [ 27.040956][ T3305] cgroup: Unknown subsys name 'rlimit' [ 27.151975][ T29] audit: type=1400 audit(1747176531.174:68): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.175333][ T29] audit: type=1400 audit(1747176531.174:69): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.195858][ T29] audit: type=1400 audit(1747176531.174:70): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.216376][ T29] audit: type=1400 audit(1747176531.174:71): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.224711][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.236729][ T29] audit: type=1400 audit(1747176531.174:72): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.270150][ T29] audit: type=1400 audit(1747176531.174:73): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.282801][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.293730][ T29] audit: type=1400 audit(1747176531.274:74): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.543570][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 28.607795][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.650834][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.657986][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.665312][ T3323] bridge_slave_0: entered allmulticast mode [ 28.672033][ T3323] bridge_slave_0: entered promiscuous mode [ 28.691142][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.698411][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.705678][ T3323] bridge_slave_1: entered allmulticast mode [ 28.712088][ T3323] bridge_slave_1: entered promiscuous mode [ 28.731560][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.751007][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.778728][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.793026][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.833130][ T3323] team0: Port device team_slave_0 added [ 28.856873][ T3323] team0: Port device team_slave_1 added [ 28.862697][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.869882][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.877180][ T3315] bridge_slave_0: entered allmulticast mode [ 28.883478][ T3315] bridge_slave_0: entered promiscuous mode [ 28.909451][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.923028][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.930217][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.937608][ T3315] bridge_slave_1: entered allmulticast mode [ 28.944086][ T3315] bridge_slave_1: entered promiscuous mode [ 28.994058][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.001035][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.027856][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.043545][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.050753][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.057953][ T3321] bridge_slave_0: entered allmulticast mode [ 29.064364][ T3321] bridge_slave_0: entered promiscuous mode [ 29.081489][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.088608][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.114621][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.126844][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.136060][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.143119][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.150510][ T3321] bridge_slave_1: entered allmulticast mode [ 29.157074][ T3321] bridge_slave_1: entered promiscuous mode [ 29.183613][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.190833][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.198034][ T3319] bridge_slave_0: entered allmulticast mode [ 29.204524][ T3319] bridge_slave_0: entered promiscuous mode [ 29.211831][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.221029][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.228143][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.235321][ T3319] bridge_slave_1: entered allmulticast mode [ 29.242057][ T3319] bridge_slave_1: entered promiscuous mode [ 29.289501][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.303584][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.310737][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.318279][ T3316] bridge_slave_0: entered allmulticast mode [ 29.324730][ T3316] bridge_slave_0: entered promiscuous mode [ 29.331623][ T3315] team0: Port device team_slave_0 added [ 29.338298][ T3315] team0: Port device team_slave_1 added [ 29.345236][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.355757][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.370934][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.385003][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.392073][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.399434][ T3316] bridge_slave_1: entered allmulticast mode [ 29.406148][ T3316] bridge_slave_1: entered promiscuous mode [ 29.435795][ T3323] hsr_slave_0: entered promiscuous mode [ 29.441833][ T3323] hsr_slave_1: entered promiscuous mode [ 29.471249][ T3319] team0: Port device team_slave_0 added [ 29.478031][ T3319] team0: Port device team_slave_1 added [ 29.489745][ T3321] team0: Port device team_slave_0 added [ 29.501358][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.510995][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.518011][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.544382][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.555520][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.562479][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.588413][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.604627][ T3321] team0: Port device team_slave_1 added [ 29.620219][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.642435][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.649450][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.676067][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.689945][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.696972][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.723043][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.750312][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.757351][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.783840][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.803085][ T3316] team0: Port device team_slave_0 added [ 29.811781][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.818806][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.844800][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.871186][ T3316] team0: Port device team_slave_1 added [ 29.897726][ T3315] hsr_slave_0: entered promiscuous mode [ 29.904415][ T3315] hsr_slave_1: entered promiscuous mode [ 29.910962][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.918792][ T3315] Cannot create hsr debugfs directory [ 29.939997][ T3319] hsr_slave_0: entered promiscuous mode [ 29.946293][ T3319] hsr_slave_1: entered promiscuous mode [ 29.952286][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.960192][ T3319] Cannot create hsr debugfs directory [ 29.981706][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.988719][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.014974][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.028118][ T3321] hsr_slave_0: entered promiscuous mode [ 30.034346][ T3321] hsr_slave_1: entered promiscuous mode [ 30.040231][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.047940][ T3321] Cannot create hsr debugfs directory [ 30.057055][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.064279][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.090604][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.190672][ T3316] hsr_slave_0: entered promiscuous mode [ 30.196877][ T3316] hsr_slave_1: entered promiscuous mode [ 30.202860][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.210629][ T3316] Cannot create hsr debugfs directory [ 30.245917][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.257016][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.284175][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.306926][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.366322][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.375684][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.385200][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.401405][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.423148][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.432343][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.453413][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.468999][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.505273][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.515847][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.529469][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.545756][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.554585][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.570265][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.577649][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.586314][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.606311][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.613613][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.625742][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.655843][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.664959][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.674219][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.691713][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.700113][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.721815][ T2669] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.728993][ T2669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.753243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.760362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.795929][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.824707][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.841932][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.851600][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.858977][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.869061][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.876355][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.890687][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.900566][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.913437][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.950188][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.960954][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.984627][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.992623][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.006361][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.013557][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.035131][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.042240][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.072796][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.080328][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.092080][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.107383][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.114674][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.173607][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.192401][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.203483][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.240273][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.250199][ T3323] veth0_vlan: entered promiscuous mode [ 31.268886][ T3323] veth1_vlan: entered promiscuous mode [ 31.317241][ T3319] veth0_vlan: entered promiscuous mode [ 31.338055][ T3319] veth1_vlan: entered promiscuous mode [ 31.353346][ T3323] veth0_macvtap: entered promiscuous mode [ 31.367500][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.376472][ T3323] veth1_macvtap: entered promiscuous mode [ 31.412125][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.429783][ T3319] veth0_macvtap: entered promiscuous mode [ 31.440754][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.452571][ T3319] veth1_macvtap: entered promiscuous mode [ 31.471738][ T3323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.480541][ T3323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.489331][ T3323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.498172][ T3323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527873][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.538596][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.550994][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.558797][ T3315] veth0_vlan: entered promiscuous mode [ 31.572696][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.583436][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.595360][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.613126][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623482][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.632389][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.641562][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.659313][ T3315] veth1_vlan: entered promiscuous mode [ 31.672405][ T3316] veth0_vlan: entered promiscuous mode [ 31.678424][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.682340][ T3321] veth0_vlan: entered promiscuous mode [ 31.727218][ T3315] veth0_macvtap: entered promiscuous mode [ 31.737707][ T3321] veth1_vlan: entered promiscuous mode [ 31.746663][ T3316] veth1_vlan: entered promiscuous mode [ 31.753708][ T3315] veth1_macvtap: entered promiscuous mode [ 31.788713][ T3316] veth0_macvtap: entered promiscuous mode [ 31.797230][ T3321] veth0_macvtap: entered promiscuous mode [ 31.803436][ T3454] loop1: detected capacity change from 0 to 512 [ 31.807645][ T3316] veth1_macvtap: entered promiscuous mode [ 31.818076][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.820692][ T3454] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.828667][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.828688][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.841793][ T3454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.872282][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.890676][ T3454] EXT4-fs (loop1): 1 truncate cleaned up [ 31.893380][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 31.893398][ T29] audit: type=1400 audit(1747176535.914:146): avc: denied { create } for pid=3455 comm="syz.2.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.903076][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.929109][ T3456] loop2: detected capacity change from 0 to 512 [ 31.938108][ T3454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.938447][ T3321] veth1_macvtap: entered promiscuous mode [ 31.958281][ T3456] EXT4-fs: Ignoring removed nobh option [ 31.962288][ T29] audit: type=1400 audit(1747176535.984:147): avc: denied { mounton } for pid=3455 comm="syz.2.3" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.987873][ T29] audit: type=1400 audit(1747176536.014:148): avc: denied { mount } for pid=3452 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.008014][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.009681][ T29] audit: type=1326 audit(1747176536.014:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc6e2cd2d0 code=0x7ffc0000 [ 32.020075][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.043194][ T29] audit: type=1326 audit(1747176536.014:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7efc6e2cd6b7 code=0x7ffc0000 [ 32.053029][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.076091][ T29] audit: type=1326 audit(1747176536.014:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc6e2cd2d0 code=0x7ffc0000 [ 32.086460][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.109659][ T29] audit: type=1326 audit(1747176536.014:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e2ce969 code=0x7ffc0000 [ 32.109694][ T29] audit: type=1326 audit(1747176536.014:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e2ce969 code=0x7ffc0000 [ 32.119539][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.152945][ T29] audit: type=1326 audit(1747176536.174:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efc6e2ce969 code=0x7ffc0000 [ 32.166341][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.170397][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.176914][ T29] audit: type=1326 audit(1747176536.174:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e2ce969 code=0x7ffc0000 [ 32.213369][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.251362][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.261412][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.271897][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.288299][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.300445][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.311157][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.321305][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.331791][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.341706][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.352225][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.362281][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.373835][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.386052][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.387456][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.398897][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.412796][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.423212][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.433740][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.443822][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.454464][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.467302][ T3456] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.3: corrupted inode contents [ 32.479086][ T3456] EXT4-fs (loop2): Remounting filesystem read-only [ 32.486814][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.495663][ T3456] EXT4-fs (loop2): 1 truncate cleaned up [ 32.502193][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.503088][ T3456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.510943][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.524020][ T3456] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.532234][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.547458][ T2669] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.551310][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.561783][ T2669] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.576943][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.584868][ T3456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.590238][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.599601][ T2669] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 32.607752][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.626888][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.638520][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.649267][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.659157][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.669700][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.679562][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.690492][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.700498][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.711028][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.721048][ T3465] vhci_hcd: invalid port number 96 [ 32.721697][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.726188][ T3465] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 32.740992][ T3464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 32.746384][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.758472][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.767302][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.776311][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.798197][ T3464] team0: Port device team_slave_0 removed [ 32.959797][ T3478] hub 2-0:1.0: USB hub found [ 32.976324][ T3478] hub 2-0:1.0: 8 ports detected [ 32.996970][ T3483] 9pnet_fd: Insufficient options for proto=fd [ 33.016001][ T3478] loop4: detected capacity change from 0 to 512 [ 33.022532][ T3478] EXT4-fs: Ignoring removed nobh option [ 33.029209][ T3475] loop3: detected capacity change from 0 to 512 [ 33.042316][ T3485] hub 2-0:1.0: USB hub found [ 33.047229][ T3485] hub 2-0:1.0: 8 ports detected [ 33.062959][ T3475] EXT4-fs: Ignoring removed nobh option [ 33.073586][ T3485] loop1: detected capacity change from 0 to 512 [ 33.080544][ T3485] EXT4-fs: Ignoring removed nobh option [ 33.113195][ T3485] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.9: corrupted inode contents [ 33.116898][ T3475] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4: corrupted inode contents [ 33.126590][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.5: corrupted inode contents [ 33.138463][ T3475] EXT4-fs (loop3): Remounting filesystem read-only [ 33.151056][ T3485] EXT4-fs (loop1): Remounting filesystem read-only [ 33.156775][ T3475] EXT4-fs (loop3): 1 truncate cleaned up [ 33.162020][ T3485] EXT4-fs (loop1): 1 truncate cleaned up [ 33.167729][ T3475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.175414][ T3478] EXT4-fs (loop4): Remounting filesystem read-only [ 33.186728][ T3475] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.194247][ T3478] EXT4-fs (loop4): 1 truncate cleaned up [ 33.203477][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.209864][ T2669] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.221845][ T3475] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.231556][ T2669] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.241614][ T3478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.255085][ T3485] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.265973][ T3478] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.276044][ T2669] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 33.296080][ T3485] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.297798][ T3478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.310894][ T2669] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.325155][ T2669] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.336247][ T2669] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 33.346963][ T2669] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.357724][ T2669] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.368962][ T2669] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 33.498291][ T3501] hub 2-0:1.0: USB hub found [ 33.520344][ T3501] hub 2-0:1.0: 8 ports detected [ 33.543317][ T3501] loop0: detected capacity change from 0 to 512 [ 33.551543][ T3501] EXT4-fs: Ignoring removed nobh option [ 33.608058][ T3501] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.12: corrupted inode contents [ 33.622109][ T3501] EXT4-fs (loop0): Remounting filesystem read-only [ 33.630568][ T3501] EXT4-fs (loop0): 1 truncate cleaned up [ 33.637180][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.651785][ T1413] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.662666][ T1413] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.685587][ T3501] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.696432][ T1413] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 33.709919][ T3501] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.738427][ T3512] loop1: detected capacity change from 0 to 512 [ 33.745767][ T3512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.772432][ T3512] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.16: corrupted xattr entries [ 33.785710][ T3512] EXT4-fs (loop1): Remounting filesystem read-only [ 33.792254][ T3512] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.805289][ T3512] EXT4-fs (loop1): 1 truncate cleaned up [ 33.811608][ T3512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.897494][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.001751][ T3532] hub 2-0:1.0: USB hub found [ 34.007634][ T3532] hub 2-0:1.0: 8 ports detected [ 34.072703][ T3532] loop4: detected capacity change from 0 to 512 [ 34.081782][ T3532] EXT4-fs: Ignoring removed nobh option [ 34.099623][ T3532] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.22: corrupted inode contents [ 34.112009][ T3532] EXT4-fs (loop4): Remounting filesystem read-only [ 34.119783][ T3532] EXT4-fs (loop4): 1 truncate cleaned up [ 34.126235][ C1] hrtimer: interrupt took 30644 ns [ 34.127052][ T3532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.146039][ T3532] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.158239][ T1012] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.159889][ T3532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.169079][ T1012] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.192785][ T1012] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 34.265094][ T3547] loop1: detected capacity change from 0 to 512 [ 34.295840][ T3547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.321318][ T3547] EXT4-fs (loop1): 1 truncate cleaned up [ 34.339653][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.339903][ T3551] loop0: detected capacity change from 0 to 512 [ 34.363544][ T3551] EXT4-fs: Ignoring removed nobh option [ 34.373421][ T3549] loop2: detected capacity change from 0 to 2048 [ 34.401565][ T3007] udevd[3007]: worker [3306] terminated by signal 33 (Unknown signal 33) [ 34.412228][ T3309] loop2: p1 < > p4 < > [ 34.412933][ T3551] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.29: corrupted inode contents [ 34.429213][ T3551] EXT4-fs (loop0): Remounting filesystem read-only [ 34.436711][ T3551] EXT4-fs (loop0): 1 truncate cleaned up [ 34.439701][ T3007] udevd[3007]: worker [3306] failed while handling '/devices/virtual/block/loop0' [ 34.443935][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.465532][ T2669] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.466791][ T3549] loop2: p1 < > p4 < > [ 34.476529][ T2669] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.481505][ T3551] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.506232][ T3551] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.518745][ T2669] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 34.540368][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.571674][ T3007] udevd[3007]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 34.607532][ T3559] loop1: detected capacity change from 0 to 2048 [ 34.614157][ T3007] udevd[3007]: worker [3309] failed while handling '/devices/virtual/block/loop2' [ 34.696646][ T3007] loop1: p1 < > p4 < > [ 34.711332][ T3007] loop1: p1 < > p4 < > [ 34.722911][ T3559] loop1: p1 < > p4 < > [ 34.761402][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.819669][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.918160][ T3586] vhci_hcd: invalid port number 96 [ 34.924117][ T3586] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 34.933632][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.958361][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.968615][ T3580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 35.017361][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 35.017680][ T3590] SELinux: failed to load policy [ 35.026286][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 35.051582][ T3580] team0: Port device team_slave_0 removed [ 35.119081][ T3592] hub 2-0:1.0: USB hub found [ 35.124250][ T3592] hub 2-0:1.0: 8 ports detected [ 35.142017][ T3592] loop1: detected capacity change from 0 to 512 [ 35.152833][ T3592] EXT4-fs: Ignoring removed nobh option [ 35.186699][ T3592] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.39: corrupted inode contents [ 35.199544][ T3592] EXT4-fs (loop1): Remounting filesystem read-only [ 35.208478][ T3592] EXT4-fs (loop1): 1 truncate cleaned up [ 35.215878][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.229002][ T3592] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.236333][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.250705][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.269631][ T3592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.279882][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.379167][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 35.387269][ T3603] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 35.389367][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 35.435468][ T3608] loop1: detected capacity change from 0 to 512 [ 35.442663][ T3608] EXT4-fs: Ignoring removed nobh option [ 35.464890][ T3608] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.44: corrupted inode contents [ 35.477846][ T3608] EXT4-fs (loop1): Remounting filesystem read-only [ 35.486917][ T3608] EXT4-fs (loop1): 1 truncate cleaned up [ 35.494754][ T3608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.504120][ T1413] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.508803][ T3608] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.519576][ T1413] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.561922][ T3608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.572457][ T1413] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.651590][ T3616] hub 2-0:1.0: USB hub found [ 35.669031][ T3616] hub 2-0:1.0: 8 ports detected [ 35.724439][ T3616] loop2: detected capacity change from 0 to 512 [ 35.731175][ T3616] EXT4-fs: Ignoring removed nobh option [ 35.749589][ T3007] udevd[3007]: worker [3570] terminated by signal 33 (Unknown signal 33) [ 35.759602][ T3007] udevd[3007]: worker [3570] failed while handling '/devices/virtual/block/loop2' [ 35.781527][ T3616] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.46: corrupted inode contents [ 35.796106][ T3616] EXT4-fs (loop2): Remounting filesystem read-only [ 35.803390][ T3616] EXT4-fs (loop2): 1 truncate cleaned up [ 35.810100][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.822932][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.833615][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.846374][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.858091][ T3616] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.869814][ T3616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.986759][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 35.995685][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 36.020605][ T3631] SELinux: failed to load policy [ 36.087600][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 36.096552][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 36.211137][ T3648] loop2: detected capacity change from 0 to 256 [ 36.448894][ T3618] syz.4.47 (3618) used greatest stack depth: 11032 bytes left [ 36.520628][ T3661] openvswitch: netlink: Message has 6 unknown bytes. [ 36.897908][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 36.897922][ T29] audit: type=1326 audit(1747176540.924:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0a21b0e969 code=0x7ffc0000 [ 36.944580][ T3682] loop2: detected capacity change from 0 to 2048 [ 36.946451][ T29] audit: type=1326 audit(1747176540.944:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 36.982409][ T29] audit: type=1326 audit(1747176540.944:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.011776][ T29] audit: type=1326 audit(1747176540.944:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.038906][ T29] audit: type=1326 audit(1747176540.944:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.068885][ T29] audit: type=1326 audit(1747176540.944:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.095916][ T29] audit: type=1326 audit(1747176540.944:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.119925][ T29] audit: type=1326 audit(1747176540.954:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.144353][ T29] audit: type=1326 audit(1747176540.954:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.168159][ T29] audit: type=1326 audit(1747176540.954:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 37.258555][ T3682] loop2: p1 < > p4 < > [ 37.689695][ T3708] hub 2-0:1.0: USB hub found [ 37.696912][ T3708] hub 2-0:1.0: 8 ports detected [ 37.770921][ T3709] loop3: detected capacity change from 0 to 512 [ 37.804289][ T3709] EXT4-fs: Ignoring removed nobh option [ 37.827845][ T3709] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.72: corrupted inode contents [ 37.842070][ T3711] loop0: detected capacity change from 0 to 2048 [ 37.856703][ T3709] EXT4-fs (loop3): Remounting filesystem read-only [ 37.867599][ T3709] EXT4-fs (loop3): 1 truncate cleaned up [ 37.876062][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.892424][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.892745][ T3709] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.910364][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.935747][ T3711] loop0: p1 < > p4 < > [ 37.940656][ T3709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.952560][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 37.975816][ T3007] loop0: p1 < > p4 < > [ 38.227973][ T3723] hub 2-0:1.0: USB hub found [ 38.233139][ T3723] hub 2-0:1.0: 8 ports detected [ 38.278095][ T3723] loop0: detected capacity change from 0 to 512 [ 38.491200][ T3725] loop3: detected capacity change from 0 to 512 [ 38.512146][ T3723] EXT4-fs: Ignoring removed nobh option [ 38.538096][ T3725] EXT4-fs: Ignoring removed nobh option [ 38.570765][ T3723] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.76: corrupted inode contents [ 38.610488][ T3725] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.78: corrupted inode contents [ 38.637990][ T3728] __nla_validate_parse: 10 callbacks suppressed [ 38.638078][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 38.654147][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 38.667484][ T3723] EXT4-fs (loop0): Remounting filesystem read-only [ 38.674699][ T3725] EXT4-fs (loop3): Remounting filesystem read-only [ 38.682929][ T3723] EXT4-fs (loop0): 1 truncate cleaned up [ 38.691229][ T3725] EXT4-fs (loop3): 1 truncate cleaned up [ 38.701691][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.713906][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.736146][ T3723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.762998][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.779231][ T3723] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.795484][ T3725] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.810964][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 38.827433][ T3723] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.837794][ T3725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.849195][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.860107][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.873519][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.261611][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 39.270603][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 39.396365][ T3757] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 39.406286][ T3747] hub 2-0:1.0: USB hub found [ 39.411994][ T3747] hub 2-0:1.0: 8 ports detected [ 39.435572][ T3747] loop2: detected capacity change from 0 to 512 [ 39.445337][ T3747] EXT4-fs: Ignoring removed nobh option [ 39.451900][ T3759] loop1: detected capacity change from 0 to 128 [ 39.460269][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 39.460315][ T3759] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.535613][ T3759] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.539220][ T3747] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.83: corrupted inode contents [ 39.563671][ T3747] EXT4-fs (loop2): Remounting filesystem read-only [ 39.573625][ T3747] EXT4-fs (loop2): 1 truncate cleaned up [ 39.577039][ T3765] xt_ipcomp: unknown flags 12 [ 39.581825][ T3747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.602247][ T3747] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.605435][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.626495][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.644440][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.656469][ T3747] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.695203][ T3759] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 39.746865][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.817384][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 39.821699][ T3773] hub 2-0:1.0: USB hub found [ 39.829793][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 39.843110][ T3775] hsr0: entered promiscuous mode [ 39.848045][ T3773] hub 2-0:1.0: 8 ports detected [ 39.881381][ T3773] loop1: detected capacity change from 0 to 512 [ 39.894826][ T3773] EXT4-fs: Ignoring removed nobh option [ 39.921156][ T3773] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.91: corrupted inode contents [ 39.947460][ T3773] EXT4-fs (loop1): Remounting filesystem read-only [ 39.957725][ T3773] EXT4-fs (loop1): 1 truncate cleaned up [ 39.964313][ T3773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.977456][ T3773] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.989191][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.000243][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.012094][ T3773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.017625][ T3783] netlink: 3 bytes leftover after parsing attributes in process `syz.2.93'. [ 40.023090][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.068658][ T3783] batadv1: entered allmulticast mode [ 40.141306][ T3787] hub 2-0:1.0: USB hub found [ 40.146533][ T3787] hub 2-0:1.0: 8 ports detected [ 40.175032][ T3787] loop0: detected capacity change from 0 to 512 [ 40.183398][ T3787] EXT4-fs: Ignoring removed nobh option [ 40.228160][ T3787] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.95: corrupted inode contents [ 40.246221][ T3787] EXT4-fs (loop0): Remounting filesystem read-only [ 40.262950][ T3787] EXT4-fs (loop0): 1 truncate cleaned up [ 40.270960][ T3787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.284764][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.296185][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.302810][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 40.316573][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 40.319503][ T3803] mmap: syz.2.98 (3803) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.328330][ T3787] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.347007][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.367932][ T3787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.459274][ T3807] SELinux: failed to load policy [ 40.480416][ T3809] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 40.551129][ T3811] hub 2-0:1.0: USB hub found [ 40.555973][ T3811] hub 2-0:1.0: 8 ports detected [ 40.563470][ T3809] syz.0.101 (3809) used greatest stack depth: 10856 bytes left [ 40.588955][ T3811] loop4: detected capacity change from 0 to 512 [ 40.599326][ T3811] EXT4-fs: Ignoring removed nobh option [ 40.607953][ T3811] /dev/loop4: Can't open blockdev [ 40.634293][ T3815] 9pnet_fd: Insufficient options for proto=fd [ 40.699377][ T3821] hub 2-0:1.0: USB hub found [ 40.706017][ T3821] hub 2-0:1.0: 8 ports detected [ 40.721211][ T3819] hub 2-0:1.0: USB hub found [ 40.729100][ T3819] hub 2-0:1.0: 8 ports detected [ 40.733456][ T3823] loop0: detected capacity change from 0 to 2048 [ 40.742103][ T3821] loop3: detected capacity change from 0 to 512 [ 40.755217][ T3821] EXT4-fs: Ignoring removed nobh option [ 40.776928][ T3821] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.107: corrupted inode contents [ 40.789907][ T3821] EXT4-fs (loop3): Remounting filesystem read-only [ 40.797912][ T3523] loop0: p1 < > p4 < > [ 40.803451][ T3821] EXT4-fs (loop3): 1 truncate cleaned up [ 40.815121][ T1413] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.826712][ T1413] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.843932][ T3823] loop0: p1 < > p4 < > [ 40.845187][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.862706][ T3821] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.876251][ T1413] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.877296][ T3821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.988585][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.052217][ T3832] hub 2-0:1.0: USB hub found [ 41.088232][ T3832] hub 2-0:1.0: 8 ports detected [ 41.129886][ T3838] loop3: detected capacity change from 0 to 512 [ 41.144308][ T3838] EXT4-fs: Ignoring removed nobh option [ 41.166474][ T3007] udevd[3007]: worker [3582] terminated by signal 33 (Unknown signal 33) [ 41.169371][ T3838] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.111: corrupted inode contents [ 41.186167][ T3007] udevd[3007]: worker [3582] failed while handling '/devices/virtual/block/loop3' [ 41.202552][ T3838] EXT4-fs (loop3): Remounting filesystem read-only [ 41.243836][ T3838] EXT4-fs (loop3): 1 truncate cleaned up [ 41.244788][ T3007] udevd[3007]: worker [3523] terminated by signal 33 (Unknown signal 33) [ 41.250237][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.265004][ T3850] loop1: detected capacity change from 0 to 512 [ 41.282620][ T3007] udevd[3007]: worker [3523] failed while handling '/devices/virtual/block/loop3' [ 41.288668][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.300469][ T3850] ======================================================= [ 41.300469][ T3850] WARNING: The mand mount option has been deprecated and [ 41.300469][ T3850] and is ignored by this kernel. Remove the mand [ 41.300469][ T3850] option from the mount to silence this warning. [ 41.300469][ T3850] ======================================================= [ 41.305218][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.323464][ T3007] udevd[3007]: worker [3585] terminated by signal 33 (Unknown signal 33) [ 41.357733][ T3838] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.367518][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.389574][ T3007] udevd[3007]: worker [3585] failed while handling '/devices/virtual/block/loop1' [ 41.408409][ T3850] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.423114][ T3850] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.116: bad orphan inode 13 [ 41.432171][ T3838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.435074][ T3850] ext4_test_bit(bit=12, block=18) = 1 [ 41.450317][ T3850] is_bad_inode(inode)=0 [ 41.454776][ T3850] NEXT_ORPHAN(inode)=2130706432 [ 41.454791][ T3850] max_ino=32 [ 41.454798][ T3850] i_nlink=1 [ 41.455373][ T3850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.508447][ T3850] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 41.542563][ T3850] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.116: bg 0: block 248: padding at end of block bitmap is not set [ 41.563277][ T3850] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.116: Failed to acquire dquot type 1 [ 41.596402][ T3850] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.659737][ T3866] hub 2-0:1.0: USB hub found [ 41.665547][ T3866] hub 2-0:1.0: 8 ports detected [ 41.680034][ T3866] loop3: detected capacity change from 0 to 512 [ 41.689070][ T3866] EXT4-fs: Ignoring removed nobh option [ 41.728854][ T3866] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.122: corrupted inode contents [ 41.753730][ T3866] EXT4-fs (loop3): Remounting filesystem read-only [ 41.764170][ T3866] EXT4-fs (loop3): 1 truncate cleaned up [ 41.770606][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.784252][ T3866] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.785290][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.809141][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.820997][ T3866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.845705][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.923867][ T29] kauditd_printk_skb: 711 callbacks suppressed [ 41.923885][ T29] audit: type=1326 audit(1747176545.944:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 41.957619][ T29] audit: type=1326 audit(1747176545.944:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 41.982751][ T29] audit: type=1326 audit(1747176545.944:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 42.009291][ T29] audit: type=1326 audit(1747176545.944:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 42.013338][ T3850] syz.1.116 (3850) used greatest stack depth: 9480 bytes left [ 42.034760][ T29] audit: type=1326 audit(1747176545.944:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 42.071182][ T29] audit: type=1326 audit(1747176545.944:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 42.103110][ T29] audit: type=1326 audit(1747176545.944:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 42.129243][ T29] audit: type=1326 audit(1747176545.944:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f38dcb9e969 code=0x7ffc0000 [ 42.159190][ T29] audit: type=1326 audit(1747176545.944:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38dcb9e9a3 code=0x7ffc0000 [ 42.184986][ T29] audit: type=1326 audit(1747176545.944:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38dcb9e9a3 code=0x7ffc0000 [ 42.217675][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.353463][ T3906] loop3: detected capacity change from 0 to 2048 [ 42.388081][ T3906] loop3: p1 < > p4 < > [ 42.441298][ T3912] openvswitch: netlink: Message has 6 unknown bytes. [ 42.548443][ T3918] loop4: detected capacity change from 0 to 2048 [ 42.570060][ T3920] hub 2-0:1.0: USB hub found [ 42.576899][ T3920] hub 2-0:1.0: 8 ports detected [ 42.593356][ T3920] loop1: detected capacity change from 0 to 512 [ 42.601627][ T3920] EXT4-fs: Ignoring removed nobh option [ 42.609432][ T3899] loop4: p1 < > p4 < > [ 42.632383][ T3918] loop4: p1 < > p4 < > [ 42.653628][ T3920] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.141: corrupted inode contents [ 42.673605][ T3920] EXT4-fs (loop1): Remounting filesystem read-only [ 42.681855][ T3920] EXT4-fs (loop1): 1 truncate cleaned up [ 42.690046][ T3920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.690141][ T3920] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.690604][ T3920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.690707][ T2669] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.690727][ T2669] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.690854][ T2669] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 42.768792][ T3931] vlan2: entered promiscuous mode [ 42.768853][ T3931] vlan2: entered allmulticast mode [ 42.768865][ T3931] hsr_slave_1: entered allmulticast mode [ 42.901780][ T3899] udevd[3899]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.969998][ T3935] hub 2-0:1.0: USB hub found [ 42.970129][ T3935] hub 2-0:1.0: 8 ports detected [ 42.995406][ T3935] loop2: detected capacity change from 0 to 512 [ 43.027307][ T3935] EXT4-fs: Ignoring removed nobh option [ 43.062016][ T3945] openvswitch: netlink: Message has 6 unknown bytes. [ 43.078158][ T3943] hub 2-0:1.0: USB hub found [ 43.084108][ T3947] loop1: detected capacity change from 0 to 2048 [ 43.094595][ T3943] hub 2-0:1.0: 8 ports detected [ 43.098005][ T3935] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.146: corrupted inode contents [ 43.117418][ T3943] loop4: detected capacity change from 0 to 512 [ 43.122770][ T3935] EXT4-fs (loop2): Remounting filesystem read-only [ 43.124930][ T3943] EXT4-fs: Ignoring removed nobh option [ 43.141419][ T3935] EXT4-fs (loop2): 1 truncate cleaned up [ 43.149707][ T3935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.165213][ T3935] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.165760][ T1413] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.189109][ T1413] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.205752][ T1413] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.209930][ T3947] loop1: p1 < > p4 < > [ 43.218910][ T3935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.246339][ T3943] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.149: corrupted inode contents [ 43.283771][ T3943] EXT4-fs (loop4): Remounting filesystem read-only [ 43.292580][ T3943] EXT4-fs (loop4): 1 truncate cleaned up [ 43.302754][ T3943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.316938][ T3943] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.317244][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.344055][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.357145][ T3943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.396955][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.426293][ T3962] openvswitch: netlink: Message has 6 unknown bytes. [ 43.555131][ T3966] loop4: detected capacity change from 0 to 2048 [ 43.606115][ T3899] loop4: p1 < > p4 < > [ 43.618570][ T3966] loop4: p1 < > p4 < > [ 43.721649][ T3992] loop3: detected capacity change from 0 to 2048 [ 43.764611][ T3584] loop3: p1 < > p4 < > [ 43.773417][ T3992] loop3: p1 < > p4 < > [ 43.795251][ T3995] hub 2-0:1.0: USB hub found [ 43.809864][ T3995] hub 2-0:1.0: 8 ports detected [ 43.842566][ T3995] loop4: detected capacity change from 0 to 512 [ 43.863236][ T3995] EXT4-fs: Ignoring removed nobh option [ 43.893608][ T3995] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.168: corrupted inode contents [ 43.906303][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 43.936673][ T3995] EXT4-fs (loop4): Remounting filesystem read-only [ 43.946464][ T3995] EXT4-fs (loop4): 1 truncate cleaned up [ 43.959673][ T3999] loop3: detected capacity change from 0 to 128 [ 43.959922][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.984647][ T3995] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.994064][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.998092][ T3995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.008683][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.018153][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.106726][ T3999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.161545][ T4008] __nla_validate_parse: 12 callbacks suppressed [ 44.161565][ T4008] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.173'. [ 44.180735][ T4008] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.173'. [ 44.270534][ T4012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.409638][ T4023] hub 2-0:1.0: USB hub found [ 44.415185][ T23] IPVS: starting estimator thread 0... [ 44.416939][ T4023] hub 2-0:1.0: 8 ports detected [ 44.436729][ T4024] loop1: detected capacity change from 0 to 764 [ 44.443462][ T4023] loop3: detected capacity change from 0 to 512 [ 44.464636][ T4023] EXT4-fs: Ignoring removed nobh option [ 44.479193][ T4024] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 44.513913][ T4025] IPVS: using max 1968 ests per chain, 98400 per kthread [ 44.527116][ T4023] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.180: corrupted inode contents [ 44.562243][ T4023] EXT4-fs (loop3): Remounting filesystem read-only [ 44.584508][ T4023] EXT4-fs (loop3): 1 truncate cleaned up [ 44.591279][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.606068][ T4023] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.607452][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.630364][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.643473][ T4023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.645932][ T4030] openvswitch: netlink: Message has 6 unknown bytes. [ 44.691818][ T4040] hub 2-0:1.0: USB hub found [ 44.692630][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.697352][ T4040] hub 2-0:1.0: 8 ports detected [ 44.745883][ T4040] loop1: detected capacity change from 0 to 512 [ 44.753279][ T4040] EXT4-fs: Ignoring removed nobh option [ 44.776167][ T4040] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.186: corrupted inode contents [ 44.789743][ T4040] EXT4-fs (loop1): Remounting filesystem read-only [ 44.799145][ T4040] EXT4-fs (loop1): 1 truncate cleaned up [ 44.806124][ T4040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.821138][ T4046] 9pnet_fd: Insufficient options for proto=fd [ 44.827894][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.839242][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.856334][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 44.875256][ T4040] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.886508][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.903485][ T4040] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.957035][ T4061] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.193'. [ 44.977001][ T4062] loop4: detected capacity change from 0 to 2048 [ 44.984679][ T4061] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.193'. [ 45.048310][ T4062] loop4: p1 < > p4 < > [ 45.071260][ T4071] FAULT_INJECTION: forcing a failure. [ 45.071260][ T4071] name failslab, interval 1, probability 0, space 0, times 1 [ 45.085563][ T4071] CPU: 0 UID: 0 PID: 4071 Comm: syz.3.199 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 45.085601][ T4071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.085618][ T4071] Call Trace: [ 45.085626][ T4071] [ 45.085709][ T4071] __dump_stack+0x1d/0x30 [ 45.085734][ T4071] dump_stack_lvl+0xe8/0x140 [ 45.085758][ T4071] dump_stack+0x15/0x1b [ 45.085778][ T4071] should_fail_ex+0x265/0x280 [ 45.085877][ T4071] ? alloc_async+0x2d/0x90 [ 45.085897][ T4071] should_failslab+0x8c/0xb0 [ 45.085970][ T4071] __kmalloc_cache_noprof+0x4c/0x320 [ 45.086003][ T4071] alloc_async+0x2d/0x90 [ 45.086026][ T4071] proc_do_submiturb+0x76e/0x1db0 [ 45.086095][ T4071] ? should_fail_ex+0xdb/0x280 [ 45.086388][ T4071] proc_submiturb+0x7b/0xa0 [ 45.086433][ T4071] usbdev_ioctl+0xcc2/0x1710 [ 45.086463][ T4071] ? __pfx_usbdev_ioctl+0x10/0x10 [ 45.086571][ T4071] __se_sys_ioctl+0xcb/0x140 [ 45.086598][ T4071] __x64_sys_ioctl+0x43/0x50 [ 45.086652][ T4071] x64_sys_call+0x19a8/0x2fb0 [ 45.086750][ T4071] do_syscall_64+0xd0/0x1a0 [ 45.086773][ T4071] ? clear_bhb_loop+0x40/0x90 [ 45.086798][ T4071] ? clear_bhb_loop+0x40/0x90 [ 45.086824][ T4071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.086891][ T4071] RIP: 0033:0x7faf642be969 [ 45.086922][ T4071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.086939][ T4071] RSP: 002b:00007faf62927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.086961][ T4071] RAX: ffffffffffffffda RBX: 00007faf644e5fa0 RCX: 00007faf642be969 [ 45.086973][ T4071] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000007 [ 45.086991][ T4071] RBP: 00007faf62927090 R08: 0000000000000000 R09: 0000000000000000 [ 45.087005][ T4071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.087020][ T4071] R13: 0000000000000000 R14: 00007faf644e5fa0 R15: 00007ffe67474478 [ 45.087096][ T4071] [ 45.368657][ T4080] 9pnet_fd: Insufficient options for proto=fd [ 45.410879][ T4082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 45.419886][ T4082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 45.443865][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 45.469853][ T3899] udevd[3899]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 45.554131][ T4091] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.208'. [ 45.565903][ T4091] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.208'. [ 45.633485][ T4100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.682847][ T4107] 9pnet_fd: Insufficient options for proto=fd [ 45.889768][ T4121] loop4: detected capacity change from 0 to 2048 [ 45.992215][ T4050] loop4: p1 < > p4 < > [ 46.002928][ T4121] loop4: p1 < > p4 < > [ 46.085233][ T4135] 9pnet_fd: Insufficient options for proto=fd [ 46.150068][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.208375][ T4142] hub 2-0:1.0: USB hub found [ 46.213557][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.232368][ T4142] hub 2-0:1.0: 8 ports detected [ 46.267610][ T4140] loop3: detected capacity change from 0 to 512 [ 46.281271][ T4140] EXT4-fs: Ignoring removed nobh option [ 46.291946][ T4142] loop0: detected capacity change from 0 to 512 [ 46.297536][ T4140] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.226: corrupted inode contents [ 46.312990][ T4142] EXT4-fs: Ignoring removed nobh option [ 46.328686][ T4140] EXT4-fs (loop3): Remounting filesystem read-only [ 46.336222][ T4140] EXT4-fs (loop3): 1 truncate cleaned up [ 46.347905][ T4140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.349751][ T4142] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.227: corrupted inode contents [ 46.361811][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.385882][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.402020][ T4142] EXT4-fs (loop0): Remounting filesystem read-only [ 46.430070][ T4142] EXT4-fs (loop0): 1 truncate cleaned up [ 46.439710][ T4140] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.458222][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.482405][ T4140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.507336][ T4142] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.521521][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.525557][ T4160] hub 2-0:1.0: USB hub found [ 46.536447][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.537333][ T4160] hub 2-0:1.0: 8 ports detected [ 46.547596][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.566344][ T4142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.575920][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.577063][ T4160] loop4: detected capacity change from 0 to 512 [ 46.599564][ T4160] EXT4-fs: Ignoring removed nobh option [ 46.662126][ T4160] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.232: corrupted inode contents [ 46.717562][ T4160] EXT4-fs (loop4): Remounting filesystem read-only [ 46.754670][ T4172] 9pnet_fd: Insufficient options for proto=fd [ 46.756839][ T4160] EXT4-fs (loop4): 1 truncate cleaned up [ 46.761724][ T4170] hub 2-0:1.0: USB hub found [ 46.767858][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.785312][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.786248][ T4160] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.797212][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.823762][ T4160] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.833899][ T4170] hub 2-0:1.0: 8 ports detected [ 46.856584][ T4170] loop1: detected capacity change from 0 to 512 [ 46.863344][ T4170] EXT4-fs: Ignoring removed nobh option [ 46.883337][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.886719][ T4178] FAULT_INJECTION: forcing a failure. [ 46.886719][ T4178] name failslab, interval 1, probability 0, space 0, times 0 [ 46.906858][ T4178] CPU: 0 UID: 0 PID: 4178 Comm: syz.3.239 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 46.906968][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.906981][ T4178] Call Trace: [ 46.906988][ T4178] [ 46.906996][ T4178] __dump_stack+0x1d/0x30 [ 46.907017][ T4178] dump_stack_lvl+0xe8/0x140 [ 46.907037][ T4178] dump_stack+0x15/0x1b [ 46.907179][ T4178] should_fail_ex+0x265/0x280 [ 46.907213][ T4178] should_failslab+0x8c/0xb0 [ 46.907251][ T4178] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 46.907272][ T4178] ? debugfs_alloc_inode+0x34/0x40 [ 46.907348][ T4178] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 46.907370][ T4178] debugfs_alloc_inode+0x34/0x40 [ 46.907417][ T4178] alloc_inode+0x40/0x170 [ 46.907444][ T4178] new_inode+0x1d/0xe0 [ 46.907471][ T4178] __debugfs_create_file+0x109/0x330 [ 46.907494][ T4178] debugfs_create_file_full+0x3f/0x60 [ 46.907516][ T4178] do_blk_trace_setup+0x2d9/0x4e0 [ 46.907626][ T4178] blk_trace_setup+0xa5/0x140 [ 46.907656][ T4178] ? __pfx_blkdev_ioctl+0x10/0x10 [ 46.907675][ T4178] blk_trace_ioctl+0xf5/0x300 [ 46.907710][ T4178] ? do_vfs_ioctl+0x993/0x15b0 [ 46.907745][ T4178] ? selinux_file_ioctl+0x2e3/0x370 [ 46.907776][ T4178] ? __pfx_blkdev_ioctl+0x10/0x10 [ 46.907794][ T4178] blkdev_ioctl+0x25b/0x440 [ 46.907813][ T4178] __se_sys_ioctl+0xcb/0x140 [ 46.907868][ T4178] __x64_sys_ioctl+0x43/0x50 [ 46.907961][ T4178] x64_sys_call+0x19a8/0x2fb0 [ 46.908027][ T4178] do_syscall_64+0xd0/0x1a0 [ 46.908103][ T4178] ? clear_bhb_loop+0x40/0x90 [ 46.908124][ T4178] ? clear_bhb_loop+0x40/0x90 [ 46.908146][ T4178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.908208][ T4178] RIP: 0033:0x7faf642be969 [ 46.908223][ T4178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.908320][ T4178] RSP: 002b:00007faf62927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.908415][ T4178] RAX: ffffffffffffffda RBX: 00007faf644e5fa0 RCX: 00007faf642be969 [ 46.908428][ T4178] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 46.908440][ T4178] RBP: 00007faf62927090 R08: 0000000000000000 R09: 0000000000000000 [ 46.908451][ T4178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.908463][ T4178] R13: 0000000000000000 R14: 00007faf644e5fa0 R15: 00007ffe67474478 [ 46.908482][ T4178] [ 46.908568][ T4178] debugfs: out of free dentries, can not create file 'dropped' [ 46.908932][ T4176] loop0: detected capacity change from 0 to 2048 [ 47.185464][ T29] kauditd_printk_skb: 742 callbacks suppressed [ 47.185481][ T29] audit: type=1326 audit(1747176551.204:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a21b0d5ca code=0x7ffc0000 [ 47.200445][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.236: corrupted inode contents [ 47.217982][ T29] audit: type=1326 audit(1747176551.204:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a21b0e56b code=0x7ffc0000 [ 47.231312][ T4170] EXT4-fs (loop1): Remounting filesystem read-only [ 47.255434][ T29] audit: type=1326 audit(1747176551.204:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a21b0e56b code=0x7ffc0000 [ 47.262191][ T4170] EXT4-fs (loop1): 1 truncate cleaned up [ 47.287588][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.292161][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.302988][ T12] Quota error (device loop1): write_blk: dquota write failed [ 47.320026][ T4170] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.329657][ T12] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 47.354589][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.359001][ T4170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.367894][ T12] Quota error (device loop1): write_blk: dquota write failed [ 47.367914][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 47.369087][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.411069][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 47.431176][ T4050] loop0: p1 < > p4 < > [ 47.434628][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 47.460904][ T4176] loop0: p1 < > p4 < > [ 47.475447][ T29] audit: type=1326 audit(1747176551.494:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f0a21b0d17a code=0x7ffc0000 [ 47.486017][ T3007] loop0: p1 < > p4 < > [ 47.565111][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.643285][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.662461][ T4187] hub 2-0:1.0: USB hub found [ 47.668414][ T4187] hub 2-0:1.0: 8 ports detected [ 47.704528][ T4187] loop2: detected capacity change from 0 to 512 [ 47.723461][ T4187] EXT4-fs: Ignoring removed nobh option [ 47.778020][ T4187] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.244: corrupted inode contents [ 47.801659][ T4187] EXT4-fs (loop2): Remounting filesystem read-only [ 47.811653][ T4187] EXT4-fs (loop2): 1 truncate cleaned up [ 47.827590][ T1012] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.839789][ T1012] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.859023][ T4187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.891962][ T1012] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.903199][ T4187] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.917557][ T4187] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.981877][ T4220] openvswitch: netlink: Message has 6 unknown bytes. [ 48.049088][ T4224] 9pnet_fd: Insufficient options for proto=fd [ 48.107233][ T4226] hub 2-0:1.0: USB hub found [ 48.122929][ T4226] hub 2-0:1.0: 8 ports detected [ 48.170426][ T4226] loop4: detected capacity change from 0 to 512 [ 48.205277][ T4226] EXT4-fs: Ignoring removed nobh option [ 48.277145][ T4226] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.256: corrupted inode contents [ 48.331468][ T4226] EXT4-fs (loop4): Remounting filesystem read-only [ 48.370622][ T4226] EXT4-fs (loop4): 1 truncate cleaned up [ 48.384437][ T1012] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.395140][ T1012] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.417471][ T4226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.450489][ T4226] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.461332][ T1012] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.489510][ T4226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.599934][ T4244] loop4: detected capacity change from 0 to 128 [ 48.622256][ T4248] loop2: detected capacity change from 0 to 512 [ 48.631284][ T4248] EXT4-fs: Ignoring removed nobh option [ 48.656375][ T4248] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.266: corrupted inode contents [ 48.679170][ T4248] EXT4-fs (loop2): Remounting filesystem read-only [ 48.687431][ T4248] EXT4-fs (loop2): 1 truncate cleaned up [ 48.695846][ T4248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.708881][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.720013][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.783560][ T4244] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.795259][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.810550][ T4248] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.824585][ T4248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.835170][ T4244] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.131720][ T4259] loop1: detected capacity change from 0 to 512 [ 49.202632][ T4259] EXT4-fs: Ignoring removed nobh option [ 49.274260][ T4244] __nla_validate_parse: 8 callbacks suppressed [ 49.274280][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 49.320318][ T4259] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.267: corrupted inode contents [ 49.335335][ T4259] EXT4-fs (loop1): Remounting filesystem read-only [ 49.342292][ T4259] EXT4-fs (loop1): 1 truncate cleaned up [ 49.348796][ T4259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.361970][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.363147][ T4259] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.372754][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.395229][ T4259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.407881][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.493010][ T4269] loop3: detected capacity change from 0 to 256 [ 49.520083][ T4271] xt_hashlimit: max too large, truncated to 1048576 [ 49.570573][ T4271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 49.594465][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.612215][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.635456][ T4269] netlink: 256 bytes leftover after parsing attributes in process `syz.3.270'. [ 49.651040][ T4278] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 49.671635][ T4271] bridge_slave_0 (unregistering): left allmulticast mode [ 49.679155][ T4271] bridge_slave_0 (unregistering): left promiscuous mode [ 49.686821][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.725147][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 49.734562][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 50.032758][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 50.041671][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 50.083382][ T4298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.281'. [ 50.194724][ T4307] 9pnet_fd: Insufficient options for proto=fd [ 50.255978][ T4305] loop0: detected capacity change from 0 to 2048 [ 50.368877][ T3584] loop0: p1 < > p4 < > [ 50.397889][ T4305] loop0: p1 < > p4 < > [ 50.451576][ T4318] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.288'. [ 50.494709][ T4314] loop3: detected capacity change from 0 to 2048 [ 50.498264][ T4318] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.288'. [ 50.583473][ T4314] loop3: p1 < > p4 < > [ 50.605145][ T3007] loop3: p1 < > p4 < > [ 50.615570][ T4320] hub 2-0:1.0: USB hub found [ 50.639831][ T4320] hub 2-0:1.0: 8 ports detected [ 50.652534][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.675430][ T4320] loop2: detected capacity change from 0 to 512 [ 50.682512][ T4320] EXT4-fs: Ignoring removed nobh option [ 50.724580][ T4326] hub 2-0:1.0: USB hub found [ 50.740695][ T4326] hub 2-0:1.0: 8 ports detected [ 50.750256][ T4320] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.289: corrupted inode contents [ 50.758935][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 50.779022][ T4320] EXT4-fs (loop2): Remounting filesystem read-only [ 50.788622][ T4320] EXT4-fs (loop2): 1 truncate cleaned up [ 50.795152][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.807927][ T4320] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.809561][ T4332] loop0: detected capacity change from 0 to 512 [ 50.824849][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.835589][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.853048][ T4320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.865664][ T4332] EXT4-fs: Ignoring removed nobh option [ 50.872389][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.922034][ T4332] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.292: corrupted inode contents [ 50.939470][ T4342] 9pnet_fd: Insufficient options for proto=fd [ 50.988229][ T4332] EXT4-fs (loop0): Remounting filesystem read-only [ 51.005455][ T4351] FAULT_INJECTION: forcing a failure. [ 51.005455][ T4351] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.014011][ T4332] EXT4-fs (loop0): 1 truncate cleaned up [ 51.019841][ T4351] CPU: 0 UID: 0 PID: 4351 Comm: syz.1.301 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 51.019884][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.019900][ T4351] Call Trace: [ 51.019910][ T4351] [ 51.019921][ T4351] __dump_stack+0x1d/0x30 [ 51.019948][ T4351] dump_stack_lvl+0xe8/0x140 [ 51.020018][ T4351] dump_stack+0x15/0x1b [ 51.020039][ T4351] should_fail_ex+0x265/0x280 [ 51.020075][ T4351] should_fail+0xb/0x20 [ 51.020106][ T4351] should_fail_usercopy+0x1a/0x20 [ 51.020181][ T4351] _copy_from_iter+0xcf/0xdd0 [ 51.020246][ T4351] ? __build_skb_around+0x1a0/0x200 [ 51.020290][ T4351] ? __alloc_skb+0x223/0x320 [ 51.020333][ T4351] netlink_sendmsg+0x471/0x6b0 [ 51.020363][ T4351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.020465][ T4351] __sock_sendmsg+0x142/0x180 [ 51.020502][ T4351] ____sys_sendmsg+0x31e/0x4e0 [ 51.020533][ T4351] ___sys_sendmsg+0x17b/0x1d0 [ 51.020580][ T4351] __x64_sys_sendmsg+0xd4/0x160 [ 51.020649][ T4351] x64_sys_call+0x2999/0x2fb0 [ 51.020677][ T4351] do_syscall_64+0xd0/0x1a0 [ 51.020707][ T4351] ? clear_bhb_loop+0x40/0x90 [ 51.020776][ T4351] ? clear_bhb_loop+0x40/0x90 [ 51.020804][ T4351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.020840][ T4351] RIP: 0033:0x7efc6e2ce969 [ 51.020861][ T4351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.020937][ T4351] RSP: 002b:00007efc6c937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.020962][ T4351] RAX: ffffffffffffffda RBX: 00007efc6e4f5fa0 RCX: 00007efc6e2ce969 [ 51.020978][ T4351] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 51.020994][ T4351] RBP: 00007efc6c937090 R08: 0000000000000000 R09: 0000000000000000 [ 51.021009][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.021025][ T4351] R13: 0000000000000000 R14: 00007efc6e4f5fa0 R15: 00007ffd4bd783b8 [ 51.021050][ T4351] [ 51.038376][ T1012] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.113968][ T4355] hub 2-0:1.0: USB hub found [ 51.118278][ T1012] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.123290][ T4355] hub 2-0:1.0: 8 ports detected [ 51.138831][ T4332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.153687][ T4355] loop2: detected capacity change from 0 to 512 [ 51.194535][ T4332] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.265323][ T4353] netlink: 'syz.4.302': attribute type 4 has an invalid length. [ 51.293266][ T1012] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.311095][ T4355] EXT4-fs: Ignoring removed nobh option [ 51.322037][ T4332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.337828][ T4355] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.303: corrupted inode contents [ 51.352728][ T4355] EXT4-fs (loop2): Remounting filesystem read-only [ 51.366288][ T4355] EXT4-fs (loop2): 1 truncate cleaned up [ 51.373051][ T4355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.387102][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.398408][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.417731][ T4355] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.431649][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.445039][ T4355] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.638450][ T4376] loop2: detected capacity change from 0 to 2048 [ 51.704292][ T4050] loop2: p1 < > p4 < > [ 51.712813][ T4376] loop2: p1 < > p4 < > [ 51.828179][ T4395] vhci_hcd: invalid port number 96 [ 51.833843][ T4395] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 51.901628][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.928012][ T4399] hub 2-0:1.0: USB hub found [ 51.964419][ T4399] hub 2-0:1.0: 8 ports detected [ 51.990738][ T4399] loop1: detected capacity change from 0 to 512 [ 52.004519][ T4390] team0: Port device team_slave_0 removed [ 52.013302][ T4402] hub 2-0:1.0: USB hub found [ 52.017292][ T4399] EXT4-fs: Ignoring removed nobh option [ 52.027539][ T4402] hub 2-0:1.0: 8 ports detected [ 52.068955][ T4399] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.318: corrupted inode contents [ 52.085403][ T4402] loop2: detected capacity change from 0 to 512 [ 52.096443][ T4402] EXT4-fs: Ignoring removed nobh option [ 52.103651][ T4399] EXT4-fs (loop1): Remounting filesystem read-only [ 52.111270][ T4399] EXT4-fs (loop1): 1 truncate cleaned up [ 52.120057][ T4399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.134746][ T4399] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.134924][ T2669] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.159119][ T2669] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.177832][ T4399] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.188535][ T2669] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.199755][ T2669] __quota_error: 388 callbacks suppressed [ 52.199768][ T2669] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 52.227254][ T2669] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.243023][ T4402] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.319: corrupted inode contents [ 52.304661][ T4402] EXT4-fs (loop2): Remounting filesystem read-only [ 52.312204][ T4402] EXT4-fs (loop2): 1 truncate cleaned up [ 52.324976][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.340372][ T31] Quota error (device loop2): write_blk: dquota write failed [ 52.350433][ T31] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 52.356821][ T4402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.361254][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.376429][ T4402] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.386206][ T31] Quota error (device loop2): write_blk: dquota write failed [ 52.400856][ T4402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.407551][ T31] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 52.479288][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.490562][ T31] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 52.502438][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.537980][ T29] audit: type=1400 audit(1747176556.554:2794): avc: denied { setopt } for pid=4426 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.562233][ T29] audit: type=1400 audit(1747176556.554:2795): avc: denied { bind } for pid=4426 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.691867][ T4437] loop1: detected capacity change from 0 to 512 [ 52.708894][ T4437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.730460][ T4437] EXT4-fs (loop1): 1 truncate cleaned up [ 52.752198][ T4437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.798856][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.853204][ T4451] 9pnet_fd: Insufficient options for proto=fd [ 52.884192][ T4449] openvswitch: netlink: Message has 6 unknown bytes. [ 52.947684][ T4458] hub 2-0:1.0: USB hub found [ 52.952669][ T4458] hub 2-0:1.0: 8 ports detected [ 52.979235][ T4458] loop2: detected capacity change from 0 to 512 [ 53.013287][ T4458] EXT4-fs: Ignoring removed nobh option [ 53.041695][ T4467] loop0: detected capacity change from 0 to 512 [ 53.063875][ T4467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.102844][ T4467] EXT4-fs (loop0): 1 truncate cleaned up [ 53.116454][ T4458] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.341: corrupted inode contents [ 53.148628][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.184890][ T4458] EXT4-fs (loop2): Remounting filesystem read-only [ 53.208720][ T4458] EXT4-fs (loop2): 1 truncate cleaned up [ 53.224669][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.235659][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.244306][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.267819][ T4458] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.279792][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.348924][ T4484] FAULT_INJECTION: forcing a failure. [ 53.348924][ T4484] name failslab, interval 1, probability 0, space 0, times 0 [ 53.362173][ T4484] CPU: 0 UID: 0 PID: 4484 Comm: syz.0.350 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 53.362209][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 53.362225][ T4484] Call Trace: [ 53.362233][ T4484] [ 53.362242][ T4484] __dump_stack+0x1d/0x30 [ 53.362284][ T4484] dump_stack_lvl+0xe8/0x140 [ 53.362358][ T4484] dump_stack+0x15/0x1b [ 53.362382][ T4484] should_fail_ex+0x265/0x280 [ 53.362422][ T4484] should_failslab+0x8c/0xb0 [ 53.362485][ T4484] __kvmalloc_node_noprof+0x126/0x4d0 [ 53.362591][ T4484] ? alloc_fdtable+0xa5/0x1b0 [ 53.362618][ T4484] ? __kmalloc_cache_noprof+0x22e/0x320 [ 53.362647][ T4484] alloc_fdtable+0xa5/0x1b0 [ 53.362702][ T4484] dup_fd+0x4c7/0x540 [ 53.362734][ T4484] ksys_unshare+0x346/0x6d0 [ 53.362769][ T4484] ? ksys_write+0x16e/0x1a0 [ 53.362797][ T4484] __x64_sys_unshare+0x1f/0x30 [ 53.362859][ T4484] x64_sys_call+0x2d4b/0x2fb0 [ 53.362886][ T4484] do_syscall_64+0xd0/0x1a0 [ 53.362926][ T4484] ? clear_bhb_loop+0x40/0x90 [ 53.362954][ T4484] ? clear_bhb_loop+0x40/0x90 [ 53.362984][ T4484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.363019][ T4484] RIP: 0033:0x7f0a21b0e969 [ 53.363039][ T4484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.363126][ T4484] RSP: 002b:00007f0a20177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 53.363151][ T4484] RAX: ffffffffffffffda RBX: 00007f0a21d35fa0 RCX: 00007f0a21b0e969 [ 53.363167][ T4484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 53.363184][ T4484] RBP: 00007f0a20177090 R08: 0000000000000000 R09: 0000000000000000 [ 53.363199][ T4484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.363218][ T4484] R13: 0000000000000000 R14: 00007f0a21d35fa0 R15: 00007ffe77194a88 [ 53.363244][ T4484] [ 53.596959][ T4488] 9pnet_fd: Insufficient options for proto=fd [ 53.711443][ T4504] loop3: detected capacity change from 0 to 512 [ 53.718665][ T4502] loop2: detected capacity change from 0 to 2048 [ 53.725291][ T4504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.736314][ T4504] EXT4-fs (loop3): 1 truncate cleaned up [ 53.754278][ T3899] loop2: p1 < > p4 < > [ 53.782482][ T4502] loop2: p1 < > p4 < > [ 53.854256][ T4510] hub 2-0:1.0: USB hub found [ 53.872105][ T4514] capability: warning: `syz.1.364' uses deprecated v2 capabilities in a way that may be insecure [ 53.876453][ T4510] hub 2-0:1.0: 8 ports detected [ 53.910065][ T4510] loop4: detected capacity change from 0 to 512 [ 53.936862][ T4510] EXT4-fs: Ignoring removed nobh option [ 53.953197][ T4050] udevd[4050]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 53.988935][ T4525] 9pnet_fd: Insufficient options for proto=fd [ 54.004102][ T4510] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.363: corrupted inode contents [ 54.050981][ T4510] EXT4-fs (loop4): Remounting filesystem read-only [ 54.103642][ T4510] EXT4-fs (loop4): 1 truncate cleaned up [ 54.116233][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.116539][ T4510] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.127611][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.180735][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.361762][ T4539] loop1: detected capacity change from 0 to 512 [ 54.455695][ T4544] __nla_validate_parse: 31 callbacks suppressed [ 54.455716][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 54.471570][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 54.486032][ T4539] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.529851][ T4539] EXT4-fs (loop1): 1 truncate cleaned up [ 54.711973][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 54.747086][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 54.756434][ T4561] FAULT_INJECTION: forcing a failure. [ 54.756434][ T4561] name failslab, interval 1, probability 0, space 0, times 0 [ 54.769595][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.1.379 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 54.769625][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.769690][ T4561] Call Trace: [ 54.769697][ T4561] [ 54.769705][ T4561] __dump_stack+0x1d/0x30 [ 54.769733][ T4561] dump_stack_lvl+0xe8/0x140 [ 54.769817][ T4561] dump_stack+0x15/0x1b [ 54.769833][ T4561] should_fail_ex+0x265/0x280 [ 54.769869][ T4561] should_failslab+0x8c/0xb0 [ 54.769906][ T4561] __kmalloc_cache_node_noprof+0x54/0x320 [ 54.769963][ T4561] ? __get_vm_area_node+0x106/0x1d0 [ 54.770057][ T4561] __get_vm_area_node+0x106/0x1d0 [ 54.770085][ T4561] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 54.770133][ T4561] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.770177][ T4561] ? avc_has_perm_noaudit+0x1b1/0x200 [ 54.770213][ T4561] ? selinux_capable+0x1f9/0x270 [ 54.770237][ T4561] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.770273][ T4561] __vmalloc_noprof+0x5f/0x70 [ 54.770357][ T4561] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.770453][ T4561] bpf_prog_alloc_no_stats+0x47/0x390 [ 54.770485][ T4561] ? bpf_prog_alloc+0x2a/0x150 [ 54.770512][ T4561] bpf_prog_alloc+0x3c/0x150 [ 54.770540][ T4561] bpf_prog_load+0x514/0x1070 [ 54.770648][ T4561] ? security_bpf+0x2b/0x90 [ 54.770682][ T4561] __sys_bpf+0x51d/0x790 [ 54.770778][ T4561] __x64_sys_bpf+0x41/0x50 [ 54.770814][ T4561] x64_sys_call+0x2478/0x2fb0 [ 54.770843][ T4561] do_syscall_64+0xd0/0x1a0 [ 54.770872][ T4561] ? clear_bhb_loop+0x40/0x90 [ 54.770946][ T4561] ? clear_bhb_loop+0x40/0x90 [ 54.770983][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.771007][ T4561] RIP: 0033:0x7efc6e2ce969 [ 54.771024][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.771079][ T4561] RSP: 002b:00007efc6c937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.771097][ T4561] RAX: ffffffffffffffda RBX: 00007efc6e4f5fa0 RCX: 00007efc6e2ce969 [ 54.771110][ T4561] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 54.771125][ T4561] RBP: 00007efc6c937090 R08: 0000000000000000 R09: 0000000000000000 [ 54.771136][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.771147][ T4561] R13: 0000000000000000 R14: 00007efc6e4f5fa0 R15: 00007ffd4bd783b8 [ 54.771225][ T4561] [ 54.771235][ T4561] syz.1.379: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 54.894453][ T4557] hub 2-0:1.0: USB hub found [ 54.896231][ T4561] ,cpuset= [ 54.909428][ T4557] hub 2-0:1.0: 8 ports detected [ 54.910199][ T4561] /,mems_allowed=0 [ 54.939097][ T4557] loop0: detected capacity change from 0 to 512 [ 54.945516][ T4561] [ 54.945533][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.1.379 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 54.945627][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.945644][ T4561] Call Trace: [ 54.945653][ T4561] [ 54.945665][ T4561] __dump_stack+0x1d/0x30 [ 54.945693][ T4561] dump_stack_lvl+0xe8/0x140 [ 54.945755][ T4561] dump_stack+0x15/0x1b [ 54.945832][ T4561] warn_alloc+0x12b/0x1a0 [ 54.945870][ T4561] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 54.945911][ T4561] ? avc_has_perm_noaudit+0x1b1/0x200 [ 54.945939][ T4561] ? selinux_capable+0x1f9/0x270 [ 54.946016][ T4561] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.946052][ T4561] __vmalloc_noprof+0x5f/0x70 [ 54.946118][ T4561] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.946156][ T4561] bpf_prog_alloc_no_stats+0x47/0x390 [ 54.946329][ T4561] ? bpf_prog_alloc+0x2a/0x150 [ 54.946387][ T4561] bpf_prog_alloc+0x3c/0x150 [ 54.946423][ T4561] bpf_prog_load+0x514/0x1070 [ 54.946473][ T4561] ? security_bpf+0x2b/0x90 [ 54.946552][ T4561] __sys_bpf+0x51d/0x790 [ 54.946664][ T4561] __x64_sys_bpf+0x41/0x50 [ 54.946755][ T4561] x64_sys_call+0x2478/0x2fb0 [ 54.946783][ T4561] do_syscall_64+0xd0/0x1a0 [ 54.946819][ T4561] ? clear_bhb_loop+0x40/0x90 [ 54.946877][ T4561] ? clear_bhb_loop+0x40/0x90 [ 54.946905][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.946932][ T4561] RIP: 0033:0x7efc6e2ce969 [ 54.946953][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.946976][ T4561] RSP: 002b:00007efc6c937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.947001][ T4561] RAX: ffffffffffffffda RBX: 00007efc6e4f5fa0 RCX: 00007efc6e2ce969 [ 54.947052][ T4561] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 54.947076][ T4561] RBP: 00007efc6c937090 R08: 0000000000000000 R09: 0000000000000000 [ 54.947108][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.947123][ T4561] R13: 0000000000000000 R14: 00007efc6e4f5fa0 R15: 00007ffd4bd783b8 [ 54.947147][ T4561] [ 54.947236][ T4561] Mem-Info: [ 54.959793][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 54.972960][ T4561] active_anon:8917 inactive_anon:0 isolated_anon:0 [ 54.972960][ T4561] active_file:6125 inactive_file:2197 isolated_file:0 [ 54.972960][ T4561] unevictable:0 dirty:483 writeback:0 [ 54.972960][ T4561] slab_reclaimable:2966 slab_unreclaimable:13848 [ 54.972960][ T4561] mapped:32233 shmem:3109 pagetables:1051 [ 54.972960][ T4561] sec_pagetables:0 bounce:0 [ 54.972960][ T4561] kernel_misc_reclaimable:0 [ 54.972960][ T4561] free:1905681 free_pcp:1392 free_cma:0 [ 54.982341][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 54.992488][ T4561] Node 0 active_anon:35668kB inactive_anon:0kB active_file:24500kB inactive_file:8788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128932kB dirty:1932kB writeback:0kB shmem:12436kB writeback_tmp:0kB kernel_stack:2912kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 55.005181][ T4557] EXT4-fs: Ignoring removed nobh option [ 55.009828][ T4561] Node 0 [ 55.048674][ T4563] openvswitch: netlink: Message has 6 unknown bytes. [ 55.049983][ T4561] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.078664][ T4557] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.381: corrupted inode contents [ 55.084061][ T4561] lowmem_reserve[]: 0 [ 55.095528][ T4557] EXT4-fs (loop0): Remounting filesystem read-only [ 55.098356][ T4561] 2884 7863 7863 [ 55.098386][ T4561] Node 0 [ 55.101814][ T4557] EXT4-fs (loop0): 1 truncate cleaned up [ 55.105665][ T4561] DMA32 free:2949932kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 55.112455][ T4557] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.114886][ T4561] lowmem_reserve[]: 0 0 4978 4978 [ 55.518150][ T4561] Node 0 Normal free:4657200kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:35784kB inactive_anon:0kB active_file:24500kB inactive_file:8788kB unevictable:0kB writepending:1932kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:2032kB local_pcp:444kB free_cma:0kB [ 55.549089][ T4561] lowmem_reserve[]: 0 0 0 0 [ 55.553863][ T4561] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.567403][ T4561] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949932kB [ 55.584717][ T4561] Node 0 Normal: 280*4kB (UME) 170*8kB (UME) 111*16kB (UM) 60*32kB (UME) 47*64kB (UME) 68*128kB (UME) 56*256kB (UME) [ 55.585001][ T2996] ================================================================== [ 55.585047][ T2996] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 55.599037][ T4561] 35*512kB [ 55.608332][ T2996] [ 55.608348][ T2996] write to 0xffffffff86877d10 of 8 bytes by task 4561 on cpu 0: [ 55.608367][ T2996] prb_reserve_in_last+0x861/0xb80 [ 55.616463][ T4561] (UME) [ 55.619597][ T2996] vprintk_store+0x494/0x860 [ 55.619628][ T2996] vprintk_emit+0x178/0x650 [ 55.619648][ T2996] vprintk_default+0x26/0x30 [ 55.619669][ T2996] vprintk+0x1d/0x30 [ 55.619692][ T2996] _printk+0x79/0xa0 [ 55.619722][ T2996] __show_mem+0x1132/0x14e0 [ 55.619758][ T2996] warn_alloc+0x189/0x1a0 [ 55.622290][ T4561] 29*1024kB [ 55.631173][ T2996] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 55.631219][ T2996] __vmalloc_noprof+0x5f/0x70 [ 55.636823][ T4561] (UME) [ 55.640684][ T2996] bpf_prog_alloc_no_stats+0x47/0x390 [ 55.645683][ T4561] 21*2048kB [ 55.650223][ T2996] bpf_prog_alloc+0x3c/0x150 [ 55.655072][ T4561] (UM) [ 55.659372][ T2996] bpf_prog_load+0x514/0x1070 [ 55.663568][ T4561] 1107*4096kB [ 55.668782][ T2996] __sys_bpf+0x51d/0x790 [ 55.668826][ T2996] __x64_sys_bpf+0x41/0x50 [ 55.668855][ T2996] x64_sys_call+0x2478/0x2fb0 [ 55.668878][ T2996] do_syscall_64+0xd0/0x1a0 [ 55.673385][ T4561] (UME) [ 55.676896][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.676932][ T2996] [ 55.676939][ T2996] read to 0xffffffff86877d08 of 16 bytes by task 2996 on cpu 1: [ 55.682918][ T4561] = 4657120kB [ 55.688327][ T2996] _prb_read_valid+0x1bc/0x920 [ 55.688373][ T2996] prb_read_valid+0x3c/0x60 [ 55.692083][ T4561] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 55.698232][ T2996] syslog_print+0x146/0x540 [ 55.698261][ T2996] do_syslog+0x52b/0x7e0 [ 55.698280][ T2996] __x64_sys_syslog+0x41/0x50 [ 55.701598][ T4561] 11435 total pagecache pages [ 55.707426][ T2996] x64_sys_call+0x2ea0/0x2fb0 [ 55.711010][ T4561] 0 pages in swap cache [ 55.711022][ T4561] Free swap = 124992kB [ 55.716226][ T2996] do_syscall_64+0xd0/0x1a0 [ 55.716262][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.716285][ T2996] [ 55.716289][ T2996] Reported by Kernel Concurrency Sanitizer on: [ 55.716300][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: klogd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 55.720477][ T4561] Total swap = 124996kB [ 55.720491][ T4561] 2097051 pages RAM [ 55.720497][ T4561] 0 pages HighMem/MovableOnly [ 55.720520][ T4561] 80259 pages reserved [ 55.879957][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.891485][ T2996] ================================================================== [ 55.968594][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.981146][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.993940][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started