last executing test programs: 3.183429062s ago: executing program 3 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r2, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000002010400000000000000000a00fffc04000180040003803c0002800c00028005000100880000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aad268e4a88c338ea41c284b"], 0x58}}, 0x0) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 2.361491829s ago: executing program 2 (id=138): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 2.256038187s ago: executing program 3 (id=140): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYRES32=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r8, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r10, @ANYRESDEC], 0x27) socket$inet_udp(0x2, 0x2, 0x0) 1.798834995s ago: executing program 2 (id=144): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xc000) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (fail_nth: 1) 1.73811812s ago: executing program 4 (id=145): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) 1.389967568s ago: executing program 2 (id=146): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x256, 0xcb, 0x1, 0x888}, {0x10, 0x9, 0x56, 0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) getpeername$packet(r4, 0x0, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.388834958s ago: executing program 4 (id=147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000380)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000030"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.335865892s ago: executing program 2 (id=148): io_setup(0x7e, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) openat$sndseq(0xffffffffffffff9c, 0x0, 0x218000) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r1, &(0x7f0000001980)=[{&(0x7f0000000340)=""/59, 0xff8e}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) brk(0x20001000) 1.190582124s ago: executing program 0 (id=149): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000001400000002"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x48010) 1.180756395s ago: executing program 2 (id=150): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x40}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 1.155375137s ago: executing program 4 (id=151): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x40}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") 1.154553857s ago: executing program 0 (id=152): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x40}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r5, &(0x7f0000000040)='\x00', 0x2, 0x1200) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$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") socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kcmp(0xffffffffffffffff, 0x0, 0x3, r2, r9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 906.122627ms ago: executing program 1 (id=153): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', '', [{}, {0x20, '(\'('}], 0xa, "c2"}, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="c9e2975d3ef5bdd59dd159e5011b2455375f26bbcf0a4f1fcd8f027c87d5207a4e0c0081f180f68db9777c968341ac5c73acacc44c726286e944353f73bba241a8315a9d0fe5e26a1b565fff89b6046e8ffadc3c6b0af0c2fc1e4e2fef6ceba4553402562f6899433b236ed8daa32a30387cd554b00c6b98bf22518143e68cbf0f1b70931867a98225b949f598a1cc044fac4e6de4b1ce0926fe1c94b98002bcf45e4b004e30fc136c962002c13e263043", @ANYBLOB="b1a79d986ec7b4338181e9378fd3acf13de1a63eed6384d13c8802d87430f1eb2f79d8294847d67154cb199d3b9eb230b4fd", @ANYRES16=r1, @ANYBLOB="cfe037acb9af5ec1a8d78cde8b0b3623ea0ef8cd178c5b104cc9ddf06009745447646c61b9e4c5aab1d96d0ab1287ce40ff1873c854bdbc4afd423d95a50256ef2c684e065c50448eb64c39f6506d1b5883a4a39c8f1acbc", @ANYRES8, @ANYRES16, @ANYRESDEC], 0x0, 0x16, 0x0, 0x0, 0x0, 0x9, '\x00', r3, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047459, &(0x7f0000001200)) (async) getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 829.294823ms ago: executing program 3 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 828.533153ms ago: executing program 4 (id=155): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1c, 0x1}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='nv\x00', 0x3) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1f, 0x0, 0x0, 0x2000, 0x4}, 0x50) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4080) 822.621134ms ago: executing program 2 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x3bf) syslog(0x3, &(0x7f0000000780)=""/209, 0xd1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x541b, &(0x7f00000000c0)={0x29, "18a637633a81f2520ba32077b0a3827a1b90190a41be85379e474e9d1f3be152e9b3b713e55eb4c7f3257387c2e180e4b7186ee60fa74aca85307807b4d30dcbc96295d962c2f87a65a2b15636c07c1a1f71408da2352cc02c27d40a62d641b5cbc8e37468270250a2a443bb7468222c97d93f4b03972981301e066712f1ea92"}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbfe, {0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xa0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="660a00000000000061116b000000000085000000020000009500000000000000f3fb6004cbff15f40b0d5d52586a5c9c61054ec59b7548c64b9eeea5ecebb8a6214cc14a68c4085544f69a632d3e2a50c91c17ec0281875d19f68c73d877da2bb83d31c8ba658728be54f62b83c9c07d82ac5e66d6bd6ea274f00522b9f6ef5bb0ba7b794ec2b19fddd7195593b5123bc187763c4a9707a4597bb8fcb2c55ad44943eb1d94f1af91"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03316844268cb89914f088a8", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x17}, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000140a0102000000000000000b0000000000000073797a3100000000140085330411010000000000040000000200000a00"], 0x48}, 0x1, 0x0, 0x0, 0x9090}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r10, 0x40305829, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setpriority(0x3, 0x0, 0xfffffffd) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x10, 0x4, 0x1, 0x2, 0x3ff, 0x67, 0x2, 0x5e, 0x88, 0x101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0xc, [@broadcast, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101]}, @rr={0x7, 0xf, 0x25, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}]}}}}}}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001500)={r9, 0x9, 0x1, [0xabf, 0x4, 0x0, 0x1, 0x3], [0x5, 0x8ea, 0xffffffffffffff7f, 0x2b, 0x634f, 0x0, 0xfffffffffffffff7, 0x81, 0xe00000000, 0xf58, 0x6, 0xa, 0x95a, 0x6, 0x3, 0x7, 0x7, 0x6, 0x10, 0x4, 0x2, 0x3, 0x8, 0x4, 0x1, 0x200, 0xfa1d, 0x8, 0x0, 0x3, 0x9, 0x6, 0xce, 0x9, 0x8000, 0x5, 0x4, 0x2, 0x1, 0x3, 0x81, 0x1, 0x100, 0x2, 0x14d5f9b9, 0x3, 0xaf68, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x8, 0x3, 0x0, 0x37874425, 0x7, 0x8, 0xddd3, 0x10, 0xffffffffffffffb5, 0x100000001, 0x6, 0x2, 0x3, 0x2, 0x9, 0x3, 0x7, 0x9, 0x3, 0x2, 0x2, 0x8001, 0x40, 0x6, 0xf7e00000000, 0x9, 0x1717, 0xfffffffffffffff8, 0x81, 0x1, 0x1ff, 0x0, 0x0, 0x1ff, 0xb, 0x1, 0x0, 0xfffffffffffffffa, 0x9, 0x18, 0x3, 0x2, 0x3, 0x0, 0x6, 0x5, 0x2, 0x100000000, 0x21, 0xae, 0x3, 0x3, 0xdc, 0x7, 0x0, 0x8, 0x5, 0x6, 0x1, 0x2b5, 0x1, 0x9, 0x9, 0x8, 0x8, 0x3, 0x400, 0xcc04]}) 724.898612ms ago: executing program 3 (id=157): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x2200000, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'syzkaller\x00'}}, {@subj_role={'subj_role', 0x3d, ')['}}, {@subj_role={'subj_role', 0x3d, 'kfree\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x1, 0x538, &(0x7f0000000600)="$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") r2 = openat(r1, &(0x7f0000000440)='./file0\x00', 0x142, 0x2e) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18) r7 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r8, 0x0, r7, 0x0, 0x0) unlink(0x0) sendfile(r5, r4, 0x0, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r9}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 690.160504ms ago: executing program 1 (id=158): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) 682.613835ms ago: executing program 4 (id=159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x256, 0xcb, 0x1, 0x888}, {0x10, 0x9, 0x56, 0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) getpeername$packet(r4, 0x0, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 670.867336ms ago: executing program 1 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xff71, 0x14, 0x1, 0x8, 0x0, {0xa}, [@typed={0x0, 0x86, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x0, 0x2, 0x0, 0x0, @uid=r1}, @typed={0x0, 0x5c, 0x0, 0x0, @ipv4=@empty}, @typed={0x0, 0xf0, 0x0, 0x0, @binary="71838ee699a6dc8afbf88ae3297f63a6ac066047de0b88f15899af7da7849720a50ef0cdc829b1c0a8f096a9b9436b0ed8210a3f748a851bc706e9b964e4d1b6739b743f5c5ce78b8000baa4d8443679df08ae7e71626d37933ff2b565616c0d9a95dd132fcfa41b89d8407fed77e566646e1bec51903a945b4062ac93fe3997d2b3ca57bd8b1e911662563b26428ea574864352b0d21286d4595168ea20478501d0cca9a5"}]}, 0x14}}, 0x0) 621.52804ms ago: executing program 0 (id=161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="1100000042000106"], 0x18}], 0x1}, 0x0) 610.097581ms ago: executing program 4 (id=162): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x3}, 0x60) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000800)={0x9, {{0xa, 0x40, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1000}}}, 0x108) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRESHEX=r0], 0x6, 0x360, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) 513.533969ms ago: executing program 1 (id=163): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r4, 0x40}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r4}, &(0x7f0000000240)=0x8) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x24000420) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 472.634792ms ago: executing program 1 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 470.206002ms ago: executing program 0 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 1) 430.871335ms ago: executing program 3 (id=166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) fdatasync(r0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x11fb, 0x3, 0xaa}, 0x14) (rerun: 64) 342.332963ms ago: executing program 0 (id=167): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 342.027822ms ago: executing program 0 (id=168): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 167.143677ms ago: executing program 3 (id=169): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=170): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 33.945079][ T29] audit: type=1400 audit(1754197278.306:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.946297][ T3292] cgroup: Unknown subsys name 'net' [ 33.968602][ T29] audit: type=1400 audit(1754197278.306:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.996688][ T29] audit: type=1400 audit(1754197278.326:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.135214][ T3292] cgroup: Unknown subsys name 'cpuset' [ 34.141688][ T3292] cgroup: Unknown subsys name 'rlimit' [ 34.313577][ T29] audit: type=1400 audit(1754197278.666:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.337284][ T29] audit: type=1400 audit(1754197278.676:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.357789][ T29] audit: type=1400 audit(1754197278.676:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.376027][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.379425][ T29] audit: type=1400 audit(1754197278.676:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.408292][ T29] audit: type=1400 audit(1754197278.696:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.409792][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.433633][ T29] audit: type=1400 audit(1754197278.696:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.433661][ T29] audit: type=1400 audit(1754197278.746:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.784477][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.807828][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.818970][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.931962][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.939137][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.946424][ T3313] bridge_slave_0: entered allmulticast mode [ 35.952918][ T3313] bridge_slave_0: entered promiscuous mode [ 35.970134][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.979017][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.986834][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.994563][ T3313] bridge_slave_1: entered allmulticast mode [ 36.002831][ T3313] bridge_slave_1: entered promiscuous mode [ 36.014806][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.022016][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.029360][ T3312] bridge_slave_0: entered allmulticast mode [ 36.036198][ T3312] bridge_slave_0: entered promiscuous mode [ 36.048717][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.055853][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.063095][ T3301] bridge_slave_0: entered allmulticast mode [ 36.069848][ T3301] bridge_slave_0: entered promiscuous mode [ 36.078604][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.086213][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.093644][ T3301] bridge_slave_1: entered allmulticast mode [ 36.100272][ T3301] bridge_slave_1: entered promiscuous mode [ 36.116066][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.125528][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.132691][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.141211][ T3312] bridge_slave_1: entered allmulticast mode [ 36.147630][ T3312] bridge_slave_1: entered promiscuous mode [ 36.158066][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.185384][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.205173][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.238976][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.261845][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.272291][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.289829][ T3313] team0: Port device team_slave_0 added [ 36.314707][ T3313] team0: Port device team_slave_1 added [ 36.330714][ T3301] team0: Port device team_slave_0 added [ 36.337531][ T3301] team0: Port device team_slave_1 added [ 36.357286][ T3312] team0: Port device team_slave_0 added [ 36.368014][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.375244][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.383531][ T3303] bridge_slave_0: entered allmulticast mode [ 36.390258][ T3303] bridge_slave_0: entered promiscuous mode [ 36.407829][ T3312] team0: Port device team_slave_1 added [ 36.423710][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.430867][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.438398][ T3303] bridge_slave_1: entered allmulticast mode [ 36.444941][ T3303] bridge_slave_1: entered promiscuous mode [ 36.451451][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.458491][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.484458][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.495819][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.503633][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.529866][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.546131][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.553301][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.560848][ T3306] bridge_slave_0: entered allmulticast mode [ 36.567821][ T3306] bridge_slave_0: entered promiscuous mode [ 36.574628][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.581630][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.607759][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.634907][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.650584][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.657768][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.665041][ T3306] bridge_slave_1: entered allmulticast mode [ 36.671550][ T3306] bridge_slave_1: entered promiscuous mode [ 36.678220][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.685412][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.711941][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.733942][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.743745][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.750754][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.776834][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.820473][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.827916][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.854986][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.871303][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.883471][ T3313] hsr_slave_0: entered promiscuous mode [ 36.889661][ T3313] hsr_slave_1: entered promiscuous mode [ 36.905369][ T3301] hsr_slave_0: entered promiscuous mode [ 36.911562][ T3301] hsr_slave_1: entered promiscuous mode [ 36.917594][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 36.923602][ T3301] Cannot create hsr debugfs directory [ 36.935488][ T3303] team0: Port device team_slave_0 added [ 36.943039][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.965961][ T3303] team0: Port device team_slave_1 added [ 36.997066][ T3312] hsr_slave_0: entered promiscuous mode [ 37.003286][ T3312] hsr_slave_1: entered promiscuous mode [ 37.009514][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.015377][ T3312] Cannot create hsr debugfs directory [ 37.030964][ T3306] team0: Port device team_slave_0 added [ 37.037633][ T3306] team0: Port device team_slave_1 added [ 37.053411][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.060780][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.087809][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.113113][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.120138][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.146182][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.163801][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.171116][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.197375][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.225277][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.232374][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.258852][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.306194][ T3303] hsr_slave_0: entered promiscuous mode [ 37.312703][ T3303] hsr_slave_1: entered promiscuous mode [ 37.318815][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 37.324771][ T3303] Cannot create hsr debugfs directory [ 37.344076][ T3306] hsr_slave_0: entered promiscuous mode [ 37.350227][ T3306] hsr_slave_1: entered promiscuous mode [ 37.356373][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 37.362186][ T3306] Cannot create hsr debugfs directory [ 37.525636][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.534297][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.543725][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.555972][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.587026][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.599206][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.612491][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.629510][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.640128][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.649612][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.664048][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.682466][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.701977][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.711587][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.721724][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.730794][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.789317][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.799447][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.809066][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.825530][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.835887][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.869705][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.883557][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.897723][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.915401][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.926972][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.934129][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.945157][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.957731][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.967879][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.975086][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.983819][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.991409][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.008184][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.015678][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.034910][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.043826][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.051615][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.066892][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.074129][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.092122][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.099301][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.108907][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.116309][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.151650][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.226753][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.246058][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.260408][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.285702][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.296748][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.303882][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.321669][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.328859][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.346574][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.358226][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.388815][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.498960][ T3312] veth0_vlan: entered promiscuous mode [ 38.530981][ T3312] veth1_vlan: entered promiscuous mode [ 38.546867][ T3301] veth0_vlan: entered promiscuous mode [ 38.560884][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.577715][ T3301] veth1_vlan: entered promiscuous mode [ 38.602736][ T3301] veth0_macvtap: entered promiscuous mode [ 38.622810][ T3303] veth0_vlan: entered promiscuous mode [ 38.629283][ T3312] veth0_macvtap: entered promiscuous mode [ 38.647848][ T3303] veth1_vlan: entered promiscuous mode [ 38.654785][ T3301] veth1_macvtap: entered promiscuous mode [ 38.666174][ T3312] veth1_macvtap: entered promiscuous mode [ 38.701434][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.720324][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.729702][ T3313] veth0_vlan: entered promiscuous mode [ 38.737364][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.750503][ T3313] veth1_vlan: entered promiscuous mode [ 38.758861][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.776112][ T1654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.787421][ T3303] veth0_macvtap: entered promiscuous mode [ 38.798212][ T1654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814386][ T3303] veth1_macvtap: entered promiscuous mode [ 38.824092][ T1654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.840594][ T3313] veth0_macvtap: entered promiscuous mode [ 38.847890][ T3306] veth0_vlan: entered promiscuous mode [ 38.858783][ T1654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.868726][ T1654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.883412][ T3306] veth1_vlan: entered promiscuous mode [ 38.896915][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.905144][ T1654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.921204][ T3313] veth1_macvtap: entered promiscuous mode [ 38.928686][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.951162][ T3306] veth0_macvtap: entered promiscuous mode [ 38.960176][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.967498][ T1654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977443][ T1654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.993274][ T3306] veth1_macvtap: entered promiscuous mode [ 39.001866][ T341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.013460][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 39.013476][ T29] audit: type=1400 audit(1754197283.366:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.044320][ T29] audit: type=1400 audit(1754197283.366:91): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.049060][ T341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.092686][ T29] audit: type=1400 audit(1754197283.376:92): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.096536][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.119073][ T29] audit: type=1400 audit(1754197283.446:93): avc: denied { create } for pid=3471 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.129307][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.186133][ T341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.204955][ T341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.238890][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.251547][ T29] audit: type=1400 audit(1754197283.516:94): avc: denied { write } for pid=3471 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.251575][ T29] audit: type=1400 audit(1754197283.516:95): avc: denied { connect } for pid=3471 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.251598][ T29] audit: type=1400 audit(1754197283.516:96): avc: denied { name_connect } for pid=3471 comm="syz.2.3" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.251632][ T29] audit: type=1400 audit(1754197283.526:97): avc: denied { prog_load } for pid=3471 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.251726][ T29] audit: type=1400 audit(1754197283.526:98): avc: denied { bpf } for pid=3471 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.251750][ T29] audit: type=1400 audit(1754197283.526:99): avc: denied { create } for pid=3471 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.267670][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.276706][ T341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.280653][ T1725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.281030][ T1725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.281175][ T1654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.284320][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287594][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287680][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287720][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.306669][ T3476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.315726][ T3478] loop3: detected capacity change from 0 to 1024 [ 39.391948][ T3480] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 39.428331][ T3478] EXT4-fs: Ignoring removed orlov option [ 39.573965][ T3478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.593615][ T3484] lo speed is unknown, defaulting to 1000 [ 39.599964][ T3488] loop1: detected capacity change from 0 to 1024 [ 39.600880][ T3484] lo speed is unknown, defaulting to 1000 [ 39.612607][ T3484] lo speed is unknown, defaulting to 1000 [ 39.621551][ T3488] EXT4-fs: Ignoring removed orlov option [ 39.632075][ T3484] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.632297][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.657393][ T3484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.668298][ T3484] lo speed is unknown, defaulting to 1000 [ 39.677843][ T3484] lo speed is unknown, defaulting to 1000 [ 39.684304][ T3484] lo speed is unknown, defaulting to 1000 [ 39.701202][ T3484] lo speed is unknown, defaulting to 1000 [ 39.708955][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.721375][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.732192][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.743754][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.753119][ T3484] lo speed is unknown, defaulting to 1000 [ 39.759479][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.770540][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.781471][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.791474][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.792451][ T3484] syz.4.5 (3484) used greatest stack depth: 10712 bytes left [ 39.870183][ T3494] loop4: detected capacity change from 0 to 1024 [ 39.877672][ T3494] EXT4-fs: Ignoring removed orlov option [ 39.895437][ T3494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.027620][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6'. [ 40.118189][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.129871][ T3501] loop2: detected capacity change from 0 to 1024 [ 40.151639][ T3501] EXT4-fs: Ignoring removed orlov option [ 40.440484][ T3501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.086873][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.634828][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.661037][ T3509] loop4: detected capacity change from 0 to 1024 [ 41.665547][ T3507] loop0: detected capacity change from 0 to 1024 [ 41.668357][ T3509] EXT4-fs: Ignoring removed orlov option [ 41.674543][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.694885][ T3507] EXT4-fs: Ignoring removed orlov option [ 41.704794][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.732344][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.738070][ T3511] loop1: detected capacity change from 0 to 1024 [ 41.756382][ T3511] EXT4-fs: Ignoring removed orlov option [ 41.764682][ T3515] loop3: detected capacity change from 0 to 1024 [ 41.775206][ T3515] EXT4-fs: Ignoring removed orlov option [ 41.822609][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.861096][ T3511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.936170][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.178602][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.193400][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.217218][ T3538] loop4: detected capacity change from 0 to 1024 [ 43.252521][ T3538] EXT4-fs: Ignoring removed orlov option [ 43.405943][ T3538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.093331][ T3547] loop3: detected capacity change from 0 to 1024 [ 44.315751][ T3547] EXT4-fs: Ignoring removed orlov option [ 44.375429][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.540789][ T3549] __nla_validate_parse: 28 callbacks suppressed [ 44.540810][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 45.161418][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.567537][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.590399][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.602269][ T3553] loop2: detected capacity change from 0 to 1024 [ 45.612984][ T3553] EXT4-fs: Ignoring removed orlov option [ 45.621963][ T3553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.694784][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 45.760287][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'. [ 45.772512][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 45.785700][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 45.814472][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 45.823562][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 45.842714][ T3567] loop3: detected capacity change from 0 to 1024 [ 45.971768][ T3567] EXT4-fs: Ignoring removed orlov option [ 46.027687][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.281979][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 46.639913][ T3574] loop4: detected capacity change from 0 to 1024 [ 46.668318][ T3574] EXT4-fs: Ignoring removed orlov option [ 46.702207][ T3574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.727390][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.813372][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 46.842370][ T3578] loop2: detected capacity change from 0 to 1024 [ 46.859473][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 46.882463][ T3578] EXT4-fs: Ignoring removed orlov option [ 46.918850][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.981717][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.357727][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.407630][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.567169][ T3590] loop2: detected capacity change from 0 to 1024 [ 47.574449][ T3590] EXT4-fs: Ignoring removed orlov option [ 47.588610][ T3590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.611502][ T3589] loop3: detected capacity change from 0 to 1024 [ 47.622331][ T3589] EXT4-fs: Ignoring removed orlov option [ 47.632276][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.888864][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.918922][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 47.918942][ T29] audit: type=1326 audit(1754197292.276:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 47.950658][ T29] audit: type=1326 audit(1754197292.276:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 47.951164][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.973848][ T29] audit: type=1326 audit(1754197292.296:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 47.973950][ T29] audit: type=1326 audit(1754197292.296:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.029597][ T29] audit: type=1326 audit(1754197292.296:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.052895][ T29] audit: type=1326 audit(1754197292.296:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.076232][ T29] audit: type=1326 audit(1754197292.296:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.099447][ T29] audit: type=1326 audit(1754197292.296:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.110379][ T3602] loop3: detected capacity change from 0 to 1024 [ 48.122711][ T29] audit: type=1326 audit(1754197292.296:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.136384][ T3602] EXT4-fs: Ignoring removed orlov option [ 48.152940][ T29] audit: type=1326 audit(1754197292.296:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f431ceb69 code=0x7ffc0000 [ 48.153598][ T3603] siw: device registration error -23 [ 48.193845][ T3602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.404877][ T3611] loop0: detected capacity change from 0 to 1024 [ 48.411845][ T3611] EXT4-fs: Ignoring removed orlov option [ 48.431977][ T3611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.488629][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.539631][ T3616] loop4: detected capacity change from 0 to 1024 [ 48.546359][ T3620] loop3: detected capacity change from 0 to 1024 [ 48.549690][ T3616] EXT4-fs: Ignoring removed orlov option [ 48.554164][ T3620] EXT4-fs: Ignoring removed orlov option [ 48.569250][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.582544][ T3620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.892805][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.929465][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.952727][ T3626] loop4: detected capacity change from 0 to 1024 [ 48.963722][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.988949][ T3626] EXT4-fs: Ignoring removed orlov option [ 49.000847][ T3628] siw: device registration error -23 [ 49.009576][ T3626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.043451][ T3630] loop3: detected capacity change from 0 to 512 [ 49.070935][ T3630] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.40: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.094635][ T3630] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.40: Bad quota inode: 3, type: 0 [ 49.105795][ T3630] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.121159][ T3630] EXT4-fs (loop3): mount failed [ 49.340832][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.465916][ T3649] loop4: detected capacity change from 0 to 1024 [ 49.477398][ T3649] EXT4-fs: Ignoring removed orlov option [ 49.527971][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.528700][ T3656] __nla_validate_parse: 36 callbacks suppressed [ 50.528715][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 51.667763][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 51.968815][ T3665] loop2: detected capacity change from 0 to 1024 [ 51.991952][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 52.001603][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 52.013812][ T3665] EXT4-fs: Ignoring removed orlov option [ 52.070073][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.308980][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 52.413812][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 52.502135][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 52.741886][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.758142][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 53.238940][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 53.302647][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 53.952142][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.891562][ T3701] loop1: detected capacity change from 0 to 1024 [ 54.935261][ T3701] EXT4-fs: Ignoring removed orlov option [ 54.968411][ T3701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.111099][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.170574][ T3708] loop3: detected capacity change from 0 to 512 [ 55.196183][ T3708] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.60: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 55.240184][ T3708] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.60: Bad quota inode: 3, type: 0 [ 55.252249][ T3708] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.271590][ T3708] EXT4-fs (loop3): mount failed [ 55.695158][ T3714] __nla_validate_parse: 9 callbacks suppressed [ 55.695180][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 55.935385][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 56.577547][ T3720] loop2: detected capacity change from 0 to 1024 [ 56.608536][ T3720] EXT4-fs: Ignoring removed orlov option [ 56.646009][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.701926][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 56.701959][ T29] audit: type=1400 audit(1754197301.056:392): avc: denied { create } for pid=3725 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.731403][ T29] audit: type=1400 audit(1754197301.056:393): avc: denied { create } for pid=3723 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.751365][ T3726] loop4: detected capacity change from 0 to 512 [ 56.758395][ T3727] loop3: detected capacity change from 0 to 512 [ 56.765086][ T3726] ======================================================= [ 56.765086][ T3726] WARNING: The mand mount option has been deprecated and [ 56.765086][ T3726] and is ignored by this kernel. Remove the mand [ 56.765086][ T3726] option from the mount to silence this warning. [ 56.765086][ T3726] ======================================================= [ 56.777614][ T3727] EXT4-fs: Ignoring removed orlov option [ 56.809749][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.816422][ T3726] EXT4-fs: Ignoring removed orlov option [ 56.824890][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.839829][ T3727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.848835][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.870776][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.933706][ T3727] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.953519][ T3730] loop0: detected capacity change from 0 to 512 [ 56.969568][ T3727] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.65: bg 0: block 248: padding at end of block bitmap is not set [ 56.985035][ T3727] Quota error (device loop3): write_blk: dquota write failed [ 56.992450][ T3727] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 57.002423][ T3727] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.65: Failed to acquire dquot type 1 [ 57.016613][ T3727] EXT4-fs (loop3): 1 truncate cleaned up [ 57.024885][ T3726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.064071][ T3726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.109160][ T3730] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.66: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 57.159099][ T3726] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.64: bg 0: block 248: padding at end of block bitmap is not set [ 57.233674][ T3730] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.66: Bad quota inode: 3, type: 0 [ 57.257345][ T3726] Quota error (device loop4): write_blk: dquota write failed [ 57.265047][ T3726] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 57.275029][ T3726] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.64: Failed to acquire dquot type 1 [ 57.316775][ T3730] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.370438][ T3730] EXT4-fs (loop0): mount failed [ 57.398012][ T3726] EXT4-fs (loop4): 1 truncate cleaned up [ 57.818813][ T3727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.842387][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.900294][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.928102][ T3726] EXT4-fs: Ignoring removed orlov option [ 57.933948][ T3726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.943988][ T3726] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 57.954833][ T29] audit: type=1400 audit(1754197302.286:394): avc: denied { remount } for pid=3723 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.989134][ T3727] EXT4-fs: Ignoring removed orlov option [ 57.996067][ T3726] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.64: Abort forced by user [ 58.007997][ T3727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.018424][ T3726] EXT4-fs (loop4): Remounting filesystem read-only [ 58.025985][ T3726] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.038225][ T3726] ext4 filesystem being remounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.048749][ T3727] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 58.064606][ T3727] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.65: Abort forced by user [ 58.082181][ T3727] EXT4-fs (loop3): Remounting filesystem read-only [ 58.089117][ T3727] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.101838][ T3726] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 58.124441][ T3727] ext4 filesystem being remounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.149274][ T3726] syz.4.64 (3726) used greatest stack depth: 9552 bytes left [ 58.169186][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.181738][ T29] audit: type=1400 audit(1754197302.536:395): avc: denied { write } for pid=3725 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.202933][ T3727] siw: device registration error -23 [ 58.222278][ T3727] syz.3.65 (3727) used greatest stack depth: 9280 bytes left [ 58.231684][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.531469][ T3746] loop2: detected capacity change from 0 to 1024 [ 58.540538][ T3746] EXT4-fs: Ignoring removed orlov option [ 58.555500][ T3746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.678790][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 58.697446][ T3753] Zero length message leads to an empty skb [ 58.706955][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 58.717668][ T3745] loop1: detected capacity change from 0 to 512 [ 58.778867][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 58.827119][ T3745] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.70: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 58.851968][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 59.020452][ T3745] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.70: Bad quota inode: 3, type: 0 [ 59.135521][ T3745] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.172649][ T3745] EXT4-fs (loop1): mount failed [ 59.428925][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.768741][ T3770] loop1: detected capacity change from 0 to 512 [ 59.778118][ T3771] loop3: detected capacity change from 0 to 512 [ 59.791294][ T3771] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.803031][ T3770] EXT4-fs: Ignoring removed orlov option [ 59.832395][ T3771] ext4: Unknown parameter 'uid>00000000000000000000' [ 59.842541][ T3770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.877470][ T3770] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.899085][ T3770] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.74: bg 0: block 248: padding at end of block bitmap is not set [ 59.930692][ T3770] Quota error (device loop1): write_blk: dquota write failed [ 59.938221][ T3770] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 59.948680][ T3770] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.74: Failed to acquire dquot type 1 [ 59.972678][ T3770] EXT4-fs (loop1): 1 truncate cleaned up [ 59.980846][ T3770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.999025][ T3770] EXT4-fs: Ignoring removed orlov option [ 60.005195][ T3770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.013946][ T3770] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 60.030518][ T3771] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 60.045722][ T3770] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.74: Abort forced by user [ 60.055980][ T3770] EXT4-fs (loop1): Remounting filesystem read-only [ 60.062519][ T3770] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 60.072595][ T3770] ext4 filesystem being remounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.100532][ T3770] siw: device registration error -23 [ 60.118426][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.266831][ T3776] loop4: detected capacity change from 0 to 512 [ 60.286635][ T3776] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.350618][ T3776] EXT4-fs (loop4): mount failed [ 60.366443][ T3782] loop1: detected capacity change from 0 to 512 [ 60.385477][ T3782] EXT4-fs: Ignoring removed orlov option [ 60.402013][ T3782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.457385][ T3782] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.468451][ T3782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.75: bg 0: block 248: padding at end of block bitmap is not set [ 60.489390][ T3782] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.75: Failed to acquire dquot type 1 [ 60.501823][ T3789] loop4: detected capacity change from 0 to 512 [ 60.534994][ T3782] EXT4-fs (loop1): 1 truncate cleaned up [ 60.570900][ T3789] EXT4-fs: Ignoring removed orlov option [ 60.580760][ T3789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.599951][ T3789] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.713143][ T3789] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.79: bg 0: block 248: padding at end of block bitmap is not set [ 60.835996][ T3789] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.79: Failed to acquire dquot type 1 [ 60.863830][ T3796] loop3: detected capacity change from 0 to 512 [ 60.896516][ T3796] EXT4-fs: Ignoring removed orlov option [ 60.917533][ T3789] EXT4-fs (loop4): 1 truncate cleaned up [ 60.966253][ T3796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.063003][ T3796] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.093518][ T3796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.81: bg 0: block 248: padding at end of block bitmap is not set [ 61.350094][ T3796] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.81: Failed to acquire dquot type 1 [ 61.406459][ T3796] EXT4-fs (loop3): 1 truncate cleaned up [ 61.428477][ T3805] loop2: detected capacity change from 0 to 1024 [ 61.451618][ T3782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.477334][ T3805] EXT4-fs: Ignoring removed orlov option [ 61.510172][ T3805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.554257][ T3782] EXT4-fs: Ignoring removed orlov option [ 61.569106][ T3782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.599792][ T3782] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 61.625957][ T3782] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.75: Abort forced by user [ 61.649399][ T3782] EXT4-fs (loop1): Remounting filesystem read-only [ 61.656007][ T3782] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.718359][ T3782] ext4 filesystem being remounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.859760][ T3782] syz.1.75 (3782) used greatest stack depth: 9224 bytes left [ 61.888217][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 61.888234][ T29] audit: type=1400 audit(1754197306.246:409): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.920594][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.990686][ T29] audit: type=1400 audit(1754197306.346:410): avc: denied { open } for pid=3804 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.009901][ T29] audit: type=1400 audit(1754197306.346:411): avc: denied { kernel } for pid=3804 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.103937][ T29] audit: type=1400 audit(1754197306.396:412): avc: denied { tracepoint } for pid=3804 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.252797][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.268541][ T3789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.287992][ T3796] EXT4-fs: Ignoring removed orlov option [ 62.294056][ T3789] EXT4-fs: Ignoring removed orlov option [ 62.301166][ T3796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.309756][ T3789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.350451][ T3796] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 62.360247][ T3814] loop1: detected capacity change from 0 to 512 [ 62.361869][ T3789] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 62.372480][ T3814] EXT4-fs: Ignoring removed orlov option [ 62.383206][ T3814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.389031][ T3789] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.79: Abort forced by user [ 62.402041][ T3789] EXT4-fs (loop4): Remounting filesystem read-only [ 62.408659][ T3789] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 62.408874][ T3796] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.81: Abort forced by user [ 62.409174][ T3789] ext4 filesystem being remounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.424429][ T3796] EXT4-fs (loop3): Remounting filesystem read-only [ 62.424450][ T3796] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 62.424511][ T3796] ext4 filesystem being remounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.432005][ T3814] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.432738][ T3814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.86: bg 0: block 248: padding at end of block bitmap is not set [ 62.433066][ T3814] Quota error (device loop1): write_blk: dquota write failed [ 62.433085][ T3814] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 62.433107][ T3814] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.86: Failed to acquire dquot type 1 [ 62.433939][ T3814] EXT4-fs (loop1): 1 truncate cleaned up [ 62.445776][ T3817] __nla_validate_parse: 3 callbacks suppressed [ 62.445793][ T3817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 62.463593][ T3814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.477176][ T3796] siw: device registration error -23 [ 62.520617][ T3814] EXT4-fs: Ignoring removed orlov option [ 62.558887][ T3820] loop2: detected capacity change from 0 to 512 [ 62.572489][ T3814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.576052][ T3820] EXT4-fs: Ignoring removed orlov option [ 62.595116][ T3814] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 62.607961][ T3820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.625960][ T3814] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.86: Abort forced by user [ 62.636183][ T3820] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.636862][ T3814] EXT4-fs (loop1): Remounting filesystem read-only [ 62.649132][ T3814] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 62.657724][ T3825] loop4: detected capacity change from 0 to 1024 [ 62.659756][ T3820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.88: bg 0: block 248: padding at end of block bitmap is not set [ 62.664884][ T3825] EXT4-fs: Ignoring removed orlov option [ 62.684786][ T3814] ext4 filesystem being remounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.705717][ T3820] Quota error (device loop2): write_blk: dquota write failed [ 62.713204][ T3820] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 62.723327][ T3820] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.88: Failed to acquire dquot type 1 [ 62.740605][ T3820] EXT4-fs (loop2): 1 truncate cleaned up [ 62.748364][ T3828] loop3: detected capacity change from 0 to 1024 [ 62.757649][ T3828] EXT4-fs: Ignoring removed orlov option [ 62.771016][ T3814] siw: device registration error -23 [ 62.802198][ T3820] EXT4-fs: Ignoring removed orlov option [ 62.808204][ T3820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.816783][ T3820] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 62.836035][ T3820] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.88: Abort forced by user [ 62.851289][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 62.852065][ T3820] EXT4-fs (loop2): Remounting filesystem read-only [ 62.866711][ T3820] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 62.875528][ T3820] ext4 filesystem being remounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.886426][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 62.897370][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 62.913830][ T3820] siw: device registration error -23 [ 62.920317][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 62.938162][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 62.947033][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 62.960379][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 62.995209][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 63.006333][ T3838] loop2: detected capacity change from 0 to 1024 [ 63.008808][ T3835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 63.016099][ T3838] EXT4-fs: Ignoring removed orlov option [ 63.423395][ T3848] loop4: detected capacity change from 0 to 1024 [ 63.460002][ T3848] EXT4-fs: Ignoring removed orlov option [ 63.867920][ T3854] SELinux: Context Ü is not valid (left unmapped). [ 63.914163][ T3854] sctp: [Deprecated]: syz.1.97 (pid 3854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.914163][ T3854] Use struct sctp_sack_info instead [ 63.991376][ T29] audit: type=1400 audit(1754197308.346:413): avc: denied { create } for pid=3853 comm="syz.1.97" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 64.014744][ T29] audit: type=1400 audit(1754197308.346:414): avc: denied { associate } for pid=3853 comm="syz.1.97" name="hugetlb.2MB.usage_in_bytes" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 64.400641][ T3856] loop3: detected capacity change from 0 to 1024 [ 64.439724][ T3856] EXT4-fs: Ignoring removed orlov option [ 64.463241][ T3859] loop2: detected capacity change from 0 to 1024 [ 64.619027][ T3859] EXT4-fs: Ignoring removed orlov option [ 67.643876][ T3877] loop1: detected capacity change from 0 to 1024 [ 67.654018][ T3877] EXT4-fs: Ignoring removed orlov option [ 67.727284][ T3879] __nla_validate_parse: 17 callbacks suppressed [ 67.727338][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 67.763511][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 67.783421][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 67.795470][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 68.179964][ T3882] loop4: detected capacity change from 0 to 1024 [ 68.187984][ T3882] EXT4-fs: Ignoring removed orlov option [ 68.231264][ T3887] loop0: detected capacity change from 0 to 1024 [ 68.240026][ T3887] EXT4-fs: Ignoring removed orlov option [ 68.270809][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 68.270823][ T29] audit: type=1326 audit(1754197312.626:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.304250][ T3889] siw: device registration error -23 [ 68.319438][ T29] audit: type=1326 audit(1754197312.636:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.342874][ T29] audit: type=1326 audit(1754197312.636:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.366313][ T29] audit: type=1326 audit(1754197312.636:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.389611][ T29] audit: type=1326 audit(1754197312.636:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.412771][ T29] audit: type=1326 audit(1754197312.636:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.436172][ T29] audit: type=1326 audit(1754197312.636:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.459665][ T29] audit: type=1326 audit(1754197312.636:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.482904][ T29] audit: type=1326 audit(1754197312.636:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.506379][ T29] audit: type=1326 audit(1754197312.636:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f8ceb69 code=0x7ffc0000 [ 68.601592][ T3899] loop2: detected capacity change from 0 to 1024 [ 68.609837][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 68.623629][ T3900] loop1: detected capacity change from 0 to 512 [ 68.635303][ T3900] EXT4-fs: Ignoring removed orlov option [ 68.641341][ T3899] EXT4-fs: Ignoring removed orlov option [ 68.647739][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 68.657383][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 68.667045][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 68.680304][ T3900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.731289][ T3900] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.780342][ T3900] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.106: bg 0: block 248: padding at end of block bitmap is not set [ 68.796214][ T3900] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.106: Failed to acquire dquot type 1 [ 68.809292][ T3900] EXT4-fs (loop1): 1 truncate cleaned up [ 68.824296][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 68.832058][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 68.852837][ T3900] EXT4-fs: Ignoring removed orlov option [ 68.861208][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.864461][ T3900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.869149][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.885244][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.893021][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.901234][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.909159][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.917364][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.925149][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 68.933376][ T3900] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 68.943073][ T3396] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 69.009199][ T3900] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.106: Abort forced by user [ 69.019744][ T3900] EXT4-fs (loop1): Remounting filesystem read-only [ 69.026323][ T3900] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 69.037724][ T3910] fido_id[3910]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.054241][ T3900] ext4 filesystem being remounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.087305][ T3900] siw: device registration error -23 [ 69.107686][ T3917] loop4: detected capacity change from 0 to 512 [ 69.115022][ T3917] EXT4-fs: Ignoring removed orlov option [ 69.129563][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 69.145738][ T3917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.247159][ T3917] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.255809][ T3917] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.113: bg 0: block 248: padding at end of block bitmap is not set [ 69.271363][ T3917] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.113: Failed to acquire dquot type 1 [ 69.288936][ T3917] EXT4-fs (loop4): 1 truncate cleaned up [ 69.294696][ T3925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 69.445276][ T3929] loop1: detected capacity change from 0 to 1024 [ 69.458381][ T3929] EXT4-fs: Ignoring removed orlov option [ 70.020227][ T3934] FAULT_INJECTION: forcing a failure. [ 70.020227][ T3934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.033419][ T3934] CPU: 1 UID: 0 PID: 3934 Comm: syz.3.121 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 70.033457][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.033473][ T3934] Call Trace: [ 70.033482][ T3934] [ 70.033492][ T3934] __dump_stack+0x1d/0x30 [ 70.033519][ T3934] dump_stack_lvl+0xe8/0x140 [ 70.033570][ T3934] dump_stack+0x15/0x1b [ 70.033587][ T3934] should_fail_ex+0x265/0x280 [ 70.033670][ T3934] should_fail+0xb/0x20 [ 70.033702][ T3934] should_fail_usercopy+0x1a/0x20 [ 70.033721][ T3934] _copy_from_user+0x1c/0xb0 [ 70.033745][ T3934] do_sock_getsockopt+0xf1/0x240 [ 70.033832][ T3934] __x64_sys_getsockopt+0x11e/0x1a0 [ 70.033872][ T3934] x64_sys_call+0x2bc6/0x2ff0 [ 70.033900][ T3934] do_syscall_64+0xd2/0x200 [ 70.033968][ T3934] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.033991][ T3934] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.034040][ T3934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.034101][ T3934] RIP: 0033:0x7f3a0f8ceb69 [ 70.034121][ T3934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.034137][ T3934] RSP: 002b:00007f3a0df2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 70.034162][ T3934] RAX: ffffffffffffffda RBX: 00007f3a0faf5fa0 RCX: 00007f3a0f8ceb69 [ 70.034240][ T3934] RDX: 0000000000000023 RSI: 0000000000000001 RDI: 0000000000000003 [ 70.034252][ T3934] RBP: 00007f3a0df2f090 R08: 0000200000000080 R09: 0000000000000000 [ 70.034263][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.034326][ T3934] R13: 0000000000000000 R14: 00007f3a0faf5fa0 R15: 00007ffc328c2168 [ 70.034353][ T3934] [ 70.255487][ T3312] EXT4-fs unmount: 28 callbacks suppressed [ 70.255505][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.271161][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.286880][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.319095][ T3917] EXT4-fs: Ignoring removed orlov option [ 70.325853][ T3917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.334786][ T3917] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 70.354752][ T3917] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.113: Abort forced by user [ 70.366940][ T3917] EXT4-fs (loop4): Remounting filesystem read-only [ 70.373485][ T3917] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 70.382389][ T3917] ext4 filesystem being remounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.419830][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.840079][ T3947] loop1: detected capacity change from 0 to 1024 [ 70.847093][ T3947] EXT4-fs: Ignoring removed orlov option [ 70.859585][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.875363][ T3946] FAULT_INJECTION: forcing a failure. [ 70.875363][ T3946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.888525][ T3946] CPU: 0 UID: 0 PID: 3946 Comm: syz.0.124 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 70.888634][ T3946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.888648][ T3946] Call Trace: [ 70.888656][ T3946] [ 70.888665][ T3946] __dump_stack+0x1d/0x30 [ 70.888773][ T3946] dump_stack_lvl+0xe8/0x140 [ 70.888796][ T3946] dump_stack+0x15/0x1b [ 70.888812][ T3946] should_fail_ex+0x265/0x280 [ 70.888852][ T3946] should_fail+0xb/0x20 [ 70.888887][ T3946] should_fail_usercopy+0x1a/0x20 [ 70.888961][ T3946] _copy_to_user+0x20/0xa0 [ 70.888992][ T3946] simple_read_from_buffer+0xb5/0x130 [ 70.889100][ T3946] proc_fail_nth_read+0x10e/0x150 [ 70.889126][ T3946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.889273][ T3946] vfs_read+0x1a0/0x6f0 [ 70.889292][ T3946] ? __rcu_read_unlock+0x4f/0x70 [ 70.889314][ T3946] ? __fget_files+0x184/0x1c0 [ 70.889345][ T3946] ksys_read+0xda/0x1a0 [ 70.889366][ T3946] __x64_sys_read+0x40/0x50 [ 70.889391][ T3946] x64_sys_call+0x27bc/0x2ff0 [ 70.889444][ T3946] do_syscall_64+0xd2/0x200 [ 70.889532][ T3946] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.889555][ T3946] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.889580][ T3946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.889607][ T3946] RIP: 0033:0x7f45df78d57c [ 70.889626][ T3946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.889702][ T3946] RSP: 002b:00007f45dddef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.889725][ T3946] RAX: ffffffffffffffda RBX: 00007f45df9b5fa0 RCX: 00007f45df78d57c [ 70.889740][ T3946] RDX: 000000000000000f RSI: 00007f45dddef0a0 RDI: 0000000000000003 [ 70.889755][ T3946] RBP: 00007f45dddef090 R08: 0000000000000000 R09: 0000000000000000 [ 70.889779][ T3946] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 70.889861][ T3946] R13: 0000000000000000 R14: 00007f45df9b5fa0 R15: 00007ffcbdbf1888 [ 70.889878][ T3946] [ 71.111013][ T3954] loop4: detected capacity change from 0 to 128 [ 71.147710][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.156705][ T3959] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 71.168835][ T3952] wireguard0: entered promiscuous mode [ 80.643373][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 80.643389][ T29] audit: type=1400 audit(1754197324.996:481): avc: denied { ioctl } for pid=3967 comm="syz.4.132" path="socket:[5436]" dev="sockfs" ino=5436 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.690420][ T3970] loop2: detected capacity change from 0 to 512 [ 80.705015][ T3970] EXT4-fs: Ignoring removed orlov option [ 80.728589][ T3977] __nla_validate_parse: 3 callbacks suppressed [ 80.728608][ T3977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 80.751206][ T3970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.763379][ T29] audit: type=1400 audit(1754197325.106:482): avc: denied { name_bind } for pid=3976 comm="syz.4.133" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.785261][ T29] audit: type=1400 audit(1754197325.106:483): avc: denied { node_bind } for pid=3976 comm="syz.4.133" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.812556][ T3970] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.813695][ T3979] loop4: detected capacity change from 0 to 512 [ 80.826492][ T3970] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.130: bg 0: block 248: padding at end of block bitmap is not set [ 80.851396][ T3970] Quota error (device loop2): write_blk: dquota write failed [ 80.858871][ T3970] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 80.868852][ T3970] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.130: Failed to acquire dquot type 1 [ 80.885445][ T3970] EXT4-fs (loop2): 1 truncate cleaned up [ 80.893308][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.907019][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.924302][ T3979] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.927556][ T3988] loop1: detected capacity change from 0 to 1024 [ 80.960392][ T3970] EXT4-fs: Ignoring removed orlov option [ 80.968291][ T3970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.976876][ T3970] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 80.986347][ T29] audit: type=1326 audit(1754197325.336:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb553eb69 code=0x7ffc0000 [ 80.988527][ T3988] EXT4-fs: Ignoring removed orlov option [ 81.009634][ T29] audit: type=1326 audit(1754197325.336:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb553eb69 code=0x7ffc0000 [ 81.038604][ T29] audit: type=1326 audit(1754197325.336:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0eb553eb69 code=0x7ffc0000 [ 81.062323][ T29] audit: type=1326 audit(1754197325.376:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb553eb69 code=0x7ffc0000 [ 81.062404][ T3966] loop0: detected capacity change from 0 to 512 [ 81.085758][ T29] audit: type=1326 audit(1754197325.376:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb553eb69 code=0x7ffc0000 [ 81.095625][ T3966] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.121934][ T3991] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 7: comm syz.4.133: lblock 12 mapped to illegal pblock 7 (length 22) [ 81.125739][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.136456][ T3966] ext4: Unknown parameter 'uid>00000000000000000000' [ 81.151413][ T3970] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.130: Abort forced by user [ 81.170451][ T3991] EXT4-fs (loop4): Remounting filesystem read-only [ 81.187455][ T3970] EXT4-fs (loop2): Remounting filesystem read-only [ 81.194645][ T3970] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 81.214598][ T3970] ext4 filesystem being remounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.234780][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.254661][ T3970] siw: device registration error -23 [ 81.299659][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.318800][ T3396] hid_parser_main: 6 callbacks suppressed [ 81.318833][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 81.332462][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 81.340383][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.348180][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.356000][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.363716][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.371470][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.379290][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.387158][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.394869][ T3396] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.405690][ T3396] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 81.432767][ T3382] hid-generic 0000:3000000:0000.0003: hidraw1: HID v0.00 Device [sy] on syz0 [ 81.492422][ T4004] loop2: detected capacity change from 0 to 1024 [ 81.512770][ T4007] loop4: detected capacity change from 0 to 1024 [ 81.524210][ T4002] fido_id[4002]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.524821][ T4004] EXT4-fs: Ignoring removed orlov option [ 81.554707][ T4007] EXT4-fs: Ignoring removed orlov option [ 81.583642][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.600458][ T4004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.652961][ T4017] FAULT_INJECTION: forcing a failure. [ 81.652961][ T4017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.666138][ T4017] CPU: 0 UID: 0 PID: 4017 Comm: syz.0.141 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 81.666175][ T4017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.666187][ T4017] Call Trace: [ 81.666194][ T4017] [ 81.666201][ T4017] __dump_stack+0x1d/0x30 [ 81.666259][ T4017] dump_stack_lvl+0xe8/0x140 [ 81.666302][ T4017] dump_stack+0x15/0x1b [ 81.666321][ T4017] should_fail_ex+0x265/0x280 [ 81.666355][ T4017] should_fail+0xb/0x20 [ 81.666388][ T4017] should_fail_usercopy+0x1a/0x20 [ 81.666474][ T4017] _copy_from_user+0x1c/0xb0 [ 81.666502][ T4017] ___sys_sendmsg+0xc1/0x1d0 [ 81.666652][ T4017] __sys_sendmmsg+0x178/0x300 [ 81.666700][ T4017] __x64_sys_sendmmsg+0x57/0x70 [ 81.666792][ T4017] x64_sys_call+0x1c4a/0x2ff0 [ 81.666816][ T4017] do_syscall_64+0xd2/0x200 [ 81.666842][ T4017] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.666873][ T4017] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.666976][ T4017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.666997][ T4017] RIP: 0033:0x7f45df78eb69 [ 81.667011][ T4017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.667031][ T4017] RSP: 002b:00007f45dddef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.667054][ T4017] RAX: ffffffffffffffda RBX: 00007f45df9b5fa0 RCX: 00007f45df78eb69 [ 81.667069][ T4017] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 81.667104][ T4017] RBP: 00007f45dddef090 R08: 0000000000000000 R09: 0000000000000000 [ 81.667120][ T4017] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 81.667135][ T4017] R13: 0000000000000000 R14: 00007f45df9b5fa0 R15: 00007ffcbdbf1888 [ 81.667157][ T4017] [ 81.857537][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 81.894577][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 81.903761][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 81.941973][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 82.009743][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.039745][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.060624][ T4026] loop0: detected capacity change from 0 to 1024 [ 82.090699][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.105965][ T4026] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.142: Failed to acquire dquot type 0 [ 82.118205][ T4026] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 82.134794][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.142: corrupted inode contents [ 82.147370][ T4031] FAULT_INJECTION: forcing a failure. [ 82.147370][ T4031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.160605][ T4031] CPU: 1 UID: 0 PID: 4031 Comm: syz.2.144 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 82.160711][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.160727][ T4031] Call Trace: [ 82.160743][ T4031] [ 82.160751][ T4031] __dump_stack+0x1d/0x30 [ 82.160785][ T4031] dump_stack_lvl+0xe8/0x140 [ 82.160803][ T4031] dump_stack+0x15/0x1b [ 82.160823][ T4031] should_fail_ex+0x265/0x280 [ 82.160928][ T4031] should_fail+0xb/0x20 [ 82.160966][ T4031] should_fail_usercopy+0x1a/0x20 [ 82.161046][ T4031] _copy_from_user+0x1c/0xb0 [ 82.161073][ T4031] ___sys_recvmsg+0xaa/0x370 [ 82.161097][ T4031] ? 0xffffffff81000000 [ 82.161175][ T4031] ? __rcu_read_unlock+0x4f/0x70 [ 82.161257][ T4031] __x64_sys_recvmsg+0xd1/0x160 [ 82.161283][ T4031] x64_sys_call+0x2b42/0x2ff0 [ 82.161311][ T4031] do_syscall_64+0xd2/0x200 [ 82.161340][ T4031] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.161371][ T4031] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.161425][ T4031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.161455][ T4031] RIP: 0033:0x7f0f431ceb69 [ 82.161469][ T4031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.161509][ T4031] RSP: 002b:00007f0f41837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 82.161532][ T4031] RAX: ffffffffffffffda RBX: 00007f0f433f5fa0 RCX: 00007f0f431ceb69 [ 82.161548][ T4031] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 82.161559][ T4031] RBP: 00007f0f41837090 R08: 0000000000000000 R09: 0000000000000000 [ 82.161572][ T4031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.161588][ T4031] R13: 0000000000000000 R14: 00007f0f433f5fa0 R15: 00007ffde9038608 [ 82.161611][ T4031] [ 82.163481][ T4026] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.142: mark_inode_dirty error [ 82.255333][ T4037] loop4: detected capacity change from 0 to 1024 [ 82.265050][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.142: corrupted inode contents [ 82.292125][ T4037] EXT4-fs: Ignoring removed orlov option [ 82.355356][ T4026] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.142: mark_inode_dirty error [ 82.386357][ T4037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.417606][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.142: corrupted inode contents [ 82.430847][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.434401][ T4026] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 82.452673][ T4040] siw: device registration error -23 [ 82.454781][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.142: corrupted inode contents [ 82.513656][ T4026] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.142: mark_inode_dirty error [ 82.530981][ T4026] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 82.541068][ T4026] EXT4-fs (loop0): 1 truncate cleaned up [ 82.548708][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.590049][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.617714][ T3396] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.655203][ T4050] loop2: detected capacity change from 0 to 512 [ 82.678441][ T4050] EXT4-fs: Ignoring removed orlov option [ 82.679956][ T4052] loop4: detected capacity change from 0 to 512 [ 82.689699][ T4048] fido_id[4048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.696606][ T4054] loop0: detected capacity change from 0 to 512 [ 82.714291][ T4050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.724053][ T4052] EXT4-fs: Ignoring removed orlov option [ 82.731429][ T4050] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.731788][ T4054] EXT4-fs: Ignoring removed orlov option [ 82.746170][ T4052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.762153][ T4050] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.150: bg 0: block 248: padding at end of block bitmap is not set [ 82.781041][ T4054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.792504][ T4052] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.804740][ T4054] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.822093][ T4052] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.151: bg 0: block 248: padding at end of block bitmap is not set [ 82.837917][ T4050] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.150: Failed to acquire dquot type 1 [ 82.849790][ T4054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.152: bg 0: block 248: padding at end of block bitmap is not set [ 82.855150][ T4050] EXT4-fs (loop2): 1 truncate cleaned up [ 82.870866][ T4054] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.152: Failed to acquire dquot type 1 [ 82.882470][ T4052] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.151: Failed to acquire dquot type 1 [ 82.903982][ T4050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.918365][ T4054] EXT4-fs (loop0): 1 truncate cleaned up [ 82.927782][ T4052] EXT4-fs (loop4): 1 truncate cleaned up [ 82.934173][ T4052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.936826][ T4054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.978370][ T4054] EXT4-fs: Ignoring removed orlov option [ 82.985556][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.995360][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.005803][ T4054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.014707][ T4054] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 83.045673][ T4054] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.152: Abort forced by user [ 83.061184][ T4054] EXT4-fs (loop0): Remounting filesystem read-only [ 83.067811][ T4054] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 83.069380][ T4054] ext4 filesystem being remounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.089684][ T4054] siw: device registration error -23 [ 83.165225][ T4077] loop3: detected capacity change from 0 to 1024 [ 83.172170][ T4077] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 83.207829][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.220819][ T4081] sctp: [Deprecated]: syz.4.162 (pid 4081) Use of int in max_burst socket option. [ 83.220819][ T4081] Use struct sctp_assoc_value instead [ 83.259822][ T4084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'. [ 83.276288][ T4081] loop4: detected capacity change from 0 to 128 [ 83.282619][ T4072] ALSA: seq fatal error: cannot create timer (-19) [ 83.286727][ T4086] sctp: [Deprecated]: syz.1.163 (pid 4086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.286727][ T4086] Use struct sctp_sack_info instead [ 83.310231][ T4081] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.318153][ T4081] FAT-fs (loop4): Filesystem has been set read-only [ 83.334517][ T4081] syz.4.162: attempt to access beyond end of device [ 83.334517][ T4081] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 83.370363][ T4089] FAULT_INJECTION: forcing a failure. [ 83.370363][ T4089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.372283][ T4081] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.383806][ T4089] CPU: 0 UID: 0 PID: 4089 Comm: syz.0.165 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 83.383851][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.383866][ T4089] Call Trace: [ 83.383875][ T4089] [ 83.383886][ T4089] __dump_stack+0x1d/0x30 [ 83.383917][ T4089] dump_stack_lvl+0xe8/0x140 [ 83.383945][ T4089] dump_stack+0x15/0x1b [ 83.383984][ T4089] should_fail_ex+0x265/0x280 [ 83.384035][ T4089] should_fail+0xb/0x20 [ 83.384103][ T4089] should_fail_usercopy+0x1a/0x20 [ 83.384130][ T4089] _copy_from_user+0x1c/0xb0 [ 83.384165][ T4089] __sys_bpf+0x178/0x7b0 [ 83.384214][ T4089] __x64_sys_bpf+0x41/0x50 [ 83.384247][ T4089] x64_sys_call+0x2aea/0x2ff0 [ 83.384350][ T4089] do_syscall_64+0xd2/0x200 [ 83.384445][ T4089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.384545][ T4089] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.384615][ T4089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.384659][ T4089] RIP: 0033:0x7f45df78eb69 [ 83.384681][ T4089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.384776][ T4089] RSP: 002b:00007f45dddef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.384808][ T4089] RAX: ffffffffffffffda RBX: 00007f45df9b5fa0 RCX: 00007f45df78eb69 [ 83.384826][ T4089] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 83.384843][ T4089] RBP: 00007f45dddef090 R08: 0000000000000000 R09: 0000000000000000 [ 83.384886][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.384903][ T4089] R13: 0000000000000000 R14: 00007f45df9b5fa0 R15: 00007ffcbdbf1888 [ 83.384929][ T4089] [ 83.417446][ T4070] loop2: detected capacity change from 0 to 2048 [ 83.420240][ T4081] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.428633][ T4081] syz.4.162: attempt to access beyond end of device [ 83.428633][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.483270][ T4099] loop0: detected capacity change from 0 to 1024 [ 83.517288][ T4081] syz.4.162: attempt to access beyond end of device [ 83.517288][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.529218][ T4099] EXT4-fs: Ignoring removed orlov option [ 83.607496][ T4081] syz.4.162: attempt to access beyond end of device [ 83.607496][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.637680][ T4081] syz.4.162: attempt to access beyond end of device [ 83.637680][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.654408][ T4081] syz.4.162: attempt to access beyond end of device [ 83.654408][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.676999][ T4081] syz.4.162: attempt to access beyond end of device [ 83.676999][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.691100][ T4081] syz.4.162: attempt to access beyond end of device [ 83.691100][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.700910][ T4104] loop3: detected capacity change from 0 to 1024 [ 83.705114][ T4081] syz.4.162: attempt to access beyond end of device [ 83.705114][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.726590][ T4081] syz.4.162: attempt to access beyond end of device [ 83.726590][ T4081] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.741484][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.782015][ T4104] EXT4-fs: Ignoring removed orlov option [ 83.824688][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.893376][ T4108] loop1: detected capacity change from 0 to 1024 [ 83.902755][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 83.924117][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 83.941012][ T4105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 83.952487][ T4108] EXT4-fs: Ignoring removed orlov option [ 83.985654][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 84.000933][ T4108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.030409][ T4100] lo speed is unknown, defaulting to 1000 [ 84.100511][ T4110] ================================================================== [ 84.108760][ T4110] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 84.117064][ T4110] [ 84.119458][ T4110] write to 0xffff888118cadbb0 of 4 bytes by task 4099 on cpu 1: [ 84.123557][ T4070] loop2: unable to read partition table [ 84.127126][ T4110] writeback_single_inode+0x14a/0x3e0 [ 84.127168][ T4110] sync_inode_metadata+0x5b/0x90 [ 84.143184][ T4110] generic_buffers_fsync_noflush+0xd9/0x120 [ 84.149104][ T4110] ext4_sync_file+0x1ab/0x690 [ 84.153995][ T4110] vfs_fsync_range+0x10d/0x130 [ 84.158790][ T4110] ext4_buffered_write_iter+0x34f/0x3c0 [ 84.164365][ T4110] ext4_file_write_iter+0x383/0xf00 [ 84.169686][ T4110] iter_file_splice_write+0x5f2/0x970 [ 84.175202][ T4110] direct_splice_actor+0x153/0x2a0 [ 84.180333][ T4110] splice_direct_to_actor+0x30f/0x680 [ 84.185726][ T4110] do_splice_direct+0xda/0x150 [ 84.190514][ T4110] do_sendfile+0x380/0x650 [ 84.195058][ T4110] __x64_sys_sendfile64+0x105/0x150 [ 84.200311][ T4110] x64_sys_call+0x2bb0/0x2ff0 [ 84.205005][ T4110] do_syscall_64+0xd2/0x200 [ 84.209523][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.215430][ T4110] [ 84.217770][ T4110] read to 0xffff888118cadbb0 of 4 bytes by task 4110 on cpu 0: [ 84.225318][ T4110] __mark_inode_dirty+0x18e/0x760 [ 84.230367][ T4110] ext4_write_inline_data_end+0x3e5/0x5f0 [ 84.236116][ T4110] ext4_write_end+0x3d7/0x720 [ 84.240849][ T4110] generic_perform_write+0x30f/0x490 [ 84.246153][ T4110] ext4_buffered_write_iter+0x1ee/0x3c0 [ 84.251817][ T4110] ext4_file_write_iter+0x383/0xf00 [ 84.257125][ T4110] iter_file_splice_write+0x5f2/0x970 [ 84.262507][ T4110] direct_splice_actor+0x153/0x2a0 [ 84.267714][ T4110] splice_direct_to_actor+0x30f/0x680 [ 84.273102][ T4110] do_splice_direct+0xda/0x150 [ 84.277872][ T4110] do_sendfile+0x380/0x650 [ 84.283790][ T4110] __x64_sys_sendfile64+0x105/0x150 [ 84.289428][ T4110] x64_sys_call+0x2bb0/0x2ff0 [ 84.294221][ T4110] do_syscall_64+0xd2/0x200 [ 84.298749][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.304848][ T4110] [ 84.307178][ T4110] value changed: 0x00000038 -> 0x00000002 [ 84.312904][ T4110] [ 84.315245][ T4110] Reported by Kernel Concurrency Sanitizer on: [ 84.321597][ T4110] CPU: 0 UID: 0 PID: 4110 Comm: syz.0.168 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 84.333764][ T4110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.343922][ T4110] ================================================================== [ 84.361011][ T4070] loop2: partition table beyond EOD, truncated [ 84.367445][ T4070] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 84.422659][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.490993][ T2992] loop2: unable to read partition table [ 84.497882][ T2992] loop2: partition table beyond EOD, truncated [ 84.619529][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.653209][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.