last executing test programs: 1.928911077s ago: executing program 0 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000002c0)="866f97eb5a5765d3437a4548e8cc42f7302350d24263c529dd6b93a5d92bc16a31b47d9449d3f4ee8d9f12ce9096a2bd9c4fab9b7e5232642fb10bd362e6ff9ef121c2160903c0c9aca8003b6056aa1ee78498c4fe4f981580dfa3a98cfa0d4efd7f57a36e0d338823472b", 0x6b}, {&(0x7f0000000380)="023b76c7b6e989be0d7b7f074f98d0a1ec0dfab055ab71530dfe930d4b0d9ce38dab17b2f1c0e5c86d9152917f755c7856380c6fd99709f3819728c9ea96a4ac38011a", 0x43}, {&(0x7f00000005c0)="69b8836585e877125c9fbf66b5c9b2fbe93fa3f8e170b7f1b4cd385cdf9d9a5ea8ff133332d6811476c1a1d32f74b197d5f6a531d8daac5d8764460fb9074dd577b918e78e46901eff80c2030d762a79ad1b9485f3e67a414ddaeabc98625167f8c221e0c3454a53d357ac93ec7eadad9c35c384a2c10362f6ae3d5ac09c7050c765552f61e12612ea41ba87348ff1125cf6a8825d18cd9b6f8abfe132d5", 0x9e}, {&(0x7f0000000400)="a46a95ec591d32c08df78b1afb111e0fc1f8203739065e", 0x17}, {&(0x7f0000000740)="f67fc99ccf25956c132516f194fe0604a186b9ab83d1be4c28926ba383e0bafee17bd5700e544c00cc81ec3780eb87a19f1f82efd5ae9671cf0e427598f3b7a35f889b7e1965724633ed625e8e38ad949ef16a1853de54204730a56337fe9e887c58f3013bc224a83bf83d23027e5229d8b152b8f624b20fb4ca1a21eb717c7f508e9116cae4bd3bc6832953e89ee3ca3c99826d6c5c4416e81479a88e9bbb693a6be6208f5c71772b8028644eccd06d1faa4b74f73db3b2197023d1ef5f39f55f4815f2406b5f", 0xc7}], 0x6, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x73cee8b36e627977}}, {{&(0x7f0000000a00)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a80)="87c1729da6191c27288cfdc40535496973b0791e5cb7dde34a24904e110bd55235c9a920784eb0956bff59d25654cc6bef5cda3f9b5d6e45935abe5f940727d942d74b1b37b31fba8453a977b8012a0aae1fa1e6c07ebd9680edc425cfc8aa8920a6b43ef042c69fa1bb0be29546cae50ed8b63158df72dd2988684121e762596306a6a7cf", 0x85}, {&(0x7f0000000980)="4fd886ec32bdd31494bd738366cd3765d1d06c4ccd2db9950f9aad75526527578f87e1b5cec0ad01929a36679598310b90a5257bdef10b", 0x37}, {&(0x7f0000000b40)="1ae7b9842522b11d2214d403b3be9f3ab3461222bdf0c512b3fef3c645d44a99e13f2e2e3120c2b2063d14d7ca90b103c2208241bb957129f0d517680275a5e344d7f0c6a3048506b5a144f74e71a419f31bf3e0ec446f4e41016565e77486edc06fbb639672c94e17bff82a621eec2844fcb7fe29ea2c1b13ab1c92730e93b39aac0afb998e46b29336132548a3dc9560da32a0b0fc", 0x96}], 0x3, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0xe8, 0x8004}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)}], 0x1, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x14004800}}], 0x3, 0x1088) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = dup(r4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 1.868990783s ago: executing program 0 (id=395): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) 1.58871946s ago: executing program 0 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r7, 0x0, 0x7fff}, 0x18) close(r1) 1.37579981s ago: executing program 1 (id=409): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) 1.354035842s ago: executing program 1 (id=410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.311905556s ago: executing program 1 (id=412): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)={0x14, r1, 0xb11abf2663aa630f, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 1.248277652s ago: executing program 1 (id=413): r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r6}) (async) r8 = socket(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x3, [@struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x8, 0x1, 0x34}, {0x2, 0x5, 0x6000511b}]}, @datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x2, 0x91}], "8770"}]}, {0x0, [0x30]}}, &(0x7f0000000600)=""/65, 0x5b, 0x41, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="8a495d7db438ed46f369a7de4ade070f02000000", @ANYRES32=r9, @ANYBLOB="0f00"/20, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="03000000050000000300"/28], 0x50) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000400)={@empty, 0x33, r13}) (async) ioctl(r8, 0x8936, &(0x7f00000002c0)="cd677b6e79cf6d164e624b6e4bbdf1989d78") getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030003110000002cbd7000fbdbdf2503000900680000001cdc0dca1d9f8367eb68846960e56de4000000050006002b0000000a004e2400000003fe8000000000000000000000000000bb090006070c0000000005000500000000000a004e2000000000000000000000000000000000000000001000"/136], 0x88}, 0x1, 0x7}, 0x0) 1.020179254s ago: executing program 3 (id=426): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ab47000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000840)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000100003050000000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 966.601799ms ago: executing program 4 (id=427): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) 938.989401ms ago: executing program 2 (id=428): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x2000000, 0x899, 0x1]}}, 0x5c) 934.828422ms ago: executing program 1 (id=429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 841.81061ms ago: executing program 1 (id=430): r0 = open(0x0, 0x492880, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setns(0xffffffffffffffff, 0x24020000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) 841.64357ms ago: executing program 2 (id=431): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x7fff}, 0x18) close(r0) 824.649582ms ago: executing program 2 (id=432): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) 782.658756ms ago: executing program 2 (id=433): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000380)=""/108, 0x6c, 0x0, &(0x7f0000000400)=""/102, 0x66}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x10, 0x7c, &(0x7f0000000140)=""/124, 0x40f00, 0x20, '\x00', r0, @cgroup_skb, r1, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0x5, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[r3, r5, r6, r7], &(0x7f0000000680)=[{0x3, 0x5, 0x0, 0xb}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x2, 0xa, 0xb}, {0x0, 0x1, 0x4, 0x7}]}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0xfffffffc, 0x25dfdbfe, {0xa, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x13}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x4}}]}}}]}, 0x5c}}, 0x0) 721.795102ms ago: executing program 4 (id=434): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 670.591237ms ago: executing program 3 (id=435): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ustat(0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) io_setup(0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x2, 0x4, r0, &(0x7f00000007c0)="1b6c6592942f28c2573e8f80eb3aca4df2950eb036b56808ba14d30ef693e4a82fa5b2f22625c71aae627533e2ac2258a1108a9dd876a3c67f5bdf90b546a51be3", 0x41, 0x0, 0x0, 0x1}]) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x5) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close_range(r1, 0xffffffffffffffff, 0x0) 670.269517ms ago: executing program 2 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000002c0)="866f97eb5a5765d3437a4548e8cc42f7302350d24263c529dd6b93a5d92bc16a31b47d9449d3f4ee8d9f12ce9096a2bd9c4fab9b7e5232642fb10bd362e6ff9ef121c2160903c0c9aca8003b6056aa1ee78498c4fe4f981580dfa3a98cfa0d4efd7f57a36e0d338823472b", 0x6b}, {&(0x7f0000000380)="023b76c7b6e989be0d7b7f074f98d0a1ec0dfab055ab71530dfe930d4b0d9ce38dab17b2f1c0e5c86d9152917f755c7856380c6fd99709f3819728c9ea96a4ac38011a", 0x43}, {&(0x7f00000005c0)="69b8836585e877125c9fbf66b5c9b2fbe93fa3f8e170b7f1b4cd385cdf9d9a5ea8ff133332d6811476c1a1d32f74b197d5f6a531d8daac5d8764460fb9074dd577b918e78e46901eff80c2030d762a79ad1b9485f3e67a414ddaeabc98625167f8c221e0c3454a53d357ac93ec7eadad9c35c384a2c10362f6ae3d5ac09c7050c765552f61e12612ea41ba87348ff1125cf6a8825d18cd9b6f8abfe132d5", 0x9e}, {&(0x7f0000000400)="a46a95ec591d32c08df78b1afb111e0fc1f8203739065e", 0x17}, {&(0x7f0000000740)="f67fc99ccf25956c132516f194fe0604a186b9ab83d1be4c28926ba383e0bafee17bd5700e544c00cc81ec3780eb87a19f1f82efd5ae9671cf0e427598f3b7a35f889b7e1965724633ed625e8e38ad949ef16a1853de54204730a56337fe9e887c58f3013bc224a83bf83d23027e5229d8b152b8f624b20fb4ca1a21eb717c7f508e9116cae4bd3bc6832953e89ee3ca3c99826d6c5c4416e81479a88e9bbb693a6be6208f5c71772b8028644eccd06d1faa4b74f73db3b2197023d1ef5f39f55f4815f2406b5f", 0xc7}], 0x6, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x73cee8b36e627977}}, {{&(0x7f0000000a00)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a80)="87c1729da6191c27288cfdc40535496973b0791e5cb7dde34a24904e110bd55235c9a920784eb0956bff59d25654cc6bef5cda3f9b5d6e45935abe5f940727d942d74b1b37b31fba8453a977b8012a0aae1fa1e6c07ebd9680edc425cfc8aa8920a6b43ef042c69fa1bb0be29546cae50ed8b63158df72dd2988684121e762596306a6a7cf", 0x85}, {&(0x7f0000000980)="4fd886ec32bdd31494bd738366cd3765d1d06c4ccd2db9950f9aad75526527578f87e1b5cec0ad01929a36679598310b90a5257bdef10b", 0x37}, {&(0x7f0000000b40)="1ae7b9842522b11d2214d403b3be9f3ab3461222bdf0c512b3fef3c645d44a99e13f2e2e3120c2b2063d14d7ca90b103c2208241bb957129f0d517680275a5e344d7f0c6a3048506b5a144f74e71a419f31bf3e0ec446f4e41016565e77486edc06fbb639672c94e17bff82a621eec2844fcb7fe29ea2c1b13ab1c92730e93b39aac0afb998e46b29336132548a3dc9560da32a0b0fc", 0x96}], 0x3, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0xe8, 0x8004}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)}], 0x1, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x14004800}}], 0x3, 0x1088) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = dup(r4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 669.995487ms ago: executing program 4 (id=437): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x9, 0x1, 0x1, 'queue0\x00', 0x10000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {}, 0x1f000000}) 632.64751ms ago: executing program 2 (id=438): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) ioctl$FIOCLEX(r0, 0x5451) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'r\x00'}, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) fallocate(r1, 0x0, 0x3, 0x800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) 616.624662ms ago: executing program 4 (id=439): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = dup(r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) write$sndseq(r4, &(0x7f0000000400)=[{0x7, 0x5, 0xf8, 0x81, @time={0x6, 0xb7a}, {0x81}, {0x8, 0x2}, @addr={0xca, 0x5}}, {0x8, 0x4, 0x6, 0x40, @time={0x3, 0x7}, {0x0, 0x6}, {0x9}, @quote={{0x2b, 0x8}, 0x1, &(0x7f0000000000)={0xb2, 0x1, 0x9f, 0x2, @tick=0x7, {0x8, 0x2}, {0x0, 0xff}, @raw32={[0x1ff, 0x5, 0x4]}}}}, {0x8, 0xb0, 0x7, 0x0, @time={0x80, 0x1}, {0xfe, 0xc}, {0x8, 0x2}, @result={0x4, 0x7}}, {0xd, 0xb, 0xc4, 0x7, @tick, {0x0, 0x9}, {0x0, 0x9}, @ext={0xf1, &(0x7f0000000300)="795a70efc56b5c4cca8d155bf509bdf6e0097ede8e0c4db6638689d5fb599a2d554fa7ed7a3764567d907364f5195cda506c5c7f2a3b52909f7ec3efdd98ac703c50026deb4c226da825a96770bc8f49d1a68ac141398dd07b4f25a5bdd9ebc18265b50d45f961298e65a79a3fc91399196fab17c7c27a644114eac9a66f3843a20a7616d2a624b50aecd4ac749dd3c04dd04085b7187c6feffae2556e23d2474725058fce7f7d6d98734c0ec2f417c7ec907923fe3e5052e4af4f5f0727338bae9fb221b38eaa80d4bc6c05bfa776771e4291769868f0cedd2a032432c32e77bf2b0918066bd610e00903ba3d5b94c44d"}}, {0x1, 0x7, 0x9, 0x9, @time={0xc494, 0x7}, {0x6, 0x4}, {0x4, 0xe}, @connect={{0x2, 0x52}, {0x0, 0xb}}}, {0x61, 0x6, 0x4, 0x80, @tick=0x7b5061b1, {0x7, 0x4}, {0xa, 0xe}, @addr={0x40, 0xfa}}, {0x7, 0x9, 0x9, 0x28, @time={0x0, 0x3}, {0x2, 0x6}, {0x8, 0xc0}, @addr={0x0, 0x7}}, {0x4c, 0x1, 0xc, 0x1d, @tick=0xff, {0x0, 0x9}, {0x1, 0x5}, @addr={0xb, 0x23}}], 0xe0) fcntl$setown(r1, 0x8, r5) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 616.044242ms ago: executing program 3 (id=440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 526.478331ms ago: executing program 3 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x408000, 0x0, 0x10}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', r3, 0x4, 0x6, 0xff, 0x6, 0xd, @dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1, 0x8, 0x8, 0x2}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb00000c692860b582e5403a36518a9a033827e774c6e524dff928600ec2"], 0x0, 0x26, 0x0, 0x8, 0x80000001}, 0x28) 525.97324ms ago: executing program 0 (id=442): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x7fff}, 0x18) close(r0) 437.904749ms ago: executing program 3 (id=443): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) 437.611339ms ago: executing program 4 (id=444): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) 421.339191ms ago: executing program 0 (id=445): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) 397.521703ms ago: executing program 3 (id=446): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4000000, @empty, 0x7da8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0xa5) r3 = dup2(r2, r2) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00') ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='{\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200010004000000080000000000800000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) 300.796472ms ago: executing program 0 (id=447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) acct(&(0x7f0000000000)='./file0\x00') r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000905000001000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r9}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 4 (id=448): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) kernel console output (not intermixed with test programs): [ 23.325021][ T29] audit: type=1400 audit(1767107239.554:62): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.347150][ T29] audit: type=1400 audit(1767107239.554:63): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.369913][ T29] audit: type=1400 audit(1767107239.554:64): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.393302][ T29] audit: type=1400 audit(1767107239.554:65): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.416410][ T29] audit: type=1400 audit(1767107239.554:66): avc: denied { read open } for pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 28.610973][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.610989][ T29] audit: type=1400 audit(1767107244.834:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.640070][ T29] audit: type=1400 audit(1767107244.864:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.642350][ T3304] cgroup: Unknown subsys name 'net' [ 28.667875][ T29] audit: type=1400 audit(1767107244.894:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.885566][ T3304] cgroup: Unknown subsys name 'cpuset' [ 28.892086][ T3304] cgroup: Unknown subsys name 'rlimit' [ 29.063513][ T29] audit: type=1400 audit(1767107245.284:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.086824][ T29] audit: type=1400 audit(1767107245.294:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.107330][ T29] audit: type=1400 audit(1767107245.294:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.127781][ T29] audit: type=1400 audit(1767107245.294:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.148128][ T29] audit: type=1400 audit(1767107245.314:77): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.169432][ T29] audit: type=1400 audit(1767107245.314:78): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.188959][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.194413][ T29] audit: type=1400 audit(1767107245.314:79): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.242472][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.524646][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.597147][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.613931][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.621291][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.628592][ T3316] bridge_slave_0: entered allmulticast mode [ 30.635167][ T3316] bridge_slave_0: entered promiscuous mode [ 30.643748][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.650879][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.658099][ T3316] bridge_slave_1: entered allmulticast mode [ 30.664538][ T3316] bridge_slave_1: entered promiscuous mode [ 30.712600][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.725762][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.764582][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.773563][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.780677][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.787844][ T3315] bridge_slave_0: entered allmulticast mode [ 30.794264][ T3315] bridge_slave_0: entered promiscuous mode [ 30.814367][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821498][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.828683][ T3315] bridge_slave_1: entered allmulticast mode [ 30.835350][ T3315] bridge_slave_1: entered promiscuous mode [ 30.842246][ T3316] team0: Port device team_slave_0 added [ 30.865460][ T3316] team0: Port device team_slave_1 added [ 30.897704][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.904673][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.930745][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.945018][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.958975][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 30.972810][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.979881][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.005972][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.020546][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.065518][ T3315] team0: Port device team_slave_0 added [ 31.072601][ T3315] team0: Port device team_slave_1 added [ 31.097908][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.105080][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.112467][ T3319] bridge_slave_0: entered allmulticast mode [ 31.119074][ T3319] bridge_slave_0: entered promiscuous mode [ 31.125722][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 31.147847][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.155063][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.162213][ T3319] bridge_slave_1: entered allmulticast mode [ 31.168715][ T3319] bridge_slave_1: entered promiscuous mode [ 31.183201][ T3316] hsr_slave_0: entered promiscuous mode [ 31.189403][ T3316] hsr_slave_1: entered promiscuous mode [ 31.195698][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.202715][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.228784][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.254070][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.261089][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.287054][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.323309][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.335668][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.342818][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.350249][ T3320] bridge_slave_0: entered allmulticast mode [ 31.357092][ T3320] bridge_slave_0: entered promiscuous mode [ 31.366244][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.377496][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.384626][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.391968][ T3320] bridge_slave_1: entered allmulticast mode [ 31.398660][ T3320] bridge_slave_1: entered promiscuous mode [ 31.454897][ T3319] team0: Port device team_slave_0 added [ 31.467697][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.485082][ T3315] hsr_slave_0: entered promiscuous mode [ 31.491175][ T3315] hsr_slave_1: entered promiscuous mode [ 31.497235][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 31.502979][ T3315] Cannot create hsr debugfs directory [ 31.511612][ T3319] team0: Port device team_slave_1 added [ 31.517280][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.524322][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.531506][ T3324] bridge_slave_0: entered allmulticast mode [ 31.537998][ T3324] bridge_slave_0: entered promiscuous mode [ 31.545292][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.568683][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.575852][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.583135][ T3324] bridge_slave_1: entered allmulticast mode [ 31.589637][ T3324] bridge_slave_1: entered promiscuous mode [ 31.626112][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.633191][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.659295][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.678514][ T3320] team0: Port device team_slave_0 added [ 31.685571][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.698729][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.713028][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.720128][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.746061][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.757677][ T3320] team0: Port device team_slave_1 added [ 31.800279][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.807303][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.833238][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.845201][ T3324] team0: Port device team_slave_0 added [ 31.856483][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.863432][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.889506][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.901134][ T3324] team0: Port device team_slave_1 added [ 31.933407][ T3319] hsr_slave_0: entered promiscuous mode [ 31.939636][ T3319] hsr_slave_1: entered promiscuous mode [ 31.945691][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.951415][ T3319] Cannot create hsr debugfs directory [ 31.976798][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.983796][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.009766][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.031304][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.038338][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.064438][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.083196][ T3320] hsr_slave_0: entered promiscuous mode [ 32.089715][ T3320] hsr_slave_1: entered promiscuous mode [ 32.095833][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.101584][ T3320] Cannot create hsr debugfs directory [ 32.157823][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.169112][ T3324] hsr_slave_0: entered promiscuous mode [ 32.175263][ T3324] hsr_slave_1: entered promiscuous mode [ 32.181154][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 32.186950][ T3324] Cannot create hsr debugfs directory [ 32.200297][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.209864][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.240905][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.305505][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.314558][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.332620][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.354851][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.390382][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.403237][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.415543][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.427679][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.486391][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.496137][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.506252][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.519152][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.537301][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.562623][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.572309][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.581861][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.590898][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.602511][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.619709][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.627981][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.635108][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.657013][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.674854][ T2046] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.682428][ T2046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.698537][ T2046] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.705700][ T2046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.725086][ T2046] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.732154][ T2046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.758641][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.786536][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.796451][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.813821][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.820971][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.837769][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.844906][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.856855][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.878693][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.885873][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.902196][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.909488][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.922643][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.971419][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.989625][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.006208][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.013412][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.034234][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.041394][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.099810][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.171039][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.196961][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.242646][ T3315] veth0_vlan: entered promiscuous mode [ 33.266599][ T3315] veth1_vlan: entered promiscuous mode [ 33.275175][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.286768][ T3316] veth0_vlan: entered promiscuous mode [ 33.307871][ T3315] veth0_macvtap: entered promiscuous mode [ 33.321032][ T3315] veth1_macvtap: entered promiscuous mode [ 33.329429][ T3316] veth1_vlan: entered promiscuous mode [ 33.343271][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.372845][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.390542][ T3316] veth0_macvtap: entered promiscuous mode [ 33.418685][ T3316] veth1_macvtap: entered promiscuous mode [ 33.427719][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.444024][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.454628][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.471758][ T2756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.486062][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.494107][ T3319] veth0_vlan: entered promiscuous mode [ 33.500499][ T3320] veth0_vlan: entered promiscuous mode [ 33.512574][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.527573][ T2046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.543682][ T3320] veth1_vlan: entered promiscuous mode [ 33.550644][ T2046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566339][ T2046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.577095][ T3319] veth1_vlan: entered promiscuous mode [ 33.584103][ T2046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.609336][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.629839][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 33.629857][ T29] audit: type=1400 audit(1767107249.854:99): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.660333][ T29] audit: type=1400 audit(1767107249.854:100): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.685609][ T29] audit: type=1400 audit(1767107249.884:101): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.719430][ T3319] veth0_macvtap: entered promiscuous mode [ 33.734321][ T29] audit: type=1400 audit(1767107249.954:102): avc: denied { map_create } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.752956][ T3320] veth0_macvtap: entered promiscuous mode [ 33.753397][ T29] audit: type=1400 audit(1767107249.954:103): avc: denied { perfmon } for pid=3485 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.762542][ T3320] veth1_macvtap: entered promiscuous mode [ 33.791794][ T29] audit: type=1400 audit(1767107250.014:104): avc: denied { map_read map_write } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.814924][ T29] audit: type=1400 audit(1767107250.014:105): avc: denied { prog_load } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.833744][ T29] audit: type=1400 audit(1767107250.014:106): avc: denied { bpf } for pid=3485 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.849205][ T3319] veth1_macvtap: entered promiscuous mode [ 33.854109][ T29] audit: type=1400 audit(1767107250.024:107): avc: denied { create } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.878861][ T29] audit: type=1400 audit(1767107250.034:108): avc: denied { setopt } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.888500][ T3324] veth0_vlan: entered promiscuous mode [ 33.921018][ T3324] veth1_vlan: entered promiscuous mode [ 33.936279][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.948789][ T3493] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6'. [ 33.959902][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.970598][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.989963][ T2046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.004981][ T3493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=3493 comm=syz.2.6 [ 34.019044][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.030533][ T2046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.041018][ T2046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.052216][ T2046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.067360][ T3495] xt_TCPMSS: Only works on TCP SYN packets [ 34.073701][ T3324] veth0_macvtap: entered promiscuous mode [ 34.083909][ T2046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.093168][ T2046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.102213][ T2046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.111867][ T2046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.122237][ T3324] veth1_macvtap: entered promiscuous mode [ 34.175286][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.203945][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.226196][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 34.244107][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.256559][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.266789][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 34.295990][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.328901][ T3510] loop3: detected capacity change from 0 to 512 [ 34.356815][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.381544][ T3510] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 34.401382][ T3510] EXT4-fs (loop3): 1 truncate cleaned up [ 34.424538][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.453835][ T3519] netlink: 'syz.2.11': attribute type 27 has an invalid length. [ 34.519543][ T3523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.594291][ T3510] ext4: Unknown parameter '' [ 34.610199][ T3523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.628922][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.682215][ T3533] program syz.1.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.698470][ T3523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.717196][ T3537] tipc: Started in network mode [ 34.722373][ T3537] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 34.743013][ T3537] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 34.751688][ T3537] tipc: Enabled bearer , priority 10 [ 34.775147][ T3540] loop2: detected capacity change from 0 to 512 [ 34.785625][ T3540] EXT4-fs (loop2): failed to initialize system zone (-117) [ 34.794918][ T3540] EXT4-fs (loop2): mount failed [ 34.839253][ T3545] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.192499][ T3556] process 'syz.0.22' launched './file1' with NULL argv: empty string added [ 35.234195][ T3556] loop0: detected capacity change from 0 to 2048 [ 35.246786][ T3559] loop2: detected capacity change from 0 to 512 [ 35.275936][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.289191][ T3559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.301884][ T3306] Alternate GPT is invalid, using primary GPT. [ 35.308576][ T3306] loop0: p2 p3 p7 [ 35.345701][ T3559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 35.355538][ T3559] System zones: 1-12 [ 35.356887][ T3556] Alternate GPT is invalid, using primary GPT. [ 35.365957][ T3556] loop0: p2 p3 p7 [ 35.376502][ T3559] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.379860][ T3007] Alternate GPT is invalid, using primary GPT. [ 35.396238][ T3007] loop0: p2 p3 p7 [ 35.432189][ T3559] EXT4-fs (loop2): 1 truncate cleaned up [ 35.440049][ T3559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.485111][ T3559] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 35.491850][ T3559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 35.499826][ T3559] vhci_hcd vhci_hcd.0: Device attached [ 35.579452][ T3565] vhci_hcd: connection closed [ 35.581805][ T123] vhci_hcd vhci_hcd.2: stop threads [ 35.591823][ T123] vhci_hcd vhci_hcd.2: release socket [ 35.597308][ T123] vhci_hcd vhci_hcd.2: disconnect device [ 35.650336][ T3566] xt_CT: No such helper "pptp" [ 35.927943][ T3523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.954602][ T3580] loop3: detected capacity change from 0 to 512 [ 35.972911][ T3479] tipc: Node number set to 1 [ 35.981602][ T3580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.010388][ T3580] EXT4-fs (loop3): 1 truncate cleaned up [ 36.028338][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.082262][ T3580] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.29: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 36.109283][ T3580] EXT4-fs (loop3): Remounting filesystem read-only [ 36.115973][ T3580] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.29: Deleting old file: nlink 5, error=-117 [ 36.130074][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.139377][ T3584] loop1: detected capacity change from 0 to 512 [ 36.149337][ T3580] syz.3.29 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.166866][ T3585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 36.179851][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.188799][ T3584] netlink: 312 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.197752][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.217106][ T3585] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 36.238247][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.292183][ T3588] Zero length message leads to an empty skb [ 36.350377][ T3595] loop0: detected capacity change from 0 to 512 [ 36.358206][ T3595] EXT4-fs: Ignoring removed i_version option [ 36.364328][ T3595] EXT4-fs: Ignoring removed bh option [ 36.421869][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.479601][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.479601][ T52] loop1: rw=1, sector=528, nr_sectors = 32 limit=512 [ 36.493742][ T3595] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.523078][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.523078][ T52] loop1: rw=1, sector=592, nr_sectors = 32 limit=512 [ 36.549163][ T3614] loop9: detected capacity change from 0 to 7 [ 36.561968][ T3614] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.570864][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.570864][ T52] loop1: rw=1, sector=656, nr_sectors = 32 limit=512 [ 36.587745][ T3595] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.34: iget: bad i_size value: 2533274857506816 [ 36.614565][ T3614] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.622632][ T3614] loop9: unable to read partition table [ 36.628467][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.628467][ T52] loop1: rw=1, sector=720, nr_sectors = 32 limit=512 [ 36.642462][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.642462][ T52] loop1: rw=1, sector=784, nr_sectors = 32 limit=512 [ 36.656223][ T3614] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 36.656223][ T3614] ) failed (rc=-5) [ 36.669380][ T3308] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.670903][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.670903][ T52] loop1: rw=1, sector=848, nr_sectors = 32 limit=512 [ 36.691645][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.691645][ T52] loop1: rw=1, sector=912, nr_sectors = 32 limit=512 [ 36.692491][ T3308] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.725535][ T3308] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.735814][ T3308] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.736042][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.753495][ T3308] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.765094][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.765094][ T52] loop1: rw=1, sector=976, nr_sectors = 32 limit=512 [ 36.779080][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.779080][ T52] loop1: rw=1, sector=1040, nr_sectors = 32 limit=512 [ 36.792866][ T52] kworker/u8:3: attempt to access beyond end of device [ 36.792866][ T52] loop1: rw=1, sector=1104, nr_sectors = 32 limit=512 [ 36.839101][ T3626] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 36.912651][ T3627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 36.936049][ T3634] netlink: 'syz.1.47': attribute type 3 has an invalid length. [ 36.944792][ T3634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.959366][ T123] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.988402][ T123] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.007374][ T123] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.039586][ T123] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.057979][ T3641] FAULT_INJECTION: forcing a failure. [ 37.057979][ T3641] name failslab, interval 1, probability 0, space 0, times 1 [ 37.071156][ T3641] CPU: 1 UID: 0 PID: 3641 Comm: syz.3.49 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.071217][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.071234][ T3641] Call Trace: [ 37.071246][ T3641] [ 37.071255][ T3641] __dump_stack+0x1d/0x30 [ 37.071343][ T3641] dump_stack_lvl+0x95/0xd0 [ 37.071371][ T3641] dump_stack+0x15/0x1b [ 37.071397][ T3641] should_fail_ex+0x265/0x280 [ 37.071427][ T3641] should_failslab+0x8c/0xb0 [ 37.071494][ T3641] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 37.071595][ T3641] ? __d_alloc+0x37/0x340 [ 37.071696][ T3641] __d_alloc+0x37/0x340 [ 37.071728][ T3641] ? bpf_get_stackid+0xf3/0x130 [ 37.071825][ T3641] d_alloc_parallel+0x54/0xcd0 [ 37.071862][ T3641] ? __rcu_read_unlock+0x34/0x70 [ 37.071915][ T3641] ? bpf_trace_run2+0x124/0x1d0 [ 37.071965][ T3641] ? lockref_get_not_dead+0x120/0x1c0 [ 37.072037][ T3641] ? __rcu_read_unlock+0x4f/0x70 [ 37.072120][ T3641] __lookup_slow+0x8c/0x250 [ 37.072204][ T3641] lookup_slow+0x3c/0x60 [ 37.072237][ T3641] link_path_walk+0x946/0xe30 [ 37.072290][ T3641] path_openat+0x1c0/0x23b0 [ 37.072326][ T3641] ? _parse_integer_limit+0x170/0x190 [ 37.072362][ T3641] do_filp_open+0x109/0x230 [ 37.072423][ T3641] ? __pfx_kfree_link+0x10/0x10 [ 37.072456][ T3641] do_sys_openat2+0xa6/0x150 [ 37.072490][ T3641] __x64_sys_openat+0xf2/0x120 [ 37.072526][ T3641] x64_sys_call+0x2b07/0x3000 [ 37.072637][ T3641] do_syscall_64+0xca/0x2b0 [ 37.072706][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.072729][ T3641] RIP: 0033:0x7fa38f1adf90 [ 37.072748][ T3641] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 37.072770][ T3641] RSP: 002b:00007fa38dbf5f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 37.072800][ T3641] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa38f1adf90 [ 37.072815][ T3641] RDX: 0000000000000002 RSI: 00007fa38dbf5fa0 RDI: 00000000ffffff9c [ 37.072906][ T3641] RBP: 00007fa38dbf5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 37.072927][ T3641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 37.072942][ T3641] R13: 00007fa38f406128 R14: 00007fa38f406090 R15: 00007ffd5b08d718 [ 37.072965][ T3641] [ 37.437396][ T3640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3640 comm=syz.4.50 [ 37.743711][ T3487] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.762054][ T3487] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.784090][ T3690] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3690 comm=syz.0.66 [ 37.796485][ T3690] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3690 comm=syz.0.66 [ 37.821344][ T3691] fido_id[3691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.838302][ T3690] loop0: detected capacity change from 0 to 512 [ 37.867733][ T3690] EXT4-fs: dax option not supported [ 37.931909][ T3702] SELinux: failed to load policy [ 38.000587][ T3709] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 38.000587][ T3709] The task syz.4.68 (3709) triggered the difference, watch for misbehavior. [ 38.239897][ T3721] loop2: detected capacity change from 0 to 512 [ 38.259288][ T3723] ======================================================= [ 38.259288][ T3723] WARNING: The mand mount option has been deprecated and [ 38.259288][ T3723] and is ignored by this kernel. Remove the mand [ 38.259288][ T3723] option from the mount to silence this warning. [ 38.259288][ T3723] ======================================================= [ 38.286786][ T3721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.309636][ T3721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 38.324972][ T3721] System zones: 1-12 [ 38.334805][ T3721] EXT4-fs (loop2): 1 truncate cleaned up [ 38.341200][ T3723] EXT4-fs: Ignoring removed orlov option [ 38.365718][ T3721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.385793][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.404042][ T3723] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.417456][ T3721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 38.424100][ T3721] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 38.431779][ T3721] vhci_hcd vhci_hcd.0: Device attached [ 38.464784][ T3723] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.73: bg 0: block 112: padding at end of block bitmap is not set [ 38.494496][ T3728] vhci_hcd: connection closed [ 38.494853][ T826] vhci_hcd vhci_hcd.2: stop threads [ 38.505109][ T826] vhci_hcd vhci_hcd.2: release socket [ 38.510522][ T826] vhci_hcd vhci_hcd.2: disconnect device [ 38.517557][ T3723] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 38.612603][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.635691][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 38.635706][ T29] audit: type=1326 audit(1767107254.864:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.674321][ T29] audit: type=1326 audit(1767107254.864:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.698008][ T29] audit: type=1326 audit(1767107254.864:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.721637][ T29] audit: type=1326 audit(1767107254.864:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.722961][ T3742] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 38.745037][ T29] audit: type=1326 audit(1767107254.864:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.776966][ T29] audit: type=1326 audit(1767107254.864:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.800482][ T29] audit: type=1326 audit(1767107254.864:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.824144][ T29] audit: type=1326 audit(1767107254.864:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.847911][ T29] audit: type=1326 audit(1767107254.864:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 38.871393][ T29] audit: type=1326 audit(1767107254.864:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ace2005 code=0x7ffc0000 [ 39.029710][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 39.146648][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.157222][ T3761] syz.3.83 (3761) used greatest stack depth: 10064 bytes left [ 39.277610][ T3769] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.385376][ T3757] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 39.391958][ T3757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 39.399718][ T3757] vhci_hcd vhci_hcd.0: Device attached [ 39.480577][ T3770] vhci_hcd: connection closed [ 39.480893][ T826] vhci_hcd vhci_hcd.0: stop threads [ 39.491071][ T826] vhci_hcd vhci_hcd.0: release socket [ 39.496585][ T826] vhci_hcd vhci_hcd.0: disconnect device [ 39.694474][ T3777] set_capacity_and_notify: 2 callbacks suppressed [ 39.694490][ T3777] loop3: detected capacity change from 0 to 512 [ 39.729734][ T3777] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.737783][ T3777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 39.747174][ T3777] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.779819][ T3780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.796069][ T3777] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.88: iget: bad i_size value: 12154761577498 [ 39.830351][ T3777] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.88: couldn't read orphan inode 13 (err -117) [ 39.848059][ T3781] loop2: detected capacity change from 0 to 512 [ 40.007032][ T3777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.048467][ T3781] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.112244][ T3777] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.88: dx entry: limit 65535 != root limit 120 [ 40.124337][ T3777] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.88: Corrupt directory, running e2fsck is recommended [ 40.156372][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.91'. [ 40.166127][ T3781] EXT4-fs (loop2): mount failed [ 40.315305][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.456609][ T3797] netlink: 'syz.0.94': attribute type 5 has an invalid length. [ 40.554323][ T3809] pim6reg1: entered promiscuous mode [ 40.559708][ T3809] pim6reg1: entered allmulticast mode [ 40.572053][ T3768] futex_wake_op: syz.2.84 tries to shift op by -1; fix this program [ 40.692350][ T3818] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 40.701212][ T3816] loop2: detected capacity change from 0 to 2048 [ 40.718895][ T3818] loop3: detected capacity change from 0 to 512 [ 40.757279][ T3813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 40.767327][ T3816] Alternate GPT is invalid, using primary GPT. [ 40.773686][ T3816] loop2: p1 p2 p3 [ 40.777676][ T3816] loop2: partition table partially beyond EOD, truncated [ 40.844287][ T3007] Alternate GPT is invalid, using primary GPT. [ 40.850678][ T3007] loop2: p1 p2 p3 [ 40.854494][ T3007] loop2: partition table partially beyond EOD, truncated [ 40.892188][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.910350][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 40.915741][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 41.487497][ T3848] loop1: detected capacity change from 0 to 512 [ 41.510183][ T3848] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.510217][ T3850] loop0: detected capacity change from 0 to 512 [ 41.535852][ T3848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.564205][ T3848] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.577062][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.624928][ T3850] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.644047][ T3859] loop2: detected capacity change from 0 to 512 [ 41.664962][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.693741][ T3859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.786683][ T3859] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.812311][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.832142][ T3866] loop4: detected capacity change from 0 to 512 [ 41.849189][ T3869] loop3: detected capacity change from 0 to 1024 [ 41.856035][ T3866] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.869045][ T3859] FAULT_INJECTION: forcing a failure. [ 41.869045][ T3859] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.870749][ T3866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.882310][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.882472][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.882547][ T3859] Call Trace: [ 41.882577][ T3859] [ 41.882603][ T3859] __dump_stack+0x1d/0x30 [ 41.882686][ T3859] dump_stack_lvl+0x95/0xd0 [ 41.882752][ T3859] dump_stack+0x15/0x1b [ 41.882819][ T3859] should_fail_ex+0x265/0x280 [ 41.882925][ T3859] should_fail+0xb/0x20 [ 41.882990][ T3859] should_fail_usercopy+0x1a/0x20 [ 41.883067][ T3859] _copy_from_user+0x1c/0xb0 [ 41.883306][ T3859] quota_setquota+0x8a/0x350 [ 41.883412][ T3859] do_quotactl+0x5bc/0x670 [ 41.883496][ T3859] __se_sys_quotactl_fd+0x21f/0x3a0 [ 41.883578][ T3859] __x64_sys_quotactl_fd+0x55/0x70 [ 41.883735][ T3859] x64_sys_call+0x1b0b/0x3000 [ 41.883819][ T3859] do_syscall_64+0xca/0x2b0 [ 41.883972][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.884046][ T3859] RIP: 0033:0x7f596cb5f749 [ 41.884112][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.884175][ T3859] RSP: 002b:00007f596b5bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 41.884225][ T3859] RAX: ffffffffffffffda RBX: 00007f596cdb5fa0 RCX: 00007f596cb5f749 [ 41.884270][ T3859] RDX: 0000000000000000 RSI: ffffffff80000801 RDI: 0000000000000004 [ 41.884305][ T3859] RBP: 00007f596b5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 41.884358][ T3859] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 41.884393][ T3859] R13: 00007f596cdb6038 R14: 00007f596cdb5fa0 R15: 00007ffe2a8ab9f8 [ 41.884532][ T3859] [ 42.035455][ T3869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.117'. [ 42.074209][ T3866] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.116: Failed to acquire dquot type 1 [ 42.095054][ T3866] EXT4-fs (loop4): Remounting filesystem read-only [ 42.101794][ T3866] EXT4-fs (loop4): 1 truncate cleaned up [ 42.115948][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.141153][ T3866] pim6reg1: entered promiscuous mode [ 42.141630][ T3876] loop0: detected capacity change from 0 to 1024 [ 42.146577][ T3866] pim6reg1: entered allmulticast mode [ 42.165531][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.216969][ T3876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.235284][ T3876] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.282337][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 42.333695][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.358658][ T3887] syzkaller0: entered allmulticast mode [ 42.363180][ T3880] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.364577][ T3887] syzkaller0: entered promiscuous mode [ 42.382230][ T3887] syzkaller0 (unregistering): left promiscuous mode [ 42.388923][ T3887] syzkaller0 (unregistering): left allmulticast mode [ 42.407242][ T3886] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.118: Freeing blocks not in datazone - block = 0, count = 16 [ 42.445387][ T3890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.472618][ T3308] Alternate GPT is invalid, using primary GPT. [ 42.479281][ T3308] loop2: p1 p2 p3 [ 42.483074][ T3308] loop2: partition table partially beyond EOD, truncated [ 42.491695][ T3890] EXT4-fs (loop3): 1 truncate cleaned up [ 42.501446][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.578859][ T3884] Alternate GPT is invalid, using primary GPT. [ 42.585365][ T3884] loop2: p1 p2 p3 [ 42.589202][ T3884] loop2: partition table partially beyond EOD, truncated [ 42.597265][ T3887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 42.635534][ T2064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 42.652662][ T2064] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.665001][ T2064] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.665001][ T2064] [ 42.674686][ T2064] EXT4-fs (loop0): Total free blocks count 0 [ 42.681993][ T2064] EXT4-fs (loop0): Free/Dirty block details [ 42.688175][ T2064] EXT4-fs (loop0): free_blocks=16 [ 42.693282][ T2064] EXT4-fs (loop0): dirty_blocks=16 [ 42.698469][ T2064] EXT4-fs (loop0): Block reservation details [ 42.704489][ T2064] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 42.726272][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.854824][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.933278][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.954629][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 42.967125][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 43.029879][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.042952][ T3921] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.172304][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.178805][ T3931] vfat: Unknown parameter 'utÿ' [ 43.273441][ T3939] EXT4-fs: Ignoring removed i_version option [ 43.279589][ T3939] EXT4-fs: Ignoring removed bh option [ 43.322074][ T3939] EXT4-fs: dax option not supported [ 43.389764][ T3939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.419516][ T3945] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 43.428163][ T3939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.454900][ T3945] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.143: invalid indirect mapped block 2683928664 (level 1) [ 43.533662][ T3945] EXT4-fs (loop1): 1 truncate cleaned up [ 43.534009][ C0] hrtimer: interrupt took 71940 ns [ 43.568263][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.596784][ T3945] netlink: 'syz.1.143': attribute type 10 has an invalid length. [ 43.609138][ T3945] team0: Failed to send options change via netlink (err -105) [ 43.616700][ T3945] team0: Port device dummy0 added [ 43.639107][ T3966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53248 sclass=netlink_audit_socket pid=3966 comm=syz.0.150 [ 43.652417][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 43.652434][ T29] audit: type=1400 audit(1767107259.874:796): avc: denied { audit_write } for pid=3965 comm="syz.0.150" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 43.679673][ T29] audit: type=1107 audit(1767107259.874:797): pid=3965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 43.698447][ T3953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 43.714611][ T29] audit: type=1400 audit(1767107259.914:798): avc: denied { name_bind } for pid=3968 comm="syz.4.151" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.736789][ T3953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.749143][ T3970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3970 comm=syz.0.150 [ 43.755226][ T3969] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 43.762371][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.780353][ T29] audit: type=1400 audit(1767107260.004:799): avc: denied { link } for pid=3950 comm="syz.3.145" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.807233][ T3971] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.145'. [ 43.807702][ T3970] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 43.846090][ T3953] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.145: bg 0: block 88: padding at end of block bitmap is not set [ 43.873780][ T29] audit: type=1400 audit(1767107260.034:800): avc: denied { read } for pid=3950 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.893016][ T29] audit: type=1400 audit(1767107260.064:801): avc: denied { create } for pid=3972 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.912391][ T29] audit: type=1400 audit(1767107260.064:802): avc: denied { setopt } for pid=3972 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.968935][ T29] audit: type=1400 audit(1767107260.104:803): avc: denied { setopt } for pid=3965 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.988370][ T29] audit: type=1326 audit(1767107260.174:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d3faf749 code=0x7ffc0000 [ 44.012154][ T29] audit: type=1326 audit(1767107260.174:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d3faf749 code=0x7ffc0000 [ 44.036546][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.046647][ T3970] bond1: entered promiscuous mode [ 44.051913][ T3970] bond1: entered allmulticast mode [ 44.071662][ T3970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.100237][ T3985] netlink: 96 bytes leftover after parsing attributes in process `syz.1.156'. [ 44.151185][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 44.213239][ T3980] EXT4-fs: inline encryption not supported [ 44.226024][ T3980] journal_path: Non-blockdev passed as './file0' [ 44.232450][ T3980] EXT4-fs: error: could not find journal device path [ 44.259327][ T3999] capability: warning: `syz.1.162' uses 32-bit capabilities (legacy support in use) [ 44.285905][ T4001] netlink: 64 bytes leftover after parsing attributes in process `syz.2.163'. [ 44.294861][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 44.324094][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 44.330157][ T4005] netlink: 19 bytes leftover after parsing attributes in process `syz.2.165'. [ 44.358460][ T4007] syzkaller0: entered promiscuous mode [ 44.365424][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 44.386149][ T4008] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 44.425977][ T4017] Driver unsupported XDP return value 0 on prog (id 139) dev N/A, expect packet loss! [ 44.563452][ T4029] openvswitch: netlink: Missing key (keys=40, expected=80) [ 44.686298][ T4032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.749704][ T4032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 44.779597][ T4032] System zones: 1-12 [ 44.794117][ T4032] EXT4-fs (loop4): 1 truncate cleaned up [ 44.829399][ T4032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.854776][ T4006] syzkaller0: left promiscuous mode [ 44.993250][ T4037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.003281][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.041364][ T4043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'. [ 45.051669][ T4043] bridge0: entered allmulticast mode [ 45.057534][ T4043] syz.4.177 uses obsolete (PF_INET,SOCK_PACKET) [ 45.069639][ T4043] set_capacity_and_notify: 12 callbacks suppressed [ 45.069703][ T4043] loop4: detected capacity change from 0 to 512 [ 45.085102][ T4043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.098777][ T4043] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.177: invalid block [ 45.112703][ T4043] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.177: invalid indirect mapped block 4294967295 (level 1) [ 45.127153][ T4043] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.177: invalid indirect mapped block 4294967295 (level 1) [ 45.141728][ T4043] EXT4-fs (loop4): 2 truncates cleaned up [ 45.148416][ T4043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.162404][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 45.171618][ T4043] bridge_slave_1: left allmulticast mode [ 45.177409][ T4043] bridge_slave_1: left promiscuous mode [ 45.183076][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.191884][ T4043] bridge_slave_0: left allmulticast mode [ 45.197639][ T4043] bridge_slave_0: left promiscuous mode [ 45.203430][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.218927][ T4043] bridge0 (unregistering): left allmulticast mode [ 45.298594][ T4052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.312208][ T4052] loop1: detected capacity change from 0 to 128 [ 45.329380][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.400914][ T4065] loop1: detected capacity change from 0 to 512 [ 45.413392][ T4065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.426371][ T4065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 45.434377][ T4065] System zones: 1-12 [ 45.450503][ T4065] EXT4-fs (loop1): 1 truncate cleaned up [ 45.465189][ T4065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.484915][ T4067] SELinux: failed to load policy [ 45.526310][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.784157][ T4091] loop1: detected capacity change from 0 to 1024 [ 45.791426][ T4101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 45.820881][ T4091] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.193: bad orphan inode 134217728 [ 45.898790][ T4091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.127746][ T4113] loop2: detected capacity change from 0 to 512 [ 46.171107][ T4113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.239853][ T4113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 46.312950][ T4113] System zones: 1-12 [ 46.335501][ T4113] EXT4-fs (loop2): 1 truncate cleaned up [ 46.343636][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.353491][ T4113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.393982][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.422650][ T4135] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 46.443718][ T4139] loop1: detected capacity change from 0 to 512 [ 46.520513][ T4139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.535789][ T4139] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.586459][ T4139] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.209: corrupted inode contents [ 46.606472][ T4139] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.209: mark_inode_dirty error [ 46.628245][ T4139] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.209: corrupted inode contents [ 46.713906][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.804042][ T4163] loop1: detected capacity change from 0 to 512 [ 46.831659][ T4163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.843426][ T4163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 46.851474][ T4163] System zones: 1-12 [ 46.856318][ T4163] EXT4-fs (loop1): 1 truncate cleaned up [ 46.862448][ T4163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.966023][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.582057][ T4183] loop3: detected capacity change from 0 to 512 [ 47.595565][ T4183] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.628380][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.642216][ T4189] loop1: detected capacity change from 0 to 128 [ 47.661401][ T4183] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.225: lblock 23 mapped to illegal pblock 18 (length 1) [ 47.679746][ T4193] loop0: detected capacity change from 0 to 512 [ 47.701854][ T4193] FAT-fs (loop0): bogus number of FAT sectors [ 47.708088][ T4193] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 47.717498][ T4193] FAT-fs (loop0): Can't find a valid FAT filesystem [ 47.730022][ T4189] bio_check_eod: 12 callbacks suppressed [ 47.730041][ T4189] syz.1.227: attempt to access beyond end of device [ 47.730041][ T4189] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 47.803862][ T4189] syz.1.227: attempt to access beyond end of device [ 47.803862][ T4189] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 47.867715][ T4203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=4203 comm=syz.1.229 [ 47.880536][ T4203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=4203 comm=syz.1.229 [ 47.911389][ T3319] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /46/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 47.950437][ T3319] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz-executor: path /46/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 48.017173][ T3319] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /46/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 48.055251][ T3319] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.070737][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.091817][ T4215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.106587][ T4215] EXT4-fs (loop1): 1 truncate cleaned up [ 48.115731][ T4217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.126257][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.140211][ T4217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 48.149439][ T4217] System zones: 1-12 [ 48.159449][ T4215] bridge1: entered promiscuous mode [ 48.164774][ T4215] bridge1: entered allmulticast mode [ 48.171111][ T4217] EXT4-fs (loop3): 1 truncate cleaned up [ 48.184947][ T4217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.224082][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.271497][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.331313][ T4225] FAULT_INJECTION: forcing a failure. [ 48.331313][ T4225] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.344771][ T4225] CPU: 0 UID: 0 PID: 4225 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.344835][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.344851][ T4225] Call Trace: [ 48.344858][ T4225] [ 48.344867][ T4225] __dump_stack+0x1d/0x30 [ 48.344947][ T4225] dump_stack_lvl+0x95/0xd0 [ 48.344998][ T4225] dump_stack+0x15/0x1b [ 48.345019][ T4225] should_fail_ex+0x265/0x280 [ 48.345066][ T4225] should_fail_alloc_page+0xf2/0x100 [ 48.345114][ T4225] __alloc_frozen_pages_noprof+0x109/0x360 [ 48.345145][ T4225] alloc_pages_mpol+0xb3/0x260 [ 48.345199][ T4225] alloc_pages_noprof+0x90/0x130 [ 48.345233][ T4225] get_free_pages_noprof+0xc/0x40 [ 48.345265][ T4225] selinux_genfs_get_sid+0x33/0x180 [ 48.345354][ T4225] inode_doinit_with_dentry+0x5fd/0x7a0 [ 48.345444][ T4225] selinux_d_instantiate+0x27/0x40 [ 48.345466][ T4225] security_d_instantiate+0x7a/0xa0 [ 48.345546][ T4225] d_make_persistent+0x4f/0x110 [ 48.345734][ T4225] debugfs_create_dir+0xbc/0x230 [ 48.345779][ T4225] blk_trace_setup_prepare+0x14f/0x300 [ 48.345806][ T4225] blk_trace_setup+0x180/0x300 [ 48.345840][ T4225] sg_ioctl+0x789/0x1360 [ 48.345860][ T4225] ? __pfx_sg_ioctl+0x10/0x10 [ 48.345882][ T4225] __se_sys_ioctl+0xce/0x140 [ 48.345996][ T4225] __x64_sys_ioctl+0x43/0x50 [ 48.346026][ T4225] x64_sys_call+0x14b0/0x3000 [ 48.346068][ T4225] do_syscall_64+0xca/0x2b0 [ 48.346148][ T4225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.346170][ T4225] RIP: 0033:0x7fa38f1af749 [ 48.346185][ T4225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.346264][ T4225] RSP: 002b:00007fa38dc17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.346282][ T4225] RAX: ffffffffffffffda RBX: 00007fa38f405fa0 RCX: 00007fa38f1af749 [ 48.346294][ T4225] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000003 [ 48.346308][ T4225] RBP: 00007fa38dc17090 R08: 0000000000000000 R09: 0000000000000000 [ 48.346377][ T4225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.346388][ T4225] R13: 00007fa38f406038 R14: 00007fa38f405fa0 R15: 00007ffd5b08d718 [ 48.346407][ T4225] [ 48.660879][ T29] kauditd_printk_skb: 1740 callbacks suppressed [ 48.660939][ T29] audit: type=1400 audit(1767107264.884:2546): avc: denied { getopt } for pid=4234 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.808888][ T4248] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.837106][ T4248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 48.854808][ T4248] System zones: 1-12 [ 48.859574][ T4248] EXT4-fs (loop1): 1 truncate cleaned up [ 48.869401][ T4248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.941280][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.952510][ T4255] FAULT_INJECTION: forcing a failure. [ 48.952510][ T4255] name failslab, interval 1, probability 0, space 0, times 0 [ 48.965392][ T4255] CPU: 1 UID: 0 PID: 4255 Comm: syz.4.249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.965426][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.965442][ T4255] Call Trace: [ 48.965451][ T4255] [ 48.965460][ T4255] __dump_stack+0x1d/0x30 [ 48.965548][ T4255] dump_stack_lvl+0x95/0xd0 [ 48.965646][ T4255] dump_stack+0x15/0x1b [ 48.965666][ T4255] should_fail_ex+0x265/0x280 [ 48.965694][ T4255] should_failslab+0x8c/0xb0 [ 48.965722][ T4255] __kmalloc_noprof+0xb9/0x5a0 [ 48.965752][ T4255] ? usb_alloc_urb+0x42/0xc0 [ 48.965792][ T4255] usb_alloc_urb+0x42/0xc0 [ 48.965827][ T4255] alloc_async+0x41/0x90 [ 48.965861][ T4255] proc_do_submiturb+0x76d/0x1d20 [ 48.965922][ T4255] proc_submiturb+0x7b/0xa0 [ 48.965950][ T4255] usbdev_ioctl+0xcb6/0x1700 [ 48.965983][ T4255] ? __pfx_usbdev_ioctl+0x10/0x10 [ 48.966045][ T4255] __se_sys_ioctl+0xce/0x140 [ 48.966088][ T4255] __x64_sys_ioctl+0x43/0x50 [ 48.966128][ T4255] x64_sys_call+0x14b0/0x3000 [ 48.966170][ T4255] do_syscall_64+0xca/0x2b0 [ 48.966213][ T4255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.966241][ T4255] RIP: 0033:0x7fa3d3faf749 [ 48.966260][ T4255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.966340][ T4255] RSP: 002b:00007fa3d2a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.966440][ T4255] RAX: ffffffffffffffda RBX: 00007fa3d4205fa0 RCX: 00007fa3d3faf749 [ 48.966452][ T4255] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000006 [ 48.966494][ T4255] RBP: 00007fa3d2a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.966506][ T4255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.966518][ T4255] R13: 00007fa3d4206038 R14: 00007fa3d4205fa0 R15: 00007ffcbc5c5488 [ 48.966547][ T4255] [ 49.281061][ T4263] xt_hashlimit: max too large, truncated to 1048576 [ 49.504614][ T4275] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.515693][ T4275] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.533235][ T4275] JBD2: no valid journal superblock found [ 49.539259][ T4275] EXT4-fs (loop4): Could not load journal inode [ 49.560634][ T4275] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 49.573680][ T4275] __nla_validate_parse: 8 callbacks suppressed [ 49.573694][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 49.591599][ T4275] ip6gre1: entered allmulticast mode [ 49.631405][ T4284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.647200][ T4284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 49.656420][ T4284] System zones: 1-12 [ 49.661379][ T4284] EXT4-fs (loop3): 1 truncate cleaned up [ 49.667915][ T4284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.682320][ T4287] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.695324][ T4287] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.702909][ T29] audit: type=1400 audit(1767107265.924:2547): avc: denied { read } for pid=4289 comm="syz.4.263" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.728357][ T29] audit: type=1400 audit(1767107265.924:2548): avc: denied { open } for pid=4289 comm="syz.4.263" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.752428][ T29] audit: type=1400 audit(1767107265.934:2549): avc: denied { read write } for pid=4286 comm="syz.2.262" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.764082][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.776804][ T29] audit: type=1400 audit(1767107265.934:2550): avc: denied { open } for pid=4286 comm="syz.2.262" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.811637][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.841985][ T29] audit: type=1326 audit(1767107266.054:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38f1af749 code=0x7ffc0000 [ 49.865481][ T29] audit: type=1326 audit(1767107266.054:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa38f1af749 code=0x7ffc0000 [ 49.889089][ T29] audit: type=1326 audit(1767107266.054:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38f1af749 code=0x7ffc0000 [ 49.912529][ T29] audit: type=1326 audit(1767107266.054:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38f1af749 code=0x7ffc0000 [ 49.944011][ T29] audit: type=1400 audit(1767107266.164:2555): avc: denied { compute_member } for pid=4301 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.973919][ T4300] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 49.980477][ T4300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.988789][ T4300] vhci_hcd vhci_hcd.0: Device attached [ 50.010118][ T4300] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4300 comm=syz.2.264 [ 50.039762][ T4300] netlink: 'syz.2.264': attribute type 3 has an invalid length. [ 50.047993][ T4300] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 50.056220][ T4300] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.264'. [ 50.142844][ T4305] vhci_hcd: connection closed [ 50.142939][ T2046] vhci_hcd vhci_hcd.2: stop threads [ 50.153057][ T2046] vhci_hcd vhci_hcd.2: release socket [ 50.158550][ T2046] vhci_hcd vhci_hcd.2: disconnect device [ 50.184774][ T3487] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 50.209251][ T4330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.370555][ T4348] 9pnet_fd: Insufficient options for proto=fd [ 50.394100][ T4351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 50.517778][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 50.563846][ T4375] set_capacity_and_notify: 6 callbacks suppressed [ 50.563865][ T4375] loop0: detected capacity change from 0 to 1024 [ 50.577447][ T4375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.599554][ T4375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.616908][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 50.679597][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.242790][ T4401] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 64.254051][ T4401] SELinux: failed to load policy [ 64.260057][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.267520][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.275404][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.282814][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.370680][ T4404] loop2: detected capacity change from 0 to 1024 [ 64.388599][ T4409] loop1: detected capacity change from 0 to 1024 [ 64.415655][ T4409] ext4: Bad value for 'max_dir_size_kb' [ 64.610012][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 64.610029][ T29] audit: type=1400 audit(1767107280.834:2695): avc: denied { wake_alarm } for pid=4428 comm="syz.1.313" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.651401][ T29] audit: type=1400 audit(1767107280.844:2696): avc: denied { read } for pid=4428 comm="syz.1.313" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.674624][ T29] audit: type=1400 audit(1767107280.864:2697): avc: granted { setsecparam } for pid=4427 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 64.739610][ T29] audit: type=1326 audit(1767107280.964:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.2.300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f596cb5f749 code=0x0 [ 64.821863][ T29] audit: type=1400 audit(1767107281.034:2699): avc: denied { ioctl } for pid=4433 comm="syz.3.314" path="socket:[8344]" dev="sockfs" ino=8344 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.858503][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 64.875116][ T4404] netlink: 252 bytes leftover after parsing attributes in process `syz.2.300'. [ 64.976391][ T4441] loop0: detected capacity change from 0 to 512 [ 65.001983][ T4441] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.010065][ T4441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 65.021526][ T4441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.028135][ T4441] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.316: iget: bad i_size value: 12154761577498 [ 65.041765][ T4441] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.316: couldn't read orphan inode 13 (err -117) [ 65.054568][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 65.082690][ T4441] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.316: dx entry: limit 65535 != root limit 120 [ 65.094959][ T4441] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.316: Corrupt directory, running e2fsck is recommended [ 65.145548][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.213004][ T29] audit: type=1400 audit(1767107281.414:2700): avc: denied { mount } for pid=4453 comm="syz.0.319" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.277297][ T29] audit: type=1400 audit(1767107281.484:2701): avc: denied { cpu } for pid=4453 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.301191][ T4458] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 65.318909][ T4458] SELinux: failed to load policy [ 65.333451][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.340959][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.382128][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.389772][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.411556][ T4462] loop2: detected capacity change from 0 to 1024 [ 65.418638][ T4462] ext4: Bad value for 'max_dir_size_kb' [ 65.424847][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 65.547330][ T4470] loop1: detected capacity change from 0 to 1024 [ 65.626661][ T4473] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 65.701087][ T4476] loop0: detected capacity change from 0 to 512 [ 65.729303][ T4476] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 65.745250][ T4476] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.775321][ T4476] EXT4-fs (loop0): mount failed [ 65.802015][ T29] audit: type=1326 audit(1767107282.024:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.1.326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43acaf749 code=0x0 [ 65.811330][ T4486] netlink: 'syz.2.341': attribute type 5 has an invalid length. [ 65.891730][ T29] audit: type=1400 audit(1767107282.104:2703): avc: denied { mount } for pid=4490 comm="syz.4.332" name="/" dev="autofs" ino=7876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 66.011564][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 66.046799][ T4470] netlink: 252 bytes leftover after parsing attributes in process `syz.1.326'. [ 66.053432][ T4500] loop3: detected capacity change from 0 to 512 [ 66.088774][ T4500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.109980][ T4471] futex_wake_op: syz.0.324 tries to shift op by -1; fix this program [ 66.130244][ T4500] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.141143][ T4512] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 66.148829][ T4512] SELinux: failed to load policy [ 66.170869][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.178552][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.240264][ T4518] loop4: detected capacity change from 0 to 1024 [ 66.248696][ T4518] ext4: Bad value for 'max_dir_size_kb' [ 66.288981][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.296461][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.342642][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.448305][ T4527] netlink: 48 bytes leftover after parsing attributes in process `syz.0.340'. [ 66.556880][ T4536] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 66.739415][ T4554] loop3: detected capacity change from 0 to 1024 [ 66.826489][ T4556] loop4: detected capacity change from 0 to 4096 [ 66.845192][ T4556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.874127][ T4556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.077698][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 67.106769][ T4554] netlink: 252 bytes leftover after parsing attributes in process `syz.3.351'. [ 67.312619][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.369131][ T4570] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 67.391863][ T4570] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 67.527205][ T4585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.563172][ T4585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 67.573100][ T4593] netlink: 'syz.4.366': attribute type 5 has an invalid length. [ 67.612316][ T4585] System zones: 1-12 [ 67.617300][ T4585] EXT4-fs (loop2): 1 truncate cleaned up [ 67.623842][ T4585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.637316][ T4564] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.652559][ T4564] EXT4-fs (loop3): mount failed [ 67.687381][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.732441][ T4564] futex_wake_op: syz.3.352 tries to shift op by -1; fix this program [ 68.108474][ T4626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.126772][ T4626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 68.134922][ T4626] System zones: 1-12 [ 68.650168][ T4635] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 68.662341][ T4626] EXT4-fs (loop2): 1 truncate cleaned up [ 68.689536][ T4626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.759232][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.968049][ T4664] SELinux: failed to load policy [ 69.006802][ T4671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.071018][ T4671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 69.079461][ T4671] System zones: 1-12 [ 69.084664][ T4671] EXT4-fs (loop0): 1 truncate cleaned up [ 69.090926][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.225256][ T4685] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.243903][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.496983][ T4711] set_capacity_and_notify: 6 callbacks suppressed [ 69.497002][ T4711] loop4: detected capacity change from 0 to 512 [ 69.519069][ T4711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.532081][ T4711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 69.541331][ T4711] System zones: 1-12 [ 69.546597][ T4711] EXT4-fs (loop4): 1 truncate cleaned up [ 69.552784][ T4711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.565242][ T4719] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 69.595373][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.615283][ T4723] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 69.686710][ T4723] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 69.755648][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 69.755664][ T29] audit: type=1400 audit(1767107285.984:2906): avc: denied { bind } for pid=4744 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.797531][ T29] audit: type=1400 audit(1767107285.994:2907): avc: denied { setopt } for pid=4744 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.832854][ T29] audit: type=1400 audit(1767107286.054:2908): avc: denied { create } for pid=4746 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.855904][ T29] audit: type=1400 audit(1767107286.054:2909): avc: denied { write } for pid=4746 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.885253][ T4752] loop4: detected capacity change from 0 to 512 [ 69.892624][ T4752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.907355][ T4752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 69.932689][ T4752] System zones: 1-12 [ 69.940204][ T4752] EXT4-fs (loop4): 1 truncate cleaned up [ 69.965818][ T4752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.131432][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.232446][ T4778] loop2: detected capacity change from 0 to 1024 [ 70.252919][ T4778] EXT4-fs: inline encryption not supported [ 70.259046][ T4778] EXT4-fs: Ignoring removed orlov option [ 70.317673][ T4778] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.378745][ T4778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 70.426040][ T4793] loop4: detected capacity change from 0 to 512 [ 70.436685][ T4778] System zones: 0-1, 3-12 [ 70.452982][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.469402][ T4793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.487517][ T29] audit: type=1400 audit(1767107286.714:2910): avc: denied { name_bind } for pid=4796 comm="+}[@" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 70.531683][ T4793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 70.559286][ T4778] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 70.571754][ T4778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.571754][ T4778] [ 70.581477][ T4778] EXT4-fs (loop2): Total free blocks count 0 [ 70.587511][ T4778] EXT4-fs (loop2): Free/Dirty block details [ 70.593520][ T4778] EXT4-fs (loop2): free_blocks=0 [ 70.598614][ T4778] EXT4-fs (loop2): dirty_blocks=0 [ 70.603676][ T4778] EXT4-fs (loop2): Block reservation details [ 70.609820][ T4778] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 70.623172][ T4793] System zones: 1-12 [ 70.642005][ T4793] EXT4-fs (loop4): 1 truncate cleaned up [ 70.666709][ T29] audit: type=1400 audit(1767107286.734:2911): avc: denied { create } for pid=4796 comm="+}[@" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.687142][ T29] audit: type=1400 audit(1767107286.734:2912): avc: denied { write } for pid=4796 comm="+}[@" name="file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.709227][ T29] audit: type=1400 audit(1767107286.734:2913): avc: denied { open } for pid=4796 comm="+}[@" path="/105/file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.731514][ T29] audit: type=1400 audit(1767107286.734:2914): avc: denied { setattr } for pid=4796 comm="+}[@" name="file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.740106][ T4793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.753594][ T29] audit: type=1400 audit(1767107286.734:2915): avc: denied { ioctl } for pid=4796 comm="+}[@" path="/105/file0" dev="tmpfs" ino=570 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.830056][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.845078][ T1661] ================================================================== [ 70.853227][ T1661] BUG: KCSAN: data-race in wb_wait_for_completion / writeback_sb_inodes [ 70.861620][ T1661] [ 70.863970][ T1661] write to 0xffffc9000168bca8 of 8 bytes by task 3315 on cpu 1: [ 70.871718][ T1661] wb_wait_for_completion+0x90/0x360 [ 70.877051][ T1661] sync_inodes_sb+0x120/0x460 [ 70.881771][ T1661] sync_filesystem+0x102/0x190 [ 70.886568][ T1661] generic_shutdown_super+0x44/0x210 [ 70.891981][ T1661] kill_block_super+0x2a/0x70 [ 70.896860][ T1661] ext4_kill_sb+0x42/0x80 [ 70.901214][ T1661] deactivate_locked_super+0x75/0x1c0 [ 70.906621][ T1661] deactivate_super+0x97/0xa0 [ 70.911339][ T1661] cleanup_mnt+0x2a9/0x320 [ 70.915782][ T1661] __cleanup_mnt+0x19/0x20 [ 70.920233][ T1661] task_work_run+0x131/0x1a0 [ 70.924842][ T1661] exit_to_user_mode_loop+0x1fe/0x740 [ 70.930231][ T1661] do_syscall_64+0x1e1/0x2b0 [ 70.934854][ T1661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.940780][ T1661] [ 70.943121][ T1661] read to 0xffffc9000168bca8 of 8 bytes by task 1661 on cpu 0: [ 70.950680][ T1661] writeback_sb_inodes+0x4ce/0xb20 [ 70.955846][ T1661] wb_writeback+0x252/0x5c0 [ 70.960393][ T1661] wb_workfn+0x194/0x910 [ 70.964697][ T1661] process_scheduled_works+0x4ce/0x9d0 [ 70.970201][ T1661] worker_thread+0x582/0x770 [ 70.974819][ T1661] kthread+0x489/0x510 [ 70.978922][ T1661] ret_from_fork+0x149/0x290 [ 70.983544][ T1661] ret_from_fork_asm+0x1a/0x30 [ 70.988332][ T1661] [ 70.990851][ T1661] value changed: 0x0000000000000000 -> 0x00000000ffffa641 [ 70.998142][ T1661] [ 71.000477][ T1661] Reported by Kernel Concurrency Sanitizer on: [ 71.006656][ T1661] CPU: 0 UID: 0 PID: 1661 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.016569][ T1661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.026712][ T1661] Workqueue: writeback wb_workfn (flush-7:2) [ 71.032744][ T1661] ================================================================== [ 71.042534][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.