last executing test programs: 3.155478513s ago: executing program 3 (id=1661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000300)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@nojoliet}, {@gid}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100feffff7f0300000000000006", @ANYRES32=r11, @ANYBLOB="600000108008000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getpgrp(0xffffffffffffffff) r12 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f00000001c0)={0x2, 0xf562, 0x2}) r13 = dup(r12) execveat(r13, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.998058133s ago: executing program 3 (id=1667): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@user_xattr}]}, 0x1, 0x446, &(0x7f0000001a00)="$eJzs289rHFUcAPDvzCbpbxNL/dEfarSKxR9Jk9bagxdBwYOCoId6jElaYreNNBFsCRJF6lEK3sWj4F/gSS+CngSvepdCkVxaPa3M7kyyu9lNs8mmW93PB6Z9b+Zt3ve7M2/zZl42gL41mv2TROyPiN8jYrhWbWwwWvvvzsrS9N8rS9NJVCrv/JVU291eWZoumhav21dUBiLSz5M42qLfhavXLk6Vy7NX8vr44qUPxxeuXntx7tLUhdkLs5cnz549fWri5TOTL3Ulzyyv20c+mT92+I33brw1fe7G+z9/lxT5N+XRJaMbHXymUulyd711oK6cDPQwEDpSqg3TGKyO/+EoxdrJG47XPyvKQ70KENgxlUql8nD7w8sV4H8siV5HAPRG8Ys+u/8tts3PHpLtTj967tartRugLO87+VY7MhBp3maw6f62m0Yj4tzyP19nW+zMcwgAgAY/ZPOfF1rN/9Kofy70QL6GMhIRD0bEwYg4ExGHIuKhiGrbRyLi0Q77b14kWT//SW9uKbFNyuZ/r+RrW43zv2L2FyOlvHagmv9gcn6uPHsyf09OxOCurD6xQR8/vvbbl+2O1c//si3rv5gL5nHcHNjV+JqZqcWp7eRc79anEUcGWuWfrK4EZLP8wxFxZIt9zD337bF2x+6e/wa6sM5U+Sbi2dr5X46m/AvJWk+t1ifHd0d59uR4cVWs98uv199u1/+28u+C7PzvbXn9r+Y/ktSv1y503sf1P75oe0+z1et/KHm3Yd/HU4uLVyYihpI3a0HX759saje51j7L/8Tx1uP/YKy9E0cjIruIH4uIxyPiiTz2JyPiqYg43j79JOLpD7ae/87K8p/p6PyvFYaieU/rQuniT983dDrSSf7Z+T9dLZ3I92zm828zcW3tagYAAID/njQi9keSjq2W03RsrPY3/Idib1qeX1h8/vz8R5dnat8RGInBtHjSNVz3PHQiv60v6pNN9VP5c+OvSnuq9bHp+fJMr5OHPrevzfjP/FnqdXTAjvN9Lehfxj/0L+Mf+pfxD/2rxfjf04s4gHuvxfhPexEHcO81jX/LftBH3P9D/zL+oX8Z/9CXFvbE3b8kr6CwrhDpfRFGh4Xd+XV/v8RTV0iSiO3/nCS6FE+PP5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC65N8AAAD//2mo3K8=") r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c159"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3, 0x6}, {0x2, 0xb}, {0xc, 0xd}}, [{0x8, 0xb, 0xb}, {0x8, 0xb, 0x75}, {0x8, 0xb, 0xf31}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x896}, {0x8, 0xb, 0xca}]}, 0x54}, 0x1, 0x0, 0x0, 0x24054}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x810) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") close_range(r1, 0xffffffffffffffff, 0x0) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x800000009) 2.724236058s ago: executing program 2 (id=1673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000300)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@nojoliet}, {@gid}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100feffff7f0300000000000006", @ANYRES32=r11, @ANYBLOB="600000108008000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getpgrp(0xffffffffffffffff) r12 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f00000001c0)={0x2, 0xf562, 0x2}) r13 = dup(r12) write$binfmt_elf64(r13, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46"], 0x178) execveat(r13, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.650118647s ago: executing program 2 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x22, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x80041285, &(0x7f0000001080)) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0xfea000, 0x2000402) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x8000000, 0x25dfdc01, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x4, 0x2}, 0x70bd2a, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x50bd2d, 0x6, [0x57054dd1]}}]}, 0x160}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) 2.131157045s ago: executing program 3 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x22, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x80041285, &(0x7f0000001080)) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0xfea000, 0x2000402) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x8000000, 0x25dfdc01, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x4, 0x2}, 0x70bd2a, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x50bd2d, 0x6, [0x57054dd1]}}]}, 0x160}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) 1.851674021s ago: executing program 0 (id=1685): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.708187969s ago: executing program 2 (id=1686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x198) r2 = getgid() fchownat(r1, &(0x7f0000000040)='./file0\x00', 0x0, r2, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) r5 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='Hh\x7fl\xb1\x84f\x86\f\n\x00', &(0x7f0000000340)='dE\x00', 0x0) close(r5) 1.556282419s ago: executing program 2 (id=1687): migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 1.555784049s ago: executing program 0 (id=1688): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 1.496097167s ago: executing program 0 (id=1689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_read_part_table(0x593, &(0x7f0000000000)="$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") 1.464544141s ago: executing program 2 (id=1690): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) inotify_init1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) 1.439578284s ago: executing program 0 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 1.398691999s ago: executing program 0 (id=1693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x1f, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18002700000200"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000008000000000000000b00000005960200010000009500000000000000b54dfb7e99137c0edcd05026dd3f7d323a0ff1a94eb5cfa90226c93b56f4a84e5220b1012671c5c267f63b1fbf2f3bb1fa522b92fbdb1951a51e9916205761f98a5d972a4fcff6251a76f2"], &(0x7f0000000300)='GPL\x00', 0xa, 0x72, &(0x7f0000000e80)=""/114, 0x41000, 0x14, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x9, &(0x7f00000004c0)=[r6], &(0x7f0000000c80)=[{0x2, 0x4, 0x6, 0x2}, {0x2, 0x4, 0x10, 0x1}, {0x1, 0x3, 0xf, 0x8}, {0x0, 0x5, 0x8, 0x3}, {0x6, 0x2, 0xe, 0x1}, {0x4, 0x2, 0xc, 0x8}, {0x2, 0x1, 0xe, 0x6}, {0x2, 0x1, 0x8, 0x9}, {0x2, 0x2, 0x3, 0x2}], 0x10, 0xe}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000780001060000201000010080470000000700000004008480"], 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x1ff, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.292316023s ago: executing program 4 (id=1695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 1.277224395s ago: executing program 4 (id=1696): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008000) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) setregid(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getgroups(0x5, &(0x7f0000000980)=[0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xee00]) statx(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x6000, 0x800, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000055c0)=0xe8) r9 = getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000056c0)={&(0x7f00000007c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000d40)={0x154, 0x3c, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x81, 0xfc, 0x0, 0x1, [@nested={0x4, 0x50}, @typed={0x8, 0x4c, 0x0, 0x0, @str='pci\x00'}, @generic="5851b32e66d851af41e5cd817edc70d196c9a848ce5a9f36087039be502845c6329a0de27c84acf49da7100a4d2e8038fe6eb26b43fa99858404dce499f4e5147df523fc3ff7c105c7deda7bfe2e607f0ccf15dbc5f2aaa932c9c445263cc3c14d2dfd30efc296c3f1ab3f49b4", @nested={0x4, 0xab}]}, @nested={0x4, 0x5e}, @generic="fc17b2fb77247d0c0dc2c414ef038090d4a0f09f4a3c9fc834ee3cd4218bf41ea032b1ff138c10876599c34a0694d6e943919f84613de771009eec3cca3c16fd0793cc001ef0a3983b6e68dadd575f72f8d75714516d96e333336543b9b3e7881c3e2a54958a3345ddf89e4ffbfc17a9c84c", @nested={0x4, 0xea}, @typed={0x8, 0x111, 0x0, 0x0, @uid}, @generic="6611a386ed13df1b2a080a0addfc371ee68189e2ea9db2d37a625317b5f570a5c22491033def9989b8228f2beb0c208d9c1a1dd2b5ea", @typed={0x8, 0x14c, 0x0, 0x0, @fd}]}, 0x154}, {0x0}], 0x2, &(0x7f0000005600)=[@rights={{0x18, 0x1, 0x1, [r7, r6]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0xb0, 0x40000}, 0x90) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x6}, [{0x2, 0x5}, {0x2, 0x3}, {}, {0x2, 0x6}, {0x2, 0x5}], {0x4, 0x4}, [{0x8, 0x6}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0xc}, {0x8, 0x3, r3}, {0x8, 0x0, r4}, {0x8, 0x4, r5}, {0x8, 0x2, r9}, {0x8, 0x2, r10}]}, 0x94, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r12, 0x0, 0x9}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x7fffffffffffffff, 0x2000) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r13, 0xc0502100, &(0x7f0000000440)) 1.254795508s ago: executing program 3 (id=1697): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@user_xattr}]}, 0x1, 0x446, &(0x7f0000001a00)="$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") r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c159"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) socket$inet(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0x2, 0xb}, {0xc, 0xd}}, [{0x8, 0xb, 0xb}, {0x8, 0xb, 0x75}, {0x8, 0xb, 0xf31}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x896}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24054}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x810) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 1.212003693s ago: executing program 0 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x22, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x80041285, &(0x7f0000001080)) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0xfea000, 0x2000402) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x8000000, 0x25dfdc01, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x4, 0x2}, 0x70bd2a, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x50bd2d, 0x6, [0x57054dd1]}}]}, 0x160}}, 0x0) 1.104779327s ago: executing program 1 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fc, 0xf9}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x4c00000000000000) 1.08225992s ago: executing program 1 (id=1700): migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 1.044796735s ago: executing program 3 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fc, 0xf9}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x4c00000000000000) 757.176642ms ago: executing program 3 (id=1702): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000640)}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x67aa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") 694.21948ms ago: executing program 1 (id=1703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 551.185469ms ago: executing program 1 (id=1704): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000300)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@nojoliet}, {@gid}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100feffff7f0300000000000006", @ANYRES32=r8, @ANYBLOB="600000108008000008000300", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) 428.071544ms ago: executing program 2 (id=1705): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 299.726071ms ago: executing program 4 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 276.474274ms ago: executing program 1 (id=1707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r3, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x809, 0x34ef}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 240.849199ms ago: executing program 4 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 204.614493ms ago: executing program 4 (id=1709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_read_part_table(0x593, &(0x7f0000000000)="$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") 25.228196ms ago: executing program 1 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fc, 0xf9}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x4c00000000000000) 0s ago: executing program 4 (id=1711): socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r1 = epoll_create1(0x0) exit(0xffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000003299af2e0000007912000000000000950000000000000001400e16ea7853318912ea9ebb4791e8553fae5fbf30ecb7aa75395a3b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8850}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x3c}}, 0x20004000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000007295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r9 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r10, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r11}], 0x2c, 0xffffffffffbffff8) dup2(r10, r11) fcntl$setown(r10, 0x8, r9) tkill(r9, 0x13) sendto$packet(r3, &(0x7f0000000c00)="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", 0x1000, 0x40, &(0x7f0000000040)={0x11, 0xf5, r6, 0x1, 0x2}, 0x14) kernel console output (not intermixed with test programs): /0x3000 [ 59.554400][ T5501] do_syscall_64+0xca/0x2b0 [ 59.554438][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.554503][ T5501] RIP: 0033:0x7f0c66bbf749 [ 59.554518][ T5501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.554615][ T5501] RSP: 002b:00007f0c65627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.554638][ T5501] RAX: ffffffffffffffda RBX: 00007f0c66e15fa0 RCX: 00007f0c66bbf749 [ 59.554649][ T5501] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000003 [ 59.554660][ T5501] RBP: 00007f0c65627090 R08: 0000000000000000 R09: 0000000000000000 [ 59.554671][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.554682][ T5501] R13: 00007f0c66e16038 R14: 00007f0c66e15fa0 R15: 00007ffe5ac17e58 [ 59.554699][ T5501] [ 59.900285][ T5519] loop2: detected capacity change from 0 to 1024 [ 60.046075][ T5537] syz.0.814 (5537) used obsolete PPPIOCDETACH ioctl [ 60.052875][ T5537] FAULT_INJECTION: forcing a failure. [ 60.052875][ T5537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.065982][ T5537] CPU: 1 UID: 0 PID: 5537 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.066072][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.066080][ T5537] Call Trace: [ 60.066084][ T5537] [ 60.066089][ T5537] __dump_stack+0x1d/0x30 [ 60.066110][ T5537] dump_stack_lvl+0x95/0xd0 [ 60.066123][ T5537] dump_stack+0x15/0x1b [ 60.066134][ T5537] should_fail_ex+0x265/0x280 [ 60.066149][ T5537] should_fail+0xb/0x20 [ 60.066160][ T5537] should_fail_usercopy+0x1a/0x20 [ 60.066174][ T5537] _copy_to_user+0x20/0xa0 [ 60.066189][ T5537] simple_read_from_buffer+0xb5/0x130 [ 60.066221][ T5537] proc_fail_nth_read+0x10e/0x150 [ 60.066249][ T5537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.066273][ T5537] vfs_read+0x1a8/0x770 [ 60.066288][ T5537] ? __rcu_read_unlock+0x4f/0x70 [ 60.066306][ T5537] ? __fget_files+0x184/0x1c0 [ 60.066375][ T5537] ? mutex_lock+0x58/0x90 [ 60.066402][ T5537] ksys_read+0xda/0x1a0 [ 60.066474][ T5537] __x64_sys_read+0x40/0x50 [ 60.066485][ T5537] x64_sys_call+0x2889/0x3000 [ 60.066499][ T5537] do_syscall_64+0xca/0x2b0 [ 60.066576][ T5537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.066589][ T5537] RIP: 0033:0x7f56835fe15c [ 60.066599][ T5537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.066609][ T5537] RSP: 002b:00007f5682067030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.066693][ T5537] RAX: ffffffffffffffda RBX: 00007f5683855fa0 RCX: 00007f56835fe15c [ 60.066701][ T5537] RDX: 000000000000000f RSI: 00007f56820670a0 RDI: 0000000000000005 [ 60.066708][ T5537] RBP: 00007f5682067090 R08: 0000000000000000 R09: 0000000000000000 [ 60.066715][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.066722][ T5537] R13: 00007f5683856038 R14: 00007f5683855fa0 R15: 00007ffea78497c8 [ 60.066733][ T5537] [ 60.285756][ T5539] loop3: detected capacity change from 0 to 512 [ 60.295256][ T5539] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.305423][ T5539] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.312701][ T5539] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.815: Allocating blocks 41-42 which overlap fs metadata [ 60.326745][ T5539] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.815: Allocating blocks 41-42 which overlap fs metadata [ 60.340828][ T5539] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.815: Failed to acquire dquot type 1 [ 60.352630][ T5539] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 60.367520][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.815: corrupted inode contents [ 60.379490][ T5539] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.815: mark_inode_dirty error [ 60.391244][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.815: corrupted inode contents [ 60.401976][ T5544] loop0: detected capacity change from 0 to 256 [ 60.409649][ T5539] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.815: mark_inode_dirty error [ 60.421318][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.815: corrupted inode contents [ 60.433356][ T5539] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 60.442607][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.815: corrupted inode contents [ 60.454771][ T5539] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.815: mark_inode_dirty error [ 60.466332][ T5539] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 60.475673][ T5539] EXT4-fs (loop3): 1 truncate cleaned up [ 60.514218][ T5544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.817'. [ 60.784915][ T5565] loop3: detected capacity change from 0 to 1024 [ 60.792130][ T5565] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.798700][ T5565] EXT4-fs: inline encryption not supported [ 60.810401][ T5565] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.829167][ T5573] syzkaller0: entered promiscuous mode [ 60.834884][ T5573] syzkaller0: entered allmulticast mode [ 60.847727][ T5565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 60.856767][ T5565] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.824: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.871144][ T5565] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.824: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.892514][ T5565] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.824: Failed to acquire dquot type 0 [ 60.903925][ T5565] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.918974][ T5565] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.824: mark_inode_dirty error [ 60.925892][ T3359] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.940849][ T5565] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 60.945730][ T5580] netlink: 88 bytes leftover after parsing attributes in process `syz.4.830'. [ 60.953062][ T5565] EXT4-fs (loop3): 1 orphan inode deleted [ 60.965748][ T58] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.992678][ T58] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 61.000896][ T3359] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.006009][ T5565] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.824: Invalid inode table block 1 in block_group 0 [ 61.026622][ T5565] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.038276][ T5565] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.824: mark_inode_dirty error [ 61.087079][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 61.090195][ T5585] fido_id[5585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.115031][ T5590] loop1: detected capacity change from 0 to 1024 [ 61.341130][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.348737][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.356238][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.363722][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.371108][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.378572][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.386051][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.393448][ T1071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.400838][ T1071] hid-generic 0000:0000:0000.0002: item fetching failed at offset 8/36 [ 61.416756][ T1071] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 61.464250][ T5622] xt_connbytes: Forcing CT accounting to be enabled [ 61.471003][ T5622] xt_NFQUEUE: number of total queues is 0 [ 61.583212][ T5630] loop0: detected capacity change from 0 to 1024 [ 61.653418][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 62.433190][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 62.485376][ C1] hrtimer: interrupt took 47751 ns [ 62.490737][ T5686] loop1: detected capacity change from 0 to 512 [ 62.507927][ T5686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.548769][ T5686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 62.556893][ T5686] System zones: 1-12 [ 62.562259][ T5686] EXT4-fs (loop1): 1 truncate cleaned up [ 62.923344][ T5682] loop2: detected capacity change from 0 to 1764 [ 63.011448][ T5703] FAULT_INJECTION: forcing a failure. [ 63.011448][ T5703] name failslab, interval 1, probability 0, space 0, times 0 [ 63.024194][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: syz.2.878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.024221][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.024232][ T5703] Call Trace: [ 63.024238][ T5703] [ 63.024245][ T5703] __dump_stack+0x1d/0x30 [ 63.024268][ T5703] dump_stack_lvl+0x95/0xd0 [ 63.024288][ T5703] dump_stack+0x15/0x1b [ 63.024310][ T5703] should_fail_ex+0x265/0x280 [ 63.024359][ T5703] should_failslab+0x8c/0xb0 [ 63.024379][ T5703] __kmalloc_cache_noprof+0x65/0x4c0 [ 63.024484][ T5703] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 63.024513][ T5703] ? mutex_unlock+0x4f/0x90 [ 63.024659][ T5703] __se_sys_memfd_create+0x1d6/0x6b0 [ 63.024689][ T5703] __x64_sys_memfd_create+0x31/0x40 [ 63.024740][ T5703] x64_sys_call+0x28cb/0x3000 [ 63.024793][ T5703] do_syscall_64+0xca/0x2b0 [ 63.024827][ T5703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.024891][ T5703] RIP: 0033:0x7f0c66bbf749 [ 63.024907][ T5703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.024927][ T5703] RSP: 002b:00007f0c65626e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 63.024946][ T5703] RAX: ffffffffffffffda RBX: 0000000000000445 RCX: 00007f0c66bbf749 [ 63.025013][ T5703] RDX: 00007f0c65626ef0 RSI: 0000000000000000 RDI: 00007f0c66c44960 [ 63.025025][ T5703] RBP: 0000200000000b00 R08: 00007f0c65626bb7 R09: 00007f0c65626e40 [ 63.025036][ T5703] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 63.025046][ T5703] R13: 00007f0c65626ef0 R14: 00007f0c65626eb0 R15: 00002000000005c0 [ 63.025062][ T5703] [ 63.305693][ T5718] netlink: 72 bytes leftover after parsing attributes in process `syz.2.883'. [ 63.373038][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 63.373051][ T29] audit: type=1404 audit(1768488182.135:16856): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 63.397003][ T29] audit: type=1404 audit(1768488182.155:16857): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 63.412174][ T29] audit: type=1400 audit(1768488182.155:16858): avc: denied { write } for pid=5723 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.459255][ T29] audit: type=1400 audit(1768488182.205:16859): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.483758][ T29] audit: type=1400 audit(1768488182.205:16860): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.507989][ T29] audit: type=1400 audit(1768488182.205:16861): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.533668][ T29] audit: type=1326 audit(1768488182.205:16862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c66bbf749 code=0x7ffc0000 [ 63.557106][ T29] audit: type=1326 audit(1768488182.215:16863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c66bbf749 code=0x7ffc0000 [ 63.580562][ T29] audit: type=1326 audit(1768488182.215:16864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c66bbf749 code=0x7ffc0000 [ 63.604023][ T29] audit: type=1400 audit(1768488182.215:16865): avc: denied { prog_load } for pid=5725 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.629255][ T5733] FAULT_INJECTION: forcing a failure. [ 63.629255][ T5733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.642379][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.0.889 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.642407][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.642417][ T5733] Call Trace: [ 63.642424][ T5733] [ 63.642431][ T5733] __dump_stack+0x1d/0x30 [ 63.642481][ T5733] dump_stack_lvl+0x95/0xd0 [ 63.642572][ T5733] dump_stack+0x15/0x1b [ 63.642593][ T5733] should_fail_ex+0x265/0x280 [ 63.642618][ T5733] should_fail+0xb/0x20 [ 63.642638][ T5733] should_fail_usercopy+0x1a/0x20 [ 63.642665][ T5733] strncpy_from_user+0x27/0x260 [ 63.642793][ T5733] getname_flags+0xae/0x3b0 [ 63.642815][ T5733] user_path_at+0x28/0x130 [ 63.642841][ T5733] __x64_sys_umount+0x85/0xe0 [ 63.642937][ T5733] x64_sys_call+0xd6a/0x3000 [ 63.642964][ T5733] do_syscall_64+0xca/0x2b0 [ 63.643001][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.643244][ T5733] RIP: 0033:0x7f56835ff749 [ 63.643263][ T5733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.643279][ T5733] RSP: 002b:00007f5682067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 63.643296][ T5733] RAX: ffffffffffffffda RBX: 00007f5683855fa0 RCX: 00007f56835ff749 [ 63.643308][ T5733] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000300 [ 63.643318][ T5733] RBP: 00007f5682067090 R08: 0000000000000000 R09: 0000000000000000 [ 63.643329][ T5733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.643340][ T5733] R13: 00007f5683856038 R14: 00007f5683855fa0 R15: 00007ffea78497c8 [ 63.643360][ T5733] [ 63.867300][ T5739] FAULT_INJECTION: forcing a failure. [ 63.867300][ T5739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.880427][ T5739] CPU: 0 UID: 0 PID: 5739 Comm: syz.2.891 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.880455][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.880466][ T5739] Call Trace: [ 63.880473][ T5739] [ 63.880541][ T5739] __dump_stack+0x1d/0x30 [ 63.880567][ T5739] dump_stack_lvl+0x95/0xd0 [ 63.880589][ T5739] dump_stack+0x15/0x1b [ 63.880607][ T5739] should_fail_ex+0x265/0x280 [ 63.880687][ T5739] should_fail+0xb/0x20 [ 63.880704][ T5739] should_fail_usercopy+0x1a/0x20 [ 63.880725][ T5739] fpu__restore_sig+0x12d/0xaa0 [ 63.880754][ T5739] ? x86_task_fpu+0x36/0x60 [ 63.880866][ T5739] ? should_fail_ex+0xdb/0x280 [ 63.880956][ T5739] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 63.880988][ T5739] x64_sys_call+0x274a/0x3000 [ 63.881060][ T5739] do_syscall_64+0xca/0x2b0 [ 63.881142][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.881193][ T5739] RIP: 0033:0x7f0c66bbf749 [ 63.881219][ T5739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.881237][ T5739] RSP: 002b:00007f0c65627038 EFLAGS: 00000246 [ 63.881326][ T5739] RAX: fffffffffffffff7 RBX: 00007f0c66e15fa0 RCX: 00007f0c66bbf749 [ 63.881338][ T5739] RDX: 0000000000000022 RSI: 00002000000004c0 RDI: 0000000000000015 [ 63.881357][ T5739] RBP: 00007f0c65627090 R08: 0000000000000000 R09: 0000000000000000 [ 63.881370][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.881450][ T5739] R13: 00007f0c66e16038 R14: 00007f0c66e15fa0 R15: 00007ffe5ac17e58 [ 63.881519][ T5739] [ 64.144769][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 64.249006][ T5763] process 'syz.3.902' launched '/dev/fd/4' with NULL argv: empty string added [ 64.771856][ T5796] loop0: detected capacity change from 0 to 1024 [ 65.093577][ T5805] loop2: detected capacity change from 0 to 4096 [ 65.108513][ T5805] bridge_slave_0: left allmulticast mode [ 65.114216][ T5805] bridge_slave_0: left promiscuous mode [ 65.119917][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.158599][ T5805] bridge_slave_1: left allmulticast mode [ 65.164295][ T5805] bridge_slave_1: left promiscuous mode [ 65.169924][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.183073][ T5805] bond0: (slave bond_slave_0): Releasing backup interface [ 65.205578][ T5805] bond0: (slave bond_slave_1): Releasing backup interface [ 65.217838][ T5805] team0: Port device team_slave_0 removed [ 65.224500][ T5805] team0: Port device team_slave_1 removed [ 65.230597][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.238799][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.247400][ T5805] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.265396][ T5807] team0: Failed to send options change via netlink (err -105) [ 65.272904][ T5807] team0: Mode changed to "loadbalance" [ 65.315534][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 65.328200][ T5815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'. [ 65.338190][ T5815] FAULT_INJECTION: forcing a failure. [ 65.338190][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 65.350858][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.2.921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.350884][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.350895][ T5815] Call Trace: [ 65.350969][ T5815] [ 65.350977][ T5815] __dump_stack+0x1d/0x30 [ 65.350999][ T5815] dump_stack_lvl+0x95/0xd0 [ 65.351021][ T5815] dump_stack+0x15/0x1b [ 65.351043][ T5815] should_fail_ex+0x265/0x280 [ 65.351086][ T5815] should_failslab+0x8c/0xb0 [ 65.351186][ T5815] __kmalloc_cache_noprof+0x65/0x4c0 [ 65.351210][ T5815] ? __hw_addr_add_ex+0x15a/0x3e0 [ 65.351240][ T5815] __hw_addr_add_ex+0x15a/0x3e0 [ 65.351267][ T5815] dev_mc_add+0x66/0xb0 [ 65.351310][ T5815] igmp_group_added+0xf0/0x420 [ 65.351400][ T5815] ____ip_mc_inc_group+0x46f/0x580 [ 65.351425][ T5815] __ip_mc_inc_group+0x22/0x30 [ 65.351450][ T5815] br_multicast_join_snoopers+0xa4/0x190 [ 65.351517][ T5815] ? br_multicast_open+0x316/0x350 [ 65.351544][ T5815] br_dev_open+0xa4/0xc0 [ 65.351573][ T5815] __dev_open+0x317/0x560 [ 65.351594][ T5815] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 65.351613][ T5815] __dev_change_flags+0x147/0x3c0 [ 65.351637][ T5815] netif_change_flags+0x5a/0xd0 [ 65.351683][ T5815] do_setlink+0x8db/0x2780 [ 65.351711][ T5815] ? xfd_validate_state+0x45/0xf0 [ 65.351740][ T5815] ? _raw_spin_unlock+0x26/0x50 [ 65.351760][ T5815] ? finish_task_switch+0x7a/0x2a0 [ 65.351792][ T5815] ? __schedule+0x85f/0xcd0 [ 65.351817][ T5815] rtnl_newlink+0xea4/0x1360 [ 65.351837][ T5815] ? __rcu_read_unlock+0x4f/0x70 [ 65.351916][ T5815] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 65.351958][ T5815] ? __list_add_valid_or_report+0x38/0xe0 [ 65.351987][ T5815] ? perf_cgroup_switch+0x10c/0x480 [ 65.352009][ T5815] ? xfd_validate_state+0x45/0xf0 [ 65.352093][ T5815] ? save_fpregs_to_fpstate+0x100/0x160 [ 65.352137][ T5815] ? __rcu_read_unlock+0x4f/0x70 [ 65.352154][ T5815] ? avc_has_perm_noaudit+0xab/0x130 [ 65.352262][ T5815] ? cred_has_capability+0x210/0x280 [ 65.352365][ T5815] ? selinux_capable+0x31/0x40 [ 65.352384][ T5815] ? security_capable+0x83/0x90 [ 65.352413][ T5815] ? ns_capable+0x7d/0xb0 [ 65.352475][ T5815] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.352514][ T5815] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 65.352535][ T5815] ? avc_has_perm_noaudit+0xab/0x130 [ 65.352620][ T5815] netlink_rcv_skb+0x123/0x220 [ 65.352653][ T5815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.352759][ T5815] rtnetlink_rcv+0x1c/0x30 [ 65.352778][ T5815] netlink_unicast+0x5c0/0x690 [ 65.352807][ T5815] netlink_sendmsg+0x58b/0x6b0 [ 65.352893][ T5815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.352921][ T5815] __sock_sendmsg+0x145/0x180 [ 65.352942][ T5815] ____sys_sendmsg+0x31e/0x4a0 [ 65.353028][ T5815] ___sys_sendmsg+0x17b/0x1d0 [ 65.353061][ T5815] __x64_sys_sendmsg+0xd4/0x160 [ 65.353134][ T5815] x64_sys_call+0x17ba/0x3000 [ 65.353162][ T5815] do_syscall_64+0xca/0x2b0 [ 65.353198][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.353218][ T5815] RIP: 0033:0x7f0c66bbf749 [ 65.353234][ T5815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.353258][ T5815] RSP: 002b:00007f0c65627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.353279][ T5815] RAX: ffffffffffffffda RBX: 00007f0c66e15fa0 RCX: 00007f0c66bbf749 [ 65.353290][ T5815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 65.353301][ T5815] RBP: 00007f0c65627090 R08: 0000000000000000 R09: 0000000000000000 [ 65.353312][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.353325][ T5815] R13: 00007f0c66e16038 R14: 00007f0c66e15fa0 R15: 00007ffe5ac17e58 [ 65.353340][ T5815] [ 65.750904][ T4554] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.770563][ T5823] netlink: 88 bytes leftover after parsing attributes in process `syz.3.925'. [ 65.780894][ T4554] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.822226][ T5831] loop3: detected capacity change from 0 to 512 [ 65.828364][ T5827] fido_id[5827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.853787][ T5831] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.929: bg 0: block 248: padding at end of block bitmap is not set [ 65.884571][ T5831] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.929: Failed to acquire dquot type 1 [ 65.896477][ T5831] EXT4-fs (loop3): 1 truncate cleaned up [ 65.904170][ T5831] EXT4-fs mount: 33 callbacks suppressed [ 65.904183][ T5831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.922904][ T5831] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.948596][ T5841] lo speed is unknown, defaulting to 1000 [ 65.954885][ T5841] lo speed is unknown, defaulting to 1000 [ 65.960926][ T5841] lo speed is unknown, defaulting to 1000 [ 65.975741][ T5831] syz.3.929 (5831) used greatest stack depth: 9088 bytes left [ 65.993008][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.023812][ T5848] loop1: detected capacity change from 0 to 512 [ 66.047349][ T5848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.065979][ T5854] loop4: detected capacity change from 0 to 512 [ 66.079451][ T5854] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.091086][ T5848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 66.092122][ T5856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.114388][ T5858] loop3: detected capacity change from 0 to 1024 [ 66.118899][ T5841] infiniband sz1: set down [ 66.125307][ T5841] infiniband sz1: added lo [ 66.129868][ T4554] lo speed is unknown, defaulting to 1000 [ 66.135564][ T5848] System zones: 1-12 [ 66.140051][ T5848] EXT4-fs (loop1): 1 truncate cleaned up [ 66.146934][ T5854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 66.151925][ T5848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.155210][ T5854] System zones: 1-12 [ 66.173140][ T5854] EXT4-fs (loop4): 1 truncate cleaned up [ 66.180054][ T5856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.195031][ T5858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.201978][ T5854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.210587][ T5858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.228810][ T5841] RDS/IB: sz1: added [ 66.234813][ T5841] smc: adding ib device sz1 with port count 1 [ 66.235256][ T5856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.251383][ T5841] smc: ib device sz1 port 1 has no pnetid [ 66.264048][ T4554] lo speed is unknown, defaulting to 1000 [ 66.276386][ T5841] lo speed is unknown, defaulting to 1000 [ 66.307744][ T5856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.327600][ T5841] lo speed is unknown, defaulting to 1000 [ 66.328708][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.358064][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 66.369011][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.397233][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.408404][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.416752][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.473773][ T5841] lo speed is unknown, defaulting to 1000 [ 66.483387][ T5874] FAULT_INJECTION: forcing a failure. [ 66.483387][ T5874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.496512][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz.1.943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.496541][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.496553][ T5874] Call Trace: [ 66.496626][ T5874] [ 66.496633][ T5874] __dump_stack+0x1d/0x30 [ 66.496673][ T5874] dump_stack_lvl+0x95/0xd0 [ 66.496696][ T5874] dump_stack+0x15/0x1b [ 66.496716][ T5874] should_fail_ex+0x265/0x280 [ 66.496819][ T5874] should_fail+0xb/0x20 [ 66.496883][ T5874] should_fail_usercopy+0x1a/0x20 [ 66.496908][ T5874] _copy_from_user+0x1c/0xb0 [ 66.496938][ T5874] sctp_getsockopt_connectx3+0xda/0x300 [ 66.497029][ T5874] sctp_getsockopt+0x910/0xaa0 [ 66.497062][ T5874] sock_common_getsockopt+0x60/0x70 [ 66.497124][ T5874] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 66.497149][ T5874] do_sock_getsockopt+0x1c4/0x210 [ 66.497247][ T5874] __x64_sys_getsockopt+0x11e/0x1a0 [ 66.497343][ T5874] x64_sys_call+0x2dc7/0x3000 [ 66.497365][ T5874] do_syscall_64+0xca/0x2b0 [ 66.497403][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.497426][ T5874] RIP: 0033:0x7fc60ddcf749 [ 66.497550][ T5874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.497566][ T5874] RSP: 002b:00007fc60c82f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 66.497583][ T5874] RAX: ffffffffffffffda RBX: 00007fc60e025fa0 RCX: 00007fc60ddcf749 [ 66.497595][ T5874] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007 [ 66.497615][ T5874] RBP: 00007fc60c82f090 R08: 0000200000000180 R09: 0000000000000000 [ 66.497689][ T5874] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.497700][ T5874] R13: 00007fc60e026038 R14: 00007fc60e025fa0 R15: 00007ffed5390078 [ 66.497716][ T5874] [ 66.531516][ T5841] lo speed is unknown, defaulting to 1000 [ 66.536186][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 66.573992][ T5841] lo speed is unknown, defaulting to 1000 [ 66.705462][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.743963][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 66.787559][ T5887] FAULT_INJECTION: forcing a failure. [ 66.787559][ T5887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.800741][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.4.945 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.800767][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.800778][ T5887] Call Trace: [ 66.800802][ T5887] [ 66.800810][ T5887] __dump_stack+0x1d/0x30 [ 66.800840][ T5887] dump_stack_lvl+0x95/0xd0 [ 66.800860][ T5887] dump_stack+0x15/0x1b [ 66.800880][ T5887] should_fail_ex+0x265/0x280 [ 66.800903][ T5887] should_fail+0xb/0x20 [ 66.800983][ T5887] should_fail_usercopy+0x1a/0x20 [ 66.801077][ T5887] _copy_to_user+0x20/0xa0 [ 66.801106][ T5887] simple_read_from_buffer+0xb5/0x130 [ 66.801140][ T5887] proc_fail_nth_read+0x10e/0x150 [ 66.801169][ T5887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.801198][ T5887] vfs_read+0x1a8/0x770 [ 66.801231][ T5887] ? __rcu_read_unlock+0x4f/0x70 [ 66.801250][ T5887] ? __fget_files+0x184/0x1c0 [ 66.801271][ T5887] ? mutex_lock+0x58/0x90 [ 66.801306][ T5887] ksys_read+0xda/0x1a0 [ 66.801324][ T5887] __x64_sys_read+0x40/0x50 [ 66.801416][ T5887] x64_sys_call+0x2889/0x3000 [ 66.801439][ T5887] do_syscall_64+0xca/0x2b0 [ 66.801471][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.801489][ T5887] RIP: 0033:0x7fbbbf89e15c [ 66.801538][ T5887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.801561][ T5887] RSP: 002b:00007fbbbe307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.801580][ T5887] RAX: ffffffffffffffda RBX: 00007fbbbfaf5fa0 RCX: 00007fbbbf89e15c [ 66.801602][ T5887] RDX: 000000000000000f RSI: 00007fbbbe3070a0 RDI: 000000000000000d [ 66.801613][ T5887] RBP: 00007fbbbe307090 R08: 0000000000000000 R09: 0000000000000000 [ 66.801627][ T5887] R10: 000000000000007a R11: 0000000000000246 R12: 0000000000000001 [ 66.801639][ T5887] R13: 00007fbbbfaf6038 R14: 00007fbbbfaf5fa0 R15: 00007ffd51d8d758 [ 66.801658][ T5887] [ 67.024374][ T5895] loop3: detected capacity change from 0 to 512 [ 67.042394][ T5895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.054307][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 67.119715][ T5895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 67.163162][ T5895] System zones: 1-12 [ 67.181145][ T5895] EXT4-fs (loop3): 1 truncate cleaned up [ 67.204908][ T5895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.224452][ T5912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.958'. [ 67.233353][ T5912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.958'. [ 67.242397][ T5912] netlink: 14 bytes leftover after parsing attributes in process `syz.1.958'. [ 67.379389][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.471418][ T5919] loop1: detected capacity change from 0 to 512 [ 67.478184][ T5919] EXT4-fs: Ignoring removed i_version option [ 67.484275][ T5919] EXT4-fs: Ignoring removed bh option [ 67.514898][ T3006] udevd[3006]: worker [3308] terminated by signal 33 (Unknown signal 33) [ 67.530174][ T5918] SET target dimension over the limit! [ 67.537456][ T3006] udevd[3006]: worker [3308] failed while handling '/devices/virtual/block/loop1' [ 67.633335][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.646590][ T5919] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.777822][ T5927] loop0: detected capacity change from 0 to 1024 [ 67.805649][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.818550][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.937375][ T5932] tipc: Started in network mode [ 67.942354][ T5932] tipc: Node identity 4, cluster identity 4711 [ 67.948525][ T5932] tipc: Node number set to 4 [ 67.987161][ T5934] loop4: detected capacity change from 0 to 2048 [ 68.091802][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.255827][ T5952] loop3: detected capacity change from 0 to 256 [ 68.342659][ T5965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.382623][ T5965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 68.401504][ T5965] System zones: 1-12 [ 68.404860][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 68.404873][ T29] audit: type=1404 audit(1768488187.165:17538): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 68.427487][ T5965] EXT4-fs (loop1): 1 truncate cleaned up [ 68.433662][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.467686][ T29] audit: type=1404 audit(1768488187.185:17539): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 68.482819][ T29] audit: type=1400 audit(1768488187.195:17540): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.507144][ T29] audit: type=1400 audit(1768488187.195:17541): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.531637][ T29] audit: type=1400 audit(1768488187.195:17542): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.557452][ T29] audit: type=1400 audit(1768488187.205:17543): avc: denied { mount } for pid=5963 comm="syz.1.977" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.579216][ T29] audit: type=1400 audit(1768488187.215:17544): avc: denied { create } for pid=5972 comm="syz.3.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.602639][ T29] audit: type=1400 audit(1768488187.235:17545): avc: denied { create } for pid=5963 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.622204][ T29] audit: type=1400 audit(1768488187.235:17546): avc: denied { write } for pid=5963 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.641595][ T29] audit: type=1400 audit(1768488187.235:17547): avc: denied { connect } for pid=5963 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.723421][ T5976] rdma_rxe: rxe_newlink: failed to add bond0 [ 68.776521][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.983625][ T6007] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.025422][ T6007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 69.070977][ T6007] System zones: 1-12 [ 69.092466][ T6007] EXT4-fs (loop3): 1 truncate cleaned up [ 69.118706][ T6007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.289719][ T6007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6007 comm=syz.3.994 [ 69.758755][ T6060] rdma_rxe: rxe_newlink: failed to add bond0 [ 69.824224][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.180084][ T6091] set_capacity_and_notify: 4 callbacks suppressed [ 70.180097][ T6091] loop1: detected capacity change from 0 to 512 [ 70.203320][ T6091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.225214][ T6091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 70.233376][ T6091] System zones: 1-12 [ 70.237857][ T6091] EXT4-fs (loop1): 1 truncate cleaned up [ 70.249176][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.364107][ T6117] loop0: detected capacity change from 0 to 512 [ 70.377522][ T6117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.389061][ T6091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6091 comm=syz.1.1032 [ 70.412894][ T6117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 70.420882][ T6117] System zones: 1-12 [ 70.425561][ T6117] EXT4-fs (loop0): 1 truncate cleaned up [ 70.432196][ T6117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.598987][ T6143] __nla_validate_parse: 5 callbacks suppressed [ 70.599002][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 70.615709][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.619536][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 70.643244][ T6147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1058'. [ 70.652499][ T6147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1058'. [ 70.661589][ T6147] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1058'. [ 70.759993][ T6156] netlink: 'syz.0.1059': attribute type 13 has an invalid length. [ 70.868771][ T6158] loop4: detected capacity change from 0 to 512 [ 70.875693][ T6158] EXT4-fs: Ignoring removed i_version option [ 70.881710][ T6158] EXT4-fs: Ignoring removed bh option [ 70.923551][ T6158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.937731][ T6158] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.019756][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.169922][ T6178] loop1: detected capacity change from 0 to 512 [ 71.178848][ T6178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.189590][ T6178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 71.197656][ T6178] System zones: 1-12 [ 71.202115][ T6178] EXT4-fs (loop1): 1 truncate cleaned up [ 71.208637][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.322843][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.324014][ T6182] loop0: detected capacity change from 0 to 512 [ 71.340389][ T6182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.369912][ T6182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 71.378243][ T6182] System zones: 1-12 [ 71.383196][ T6182] EXT4-fs (loop0): 1 truncate cleaned up [ 71.389394][ T6182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.505053][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.608155][ T6213] netlink: 'syz.1.1080': attribute type 13 has an invalid length. [ 71.617446][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.636738][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 71.682259][ T6221] netlink: 'syz.0.1083': attribute type 10 has an invalid length. [ 71.690118][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 71.780046][ T6236] loop2: detected capacity change from 0 to 1024 [ 71.789938][ T6236] ======================================================= [ 71.789938][ T6236] WARNING: The mand mount option has been deprecated and [ 71.789938][ T6236] and is ignored by this kernel. Remove the mand [ 71.789938][ T6236] option from the mount to silence this warning. [ 71.789938][ T6236] ======================================================= [ 71.831570][ T6236] EXT4-fs: Ignoring removed nobh option [ 71.837865][ T6236] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.852075][ T6241] loop4: detected capacity change from 0 to 512 [ 71.859469][ T6236] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.1091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 71.878717][ T6241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.886062][ T6236] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1091: couldn't read orphan inode 11 (err -117) [ 71.901649][ T6241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 71.911982][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.919906][ T6241] System zones: 1-12 [ 71.929762][ T6241] EXT4-fs (loop4): 1 truncate cleaned up [ 71.943077][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.945202][ T6236] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1091: Invalid block bitmap block 0 in block_group 0 [ 72.005526][ T6236] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1091: Failed to acquire dquot type 0 [ 72.077506][ T6251] loop0: detected capacity change from 0 to 512 [ 72.077662][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.093962][ T6251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.119365][ T6251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 72.136653][ T6251] System zones: 1-12 [ 72.157240][ T6251] EXT4-fs (loop0): 1 truncate cleaned up [ 72.175916][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.189303][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.204846][ T58] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 72.333379][ T6274] FAULT_INJECTION: forcing a failure. [ 72.333379][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.346489][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.2.1103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.346582][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.346609][ T6274] Call Trace: [ 72.346617][ T6274] [ 72.346625][ T6274] __dump_stack+0x1d/0x30 [ 72.346651][ T6274] dump_stack_lvl+0x95/0xd0 [ 72.346674][ T6274] dump_stack+0x15/0x1b [ 72.346706][ T6274] should_fail_ex+0x265/0x280 [ 72.346727][ T6274] should_fail+0xb/0x20 [ 72.346748][ T6274] should_fail_usercopy+0x1a/0x20 [ 72.346772][ T6274] _copy_from_user+0x1c/0xb0 [ 72.346872][ T6274] ucma_write+0xd9/0x250 [ 72.346907][ T6274] ? __pfx_ucma_write+0x10/0x10 [ 72.346930][ T6274] vfs_write+0x269/0x960 [ 72.346949][ T6274] ? __rcu_read_unlock+0x4f/0x70 [ 72.346995][ T6274] ? __fget_files+0x184/0x1c0 [ 72.347020][ T6274] ksys_write+0xda/0x1a0 [ 72.347040][ T6274] __x64_sys_write+0x40/0x50 [ 72.347057][ T6274] x64_sys_call+0x2847/0x3000 [ 72.347135][ T6274] do_syscall_64+0xca/0x2b0 [ 72.347178][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.347202][ T6274] RIP: 0033:0x7f0c66bbf749 [ 72.347218][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.347302][ T6274] RSP: 002b:00007f0c65627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.347319][ T6274] RAX: ffffffffffffffda RBX: 00007f0c66e15fa0 RCX: 00007f0c66bbf749 [ 72.347397][ T6274] RDX: 0000000000000090 RSI: 0000200000002c40 RDI: 0000000000000003 [ 72.347410][ T6274] RBP: 00007f0c65627090 R08: 0000000000000000 R09: 0000000000000000 [ 72.347423][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.347435][ T6274] R13: 00007f0c66e16038 R14: 00007f0c66e15fa0 R15: 00007ffe5ac17e58 [ 72.347469][ T6274] [ 72.557766][ T6279] loop3: detected capacity change from 0 to 512 [ 72.585918][ T6279] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.637353][ T6279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 72.669330][ T6279] System zones: 1-12 [ 72.697987][ T6279] EXT4-fs (loop3): 1 truncate cleaned up [ 72.708659][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.736547][ T6290] loop2: detected capacity change from 0 to 512 [ 72.753701][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.787803][ T6290] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.828885][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 72.838815][ T6296] netlink: 'syz.4.1109': attribute type 13 has an invalid length. [ 72.853851][ T6290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 72.863420][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.899631][ T6290] System zones: 1-12 [ 72.904203][ T6290] EXT4-fs (loop2): 1 truncate cleaned up [ 72.910249][ T6290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.950146][ T6301] rdma_rxe: rxe_newlink: failed to add bond0 [ 73.034822][ T6290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6290 comm=syz.2.1110 [ 73.215145][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 73.412191][ T29] kauditd_printk_skb: 2946 callbacks suppressed [ 73.412283][ T29] audit: type=1326 audit(1768488192.175:20491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5683632005 code=0x7ffc0000 [ 73.443420][ T29] audit: type=1326 audit(1768488192.175:20492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 73.467014][ T29] audit: type=1326 audit(1768488192.175:20493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 73.490502][ T29] audit: type=1326 audit(1768488192.175:20494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 73.493389][ T6317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.514103][ T29] audit: type=1326 audit(1768488192.175:20495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 73.520625][ T6317] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 73.544142][ T29] audit: type=1326 audit(1768488192.175:20496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 73.551752][ T6317] audit: backlog limit exceeded [ 73.575251][ T29] audit: type=1326 audit(1768488192.175:20497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 73.612034][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.713541][ T6325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.732307][ T6325] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #12: comm syz.0.1119: corrupted in-inode xattr: e_value size too large [ 73.764288][ T6325] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #12: comm syz.0.1119: corrupted in-inode xattr: e_value size too large [ 73.841611][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 73.867076][ T6338] tipc: Started in network mode [ 73.872009][ T6338] tipc: Node identity 4, cluster identity 4711 [ 73.878219][ T6338] tipc: Node number set to 4 [ 73.919392][ T6346] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.927165][ T6346] smc: net device bond0 erased user defined pnetid SYZ0 [ 73.968899][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 74.049086][ T6351] Unable to read rock-ridge attributes [ 74.110270][ T6356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.122383][ T6356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 74.130348][ T6356] System zones: 1-12 [ 74.135767][ T6356] EXT4-fs (loop1): 1 truncate cleaned up [ 74.143599][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.200374][ T6359] EXT4-fs: Ignoring removed i_version option [ 74.206411][ T6359] EXT4-fs: Ignoring removed bh option [ 74.224305][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.237943][ T6359] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.400110][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.686327][ T6390] syzkaller0: entered promiscuous mode [ 74.691859][ T6390] syzkaller0: entered allmulticast mode [ 74.719021][ T6392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.730428][ T6392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 74.738700][ T6392] System zones: 1-12 [ 74.743230][ T6392] EXT4-fs (loop0): 1 truncate cleaned up [ 74.749429][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.828335][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.880250][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.963169][ T6415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.975401][ T6415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 74.989728][ T6415] System zones: 1-12 [ 74.994708][ T6415] EXT4-fs (loop1): 1 truncate cleaned up [ 75.002393][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.113243][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.143477][ T6430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.161034][ T6430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 75.169363][ T6430] System zones: 1-12 [ 75.173948][ T6430] EXT4-fs (loop1): 1 truncate cleaned up [ 75.180174][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.282004][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.421544][ T6446] rdma_rxe: rxe_newlink: failed to add bond0 [ 75.427782][ T6447] set_capacity_and_notify: 7 callbacks suppressed [ 75.427821][ T6447] loop1: detected capacity change from 0 to 1024 [ 75.452277][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.464960][ T6447] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.766769][ T6462] loop2: detected capacity change from 0 to 512 [ 75.773691][ T6462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.784507][ T6462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 75.792611][ T6462] System zones: 1-12 [ 75.796978][ T6462] EXT4-fs (loop2): 1 truncate cleaned up [ 75.803692][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.903379][ T6466] __nla_validate_parse: 5 callbacks suppressed [ 75.903402][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 75.920017][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.007760][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 76.080625][ T6478] loop2: detected capacity change from 0 to 1024 [ 76.092881][ T6478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.105461][ T6478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.217309][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1178'. [ 76.226348][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1178'. [ 76.235317][ T6483] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1178'. [ 76.333019][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63776 sclass=netlink_route_socket pid=6489 comm=syz.4.1180 [ 76.441505][ T6490] loop1: detected capacity change from 0 to 512 [ 76.448366][ T6490] EXT4-fs: Ignoring removed i_version option [ 76.454388][ T6490] EXT4-fs: Ignoring removed bh option [ 76.503880][ T6490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.516678][ T6490] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.695749][ T6496] loop4: detected capacity change from 0 to 4096 [ 76.713879][ T6496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.906217][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 77.243831][ T6517] smc: net device bond0 applied user defined pnetid SYZ0 [ 77.259561][ T6517] smc: net device bond0 erased user defined pnetid SYZ0 [ 77.397818][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.443856][ T6522] loop2: detected capacity change from 0 to 164 [ 77.450730][ T6521] rdma_rxe: rxe_newlink: failed to add bond0 [ 77.458971][ T6522] Unable to read rock-ridge attributes [ 77.707390][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.749211][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 77.913675][ T6544] loop4: detected capacity change from 0 to 512 [ 77.920902][ T6544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.936062][ T6544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 77.944165][ T6544] System zones: 1-12 [ 77.948573][ T6544] EXT4-fs (loop4): 1 truncate cleaned up [ 77.954754][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.062885][ T6554] loop2: detected capacity change from 0 to 256 [ 78.079757][ T6544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6544 comm=syz.4.1199 [ 78.158840][ T6558] netlink: 'syz.0.1203': attribute type 13 has an invalid length. [ 78.166716][ T6558] netlink: 'syz.0.1203': attribute type 27 has an invalid length. [ 78.201409][ T6554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1202'. [ 78.278720][ T6568] FAULT_INJECTION: forcing a failure. [ 78.278720][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.291911][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.291938][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.291950][ T6568] Call Trace: [ 78.291957][ T6568] [ 78.291965][ T6568] __dump_stack+0x1d/0x30 [ 78.291989][ T6568] dump_stack_lvl+0x95/0xd0 [ 78.292066][ T6568] dump_stack+0x15/0x1b [ 78.292085][ T6568] should_fail_ex+0x265/0x280 [ 78.292108][ T6568] should_fail+0xb/0x20 [ 78.292129][ T6568] should_fail_usercopy+0x1a/0x20 [ 78.292200][ T6568] _copy_from_user+0x1c/0xb0 [ 78.292298][ T6568] memdup_user+0x5e/0xd0 [ 78.292319][ T6568] strndup_user+0x68/0xb0 [ 78.292339][ T6568] keyctl_restrict_keyring+0x15a/0x1b0 [ 78.292364][ T6568] __se_sys_keyctl+0x1ed/0xb80 [ 78.292456][ T6568] ? __rcu_read_unlock+0x4f/0x70 [ 78.292475][ T6568] ? __fget_files+0x184/0x1c0 [ 78.292497][ T6568] ? mutex_unlock+0x4f/0x90 [ 78.292582][ T6568] ? fput+0x8f/0xc0 [ 78.292680][ T6568] __x64_sys_keyctl+0x67/0x80 [ 78.292699][ T6568] x64_sys_call+0x27b8/0x3000 [ 78.292793][ T6568] do_syscall_64+0xca/0x2b0 [ 78.292827][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.292850][ T6568] RIP: 0033:0x7f0c66bbf749 [ 78.292863][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.292899][ T6568] RSP: 002b:00007f0c65627038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 78.292916][ T6568] RAX: ffffffffffffffda RBX: 00007f0c66e15fa0 RCX: 00007f0c66bbf749 [ 78.292929][ T6568] RDX: 00002000000005c0 RSI: 0000000024a5c2b3 RDI: 000000000000001d [ 78.292940][ T6568] RBP: 00007f0c65627090 R08: 0000000000000000 R09: 0000000000000000 [ 78.292953][ T6568] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 78.292967][ T6568] R13: 00007f0c66e16038 R14: 00007f0c66e15fa0 R15: 00007ffe5ac17e58 [ 78.293058][ T6568] [ 78.296002][ T6570] loop3: detected capacity change from 0 to 512 [ 78.369654][ T6575] loop2: detected capacity change from 0 to 512 [ 78.382453][ T6570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.406255][ T6575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.412353][ T6570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 78.431335][ T6575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 78.435867][ T6570] System zones: [ 78.447684][ T6575] System zones: [ 78.452138][ T6570] 1-12 [ 78.460129][ T6575] 1-12 [ 78.468125][ T6570] [ 78.476094][ T6575] [ 78.487100][ T6575] EXT4-fs (loop2): 1 truncate cleaned up [ 78.493715][ T6570] EXT4-fs (loop3): 1 truncate cleaned up [ 78.500459][ T6575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.510202][ T6570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.519627][ T29] kauditd_printk_skb: 2513 callbacks suppressed [ 78.519640][ T29] audit: type=1400 audit(1768488197.285:23011): avc: denied { mount } for pid=6574 comm="syz.2.1211" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.616312][ T29] audit: type=1400 audit(1768488197.295:23012): avc: denied { create } for pid=6569 comm="syz.3.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.680175][ T29] audit: type=1400 audit(1768488197.435:23013): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.701621][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.766004][ T29] audit: type=1326 audit(1768488197.525:23014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 78.789644][ T29] audit: type=1326 audit(1768488197.525:23015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 78.813460][ T29] audit: type=1326 audit(1768488197.525:23016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 78.837194][ T29] audit: type=1326 audit(1768488197.525:23017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 78.860919][ T29] audit: type=1326 audit(1768488197.525:23018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 78.884462][ T29] audit: type=1326 audit(1768488197.525:23019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 78.908049][ T29] audit: type=1326 audit(1768488197.525:23020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71622f749 code=0x7ffc0000 [ 79.079867][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 79.096289][ T6601] loop3: p2 p3 p7 [ 79.124170][ T6603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1219'. [ 79.831986][ T6648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.843124][ T6648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 79.851531][ T6648] System zones: 1-12 [ 79.858105][ T6648] EXT4-fs (loop0): 1 truncate cleaned up [ 79.868046][ T6651] rdma_rxe: rxe_newlink: failed to add bond0 [ 80.126033][ T3299] loop4: p2 p3 p7 [ 80.139964][ T6669] loop4: p2 p3 p7 [ 80.300435][ T6686] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.307850][ T6686] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.380882][ T6690] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.388199][ T6690] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.424607][ T6691] Unable to read rock-ridge attributes [ 80.639328][ T6697] set_capacity_and_notify: 10 callbacks suppressed [ 80.639422][ T6697] loop1: detected capacity change from 0 to 512 [ 80.662012][ T6697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.678344][ T6697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 80.693620][ T6697] System zones: 1-12 [ 80.698257][ T6697] EXT4-fs (loop1): 1 truncate cleaned up [ 80.734442][ T6706] batadv_slave_1: entered promiscuous mode [ 80.741439][ T6706] batadv_slave_1 (unregistering): left promiscuous mode [ 80.748447][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.855086][ T6716] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.862600][ T6716] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.974758][ T6722] loop1: detected capacity change from 0 to 164 [ 80.983991][ T6722] Unable to read rock-ridge attributes [ 81.034963][ T6726] __nla_validate_parse: 4 callbacks suppressed [ 81.034979][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1263'. [ 81.050150][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1263'. [ 81.059172][ T6726] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1263'. [ 81.118271][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 81.171627][ T6735] FAULT_INJECTION: forcing a failure. [ 81.171627][ T6735] name failslab, interval 1, probability 0, space 0, times 0 [ 81.184308][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.4.1267 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.184333][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.184415][ T6735] Call Trace: [ 81.184497][ T6735] [ 81.184505][ T6735] __dump_stack+0x1d/0x30 [ 81.184530][ T6735] dump_stack_lvl+0x95/0xd0 [ 81.184583][ T6735] dump_stack+0x15/0x1b [ 81.184672][ T6735] should_fail_ex+0x265/0x280 [ 81.184693][ T6735] should_failslab+0x8c/0xb0 [ 81.184714][ T6735] __kmalloc_cache_noprof+0x65/0x4c0 [ 81.184738][ T6735] ? rtnl_newlink+0x5c/0x1360 [ 81.184820][ T6735] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.184891][ T6735] rtnl_newlink+0x5c/0x1360 [ 81.184915][ T6735] ? insn_get_prefixes+0xa72/0xca0 [ 81.184975][ T6735] ? xas_load+0x413/0x430 [ 81.185052][ T6735] ? xas_load+0x413/0x430 [ 81.185083][ T6735] ? css_rstat_updated+0xbb/0x280 [ 81.185188][ T6735] ? __rcu_read_unlock+0x4f/0x70 [ 81.185205][ T6735] ? avc_has_perm_noaudit+0xab/0x130 [ 81.185238][ T6735] ? cred_has_capability+0x210/0x280 [ 81.185269][ T6735] ? selinux_capable+0x31/0x40 [ 81.185298][ T6735] ? security_capable+0x83/0x90 [ 81.185326][ T6735] ? ns_capable+0x7d/0xb0 [ 81.185431][ T6735] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.185458][ T6735] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 81.185476][ T6735] ? avc_has_perm_noaudit+0xab/0x130 [ 81.185618][ T6735] netlink_rcv_skb+0x123/0x220 [ 81.185650][ T6735] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.185674][ T6735] rtnetlink_rcv+0x1c/0x30 [ 81.185692][ T6735] netlink_unicast+0x5c0/0x690 [ 81.185770][ T6735] netlink_sendmsg+0x58b/0x6b0 [ 81.185804][ T6735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.185836][ T6735] __sock_sendmsg+0x145/0x180 [ 81.185856][ T6735] ____sys_sendmsg+0x31e/0x4a0 [ 81.185965][ T6735] ___sys_sendmsg+0x17b/0x1d0 [ 81.186002][ T6735] __x64_sys_sendmsg+0xd4/0x160 [ 81.186034][ T6735] x64_sys_call+0x17ba/0x3000 [ 81.186109][ T6735] do_syscall_64+0xca/0x2b0 [ 81.186159][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.186250][ T6735] RIP: 0033:0x7fbbbf89f749 [ 81.186267][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.186284][ T6735] RSP: 002b:00007fbbbe307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.186381][ T6735] RAX: ffffffffffffffda RBX: 00007fbbbfaf5fa0 RCX: 00007fbbbf89f749 [ 81.186395][ T6735] RDX: 0000000000004054 RSI: 0000200000000180 RDI: 0000000000000004 [ 81.186428][ T6735] RBP: 00007fbbbe307090 R08: 0000000000000000 R09: 0000000000000000 [ 81.186450][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.186463][ T6735] R13: 00007fbbbfaf6038 R14: 00007fbbbfaf5fa0 R15: 00007ffd51d8d758 [ 81.186481][ T6735] [ 81.519327][ T6741] loop3: detected capacity change from 0 to 512 [ 81.526561][ T6741] EXT4-fs: Ignoring removed i_version option [ 81.532613][ T6741] EXT4-fs: Ignoring removed bh option [ 81.662006][ T6741] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.761080][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 81.848866][ T6765] loop0: detected capacity change from 0 to 256 [ 81.886206][ T6768] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.893585][ T6768] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.902811][ T6765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1277'. [ 81.914171][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 82.058476][ T6784] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.119175][ T6791] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1286'. [ 82.130133][ T6791] syzkaller0: entered promiscuous mode [ 82.135666][ T6791] syzkaller0: entered allmulticast mode [ 82.144502][ T6784] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.154728][ T6793] loop3: detected capacity change from 0 to 512 [ 82.162339][ T6793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.176581][ T6793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 82.184725][ T6793] System zones: 1-12 [ 82.189078][ T6793] EXT4-fs (loop3): 1 truncate cleaned up [ 82.196607][ T6784] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.243207][ T6784] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.304804][ T6800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1289'. [ 82.313863][ T6800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1289'. [ 82.322899][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.348024][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.356842][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.372525][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.389760][ T6803] loop3: detected capacity change from 0 to 1024 [ 82.450295][ T6808] loop0: detected capacity change from 0 to 2048 [ 82.529772][ T6809] loop4: detected capacity change from 0 to 512 [ 82.536710][ T6809] EXT4-fs: Ignoring removed i_version option [ 82.542735][ T6809] EXT4-fs: Ignoring removed bh option [ 82.670710][ T3299] loop0: p2 p3 p7 [ 82.753000][ T6809] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.834655][ T6808] loop0: p2 p3 p7 [ 82.888729][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 82.890241][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 82.898634][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 82.960240][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 82.960414][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 82.971272][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.028014][ T6840] loop1: detected capacity change from 0 to 512 [ 83.031716][ T6838] rdma_rxe: rxe_newlink: failed to add bond0 [ 83.035118][ T6840] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.051462][ T6840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 83.059575][ T6840] System zones: 1-12 [ 83.064427][ T6840] EXT4-fs (loop1): 1 truncate cleaned up [ 83.240283][ T6854] loop3: detected capacity change from 0 to 2048 [ 83.301159][ T6854] loop3: p2 p3 p7 [ 83.520994][ T29] kauditd_printk_skb: 3858 callbacks suppressed [ 83.521007][ T29] audit: type=1326 audit(1768488202.286:26879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.559366][ T6876] EXT4-fs: Ignoring removed i_version option [ 83.565471][ T6876] EXT4-fs: Ignoring removed bh option [ 83.682835][ T6876] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.720090][ T29] audit: type=1326 audit(1768488202.346:26880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.743674][ T29] audit: type=1326 audit(1768488202.346:26881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.767201][ T29] audit: type=1326 audit(1768488202.356:26882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.790695][ T29] audit: type=1326 audit(1768488202.356:26883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.814172][ T29] audit: type=1326 audit(1768488202.356:26884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.837643][ T29] audit: type=1326 audit(1768488202.356:26885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.861168][ T29] audit: type=1326 audit(1768488202.356:26886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.884771][ T29] audit: type=1326 audit(1768488202.356:26887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 83.908262][ T29] audit: type=1326 audit(1768488202.356:26888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c66bf2005 code=0x7ffc0000 [ 84.249561][ T6904] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.260562][ T6904] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 84.275553][ T6904] JBD2: no valid journal superblock found [ 84.281472][ T6904] EXT4-fs (loop1): Could not load journal inode [ 84.337448][ T6911] smc: net device bond0 applied user defined pnetid SYZ0 [ 84.344997][ T6911] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.498798][ T6922] Unable to read rock-ridge attributes [ 84.743620][ T6931] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.769575][ T6931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 84.805351][ T6931] System zones: 1-12 [ 84.810182][ T6931] EXT4-fs (loop0): 1 truncate cleaned up [ 85.050881][ T6942] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.058322][ T6942] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.021811][ T6985] set_capacity_and_notify: 7 callbacks suppressed [ 86.021821][ T6985] loop0: detected capacity change from 0 to 512 [ 86.036519][ T6985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.051438][ T6985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 86.059738][ T6985] System zones: 1-12 [ 86.064352][ T6985] EXT4-fs (loop0): 1 truncate cleaned up [ 86.408947][ T6993] __nla_validate_parse: 17 callbacks suppressed [ 86.408961][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 86.585940][ T6997] loop1: detected capacity change from 0 to 1024 [ 86.816007][ T7009] loop2: detected capacity change from 0 to 512 [ 86.825368][ T7009] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 86.841953][ T7009] EXT4-fs (loop2): 1 truncate cleaned up [ 86.871982][ T7014] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.886281][ T7014] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.891210][ T7009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1362'. [ 87.060901][ T7018] loop0: detected capacity change from 0 to 512 [ 87.069500][ T7018] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.098166][ T7018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 87.107687][ T7018] System zones: 1-12 [ 87.112313][ T7018] EXT4-fs (loop0): 1 truncate cleaned up [ 87.308381][ T7029] loop3: detected capacity change from 0 to 512 [ 87.321977][ T7029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.344689][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 87.356461][ T7029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 87.373052][ T7029] System zones: 1-12 [ 87.377527][ T7029] EXT4-fs (loop3): 1 truncate cleaned up [ 87.440499][ T7040] futex_wake_op: syz.1.1372 tries to shift op by 535; fix this program [ 87.542630][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 87.579547][ T7050] loop3: detected capacity change from 0 to 128 [ 87.672234][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 87.755602][ T7062] loop2: detected capacity change from 0 to 512 [ 87.780494][ T7062] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.788837][ T7062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.800591][ T7062] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1379: corrupted inode contents [ 87.812978][ T7062] EXT4-fs (loop2): Remounting filesystem read-only [ 87.819766][ T7062] EXT4-fs (loop2): 1 truncate cleaned up [ 87.825576][ T313] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.836166][ T313] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.846747][ T313] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.241116][ T7069] loop0: detected capacity change from 0 to 2048 [ 88.285875][ T3299] loop0: p2 p3 p7 [ 88.298390][ T7069] loop0: p2 p3 p7 [ 88.355572][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 88.365522][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 88.376197][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 88.458240][ T7077] loop1: detected capacity change from 0 to 256 [ 88.549683][ T29] kauditd_printk_skb: 3854 callbacks suppressed [ 88.549697][ T29] audit: type=1326 audit(1768488207.306:30737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.550298][ T7077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1385'. [ 88.556553][ T29] audit: type=1400 audit(1768488207.306:30738): avc: denied { ioctl } for pid=7076 comm="syz.1.1385" path="socket:[16069]" dev="sockfs" ino=16069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.614296][ T29] audit: type=1326 audit(1768488207.306:30739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.620141][ T7086] smc: net device bond0 applied user defined pnetid SYZ0 [ 88.637897][ T29] audit: type=1326 audit(1768488207.306:30740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.637926][ T29] audit: type=1326 audit(1768488207.306:30741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.637981][ T29] audit: type=1326 audit(1768488207.346:30742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.715433][ T29] audit: type=1326 audit(1768488207.346:30743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.764014][ T7086] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.771100][ T29] audit: type=1326 audit(1768488207.456:30744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.774668][ T7090] loop2: detected capacity change from 0 to 512 [ 88.794610][ T29] audit: type=1326 audit(1768488207.456:30745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.824295][ T29] audit: type=1326 audit(1768488207.456:30746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 88.850833][ T7090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.874347][ T7090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 88.895641][ T7090] System zones: 1-12 [ 88.900200][ T7090] EXT4-fs (loop2): 1 truncate cleaned up [ 88.923516][ T7102] smc: net device bond0 applied user defined pnetid SYZ0 [ 88.931080][ T7102] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.022860][ T7108] loop1: p2 p3 p7 [ 89.050630][ T3006] loop1: p2 p3 p7 [ 89.133253][ T6623] udevd[6623]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 89.134855][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 89.153150][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 89.235152][ T3299] loop4: p2 p3 p7 [ 89.248362][ T7122] loop4: p2 p3 p7 [ 89.299533][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 89.309868][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 89.310449][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 89.336212][ T7128] syzkaller0: entered promiscuous mode [ 89.341738][ T7128] syzkaller0: entered allmulticast mode [ 89.379244][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 89.757612][ T7147] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.773773][ T7147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 89.782094][ T7147] System zones: 1-12 [ 89.786739][ T7147] EXT4-fs (loop3): 1 truncate cleaned up [ 89.904408][ T7147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7147 comm=syz.3.1410 [ 89.972049][ T7154] rdma_rxe: rxe_newlink: failed to add bond0 [ 89.989230][ T7158] delete_channel: no stack [ 89.993982][ T7161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.004911][ T7161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 90.013127][ T7161] System zones: 1-12 [ 90.017613][ T7161] EXT4-fs (loop2): 1 truncate cleaned up [ 90.084383][ T7165] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.091704][ T7165] smc: net device bond0 erased user defined pnetid SYZ0 [ 90.138134][ T7161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7161 comm=syz.2.1413 [ 90.270883][ T7177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=7177 comm=syz.0.1418 [ 90.464540][ T3299] loop0: p2 p3 p7 [ 90.477452][ T7184] loop0: p2 p3 p7 [ 90.518427][ T7186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.532310][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 90.540415][ T7186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 90.550088][ T7186] System zones: 1-12 [ 90.555309][ T7186] EXT4-fs (loop0): 1 truncate cleaned up [ 90.607843][ T7189] netlink: 'syz.3.1423': attribute type 46 has an invalid length. [ 90.755860][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 90.834368][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 90.910785][ T7202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1427'. [ 91.146621][ T7208] set_capacity_and_notify: 10 callbacks suppressed [ 91.146709][ T7208] loop1: detected capacity change from 0 to 512 [ 91.159981][ T7208] EXT4-fs: Ignoring removed i_version option [ 91.166524][ T7208] EXT4-fs: Ignoring removed bh option [ 91.352885][ T7208] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.507942][ T7220] loop0: detected capacity change from 0 to 512 [ 91.515211][ T7220] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.526464][ T7220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 91.534596][ T7220] System zones: 1-12 [ 91.538960][ T7220] EXT4-fs (loop0): 1 truncate cleaned up [ 91.658703][ T7220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7220 comm=syz.0.1433 [ 91.694883][ T7229] rdma_rxe: rxe_newlink: failed to add bond0 [ 91.836030][ T7241] __nla_validate_parse: 3 callbacks suppressed [ 91.836044][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 92.152912][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 92.484157][ T7274] loop3: detected capacity change from 0 to 512 [ 92.485437][ T7276] loop4: detected capacity change from 0 to 512 [ 92.503187][ T7274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.513194][ T7276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.528617][ T7274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 92.539136][ T7276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 92.548158][ T7274] System zones: 1-12 [ 92.552154][ T7276] System zones: 1-12 [ 92.556440][ T7274] EXT4-fs (loop3): 1 truncate cleaned up [ 92.562130][ T7276] EXT4-fs (loop4): 1 truncate cleaned up [ 92.865335][ T7295] FAULT_INJECTION: forcing a failure. [ 92.865335][ T7295] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.881537][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.1.1461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.881590][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.881601][ T7295] Call Trace: [ 92.881606][ T7295] [ 92.881612][ T7295] __dump_stack+0x1d/0x30 [ 92.881659][ T7295] dump_stack_lvl+0x95/0xd0 [ 92.881683][ T7295] dump_stack+0x15/0x1b [ 92.881705][ T7295] should_fail_ex+0x265/0x280 [ 92.881729][ T7295] should_fail_alloc_page+0xf2/0x100 [ 92.881750][ T7295] __alloc_frozen_pages_noprof+0x109/0x360 [ 92.881801][ T7295] alloc_pages_mpol+0xb3/0x260 [ 92.881831][ T7295] ? do_dentry_open+0x759/0xa60 [ 92.881855][ T7295] alloc_frozen_pages_noprof+0x90/0x110 [ 92.881918][ T7295] ___kmalloc_large_node+0x3f/0xf0 [ 92.881939][ T7295] __kmalloc_large_node_noprof+0x16/0xa0 [ 92.882029][ T7295] __kmalloc_noprof+0x35a/0x5a0 [ 92.882081][ T7295] ? iovec_from_user+0x84/0x210 [ 92.882109][ T7295] ? path_openat+0x1d88/0x23b0 [ 92.882198][ T7295] iovec_from_user+0x84/0x210 [ 92.882284][ T7295] ? process_vm_rw+0x137/0x960 [ 92.882304][ T7295] process_vm_rw+0x15b/0x960 [ 92.882327][ T7295] ? _parse_integer+0x27/0x40 [ 92.882347][ T7295] ? kstrtoull+0x111/0x140 [ 92.882383][ T7295] ? __fget_files+0x184/0x1c0 [ 92.882406][ T7295] ? mutex_unlock+0x4f/0x90 [ 92.882488][ T7295] ? fput+0x8f/0xc0 [ 92.882514][ T7295] __x64_sys_process_vm_writev+0x78/0x90 [ 92.882534][ T7295] x64_sys_call+0x27ef/0x3000 [ 92.882629][ T7295] do_syscall_64+0xca/0x2b0 [ 92.882662][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.882705][ T7295] RIP: 0033:0x7fc60ddcf749 [ 92.882718][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.882736][ T7295] RSP: 002b:00007fc60c82f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 92.882753][ T7295] RAX: ffffffffffffffda RBX: 00007fc60e025fa0 RCX: 00007fc60ddcf749 [ 92.882766][ T7295] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000329 [ 92.882780][ T7295] RBP: 00007fc60c82f090 R08: 000000000000023a R09: 0000000000000000 [ 92.882794][ T7295] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 92.882857][ T7295] R13: 00007fc60e026038 R14: 00007fc60e025fa0 R15: 00007ffed5390078 [ 92.882876][ T7295] [ 93.237484][ T7308] loop1: detected capacity change from 0 to 512 [ 93.254167][ T7308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.271382][ T7312] rdma_rxe: rxe_newlink: failed to add bond0 [ 93.301436][ T7308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 93.318330][ T7308] System zones: 1-12 [ 93.333699][ T7308] EXT4-fs (loop1): 1 truncate cleaned up [ 93.550770][ T29] kauditd_printk_skb: 2901 callbacks suppressed [ 93.550786][ T29] audit: type=1326 audit(1768488212.316:33648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.580620][ T29] audit: type=1326 audit(1768488212.316:33649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.603569][ T29] audit: type=1326 audit(1768488212.316:33650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.627063][ T29] audit: type=1326 audit(1768488212.316:33651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.649962][ T29] audit: type=1326 audit(1768488212.316:33652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.672871][ T29] audit: type=1326 audit(1768488212.316:33653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.695828][ T29] audit: type=1326 audit(1768488212.316:33654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.719471][ T29] audit: type=1326 audit(1768488212.316:33655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.743093][ T29] audit: type=1326 audit(1768488212.316:33656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.766905][ T29] audit: type=1326 audit(1768488212.316:33657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fc60ddcf749 code=0x7ffc0000 [ 93.795773][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 93.830107][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 94.150423][ T7393] smc: net device bond0 applied user defined pnetid SYZ0 [ 94.171573][ T7393] smc: net device bond0 erased user defined pnetid SYZ0 [ 94.246899][ T7411] loop4: detected capacity change from 0 to 512 [ 94.272983][ T7411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.288077][ T7411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 94.296308][ T7411] System zones: 1-12 [ 94.300825][ T7411] EXT4-fs (loop4): 1 truncate cleaned up [ 94.395656][ T7425] rdma_rxe: rxe_newlink: failed to add bond0 [ 94.535280][ T7486] FAULT_INJECTION: forcing a failure. [ 94.535280][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 94.547988][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.4.1510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.548044][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.548052][ T7486] Call Trace: [ 94.548056][ T7486] [ 94.548062][ T7486] __dump_stack+0x1d/0x30 [ 94.548078][ T7486] dump_stack_lvl+0x95/0xd0 [ 94.548090][ T7486] dump_stack+0x15/0x1b [ 94.548152][ T7486] should_fail_ex+0x265/0x280 [ 94.548178][ T7486] should_failslab+0x8c/0xb0 [ 94.548233][ T7486] kmem_cache_alloc_noprof+0x69/0x4b0 [ 94.548256][ T7486] ? audit_log_start+0x342/0x720 [ 94.548281][ T7486] audit_log_start+0x342/0x720 [ 94.548344][ T7486] ? kstrtouint+0x76/0xc0 [ 94.548414][ T7486] audit_seccomp+0x48/0x100 [ 94.548431][ T7486] ? __seccomp_filter+0x832/0x1260 [ 94.548446][ T7486] __seccomp_filter+0x843/0x1260 [ 94.548518][ T7486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.548535][ T7486] ? vfs_write+0x7e8/0x960 [ 94.548571][ T7486] __secure_computing+0x82/0x150 [ 94.548585][ T7486] syscall_trace_enter+0xcf/0x1e0 [ 94.548604][ T7486] do_syscall_64+0xa4/0x2b0 [ 94.548623][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.548691][ T7486] RIP: 0033:0x7fbbbf89f749 [ 94.548707][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.548724][ T7486] RSP: 002b:00007fbbbe307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 94.548759][ T7486] RAX: ffffffffffffffda RBX: 00007fbbbfaf5fa0 RCX: 00007fbbbf89f749 [ 94.548771][ T7486] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000000 [ 94.548783][ T7486] RBP: 00007fbbbe307090 R08: 0000000000000000 R09: 0000000000000000 [ 94.548811][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.548822][ T7486] R13: 00007fbbbfaf6038 R14: 00007fbbbfaf5fa0 R15: 00007ffd51d8d758 [ 94.548840][ T7486] [ 94.776263][ T7492] loop4: detected capacity change from 0 to 512 [ 94.783444][ T7492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.794493][ T7492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 94.802558][ T7492] System zones: 1-12 [ 94.807002][ T7492] EXT4-fs (loop4): 1 truncate cleaned up [ 94.949755][ T7502] loop4: detected capacity change from 0 to 512 [ 94.958686][ T7502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.976116][ T7502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 94.984406][ T7502] System zones: 1-12 [ 94.988808][ T7502] EXT4-fs (loop4): 1 truncate cleaned up [ 95.023689][ T7509] loop0: detected capacity change from 0 to 2048 [ 95.093008][ T3299] Alternate GPT is invalid, using primary GPT. [ 95.099415][ T3299] loop0: p2 p3 p7 [ 95.103665][ T7511] loop2: detected capacity change from 0 to 2048 [ 95.115779][ T7502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7502 comm=syz.4.1517 [ 95.118783][ T7509] Alternate GPT is invalid, using primary GPT. [ 95.134690][ T7509] loop0: p2 p3 p7 [ 95.143828][ T5857] loop2: p2 p3 p7 [ 95.166447][ T7511] loop2: p2 p3 p7 [ 95.224370][ T7515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.248336][ T7515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 95.274176][ T7515] System zones: 1-12 [ 95.285139][ T7515] EXT4-fs (loop3): 1 truncate cleaned up [ 95.336146][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.336289][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 95.357164][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 95.374029][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 95.376167][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 95.401367][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.413568][ T7509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.429675][ T7509] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 95.444044][ T7528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.454730][ T7528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 95.462839][ T7528] System zones: 1-12 [ 95.468149][ T7528] EXT4-fs (loop2): 1 truncate cleaned up [ 95.574486][ T7536] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.581957][ T7536] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.737635][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 95.754127][ T7555] FAULT_INJECTION: forcing a failure. [ 95.754127][ T7555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.767275][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.1.1536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.767303][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.767314][ T7555] Call Trace: [ 95.767320][ T7555] [ 95.767327][ T7555] __dump_stack+0x1d/0x30 [ 95.767354][ T7555] dump_stack_lvl+0x95/0xd0 [ 95.767374][ T7555] dump_stack+0x15/0x1b [ 95.767391][ T7555] should_fail_ex+0x265/0x280 [ 95.767411][ T7555] should_fail+0xb/0x20 [ 95.767429][ T7555] should_fail_usercopy+0x1a/0x20 [ 95.767461][ T7555] strncpy_from_user+0x27/0x260 [ 95.767488][ T7555] ? __rcu_read_unlock+0x4f/0x70 [ 95.767509][ T7555] path_removexattrat+0x82/0x570 [ 95.767665][ T7555] __x64_sys_fremovexattr+0x35/0x40 [ 95.767817][ T7555] x64_sys_call+0x4da/0x3000 [ 95.767897][ T7555] do_syscall_64+0xca/0x2b0 [ 95.767928][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.767949][ T7555] RIP: 0033:0x7fc60ddcf749 [ 95.767964][ T7555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.768044][ T7555] RSP: 002b:00007fc60c82f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 95.768063][ T7555] RAX: ffffffffffffffda RBX: 00007fc60e025fa0 RCX: 00007fc60ddcf749 [ 95.768075][ T7555] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 95.768087][ T7555] RBP: 00007fc60c82f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.768099][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.768163][ T7555] R13: 00007fc60e026038 R14: 00007fc60e025fa0 R15: 00007ffed5390078 [ 95.768180][ T7555] [ 95.770756][ T7556] rdma_rxe: rxe_newlink: failed to add bond0 [ 95.895683][ T7561] tmpfs: Bad value for 'mpol' [ 95.921968][ T3317] EXT4-fs unmount: 71 callbacks suppressed [ 95.922048][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.002099][ T7565] netlink: 'syz.4.1538': attribute type 46 has an invalid length. [ 96.556497][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1541'. [ 96.565508][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1541'. [ 96.574503][ T7571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1541'. [ 96.773088][ T7576] set_capacity_and_notify: 3 callbacks suppressed [ 96.773104][ T7576] loop0: detected capacity change from 0 to 4096 [ 96.792960][ T7577] loop2: detected capacity change from 0 to 512 [ 96.799699][ T7577] EXT4-fs: Ignoring removed i_version option [ 96.805765][ T7577] EXT4-fs: Ignoring removed bh option [ 97.075406][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1548'. [ 97.084405][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1548'. [ 97.093534][ T7587] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1548'. [ 97.136509][ T7576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.166124][ T7577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.313532][ T7577] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.418234][ T7592] loop4: detected capacity change from 0 to 512 [ 97.425007][ T7592] EXT4-fs: Ignoring removed i_version option [ 97.431041][ T7592] EXT4-fs: Ignoring removed bh option [ 97.475615][ T7592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.488529][ T7592] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.540112][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.711580][ T7602] loop2: detected capacity change from 0 to 256 [ 97.726134][ T7603] rdma_rxe: rxe_newlink: failed to add bond0 [ 97.859472][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1550'. [ 97.931586][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.972531][ T7612] loop2: detected capacity change from 0 to 764 [ 97.977679][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 97.995335][ T7612] rock: directory entry would overflow storage [ 98.001544][ T7612] rock: sig=0x5245, size=8, remaining=5 [ 98.014777][ T7612] all: renamed from bridge_slave_0 [ 98.020752][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.167696][ T7635] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.175277][ T7635] smc: net device bond0 erased user defined pnetid SYZ0 [ 98.304932][ T7638] FAULT_INJECTION: forcing a failure. [ 98.304932][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.318060][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.0.1565 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.318080][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.318088][ T7638] Call Trace: [ 98.318092][ T7638] [ 98.318097][ T7638] __dump_stack+0x1d/0x30 [ 98.318113][ T7638] dump_stack_lvl+0x95/0xd0 [ 98.318190][ T7638] dump_stack+0x15/0x1b [ 98.318201][ T7638] should_fail_ex+0x265/0x280 [ 98.318277][ T7638] should_fail+0xb/0x20 [ 98.318288][ T7638] should_fail_usercopy+0x1a/0x20 [ 98.318330][ T7638] _copy_from_user+0x1c/0xb0 [ 98.318345][ T7638] ___sys_sendmsg+0xc1/0x1d0 [ 98.318369][ T7638] __x64_sys_sendmsg+0xd4/0x160 [ 98.318430][ T7638] x64_sys_call+0x17ba/0x3000 [ 98.318443][ T7638] do_syscall_64+0xca/0x2b0 [ 98.318535][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.318548][ T7638] RIP: 0033:0x7f56835ff749 [ 98.318558][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.318575][ T7638] RSP: 002b:00007f5682067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.318596][ T7638] RAX: ffffffffffffffda RBX: 00007f5683855fa0 RCX: 00007f56835ff749 [ 98.318677][ T7638] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000007 [ 98.318685][ T7638] RBP: 00007f5682067090 R08: 0000000000000000 R09: 0000000000000000 [ 98.318693][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.318700][ T7638] R13: 00007f5683856038 R14: 00007f5683855fa0 R15: 00007ffea78497c8 [ 98.318711][ T7638] [ 98.505946][ T7641] loop0: detected capacity change from 0 to 256 [ 98.560029][ T29] kauditd_printk_skb: 2072 callbacks suppressed [ 98.560046][ T29] audit: type=1326 audit(1768488217.307:35728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.590156][ T29] audit: type=1326 audit(1768488217.307:35729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.614173][ T29] audit: type=1326 audit(1768488217.307:35730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.638833][ T7641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1567'. [ 98.648445][ T29] audit: type=1326 audit(1768488217.397:35731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.671987][ T29] audit: type=1326 audit(1768488217.397:35732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.695531][ T29] audit: type=1326 audit(1768488217.397:35733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.698551][ T7645] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1568'. [ 98.719047][ T29] audit: type=1326 audit(1768488217.397:35734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.719078][ T29] audit: type=1326 audit(1768488217.407:35735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.774969][ T29] audit: type=1326 audit(1768488217.407:35736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.799171][ T29] audit: type=1326 audit(1768488217.407:35737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f56835ff749 code=0x7ffc0000 [ 98.948523][ T7669] loop0: detected capacity change from 0 to 1024 [ 98.965482][ T7670] loop1: detected capacity change from 0 to 1024 [ 98.980993][ T7669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.008892][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.023083][ T7669] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.066896][ T7670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.208390][ T7688] loop2: detected capacity change from 0 to 2048 [ 99.263215][ T7519] loop2: p2 p3 p7 [ 99.276234][ T7688] loop2: p2 p3 p7 [ 99.312808][ T7686] tipc: New replicast peer: 255.255.255.255 [ 99.320750][ T7686] tipc: Enabled bearer , priority 10 [ 99.358410][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 99.358779][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 99.381044][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 99.392423][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 99.401761][ T7686] tipc: Disabling bearer [ 99.420504][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 99.454960][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 99.479015][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 99.806797][ T7699] smc: net device bond0 applied user defined pnetid SYZ0 [ 99.814149][ T7699] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.052776][ T7749] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.068076][ T7749] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.872793][ T7768] loop2: detected capacity change from 0 to 512 [ 101.893761][ T7768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.110043][ T7768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 102.118082][ T7768] System zones: 1-12 [ 102.127991][ T7768] EXT4-fs (loop2): 1 truncate cleaned up [ 102.181588][ T7782] loop1: detected capacity change from 0 to 512 [ 102.188238][ T7782] EXT4-fs: Ignoring removed i_version option [ 102.194264][ T7782] EXT4-fs: Ignoring removed bh option [ 102.232681][ T7782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.245736][ T7782] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.318078][ T7780] loop0: detected capacity change from 0 to 764 [ 102.369683][ T7780] rock: directory entry would overflow storage [ 102.375907][ T7780] rock: sig=0x5245, size=8, remaining=5 [ 102.388288][ T7786] __nla_validate_parse: 6 callbacks suppressed [ 102.388351][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 102.407964][ T7780] all: renamed from bridge_slave_0 (while UP) [ 102.414802][ T7768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.496173][ T7791] loop0: detected capacity change from 0 to 512 [ 102.514840][ T7791] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.565161][ T7791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 102.576792][ T7791] System zones: 1-12 [ 102.582052][ T7791] EXT4-fs (loop0): 1 truncate cleaned up [ 102.588167][ T7791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.610359][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.682402][ T7798] loop3: detected capacity change from 0 to 2048 [ 102.700537][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.730362][ T7519] loop3: p2 p3 p7 [ 102.747776][ T7798] loop3: p2 p3 p7 [ 102.805028][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.826244][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 102.827551][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 102.836603][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 102.876244][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 103.030133][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 103.570261][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 103.570277][ T29] audit: type=1326 audit(1768488222.337:36371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.632651][ T29] audit: type=1326 audit(1768488222.367:36372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.643071][ T7827] tipc: New replicast peer: 255.255.255.255 [ 103.656186][ T29] audit: type=1400 audit(1768488222.367:36373): avc: denied { read write } for pid=7826 comm="syz.2.1632" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.656294][ T29] audit: type=1326 audit(1768488222.367:36375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.656321][ T29] audit: type=1400 audit(1768488222.367:36374): avc: denied { open } for pid=7826 comm="syz.2.1632" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.656348][ T29] audit: type=1326 audit(1768488222.367:36376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.666349][ T7827] tipc: Enabled bearer , priority 10 [ 103.686115][ T29] audit: type=1400 audit(1768488222.377:36377): avc: denied { ioctl } for pid=7826 comm="syz.2.1632" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.686148][ T29] audit: type=1326 audit(1768488222.377:36378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.686258][ T29] audit: type=1326 audit(1768488222.377:36379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.729355][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 103.733483][ T29] audit: type=1326 audit(1768488222.377:36380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc60de02005 code=0x7ffc0000 [ 103.756930][ T7830] tipc: Disabling bearer [ 103.968832][ T7843] loop2: detected capacity change from 0 to 2048 [ 104.052573][ T7843] loop2: p2 p3 p7 [ 104.112747][ T7856] loop4: detected capacity change from 0 to 256 [ 104.154458][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 104.156001][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 104.166318][ T7518] udevd[7518]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 104.196002][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 104.198988][ T7860] rdma_rxe: rxe_newlink: failed to add bond0 [ 104.207607][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 104.228204][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 104.239931][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1647'. [ 104.384519][ T7874] loop4: detected capacity change from 0 to 1024 [ 104.411045][ T7874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.423780][ T7874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.536398][ T7879] tipc: Started in network mode [ 104.541517][ T7879] tipc: Node identity ac14140f, cluster identity 4711 [ 104.548795][ T7879] tipc: New replicast peer: 255.255.255.255 [ 104.555586][ T7879] tipc: Enabled bearer , priority 10 [ 104.870525][ T7892] loop3: detected capacity change from 0 to 764 [ 104.894198][ T7892] rock: directory entry would overflow storage [ 104.894955][ T7896] loop0: detected capacity change from 0 to 512 [ 104.900508][ T7892] rock: sig=0x5245, size=8, remaining=5 [ 104.930894][ T7892] all: renamed from bridge_slave_0 [ 104.940156][ T7896] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.959936][ T7896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 104.967964][ T7896] System zones: 1-12 [ 104.972604][ T7896] EXT4-fs (loop0): 1 truncate cleaned up [ 104.978927][ T7896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.043031][ T7906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.090062][ T7906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 105.098208][ T7906] System zones: 1-12 [ 105.103396][ T7906] EXT4-fs (loop3): 1 truncate cleaned up [ 105.110046][ T7906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.132972][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.259089][ T7906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7906 comm=syz.3.1667 [ 105.304094][ T7923] rock: directory entry would overflow storage [ 105.310364][ T7923] rock: sig=0x5245, size=8, remaining=5 [ 105.334010][ T7923] all: renamed from bridge_slave_0 [ 105.362716][ T7926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1674'. [ 105.371779][ T7926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1674'. [ 105.380740][ T7926] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1674'. [ 105.585807][ T7932] EXT4-fs: Ignoring removed i_version option [ 105.592085][ T7932] EXT4-fs: Ignoring removed bh option [ 105.651903][ T7932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.664665][ T7932] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.723422][ T3497] tipc: Node number set to 2886997007 [ 105.777174][ T7937] rdma_rxe: rxe_newlink: failed to add bond0 [ 105.808232][ T7939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.819199][ T7939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 105.827428][ T7939] System zones: 1-12 [ 105.832133][ T7939] EXT4-fs (loop1): 1 truncate cleaned up [ 105.838326][ T7939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.876405][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.892607][ T7942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1679'. [ 105.901644][ T7942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1679'. [ 105.956989][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.129949][ T7955] EXT4-fs: Ignoring removed i_version option [ 106.135970][ T7955] EXT4-fs: Ignoring removed bh option [ 106.173013][ T7956] smc: net device bond0 applied user defined pnetid SYZ0 [ 106.194342][ T7955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.230523][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.239941][ T7955] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.525244][ T7969] loop0: p2 p3 p7 [ 106.680170][ T7977] tipc: Started in network mode [ 106.686022][ T7977] tipc: Node identity ac14140f, cluster identity 4711 [ 106.693664][ T7977] tipc: New replicast peer: 255.255.255.255 [ 106.700156][ T7977] tipc: Enabled bearer , priority 10 [ 106.752769][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.779215][ T7985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.797723][ T7985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 106.808969][ T7985] System zones: 1-12 [ 106.822484][ T7985] EXT4-fs (loop3): 1 truncate cleaned up [ 106.828703][ T7985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.963159][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.028188][ T7997] set_capacity_and_notify: 7 callbacks suppressed [ 107.028206][ T7997] loop0: detected capacity change from 0 to 512 [ 107.041536][ T7997] EXT4-fs: Ignoring removed i_version option [ 107.047585][ T7997] EXT4-fs: Ignoring removed bh option [ 107.062597][ T7997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.075902][ T7997] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.358392][ T8003] loop3: detected capacity change from 0 to 1024 [ 107.426045][ T8003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.518469][ T8003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.528002][ T8009] loop1: detected capacity change from 0 to 764 [ 107.567193][ T8009] rock: directory entry would overflow storage [ 107.573397][ T8009] rock: sig=0x5245, size=8, remaining=5 [ 107.834687][ T8020] loop4: detected capacity change from 0 to 2048 [ 107.902419][ T7519] loop4: p2 p3 p7 [ 107.922335][ T3502] tipc: Node number set to 2886997007 [ 107.936935][ T8020] loop4: p2 p3 p7 [ 108.028208][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 108.029090][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 108.067742][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 108.093978][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 108.094020][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 108.094103][ T3299] ================================================================== [ 108.094130][ T3299] BUG: KCSAN: data-race in data_push_tail / string [ 108.094163][ T3299] [ 108.094170][ T3299] write to 0xffffffff88ea7a80 of 1 bytes by task 5857 on cpu 1: [ 108.094189][ T3299] string+0x187/0x220 [ 108.094213][ T3299] vsnprintf+0x532/0x860 [ 108.094237][ T3299] vscnprintf+0x41/0x90 [ 108.094259][ T3299] printk_sprint+0x30/0x2d0 [ 108.094285][ T3299] vprintk_store+0x568/0x830 [ 108.094311][ T3299] vprintk_emit+0x15a/0x5c0 [ 108.094339][ T3299] devkmsg_emit+0x7f/0xb0 [ 108.094356][ T3299] devkmsg_write+0x1e3/0x2b0 [ 108.094383][ T3299] do_iter_readv_writev+0x4a1/0x540 [ 108.094403][ T3299] vfs_writev+0x2df/0x8b0 [ 108.094429][ T3299] do_writev+0xe7/0x210 [ 108.094450][ T3299] __x64_sys_writev+0x45/0x50 [ 108.094468][ T3299] x64_sys_call+0x1ba5/0x3000 [ 108.094491][ T3299] do_syscall_64+0xca/0x2b0 [ 108.094534][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.094558][ T3299] [ 108.094566][ T3299] read to 0xffffffff88ea7a80 of 8 bytes by task 3299 on cpu 0: [ 108.094582][ T3299] data_push_tail+0x100/0x470 [ 108.094607][ T3299] data_alloc+0x11b/0x390 [ 108.094631][ T3299] prb_reserve+0x8d7/0xad0 [ 108.094661][ T3299] vprintk_store+0x53c/0x830 [ 108.094693][ T3299] vprintk_emit+0x15a/0x5c0 [ 108.094722][ T3299] devkmsg_emit+0x7f/0xb0 [ 108.094737][ T3299] devkmsg_write+0x1e3/0x2b0 [ 108.094761][ T3299] do_iter_readv_writev+0x4a1/0x540 [ 108.094781][ T3299] vfs_writev+0x2df/0x8b0 [ 108.094805][ T3299] do_writev+0xe7/0x210 [ 108.094830][ T3299] __x64_sys_writev+0x45/0x50 [ 108.094853][ T3299] x64_sys_call+0x1ba5/0x3000 [ 108.094876][ T3299] do_syscall_64+0xca/0x2b0 [ 108.094904][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.094927][ T3299] [ 108.094931][ T3299] value changed: 0x00000000ffffe33b -> 0x372868637461775f [ 108.094943][ T3299] [ 108.094947][ T3299] Reported by Kernel Concurrency Sanitizer on: [ 108.094958][ T3299] CPU: 0 UID: 0 PID: 3299 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.094983][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.094998][ T3299] ================================================================== [ 108.335700][ T7519] udevd[7519]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 108.405671][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.580237][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 108.580247][ T29] audit: type=1326 audit(1768488227.347:36931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.609958][ T29] audit: type=1326 audit(1768488227.347:36932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.633418][ T29] audit: type=1326 audit(1768488227.347:36933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.656984][ T29] audit: type=1326 audit(1768488227.347:36934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.680910][ T29] audit: type=1326 audit(1768488227.347:36935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.704563][ T29] audit: type=1326 audit(1768488227.347:36936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.728018][ T29] audit: type=1326 audit(1768488227.347:36937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.751529][ T29] audit: type=1326 audit(1768488227.347:36938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.775142][ T29] audit: type=1326 audit(1768488227.347:36939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000 [ 108.798615][ T29] audit: type=1326 audit(1768488227.357:36940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbbf8d2005 code=0x7ffc0000