last executing test programs: 2m19.520751505s ago: executing program 2 (id=3298): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000340)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x2e, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x18, 0x200, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b34d9943747fe8b82653f648f37bc6b4"}]}}, {"9d5e8c4deff2"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000e00)={[{@lazytime}, {@noload}, {@resgid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") 2m19.289087236s ago: executing program 2 (id=3301): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) r2 = dup2(r0, r1) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) 2m18.91630545s ago: executing program 2 (id=3307): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000002c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="11da0000fe1000030500008100000000e9f9000000", @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c0012800b0001006d616373656300000c0002800500030008000000"], 0x3c}}, 0x0) 2m18.836972117s ago: executing program 2 (id=3309): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x400, 0x1, 0x1, 0x3, r2}) close(r1) tgkill(r2, r3, 0x21) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/151, 0x97}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000740)=""/254, 0xfe}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x0, 0x0, {{0xc, 0x4, 0x3, 0x0, 0x30, 0x67, 0x0, 0x2d, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0x10, 0xe2, 0x0, 0x8, [0x9, 0x3, 0x114]}, @rr={0x7, 0xb, 0x54, [@private=0xa010102, @loopback]}]}}}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000280)}, 0x0, 0x9, 0xfffffffe, 0x6, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000100)={[{@bsdgroups}]}, 0x1, 0x58d, &(0x7f0000000bc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c2, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x18, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES16=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) add_key(&(0x7f0000000180)='ceph\x00', 0x0, &(0x7f0000000300)="010001000000000000e10f00015b2dbab04dd577460127a93cdb8b", 0x1b, 0xfffffffffffffffd) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) syz_io_uring_setup(0x56ee, &(0x7f0000000000)={0x0, 0xb544, 0x800, 0x0, 0x249, 0x0, r6}, &(0x7f00000000c0), &(0x7f00000001c0)) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m18.744870575s ago: executing program 2 (id=3310): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd89, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x0, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b19d7a99d0000000000000000000400000000007c", @ANYRES32, @ANYBLOB="eeffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m18.541026094s ago: executing program 2 (id=3315): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m18.531524394s ago: executing program 32 (id=3315): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m4.575454019s ago: executing program 1 (id=4625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@nodelalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m4.393232885s ago: executing program 1 (id=4626): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r2 = dup(0xffffffffffffffff) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_create(r3, &(0x7f00000001c0)=@access={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'unconfined', 0x20, 0x1ff}, 0x45) 1m4.306498773s ago: executing program 1 (id=4630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000006c0)='9p_client_req\x00', r1, 0x0, 0x2}, 0x18) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1m4.242599879s ago: executing program 1 (id=4634): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="00fbfddc0bd5e8dee8d286b20b62086ce9b81b1660031b9dcba026117a79eba4a32d50e5c7b14c8e3f4d"], 0x1, 0x3f4, &(0x7f0000000680)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000140)=0x101) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x2, 0xffffffffffffffff, r7, r8, 0xee00, 0x122, 0x3}, 0x400, 0x7ad9df5f, 0x1, 0xed, r5, r6, 0xd}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@md0, r8, &(0x7f0000000100)) 1m3.456436759s ago: executing program 1 (id=4647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000001000000950000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r0, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000001700)=[{}], 0x8, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) r8 = dup3(0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x26, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x4, 0xc9, &(0x7f0000001180)=""/201, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x5, 0x7, 0x7, 0xfff}, 0x10, r7, r4, 0x1, &(0x7f00000015c0)=[r8, r2, r2, r2], &(0x7f0000001600)=[{0x1, 0x2, 0x9, 0x6}], 0x10, 0x6}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r9, 0x0, 0xfffffffffb}, 0x18) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000440)='rxrpc_peer\x00', r0, 0x0, 0x2}, 0x18) r11 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r11, &(0x7f0000000040)="06", 0x1) sendfile(r11, r11, &(0x7f0000001000), 0xffff) r12 = socket$kcm(0x21, 0x2, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000100001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x450, r14, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9a0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa000000}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x47e}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_ID={0xab, 0x3, "011f35e3bfe76546927950d7dd7ccabd2b52f07829a52241aae8e920892057b437c8d2316a3f9cb80e60cedd012f2234467f31df67a0902a41f9e7cc6cea007ede8a4ecb1eb1828074e64dc269b121c641304dd0810e3aa28d2339536be013866201feff20b396028c34367fe51d903d410f845c9a04aca7a007a5a259c6583d8b08fbae7b06089e86275b3eef02b10bc698f88d59ea82dc02022881ea645e70e99b8d3890bda1"}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "797d4f824abab2ef5b1d221e2395415e818712f2e778f2bc669884510cae8bf86b876bc2b00fdce83ff1235598a0379fd65d987382b03db59c139814aa590a23f94a5a71974c1c253eba59780aca4888ac66c4f315a3d2fbc9b5ec79490116597a466d52bf1c17851bd137df18b51006a775e1308c0840e1fc505cd3a9fb47901e0c5a69178ce030e83c95176862780f993ba94b5200f02d27dcfedd8184a8f929a751c987223c2bc816671d4130d8a025ea37ec148b8c93d05516c13b084b281f94cce2d5a5dd88f9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3405b495}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x450}, 0x1, 0x0, 0x0, 0x44800}, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1m3.433601311s ago: executing program 1 (id=4649): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000640)='cpu--8\n&\f0\xed') (fail_nth: 1) 1m3.401460924s ago: executing program 33 (id=4649): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000640)='cpu--8\n&\f0\xed') (fail_nth: 1) 4.301808484s ago: executing program 0 (id=5831): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000700)=""/99, 0x63}, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800) 4.217197721s ago: executing program 0 (id=5836): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) 4.153238947s ago: executing program 0 (id=5838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000e, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f49fcfec3197381b13892559f334d436138406b699de69db13fd42d5737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e7a0dc395ab72756496f2e0616a18998c294c8e674758ffa13b00bab2df9ca37a0bd8f0bb843fe86124390c62f05d76038a6e1610780f0310692de128832c32940a6e848b17d1b5a0c20f7ff5a7a2e353f9363a037d054cf0409c89cd80165cf27bf7904a0d47cfd06acc1e4606bb5a8d26ace7578e8f5d151eb60e63969461a96e66f9cf4203d5bb7af3f62bc02693a1d5af09c6d1f5c7d27e991ce5c388b925aacf29f77ff12a5589aa7174c130ba477e86188d1ce5168925ebc3e4f071c368fe7e71b209acca43bdc42a1fe0171c4096fe8ddf08e081554bac2dc0d3a4f80cd57aae7305aec6c9d8853e8f80be85b921c951a9fff4a9ff33a348926af5d91fd19bb2d930eeb546444189e76b0cd05a72f52bc74d285d6b6d84680770f88f82474b6c3fc5b641822516eb35fe2ecd17d378b283c2ea4c2295f2d42beebad7b75da375764520e9fc68683118adf1ce73e1c7635161df1cfa4f73fd4ed9811c1c2366472122d7900d073f75e6e5a3104d6a258772b840dcf0a16246ee6ef516a66a0c70283875bdfb0cb3b8fd5f76e8b481193d1ca7310b74f6b2fe4e03b3d67e560784a28a508e302634ada79a9d543a4b6ac9dab6f335cd207d7c4d46ef6922bde6c66b85817d1d9cf191a7573773fc9125b1c9282acae0cc3f381b36a009592d16df4d74de496b1a38a857671eec326ba6d6762d21066de663280c7283629799", 0x26e}, {&(0x7f0000000900)="b0fef28adda62f55a00000595b1800000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1f2509f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2", 0x6b}], 0x2}, 0x8000) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.469420978s ago: executing program 0 (id=5845): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbbfffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000000004cd6f43c360000008000000000"], 0x18}}], 0x1, 0x40840) io_uring_enter(r1, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 3.276468096s ago: executing program 0 (id=5847): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100db0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"], 0x50) (fail_nth: 6) 3.184665044s ago: executing program 0 (id=5850): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030300000000000000000600000008000300", @ANYRESDEC=r0, @ANYBLOB="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"], 0x1c}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsmount(r4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r5 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x5a64, 0x2, 0x9, 0x4}]}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0xb, 0x803, 0x4000003) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r10, {0x5, 0x9}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x400c000) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x2000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000740)={[{@delalloc}, {@nolazytime}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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") 2.192421823s ago: executing program 4 (id=5865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000001000000950000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) r7 = dup3(0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x26, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x4, 0xc9, &(0x7f0000001180)=""/201, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x5, 0x7, 0x7, 0xfff}, 0x10, 0x0, r4, 0x1, &(0x7f00000015c0)=[r7, r2, r2, r2], &(0x7f0000001600)=[{0x1, 0x2, 0x9, 0x6}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000440)='rxrpc_peer\x00', r0, 0x0, 0x2}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2.11970814s ago: executing program 5 (id=5867): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x3, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.053171016s ago: executing program 5 (id=5868): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0xb5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.048927266s ago: executing program 4 (id=5869): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77246bc2c93d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="2f0000001000000004000000", @ANYRES32=r2, @ANYBLOB="8c991ffbe123fea9935bff53fa633029959b3934207f2fae7b", @ANYRES64=0x0], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x29, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 1.938452896s ago: executing program 4 (id=5871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000780)={0x0, 0x0, 0x400, 0x2, 0x80000216}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r2, 0x47f4, 0xffff7fff, 0x3, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x44040001, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) 1.684317699s ago: executing program 3 (id=5873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801009b010049f1d2cb06aeac1e051044a41e00a7d900"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0xee, 0x4200004) 1.683896819s ago: executing program 4 (id=5874): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) r2 = dup2(r0, r1) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) 1.593812447s ago: executing program 6 (id=5875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}}, 0x20000050) 1.571306829s ago: executing program 3 (id=5876): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) r2 = dup2(r0, r1) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) 1.484203307s ago: executing program 6 (id=5877): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x3, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x7b, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90}, 0x94) 1.410855203s ago: executing program 6 (id=5878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000001000000950000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) r6 = dup3(0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x26, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x4, 0xc9, &(0x7f0000001180)=""/201, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x5, 0x7, 0x7, 0xfff}, 0x10, 0x0, r4, 0x1, &(0x7f00000015c0)=[r6, r2, r2, r2], &(0x7f0000001600)=[{0x1, 0x2, 0x9, 0x6}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000440)='rxrpc_peer\x00', r0, 0x0, 0x2}, 0x18) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.292151544s ago: executing program 5 (id=5879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110b7000000000095001b0000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f00000001c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff2b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=':\'-\'\'**,\x00', &(0x7f00000002c0)=',\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00'}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r10}, 0x38) 1.155814896s ago: executing program 6 (id=5880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1.102685311s ago: executing program 6 (id=5881): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000)=0x7, 0x4ffffff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) futex(&(0x7f0000000140), 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x7, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) 674.813789ms ago: executing program 4 (id=5882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xb}, {0xc, 0x9}, {0xfff1, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="09871a3e", 0x4}], 0x1}}], 0x1, 0x801) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x20) 544.722332ms ago: executing program 3 (id=5883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r1) 317.147442ms ago: executing program 4 (id=5884): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdcb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) timer_create(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 316.639102ms ago: executing program 3 (id=5885): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x3, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) 289.938634ms ago: executing program 5 (id=5886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}}, 0x20000050) 262.699627ms ago: executing program 5 (id=5887): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff5a}, {}, {}, [@jmp={0x5, 0x0, 0xc, 0xa, 0x5, 0x2, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x34, &(0x7f0000000680)=""/52, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x4, 0x100}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f0000001c00)=[{0x4, 0x5, 0x9, 0x9}, {0x1, 0x2, 0xe, 0x9}, {0x2, 0x3, 0xc, 0x8}, {0x0, 0x5, 0x8, 0x5}, {0x0, 0x1, 0x0, 0xc}, {0x3, 0x1, 0xa}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x2, 0xe, 0xb}, {0x1, 0x3, 0x4, 0x9}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xff) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) 236.412299ms ago: executing program 3 (id=5888): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030300000000000000000600000008000300", @ANYRESDEC=r0, @ANYBLOB="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"], 0x1c}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsmount(r4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r5 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x5a64, 0x2, 0x9, 0x4}]}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0xb, 0x803, 0x4000003) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r10, {0x5, 0x9}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x400c000) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x2000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 170.853455ms ago: executing program 5 (id=5889): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 93.141482ms ago: executing program 3 (id=5890): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=5891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000003040)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000046b8eaf54ae8cdbf9c54fea937794e00"], 0xffffffffffffffff, 0x1a, 0x0, 0x2}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req={0xffff, 0x0, 0x483, 0x2}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) r7 = dup(0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) kernel console output (not intermixed with test programs): =1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 351.584479][T18389] System zones: 1-12 [ 351.596023][T18389] EXT4-fs (loop0): 1 truncate cleaned up [ 351.628197][T18387] lo speed is unknown, defaulting to 1000 [ 351.647340][T18387] vcan0 speed is unknown, defaulting to 1000 [ 351.674349][T18391] loop5: detected capacity change from 0 to 128 [ 351.746438][T18397] 9pnet_fd: Insufficient options for proto=fd [ 351.834123][T18403] loop0: detected capacity change from 0 to 1024 [ 351.852719][T18403] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 351.873653][T18403] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.891034][T18373] Set syz1 is full, maxelem 65536 reached [ 351.898588][T18403] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 351.914878][T18403] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 351.914878][T18403] [ 351.925892][T18403] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 351.935280][T18403] EXT4-fs mount: 28 callbacks suppressed [ 351.935295][T18403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.983616][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.018126][ T3561] hid_parser_main: 135 callbacks suppressed [ 352.018147][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.031590][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.039299][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.046847][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.054336][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.061765][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.069307][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.076765][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.084294][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.091709][ T3561] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 352.131709][T18417] loop0: detected capacity change from 0 to 164 [ 352.145599][T18417] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.156376][T18417] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.166241][T18417] Symlink component flag not implemented [ 352.171906][T18417] Symlink component flag not implemented [ 352.177937][T18417] Symlink component flag not implemented (7) [ 352.180904][ T3561] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [sy] on syz0 [ 352.184012][T18417] Symlink component flag not implemented (116) [ 352.240922][T18421] loop6: detected capacity change from 0 to 512 [ 352.254751][T18421] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.269242][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4964'. [ 352.302630][T18428] 9pnet_fd: Insufficient options for proto=fd [ 352.309604][T18430] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 352.319431][T18430] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.336739][T18421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 352.344928][T18421] System zones: 1-12 [ 352.349440][T18421] EXT4-fs (loop6): 1 truncate cleaned up [ 352.355225][T18430] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 352.356657][T18421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.363743][T18430] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 352.363743][T18430] [ 352.387193][T18430] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 352.410020][T18430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.490858][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.501108][T13259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.604843][ T2972] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [sy] on syz0 [ 352.622641][T18451] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.623114][T18448] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.658376][T18451] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.667707][T18451] Symlink component flag not implemented [ 352.673391][T18451] Symlink component flag not implemented [ 352.682799][T18451] Symlink component flag not implemented (7) [ 352.689001][T18451] Symlink component flag not implemented (116) [ 352.695662][T18455] 9pnet_fd: Insufficient options for proto=fd [ 352.754244][T18463] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 352.771092][T18463] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.798109][T18463] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 352.806935][T18465] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.814405][T18463] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 352.814405][T18463] [ 352.828347][T18463] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 352.838220][T18463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.839337][T18465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 352.884792][T18465] System zones: 1-12 [ 352.904281][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.916169][T18465] EXT4-fs (loop6): 1 truncate cleaned up [ 352.922442][T18465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.968130][T18473] lo speed is unknown, defaulting to 1000 [ 352.969006][T18482] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 352.976323][T18473] vcan0 speed is unknown, defaulting to 1000 [ 352.993918][T18482] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.4987: iget: bad i_size value: 12154757448730 [ 353.009260][T18482] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4987: couldn't read orphan inode 13 (err -117) [ 353.049479][T18489] 9p: Bad value for 'rfdno' [ 353.059702][T18482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.083715][T18482] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 353.097721][T18482] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 353.120805][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.184372][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.205933][T18496] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 353.225625][T18496] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 353.235262][T18496] Symlink component flag not implemented [ 353.240924][T18496] Symlink component flag not implemented [ 353.247227][T18496] Symlink component flag not implemented (7) [ 353.253294][T18496] Symlink component flag not implemented (116) [ 353.371887][T18504] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 353.381669][T18504] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 353.392909][T18504] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 353.401763][T18504] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 353.401763][T18504] [ 353.412643][T18504] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 353.421854][T18504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.448257][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.519940][T18515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.529468][T18515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.619708][T18518] lo speed is unknown, defaulting to 1000 [ 353.626604][T18518] vcan0 speed is unknown, defaulting to 1000 [ 353.814694][T18521] 9p: Bad value for 'rfdno' [ 354.139819][T18529] EXT4-fs: inline encryption not supported [ 354.145722][T18529] EXT4-fs: test_dummy_encryption option not supported [ 354.156436][T18531] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 354.192595][T18531] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 354.201335][T18531] Symlink component flag not implemented [ 354.207060][T18531] Symlink component flag not implemented [ 354.237651][T18529] SELinux: failed to load policy [ 354.269408][T18531] Symlink component flag not implemented (7) [ 354.276239][T18531] Symlink component flag not implemented (116) [ 354.550980][T18547] lo speed is unknown, defaulting to 1000 [ 354.574936][T18547] vcan0 speed is unknown, defaulting to 1000 [ 354.623363][T18549] lo speed is unknown, defaulting to 1000 [ 354.742184][T18524] Set syz1 is full, maxelem 65536 reached [ 354.756942][T18549] vcan0 speed is unknown, defaulting to 1000 [ 354.862589][T18562] EXT4-fs: inline encryption not supported [ 354.868613][T18562] EXT4-fs: test_dummy_encryption option not supported [ 354.877857][T18564] 9p: Bad value for 'rfdno' [ 354.982391][T18572] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 354.998494][T18572] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 355.008342][T18572] Symlink component flag not implemented [ 355.014063][T18572] Symlink component flag not implemented [ 355.043640][T18572] Symlink component flag not implemented (7) [ 355.049741][T18572] Symlink component flag not implemented (116) [ 355.073336][T18562] SELinux: failed to load policy [ 355.330802][T18599] 9p: Bad value for 'rfdno' [ 355.374362][T18604] set_capacity_and_notify: 14 callbacks suppressed [ 355.374383][T18604] loop5: detected capacity change from 0 to 164 [ 355.420014][T18604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 355.453646][T18604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 355.462261][T18604] Symlink component flag not implemented [ 355.467942][T18604] Symlink component flag not implemented [ 355.473752][T18604] Symlink component flag not implemented (7) [ 355.480577][T18604] Symlink component flag not implemented (116) [ 355.837719][T18593] Set syz1 is full, maxelem 65536 reached [ 355.890603][T18627] 9p: Bad value for 'rfdno' [ 355.928802][ T3498] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [sy] on syz0 [ 355.947133][T18638] 9p: Bad value for 'rfdno' [ 356.022073][T18642] loop0: detected capacity change from 0 to 1024 [ 356.034019][T18642] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 356.045380][T18642] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 356.069859][T18650] loop5: detected capacity change from 0 to 512 [ 356.076639][T18642] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 356.085068][T18650] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.085333][T18642] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 356.085333][T18642] [ 356.106787][T18642] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 356.116002][T18642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.145375][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.166222][T18650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 356.174682][T18650] System zones: 1-12 [ 356.183181][T18650] EXT4-fs (loop5): 1 truncate cleaned up [ 356.192673][T18650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.250969][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.401161][ T3498] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [sy] on syz0 [ 356.510644][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 356.510661][ T29] audit: type=1400 audit(1767423688.782:40516): avc: denied { write } for pid=18677 comm="syz.6.5067" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 356.575617][T18683] loop6: detected capacity change from 0 to 512 [ 356.596143][T18683] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 356.655680][T18683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 356.663809][T18683] System zones: 1-12 [ 356.668261][T18683] EXT4-fs (loop6): 1 truncate cleaned up [ 356.674822][T18683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.755854][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.786254][ T2972] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [sy] on syz0 [ 356.885955][T18702] loop6: detected capacity change from 0 to 512 [ 356.901823][T18702] EXT4-fs: inline encryption not supported [ 356.907796][T18702] EXT4-fs: test_dummy_encryption option not supported [ 356.907896][T18703] loop3: detected capacity change from 0 to 164 [ 356.932101][T18703] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 356.989699][T18703] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 356.999939][T18707] 9p: Bad value for 'rfdno' [ 357.012626][T18703] Symlink component flag not implemented [ 357.018452][T18703] Symlink component flag not implemented [ 357.057983][T18702] SELinux: failed to load policy [ 357.078191][T18703] Symlink component flag not implemented (7) [ 357.084328][T18703] Symlink component flag not implemented (116) [ 357.097161][T18711] loop0: detected capacity change from 0 to 1024 [ 357.115782][T18711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.147131][T18680] Set syz1 is full, maxelem 65536 reached [ 357.163046][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.200575][T18719] loop6: detected capacity change from 0 to 512 [ 357.207727][T18719] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 357.224817][T18719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 357.237610][ T29] audit: type=1400 audit(1767423689.502:40517): avc: denied { append } for pid=18720 comm="syz.0.5082" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 357.264115][T18719] System zones: 1-12 [ 357.319183][T18719] EXT4-fs (loop6): 1 truncate cleaned up [ 357.332159][ T3498] hid_parser_main: 135 callbacks suppressed [ 357.332180][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.346768][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.354243][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.361838][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.370097][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.377619][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.385123][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.392529][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.400765][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.401252][T18719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.408213][ T3498] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 357.448241][ T3561] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 357.486485][ T3498] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [sy] on syz0 [ 357.499993][T18734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.509201][T18734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.561008][ T29] audit: type=1326 audit(1767423689.832:40518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.599676][T18742] loop0: detected capacity change from 0 to 512 [ 357.610546][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.614131][ T29] audit: type=1326 audit(1767423689.862:40519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.621684][T18742] EXT4-fs: inline encryption not supported [ 357.643347][ T29] audit: type=1326 audit(1767423689.862:40520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.643383][ T29] audit: type=1326 audit(1767423689.862:40521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.643417][ T29] audit: type=1326 audit(1767423689.862:40522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.643478][ T29] audit: type=1326 audit(1767423689.862:40523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.745149][T18742] EXT4-fs: test_dummy_encryption option not supported [ 357.768838][T18744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5093'. [ 357.777902][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5093'. [ 357.786924][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5093'. [ 357.795834][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 357.806558][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 357.861045][ T29] audit: type=1326 audit(1767423690.082:40524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.884907][ T29] audit: type=1326 audit(1767423690.082:40525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18739 comm="syz.4.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb86f749 code=0x7ffc0000 [ 357.956655][T18749] SELinux: failed to load policy [ 358.017014][T18755] 9pnet_fd: Insufficient options for proto=fd [ 358.069220][T18753] loop7: detected capacity change from 0 to 7 [ 358.076064][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.085713][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.094541][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.104288][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.112387][T18753] loop7: unable to read partition table [ 358.118255][T18753] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 358.175558][ T3561] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [sy] on syz0 [ 358.225370][T18773] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 358.244635][T18777] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 358.262220][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5105'. [ 358.271867][T18773] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 358.274149][T18777] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.305886][T18779] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 358.314254][T18777] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 358.322338][T18777] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 358.322338][T18777] [ 358.333112][T18777] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 358.357948][T18777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.374004][T18773] Symlink component flag not implemented [ 358.379688][T18773] Symlink component flag not implemented [ 358.439997][T18773] Symlink component flag not implemented (7) [ 358.446076][T18773] Symlink component flag not implemented (116) [ 358.488318][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.589194][T18786] lo speed is unknown, defaulting to 1000 [ 358.607697][T18794] EXT4-fs: inline encryption not supported [ 358.613613][T18794] EXT4-fs: test_dummy_encryption option not supported [ 358.624427][T18786] vcan0 speed is unknown, defaulting to 1000 [ 358.809234][T18794] SELinux: failed to load policy [ 358.889992][T18805] lo speed is unknown, defaulting to 1000 [ 358.897714][T18805] vcan0 speed is unknown, defaulting to 1000 [ 358.927486][T18814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 358.944325][T18812] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 358.963597][T18812] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.972620][T18814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 358.999410][T18814] Symlink component flag not implemented [ 359.005308][T18814] Symlink component flag not implemented [ 359.011908][T18812] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 359.021458][T18812] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 359.021458][T18812] [ 359.032213][T18812] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 359.062211][T18812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.082481][T18814] Symlink component flag not implemented (7) [ 359.089433][T18814] Symlink component flag not implemented (116) [ 359.097359][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.182874][T18825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.207088][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.237739][T18836] EXT4-fs: inline encryption not supported [ 359.243631][T18836] EXT4-fs: test_dummy_encryption option not supported [ 359.507080][T18836] SELinux: failed to load policy [ 359.541912][T18849] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 359.551790][T18849] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.563305][T18849] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 359.577469][T18849] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 359.577469][T18849] [ 359.588242][T18849] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 359.620821][T18849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.663051][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.680996][T18855] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 359.704539][T18855] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 359.725440][T18855] Symlink component flag not implemented [ 359.731139][T18855] Symlink component flag not implemented [ 359.760630][T18860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.808513][T18855] Symlink component flag not implemented (7) [ 359.815531][T18855] Symlink component flag not implemented (116) [ 359.827956][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'. [ 359.837338][T18866] FAULT_INJECTION: forcing a failure. [ 359.837338][T18866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.846997][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5138'. [ 359.850802][T18866] CPU: 1 UID: 0 PID: 18866 Comm: syz.5.5143 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.850916][T18866] Tainted: [W]=WARN [ 359.850938][T18866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.850982][T18866] Call Trace: [ 359.851012][T18866] [ 359.851117][T18866] __dump_stack+0x1d/0x30 [ 359.851196][T18866] dump_stack_lvl+0x95/0xd0 [ 359.851271][T18866] dump_stack+0x15/0x1b [ 359.851337][T18866] should_fail_ex+0x265/0x280 [ 359.851422][T18866] should_fail+0xb/0x20 [ 359.851531][T18866] should_fail_usercopy+0x1a/0x20 [ 359.851617][T18866] _copy_from_user+0x1c/0xb0 [ 359.851711][T18866] ___sys_sendmsg+0xc1/0x1d0 [ 359.851938][T18866] __x64_sys_sendmsg+0xd4/0x160 [ 359.852141][T18866] x64_sys_call+0x17ba/0x3000 [ 359.852219][T18866] do_syscall_64+0xca/0x2b0 [ 359.852345][T18866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.852458][T18866] RIP: 0033:0x7f3381ccf749 [ 359.852514][T18866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.852572][T18866] RSP: 002b:00007f338072f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.852680][T18866] RAX: ffffffffffffffda RBX: 00007f3381f25fa0 RCX: 00007f3381ccf749 [ 359.852721][T18866] RDX: 00000000200400c4 RSI: 0000200000000440 RDI: 0000000000000003 [ 359.852763][T18866] RBP: 00007f338072f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.852967][T18866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.853007][T18866] R13: 00007f3381f26038 R14: 00007f3381f25fa0 R15: 00007ffd89b303a8 [ 359.853070][T18866] [ 359.951718][T18873] 9pnet_fd: Insufficient options for proto=fd [ 359.986114][T18863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.042768][T18863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.054787][T18863] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 360.141302][T18884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 360.146225][T18880] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 360.162285][T18884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 360.173884][T18884] System zones: 1-12 [ 360.178000][T18880] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.188940][T18884] EXT4-fs (loop3): 1 truncate cleaned up [ 360.195331][T18884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.208520][T18880] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 360.221809][T18880] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 360.221809][T18880] [ 360.232677][T18880] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 360.242966][T18880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.262554][T18894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.274040][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.284221][T18894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 360.293948][T18894] System zones: 1-12 [ 360.308156][T18894] EXT4-fs (loop0): 1 truncate cleaned up [ 360.317228][T18894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.352111][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.364647][T18901] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 360.375819][T18901] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 360.389236][T18901] Symlink component flag not implemented [ 360.395002][T18901] Symlink component flag not implemented [ 360.400767][T18901] Symlink component flag not implemented (7) [ 360.406852][T18901] Symlink component flag not implemented (116) [ 360.429937][T18904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.438719][T18904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.449677][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.486954][T18913] 9pnet_fd: Insufficient options for proto=fd [ 360.570087][T18923] set_capacity_and_notify: 17 callbacks suppressed [ 360.570150][T18923] loop5: detected capacity change from 0 to 1024 [ 360.601774][T18925] loop0: detected capacity change from 0 to 512 [ 360.614812][T18923] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 360.617047][T18927] loop4: detected capacity change from 0 to 512 [ 360.630595][T18925] EXT4-fs: inline encryption not supported [ 360.637475][T18925] EXT4-fs: test_dummy_encryption option not supported [ 360.645030][T18923] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.645080][T18927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.647232][T18927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 360.674260][T18923] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 360.682386][T18923] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 360.682386][T18923] [ 360.693930][T18923] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 360.706762][T18927] System zones: 1-12 [ 360.711380][T18923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.725702][T18927] EXT4-fs (loop4): 1 truncate cleaned up [ 360.731807][T18927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.740503][T18925] SELinux: failed to load policy [ 360.766115][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.807662][T18936] loop5: detected capacity change from 0 to 164 [ 360.843173][T18936] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 360.868353][T13259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.880893][T18939] loop3: detected capacity change from 0 to 512 [ 360.887907][T18939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 360.899458][T18939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 360.908480][T18939] System zones: 1-12 [ 360.913018][T18939] EXT4-fs (loop3): 1 truncate cleaned up [ 360.919281][T18939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.951424][T18936] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 360.960071][T18936] Symlink component flag not implemented [ 360.966549][T18936] Symlink component flag not implemented [ 360.973007][T18936] Symlink component flag not implemented (7) [ 360.979066][T18936] Symlink component flag not implemented (116) [ 361.040176][T18943] loop4: detected capacity change from 0 to 8192 [ 361.161365][T18943] FAULT_INJECTION: forcing a failure. [ 361.161365][T18943] name failslab, interval 1, probability 0, space 0, times 0 [ 361.174224][T18943] CPU: 1 UID: 0 PID: 18943 Comm: syz.4.5175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.174260][T18943] Tainted: [W]=WARN [ 361.174268][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.174284][T18943] Call Trace: [ 361.174293][T18943] [ 361.174303][T18943] __dump_stack+0x1d/0x30 [ 361.174345][T18943] dump_stack_lvl+0x95/0xd0 [ 361.174371][T18943] dump_stack+0x15/0x1b [ 361.174407][T18943] should_fail_ex+0x265/0x280 [ 361.174437][T18943] should_failslab+0x8c/0xb0 [ 361.174463][T18943] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 361.174566][T18943] ? __d_alloc+0x37/0x340 [ 361.174686][T18943] __d_alloc+0x37/0x340 [ 361.174715][T18943] ? finish_task_switch+0x7a/0x2a0 [ 361.174795][T18943] d_alloc+0x2e/0x100 [ 361.174825][T18943] lookup_one_qstr_excl+0x99/0x250 [ 361.174862][T18943] __start_renaming+0xff/0x2a0 [ 361.174899][T18943] do_renameat2+0x2b4/0x810 [ 361.175065][T18943] __x64_sys_renameat2+0x7e/0x90 [ 361.175122][T18943] x64_sys_call+0x35f/0x3000 [ 361.175150][T18943] do_syscall_64+0xca/0x2b0 [ 361.175224][T18943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.175254][T18943] RIP: 0033:0x7f8edb86f749 [ 361.175271][T18943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.175289][T18943] RSP: 002b:00007f8eda2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 361.175310][T18943] RAX: ffffffffffffffda RBX: 00007f8edbac5fa0 RCX: 00007f8edb86f749 [ 361.175370][T18943] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 361.175382][T18943] RBP: 00007f8eda2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 361.175395][T18943] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 361.175411][T18943] R13: 00007f8edbac6038 R14: 00007f8edbac5fa0 R15: 00007ffd0316e7a8 [ 361.175437][T18943] [ 361.450959][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.594610][T18963] loop6: detected capacity change from 0 to 512 [ 361.601480][T18963] EXT4-fs: inline encryption not supported [ 361.607515][T18963] EXT4-fs: test_dummy_encryption option not supported [ 361.712376][T18963] SELinux: failed to load policy [ 361.820901][T18966] lo speed is unknown, defaulting to 1000 [ 361.845672][T18966] vcan0 speed is unknown, defaulting to 1000 [ 361.866316][T18977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.888898][T18977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.906759][T18969] loop3: detected capacity change from 0 to 128 [ 362.001093][T18990] loop6: detected capacity change from 0 to 512 [ 362.008229][T18990] EXT4-fs: inline encryption not supported [ 362.015055][T18990] EXT4-fs: test_dummy_encryption option not supported [ 362.062586][T18990] SELinux: failed to load policy [ 362.297332][T19011] loop6: detected capacity change from 0 to 1024 [ 362.304665][T19011] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 362.315048][T19011] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.326988][T19011] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 362.335302][T19011] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 362.335302][T19011] [ 362.346102][T19011] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 362.355444][T19011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.389165][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.454829][T19018] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 362.467734][T19018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 362.476127][T19018] System zones: 1-12 [ 362.480791][T19018] EXT4-fs (loop0): 1 truncate cleaned up [ 362.487193][T19018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.557698][T19031] EXT4-fs: inline encryption not supported [ 362.563606][T19031] EXT4-fs: test_dummy_encryption option not supported [ 362.630135][T19031] SELinux: failed to load policy [ 362.654856][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.667198][T19039] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 362.710463][T19039] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 362.728051][T19039] Symlink component flag not implemented [ 362.733741][T19039] Symlink component flag not implemented [ 362.783666][T19039] Symlink component flag not implemented (7) [ 362.789786][T19039] Symlink component flag not implemented (116) [ 362.950311][T19057] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 362.965903][T19057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 363.023236][T19057] System zones: 1-12 [ 363.032474][T19057] EXT4-fs (loop5): 1 truncate cleaned up [ 363.041315][T19057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.144046][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.286392][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5227'. [ 363.289635][T19049] Set syz1 is full, maxelem 65536 reached [ 363.309396][T19069] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5227: error while reading EA inode 32 err=-116 [ 363.322399][T19069] EXT4-fs (loop4): Remounting filesystem read-only [ 363.337005][T19074] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 363.347365][T19069] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 363.357796][T19069] EXT4-fs (loop4): 1 orphan inode deleted [ 363.365429][T19069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.382687][T19074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 363.396210][T19074] System zones: 1-12 [ 363.400674][T19074] EXT4-fs (loop5): 1 truncate cleaned up [ 363.416014][T19074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.436977][T19081] tipc: Started in network mode [ 363.441993][T19081] tipc: Node identity ac14140f, cluster identity 4711 [ 363.469408][T19081] tipc: New replicast peer: 255.255.255.255 [ 363.475737][T19081] tipc: Enabled bearer , priority 10 [ 363.494452][T19077] lo speed is unknown, defaulting to 1000 [ 363.500913][T19077] vcan0 speed is unknown, defaulting to 1000 [ 363.641621][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.173743][T13259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.191025][T19109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.199858][T19109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.316405][T19115] lo speed is unknown, defaulting to 1000 [ 364.336116][T19126] EXT4-fs: inline encryption not supported [ 364.342003][T19126] EXT4-fs: test_dummy_encryption option not supported [ 364.379633][T19115] vcan0 speed is unknown, defaulting to 1000 [ 364.402743][T19103] Set syz1 is full, maxelem 65536 reached [ 364.422301][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5257'. [ 364.486520][ T3561] tipc: Node number set to 2886997007 [ 364.529980][T19126] SELinux: failed to load policy [ 364.735869][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5259'. [ 364.751933][T19137] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 364.765060][T19137] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.776859][T19137] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 364.786861][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5248'. [ 364.796411][T19137] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 364.796411][T19137] [ 364.800690][T19140] IPVS: Error connecting to the multicast addr [ 364.807224][T19137] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 364.823154][T19134] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 364.834802][T19137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.848482][T19134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 364.856565][T19134] System zones: 1-12 [ 364.873165][T19134] EXT4-fs (loop6): 1 truncate cleaned up [ 364.880352][T19134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.893492][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.068630][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.170503][T19159] EXT4-fs: inline encryption not supported [ 365.176440][T19159] EXT4-fs: test_dummy_encryption option not supported [ 365.216854][T19164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.244356][T19164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.308803][T19159] SELinux: failed to load policy [ 365.442948][T19176] EXT4-fs: inline encryption not supported [ 365.448927][T19176] EXT4-fs: test_dummy_encryption option not supported [ 365.552596][T19176] SELinux: failed to load policy [ 365.587729][T19190] set_capacity_and_notify: 13 callbacks suppressed [ 365.587743][T19190] loop3: detected capacity change from 0 to 512 [ 365.601213][T19190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 365.613412][T19190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 365.616116][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5268'. [ 365.622093][T19190] System zones: 1-12 [ 365.635539][T19190] EXT4-fs (loop3): 1 truncate cleaned up [ 365.641758][T19190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.734958][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.095438][T19225] loop0: detected capacity change from 0 to 512 [ 366.102297][T19225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 366.123114][T19225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 366.132256][T19225] System zones: 1-12 [ 366.137010][T19225] EXT4-fs (loop0): 1 truncate cleaned up [ 366.143151][T19225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.161084][T19229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5286'. [ 366.170388][T19229] IPVS: Error connecting to the multicast addr [ 366.191203][T19231] 9p: Could not find request transport: fd0x0000000000000004 [ 366.276287][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.290818][T19241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.299334][T19241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.534765][T19259] loop5: detected capacity change from 0 to 1024 [ 366.550751][T19259] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 366.573382][T19259] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.596559][T19259] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 366.615030][T19259] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 366.615030][T19259] [ 366.626166][T19259] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 366.635492][T19259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.738196][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.800231][T19235] Set syz1 is full, maxelem 65536 reached [ 366.832553][T19267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5299'. [ 366.865177][T19267] IPVS: Error connecting to the multicast addr [ 366.968918][T19274] 9p: Could not find request transport: fd0x0000000000000004 [ 367.195450][T19263] Set syz1 is full, maxelem 65536 reached [ 367.261922][T19301] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5314'. [ 367.302476][T19306] 9p: Could not find request transport: fd0x0000000000000004 [ 367.343105][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.366267][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.644169][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 367.644241][ T29] audit: type=1400 audit(1767423699.902:40533): avc: denied { kexec_image_load } for pid=19327 comm="syz.5.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 367.682125][ T29] audit: type=1400 audit(1767423699.952:40534): avc: denied { ioctl } for pid=19317 comm="syz.6.5321" path="socket:[60683]" dev="sockfs" ino=60683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.804888][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5329'. [ 367.824256][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5330'. [ 367.857542][T19338] loop4: detected capacity change from 0 to 512 [ 367.866103][T19344] lo speed is unknown, defaulting to 1000 [ 367.872144][T19342] loop5: detected capacity change from 0 to 512 [ 367.879187][T19344] vcan0 speed is unknown, defaulting to 1000 [ 367.886738][T19338] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5329: error while reading EA inode 32 err=-116 [ 367.901553][T19342] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5330: error while reading EA inode 32 err=-116 [ 367.911701][T19338] EXT4-fs (loop4): Remounting filesystem read-only [ 367.924738][T19338] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 367.944006][T19338] EXT4-fs (loop4): 1 orphan inode deleted [ 367.950293][T19342] EXT4-fs (loop5): Remounting filesystem read-only [ 367.972559][T19342] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 368.003979][T19342] EXT4-fs (loop5): 1 orphan inode deleted [ 368.761445][T19373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 368.815190][T19373] block device autoloading is deprecated and will be removed. [ 368.917109][T19382] loop4: detected capacity change from 0 to 512 [ 368.923771][T19382] EXT4-fs: inline encryption not supported [ 368.929766][T19382] EXT4-fs: test_dummy_encryption option not supported [ 368.980520][T19387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.999445][T19387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.023894][ T29] audit: type=1400 audit(1767423701.292:40535): avc: denied { create } for pid=19388 comm="syz.5.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.043646][ T29] audit: type=1400 audit(1767423701.292:40536): avc: denied { bind } for pid=19388 comm="syz.5.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.063202][ T29] audit: type=1400 audit(1767423701.292:40537): avc: denied { listen } for pid=19388 comm="syz.5.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.083085][ T29] audit: type=1400 audit(1767423701.292:40538): avc: denied { accept } for pid=19388 comm="syz.5.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.257240][T19382] SELinux: failed to load policy [ 369.332687][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5349'. [ 369.367199][T19404] loop5: detected capacity change from 0 to 512 [ 369.377021][T19404] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5349: error while reading EA inode 32 err=-116 [ 369.390182][T19404] EXT4-fs (loop5): Remounting filesystem read-only [ 369.396906][T19404] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 369.408109][T19404] EXT4-fs (loop5): 1 orphan inode deleted [ 369.418403][T19410] loop0: detected capacity change from 0 to 512 [ 369.437412][T19410] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.473756][T19410] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 369.781818][T19437] loop6: detected capacity change from 0 to 512 [ 369.817425][T19437] EXT4-fs: inline encryption not supported [ 369.823313][T19437] EXT4-fs: test_dummy_encryption option not supported [ 369.934815][T19437] SELinux: failed to load policy [ 370.099255][T19441] loop6: detected capacity change from 0 to 512 [ 370.147355][T19441] journal_path: Lookup failure for './file0' [ 370.153398][T19441] EXT4-fs: error: could not find journal device path [ 370.410171][T19453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.419150][T19453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.576741][T19461] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 370.588459][T19461] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.599665][T19461] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 370.608320][T19461] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 370.608320][T19461] [ 370.619229][T19461] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 370.652091][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5374'. [ 370.699350][T19469] set_capacity_and_notify: 2 callbacks suppressed [ 370.699396][T19469] loop0: detected capacity change from 0 to 512 [ 370.737012][T19469] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5374: error while reading EA inode 32 err=-116 [ 370.754229][T19469] EXT4-fs (loop0): Remounting filesystem read-only [ 370.760824][T19469] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 370.814309][T19469] EXT4-fs (loop0): 1 orphan inode deleted [ 370.857290][ T3498] hid_parser_main: 77 callbacks suppressed [ 370.857313][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.870697][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.878855][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.886373][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.893786][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.901309][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.909552][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.917028][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.924523][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.931942][ T3498] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 370.992411][ T3498] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [sy] on syz0 [ 370.992425][T19486] loop3: detected capacity change from 0 to 1024 [ 371.040413][T19488] loop4: detected capacity change from 0 to 512 [ 371.062913][T19486] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.5378: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 371.067209][T19488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 371.098756][T19488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 371.233958][T19488] System zones: 1-12 [ 371.245382][T19488] EXT4-fs (loop4): 1 truncate cleaned up [ 371.251154][T19486] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.5378: reserved inode found cleared - inode=2 [ 371.274993][T19486] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.5378: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 371.305482][T19486] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.5378: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 371.364558][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5378'. [ 371.373494][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5378'. [ 371.498539][T19497] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.3.5378: path /479/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 371.645639][T19507] 9pnet_fd: Insufficient options for proto=fd [ 371.665288][T19509] xt_hashlimit: max too large, truncated to 1048576 [ 371.707279][T19516] loop4: detected capacity change from 0 to 512 [ 371.716131][T19516] EXT4-fs: inline encryption not supported [ 371.722102][T19516] EXT4-fs: test_dummy_encryption option not supported [ 371.838995][T19521] loop5: detected capacity change from 0 to 512 [ 371.848163][T19516] SELinux: failed to load policy [ 371.867172][T19521] EXT4-fs: inline encryption not supported [ 371.873062][T19521] EXT4-fs: test_dummy_encryption option not supported [ 371.938350][T19528] loop0: detected capacity change from 0 to 512 [ 371.989041][T19528] EXT4-fs: inline encryption not supported [ 371.994923][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5393'. [ 372.004102][T19528] EXT4-fs: test_dummy_encryption option not supported [ 372.017171][T19530] loop3: detected capacity change from 0 to 512 [ 372.078420][T19530] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5393: error while reading EA inode 32 err=-116 [ 372.092261][T19521] SELinux: failed to load policy [ 372.108646][T19530] EXT4-fs (loop3): Remounting filesystem read-only [ 372.118725][T19535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5394'. [ 372.143993][T19530] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 372.190100][T19535] IPVS: Error connecting to the multicast addr [ 372.197867][T19530] EXT4-fs (loop3): 1 orphan inode deleted [ 372.209170][T19536] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 372.219205][T19536] SELinux: failed to load policy [ 372.395127][T19547] 9pnet_fd: Insufficient options for proto=fd [ 372.446704][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 372.487030][T19552] loop0: detected capacity change from 0 to 512 [ 372.503325][T19552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5402: error while reading EA inode 32 err=-116 [ 372.519828][T19552] EXT4-fs (loop0): Remounting filesystem read-only [ 372.527084][T19552] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 372.537493][T19552] EXT4-fs (loop0): 1 orphan inode deleted [ 372.598278][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5407'. [ 372.615152][T19564] tipc: Enabling of bearer rejected, already enabled [ 372.677355][T19561] loop6: detected capacity change from 0 to 512 [ 372.695637][T19561] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5407: error while reading EA inode 32 err=-116 [ 372.709405][T19561] EXT4-fs (loop6): Remounting filesystem read-only [ 372.740206][T19561] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 372.807837][T19561] EXT4-fs (loop6): 1 orphan inode deleted [ 372.991529][T19576] loop4: detected capacity change from 0 to 512 [ 373.012139][T19576] EXT4-fs: inline encryption not supported [ 373.018182][T19576] EXT4-fs: test_dummy_encryption option not supported [ 373.218374][T19582] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5411'. [ 373.228343][T19582] IPVS: Error connecting to the multicast addr [ 373.304243][T19576] SELinux: failed to load policy [ 373.364695][T19584] lo speed is unknown, defaulting to 1000 [ 373.384596][T19584] vcan0 speed is unknown, defaulting to 1000 [ 373.513087][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5418'. [ 373.538245][ T29] audit: type=1326 audit(1767423705.812:40539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.562722][ T29] audit: type=1326 audit(1767423705.812:40540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.632666][T19595] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5418: error while reading EA inode 32 err=-116 [ 373.647487][ T29] audit: type=1326 audit(1767423705.872:40541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.654005][T19595] EXT4-fs (loop4): Remounting filesystem read-only [ 373.671379][ T29] audit: type=1326 audit(1767423705.872:40542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.688294][T19595] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 373.701351][ T29] audit: type=1326 audit(1767423705.872:40543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.735252][ T29] audit: type=1326 audit(1767423705.872:40544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.736526][T19595] EXT4-fs (loop4): 1 orphan inode deleted [ 373.758926][ T29] audit: type=1326 audit(1767423705.872:40545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.758993][ T29] audit: type=1326 audit(1767423705.872:40546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.759023][ T29] audit: type=1326 audit(1767423705.882:40547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.759058][ T29] audit: type=1326 audit(1767423705.882:40548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.3.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 373.847083][T19604] 9pnet_fd: Insufficient options for proto=fd [ 373.911216][T19611] FAULT_INJECTION: forcing a failure. [ 373.911216][T19611] name failslab, interval 1, probability 0, space 0, times 0 [ 373.924024][T19611] CPU: 1 UID: 0 PID: 19611 Comm: syz.4.5423 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.924141][T19611] Tainted: [W]=WARN [ 373.924150][T19611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.924167][T19611] Call Trace: [ 373.924175][T19611] [ 373.924184][T19611] __dump_stack+0x1d/0x30 [ 373.924217][T19611] dump_stack_lvl+0x95/0xd0 [ 373.924395][T19611] dump_stack+0x15/0x1b [ 373.924547][T19611] should_fail_ex+0x265/0x280 [ 373.924573][T19611] should_failslab+0x8c/0xb0 [ 373.924595][T19611] kmem_cache_alloc_noprof+0x69/0x4b0 [ 373.924664][T19611] ? audit_log_start+0x342/0x720 [ 373.924703][T19611] audit_log_start+0x342/0x720 [ 373.924724][T19611] ? kstrtouint+0x76/0xc0 [ 373.924767][T19611] audit_seccomp+0x48/0x100 [ 373.924809][T19611] ? __seccomp_filter+0x832/0x1260 [ 373.924921][T19611] __seccomp_filter+0x843/0x1260 [ 373.924972][T19611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.925009][T19611] ? vfs_write+0x7e8/0x960 [ 373.925039][T19611] __secure_computing+0x82/0x150 [ 373.925074][T19611] syscall_trace_enter+0xcf/0x1e0 [ 373.925103][T19611] do_syscall_64+0xa4/0x2b0 [ 373.925143][T19611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.925243][T19611] RIP: 0033:0x7f8edb86f749 [ 373.925259][T19611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.925328][T19611] RSP: 002b:00007f8eda2cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 373.925348][T19611] RAX: ffffffffffffffda RBX: 00007f8edbac5fa0 RCX: 00007f8edb86f749 [ 373.925361][T19611] RDX: 0000000000000000 RSI: 0000000000000486 RDI: 0000000000000001 [ 373.925374][T19611] RBP: 00007f8eda2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 373.925391][T19611] R10: 0000000040000004 R11: 0000000000000246 R12: 0000000000000001 [ 373.925407][T19611] R13: 00007f8edbac6038 R14: 00007f8edbac5fa0 R15: 00007ffd0316e7a8 [ 373.925507][T19611] [ 373.931832][T19614] IPVS: Error connecting to the multicast addr [ 374.191189][T19615] SELinux: failed to load policy [ 374.237878][T19620] bridge_slave_0: left allmulticast mode [ 374.243599][T19620] bridge_slave_0: left promiscuous mode [ 374.249322][T19620] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.276701][T19620] bridge_slave_1: left allmulticast mode [ 374.282408][T19620] bridge_slave_1: left promiscuous mode [ 374.288154][T19620] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.311035][T19620] bond0: (slave bond_slave_0): Releasing backup interface [ 374.339415][T19620] bond0: (slave bond_slave_1): Releasing backup interface [ 374.356685][T19620] team0: Port device team_slave_0 removed [ 374.447343][T19633] __nla_validate_parse: 1 callbacks suppressed [ 374.447364][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5432'. [ 374.469336][T19620] team0: Port device team_slave_1 removed [ 374.490313][T19620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.497795][T19620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.508433][T19620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.516083][T19620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.528252][T19620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.566875][T19638] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.759749][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5435'. [ 374.768929][T19650] 9pnet_fd: Insufficient options for proto=fd [ 374.804937][T19652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5436'. [ 374.857629][T19646] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5435: error while reading EA inode 32 err=-116 [ 374.934584][T19646] EXT4-fs (loop6): Remounting filesystem read-only [ 374.968610][T19646] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 374.968721][T19646] EXT4-fs (loop6): 1 orphan inode deleted [ 375.105301][T19665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 375.117152][T19665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 375.135218][T19665] System zones: 1-12 [ 375.141413][T19660] lo speed is unknown, defaulting to 1000 [ 375.147743][T19665] EXT4-fs (loop5): 1 truncate cleaned up [ 375.154332][T19660] vcan0 speed is unknown, defaulting to 1000 [ 375.372707][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5444'. [ 375.432975][T19672] syz_tun: entered promiscuous mode [ 375.450058][T19672] syz_tun: refused to change device tx_queue_len [ 375.462187][T19675] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 375.472219][T19675] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 375.505422][T19675] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 375.513607][T19675] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 375.513607][T19675] [ 375.524413][T19675] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 375.638832][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5447'. [ 375.660309][T19692] IPVS: Error connecting to the multicast addr [ 375.676005][T19687] SELinux: failed to load policy [ 375.706180][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5454'. [ 375.725577][T19701] netlink: 'syz.5.5456': attribute type 29 has an invalid length. [ 375.734686][T19701] netlink: 'syz.5.5456': attribute type 29 has an invalid length. [ 375.742986][T19702] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5456'. [ 375.778246][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5458'. [ 375.798467][T19709] set_capacity_and_notify: 7 callbacks suppressed [ 375.798558][T19709] loop6: detected capacity change from 0 to 512 [ 375.815079][T19709] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5458: error while reading EA inode 32 err=-116 [ 375.828515][T19709] EXT4-fs (loop6): Remounting filesystem read-only [ 375.835354][T19709] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 375.846273][T19709] EXT4-fs (loop6): 1 orphan inode deleted [ 375.857994][T19716] program syz.4.5461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.953935][T19724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5467'. [ 375.955280][T19726] netlink: 'syz.5.5465': attribute type 13 has an invalid length. [ 375.970924][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5465'. [ 376.287780][T19746] lo speed is unknown, defaulting to 1000 [ 376.316261][T19747] loop0: detected capacity change from 0 to 128 [ 376.344743][T19746] vcan0 speed is unknown, defaulting to 1000 [ 376.604931][T19759] IPVS: Error connecting to the multicast addr [ 376.749166][T19764] SELinux: failed to load policy [ 376.777044][T19768] loop3: detected capacity change from 0 to 512 [ 376.801878][T19768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5482: error while reading EA inode 32 err=-116 [ 376.826768][T19768] EXT4-fs (loop3): Remounting filesystem read-only [ 376.850965][T19768] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 376.881363][T19768] EXT4-fs (loop3): 1 orphan inode deleted [ 376.900472][T19778] loop4: detected capacity change from 0 to 1024 [ 376.908871][T19778] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 376.919428][T19778] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 376.936104][T19778] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 376.945436][T19778] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 376.945436][T19778] [ 376.956278][T19778] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 377.018399][T19786] loop4: detected capacity change from 0 to 512 [ 377.036877][T19790] macvtap1: entered promiscuous mode [ 377.042305][T19790] macvtap1: entered allmulticast mode [ 377.048615][T19786] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5489: error while reading EA inode 32 err=-116 [ 377.061594][T19786] EXT4-fs (loop4): Remounting filesystem read-only [ 377.068457][T19790] dummy0: entered promiscuous mode [ 377.074121][T19786] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 377.085515][T19790] dummy0: entered allmulticast mode [ 377.091173][T19786] EXT4-fs (loop4): 1 orphan inode deleted [ 377.098223][T19790] team0: Device macvtap1 failed to register rx_handler [ 377.106456][T19790] dummy0: left allmulticast mode [ 377.111684][T19790] dummy0: left promiscuous mode [ 377.289785][T19806] loop4: detected capacity change from 0 to 512 [ 377.325891][T19810] loop6: detected capacity change from 0 to 512 [ 377.336709][T19808] lo speed is unknown, defaulting to 1000 [ 377.358119][T19810] EXT4-fs: Ignoring removed i_version option [ 377.369107][T19806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 377.382014][T19808] vcan0 speed is unknown, defaulting to 1000 [ 377.428257][T19813] loop0: detected capacity change from 0 to 512 [ 377.450389][T19806] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.5496: inode has both inline data and extents flags [ 377.479433][T19806] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5496: couldn't read orphan inode 15 (err -117) [ 377.536744][T19806] Cannot find add_set index 0 as target [ 377.597735][T19813] ext4 filesystem being mounted at /527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 377.650373][T19826] netlink: 'syz.4.5499': attribute type 1 has an invalid length. [ 377.685545][T19826] bond2: entered promiscuous mode [ 377.690705][T19826] bond2: entered allmulticast mode [ 377.737313][T19829] lo speed is unknown, defaulting to 1000 [ 377.743411][T19829] vcan0 speed is unknown, defaulting to 1000 [ 377.785925][T19826] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 377.786342][T19832] loop5: detected capacity change from 0 to 128 [ 377.824691][T19826] bond2: (slave bridge1): making interface the new active one [ 377.832321][T19826] bridge1: entered promiscuous mode [ 377.838486][T19826] bridge1: entered allmulticast mode [ 377.885654][T19826] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 377.895858][T19833] bond2: left promiscuous mode [ 377.900724][T19833] bridge1: left promiscuous mode [ 377.905957][T19833] bond2: left allmulticast mode [ 377.910975][T19833] bridge1: left allmulticast mode [ 377.939925][T19833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.981884][T19840] 9pnet_fd: Insufficient options for proto=fd [ 378.101349][T19844] IPVS: Error connecting to the multicast addr [ 378.156899][T19852] loop3: detected capacity change from 0 to 2048 [ 378.181353][T19852] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 378.210631][T19856] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.247132][T19852] siw: device registration error -23 [ 378.418341][T19891] netlink: 'syz.3.5520': attribute type 1 has an invalid length. [ 378.575638][ T29] kauditd_printk_skb: 761 callbacks suppressed [ 378.575653][ T29] audit: type=1326 audit(1767423710.857:41308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb6a5f749 code=0x7ffc0000 [ 378.631382][ T29] audit: type=1326 audit(1767423710.897:41309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb6a5f749 code=0x7ffc0000 [ 378.655850][ T29] audit: type=1326 audit(1767423710.897:41310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fbfb6a5f749 code=0x7ffc0000 [ 378.679350][ T29] audit: type=1400 audit(1767423710.907:41311): avc: denied { getopt } for pid=19897 comm="syz.6.5523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.699830][ T29] audit: type=1326 audit(1767423710.907:41312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb6a5f749 code=0x7ffc0000 [ 378.799352][ T29] audit: type=1326 audit(1767423710.977:41313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb6a92005 code=0x7ffc0000 [ 378.823072][ T29] audit: type=1326 audit(1767423710.977:41314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb6a92005 code=0x7ffc0000 [ 378.846706][ T29] audit: type=1326 audit(1767423710.977:41315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb6a92005 code=0x7ffc0000 [ 378.870482][ T29] audit: type=1326 audit(1767423710.977:41316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb6a92005 code=0x7ffc0000 [ 378.894135][ T29] audit: type=1326 audit(1767423710.977:41317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.0.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb6a92005 code=0x7ffc0000 [ 378.983097][T19910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 379.007612][T19910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 379.035348][T19910] System zones: 1-12 [ 379.047472][T19910] EXT4-fs (loop3): 1 truncate cleaned up [ 379.161211][T19926] EXT4-fs: inline encryption not supported [ 379.167193][T19926] EXT4-fs: test_dummy_encryption option not supported [ 379.303662][T19926] SELinux: failed to load policy [ 379.414899][T19940] IPVS: Error connecting to the multicast addr [ 379.453483][T19943] 9pnet_fd: Insufficient options for proto=fd [ 379.497424][T19949] __nla_validate_parse: 13 callbacks suppressed [ 379.497445][T19949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5541'. [ 379.568650][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5545'. [ 379.925511][T19967] bio_check_eod: 94 callbacks suppressed [ 379.925533][T19967] syz.6.5548: attempt to access beyond end of device [ 379.925533][T19967] loop6: rw=2049, sector=169, nr_sectors = 872 limit=128 [ 380.642155][T19989] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5553'. [ 380.651664][T19989] IPVS: Error connecting to the multicast addr [ 380.660183][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5556'. [ 380.704192][T19979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.729715][T19979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 380.754072][T19979] System zones: 1-12 [ 380.774199][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5560'. [ 380.807814][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5561'. [ 380.839411][T19979] EXT4-fs (loop4): 1 truncate cleaned up [ 380.874767][T20003] set_capacity_and_notify: 6 callbacks suppressed [ 380.874787][T20003] loop0: detected capacity change from 0 to 512 [ 380.922431][T20003] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5561: error while reading EA inode 32 err=-116 [ 380.985317][T20003] EXT4-fs (loop0): Remounting filesystem read-only [ 380.996423][T20013] 9pnet_fd: Insufficient options for proto=fd [ 381.005219][T20003] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 381.043943][T20017] loop4: detected capacity change from 0 to 512 [ 381.045374][T20003] EXT4-fs (loop0): 1 orphan inode deleted [ 381.057265][T20017] ext4: Unknown parameter 'euid' [ 381.214277][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5570'. [ 381.243164][T20032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5568'. [ 381.272934][T20032] IPVS: Error connecting to the multicast addr [ 381.301557][T20037] loop5: detected capacity change from 0 to 512 [ 381.314371][T20037] EXT4-fs: inline encryption not supported [ 381.320251][T20037] EXT4-fs: test_dummy_encryption option not supported [ 381.334352][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5573'. [ 381.427142][T20044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.435727][T20044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.474855][T20037] SELinux: failed to load policy [ 381.488207][T20047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.504778][T20047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.561930][T20047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.582559][T20047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.656458][T20047] lo speed is unknown, defaulting to 1000 [ 381.679507][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5581'. [ 381.692625][T20047] vcan0 speed is unknown, defaulting to 1000 [ 381.929936][T20069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.948138][T20069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.306910][T20088] loop0: detected capacity change from 0 to 512 [ 382.319077][T20090] random: crng reseeded on system resumption [ 382.334266][T20088] EXT4-fs: inline encryption not supported [ 382.340367][T20088] EXT4-fs: test_dummy_encryption option not supported [ 382.470201][T20088] SELinux: failed to load policy [ 382.526918][T20106] IPVS: Error connecting to the multicast addr [ 382.762773][T20117] netlink: 'syz.6.5595': attribute type 4 has an invalid length. [ 383.526936][T20149] 9pnet_fd: Insufficient options for proto=fd [ 383.554342][T20152] 9pnet_fd: Insufficient options for proto=fd [ 383.610161][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 383.610179][ T29] audit: type=1400 audit(1767423971.887:41936): avc: denied { wake_alarm } for pid=20155 comm="syz.0.5618" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 383.653980][ T29] audit: type=1326 audit(1767423971.917:41937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 383.677633][ T29] audit: type=1326 audit(1767423971.917:41938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa44bdbf783 code=0x7ffc0000 [ 383.701180][ T29] audit: type=1326 audit(1767423971.917:41939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa44bdbf807 code=0x7ffc0000 [ 383.724779][ T29] audit: type=1326 audit(1767423971.917:41940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa44bd76bdd code=0x7ffc0000 [ 383.748741][ T29] audit: type=1326 audit(1767423971.917:41941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa44bdf3e89 code=0x7ffc0000 [ 383.772442][ T29] audit: type=1326 audit(1767423971.917:41942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa44bd76c47 code=0x7ffc0000 [ 383.796011][ T29] audit: type=1326 audit(1767423971.917:41943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 383.819616][ T29] audit: type=1326 audit(1767423971.917:41944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 383.843202][ T29] audit: type=1326 audit(1767423971.917:41945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa44bd76357 code=0x7ffc0000 [ 383.891789][T20162] netlink: 'syz.3.5616': attribute type 1 has an invalid length. [ 383.907177][T20162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.950907][T20162] bond1: (slave geneve2): making interface the new active one [ 383.974107][T20170] hub 9-0:1.0: USB hub found [ 383.976828][T20162] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 383.979271][T20170] hub 9-0:1.0: 8 ports detected [ 383.987922][ T7146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.003637][ T7146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.039280][ T7146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.053643][T20172] FAULT_INJECTION: forcing a failure. [ 384.053643][T20172] name failslab, interval 1, probability 0, space 0, times 0 [ 384.067175][T20172] CPU: 0 UID: 0 PID: 20172 Comm: syz.4.5621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.067220][T20172] Tainted: [W]=WARN [ 384.067268][T20172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.067286][T20172] Call Trace: [ 384.067295][T20172] [ 384.067306][T20172] __dump_stack+0x1d/0x30 [ 384.067376][T20172] dump_stack_lvl+0x95/0xd0 [ 384.067405][T20172] dump_stack+0x15/0x1b [ 384.067431][T20172] should_fail_ex+0x265/0x280 [ 384.067462][T20172] should_failslab+0x8c/0xb0 [ 384.067491][T20172] __kmalloc_cache_noprof+0x65/0x4c0 [ 384.067574][T20172] ? nft_trans_table_add+0x36/0x190 [ 384.067598][T20172] nft_trans_table_add+0x36/0x190 [ 384.067619][T20172] nf_tables_newtable+0x955/0xea0 [ 384.067664][T20172] nfnetlink_rcv+0xbc9/0x16c0 [ 384.067819][T20172] netlink_unicast+0x5c0/0x690 [ 384.067895][T20172] netlink_sendmsg+0x58b/0x6b0 [ 384.068007][T20172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.068045][T20172] __sock_sendmsg+0x145/0x180 [ 384.068069][T20172] ____sys_sendmsg+0x31e/0x4a0 [ 384.068150][T20172] ___sys_sendmsg+0x17b/0x1d0 [ 384.068202][T20172] __x64_sys_sendmsg+0xd4/0x160 [ 384.068244][T20172] x64_sys_call+0x17ba/0x3000 [ 384.068285][T20172] do_syscall_64+0xca/0x2b0 [ 384.068330][T20172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.068359][T20172] RIP: 0033:0x7f8edb86f749 [ 384.068378][T20172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.068470][T20172] RSP: 002b:00007f8eda2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.068495][T20172] RAX: ffffffffffffffda RBX: 00007f8edbac5fa0 RCX: 00007f8edb86f749 [ 384.068511][T20172] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 384.068562][T20172] RBP: 00007f8eda2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 384.068580][T20172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.068613][T20172] R13: 00007f8edbac6038 R14: 00007f8edbac5fa0 R15: 00007ffd0316e7a8 [ 384.068640][T20172] [ 384.120590][ T7146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.480234][T20194] loop0: detected capacity change from 0 to 512 [ 384.505365][T20194] EXT4-fs mount: 58 callbacks suppressed [ 384.505386][T20194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.546806][T20200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.565769][T20200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.625182][T20205] __nla_validate_parse: 7 callbacks suppressed [ 384.625203][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5632'. [ 384.645262][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.655435][T20202] lo speed is unknown, defaulting to 1000 [ 384.666695][T20202] vcan0 speed is unknown, defaulting to 1000 [ 384.785487][T20225] loop0: detected capacity change from 0 to 1024 [ 384.792137][T20225] EXT4-fs: Ignoring removed orlov option [ 384.801310][T20225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.818247][T20225] FAULT_INJECTION: forcing a failure. [ 384.818247][T20225] name failslab, interval 1, probability 0, space 0, times 0 [ 384.831659][T20225] CPU: 0 UID: 0 PID: 20225 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.831703][T20225] Tainted: [W]=WARN [ 384.831710][T20225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.831721][T20225] Call Trace: [ 384.831728][T20225] [ 384.831735][T20225] __dump_stack+0x1d/0x30 [ 384.831760][T20225] dump_stack_lvl+0x95/0xd0 [ 384.831861][T20225] dump_stack+0x15/0x1b [ 384.831878][T20225] should_fail_ex+0x265/0x280 [ 384.831899][T20225] should_failslab+0x8c/0xb0 [ 384.831967][T20225] __kmalloc_noprof+0xb9/0x5a0 [ 384.831987][T20225] ? copy_splice_read+0xc2/0x660 [ 384.832006][T20225] copy_splice_read+0xc2/0x660 [ 384.832124][T20225] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 384.832188][T20225] splice_direct_to_actor+0x290/0x680 [ 384.832258][T20225] ? __pfx_direct_splice_actor+0x10/0x10 [ 384.832316][T20225] do_splice_direct+0xda/0x150 [ 384.832334][T20225] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 384.832358][T20225] do_sendfile+0x380/0x650 [ 384.832384][T20225] __x64_sys_sendfile64+0x105/0x150 [ 384.832459][T20225] x64_sys_call+0x2db1/0x3000 [ 384.832532][T20225] do_syscall_64+0xca/0x2b0 [ 384.832563][T20225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.832661][T20225] RIP: 0033:0x7fbfb6a5f749 [ 384.832685][T20225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.832702][T20225] RSP: 002b:00007fbfb54bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 384.832747][T20225] RAX: ffffffffffffffda RBX: 00007fbfb6cb5fa0 RCX: 00007fbfb6a5f749 [ 384.832758][T20225] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000c [ 384.832769][T20225] RBP: 00007fbfb54bf090 R08: 0000000000000000 R09: 0000000000000000 [ 384.832780][T20225] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 384.832791][T20225] R13: 00007fbfb6cb6038 R14: 00007fbfb6cb5fa0 R15: 00007ffd813d0ef8 [ 384.832809][T20225] [ 385.047519][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.068833][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5639'. [ 385.099847][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5641'. [ 385.112031][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5640'. [ 385.121386][T20234] IPVS: Error connecting to the multicast addr [ 385.155897][T20239] loop3: detected capacity change from 0 to 1024 [ 385.163077][T20239] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 385.176961][T20239] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 385.190197][T20239] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 385.198549][T20239] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 385.198549][T20239] [ 385.210149][T20239] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 385.219564][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5644'. [ 385.222779][T20239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.265260][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.281076][T20249] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 385.305281][T20251] loop3: detected capacity change from 0 to 1024 [ 385.312340][T20251] EXT4-fs: Ignoring removed nobh option [ 385.320201][T20251] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.330359][T20251] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 385.340766][T20251] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.5647: inode #4294967295: comm syz.3.5647: iget: illegal inode # [ 385.356380][T20251] EXT4-fs (loop3): no journal found [ 385.361646][T20251] EXT4-fs (loop3): can't get journal size [ 385.384899][T20251] EXT4-fs (loop3): failed to initialize system zone (-22) [ 385.400278][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5651'. [ 385.410596][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5653'. [ 385.421674][T20251] EXT4-fs (loop3): mount failed [ 385.438166][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5647'. [ 385.478409][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5656'. [ 385.529123][T20280] FAULT_INJECTION: forcing a failure. [ 385.529123][T20280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.543085][T20280] CPU: 0 UID: 0 PID: 20280 Comm: syz.0.5659 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.543173][T20280] Tainted: [W]=WARN [ 385.543181][T20280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.543194][T20280] Call Trace: [ 385.543200][T20280] [ 385.543207][T20280] __dump_stack+0x1d/0x30 [ 385.543273][T20280] dump_stack_lvl+0x95/0xd0 [ 385.543300][T20280] dump_stack+0x15/0x1b [ 385.543324][T20280] should_fail_ex+0x265/0x280 [ 385.543353][T20280] should_fail+0xb/0x20 [ 385.543389][T20280] should_fail_usercopy+0x1a/0x20 [ 385.543419][T20280] _copy_to_user+0x20/0xa0 [ 385.543454][T20280] rng_dev_read+0x3ef/0x740 [ 385.543487][T20280] ? __pfx_rng_dev_read+0x10/0x10 [ 385.543521][T20280] ? __pfx_rng_dev_read+0x10/0x10 [ 385.543548][T20280] vfs_readv+0x3fb/0x690 [ 385.543591][T20280] __x64_sys_preadv+0xfd/0x1c0 [ 385.543634][T20280] x64_sys_call+0x2805/0x3000 [ 385.543663][T20280] do_syscall_64+0xca/0x2b0 [ 385.543736][T20280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.543803][T20280] RIP: 0033:0x7fbfb6a5f749 [ 385.543818][T20280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.543841][T20280] RSP: 002b:00007fbfb54bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 385.543943][T20280] RAX: ffffffffffffffda RBX: 00007fbfb6cb5fa0 RCX: 00007fbfb6a5f749 [ 385.543960][T20280] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 385.543975][T20280] RBP: 00007fbfb54bf090 R08: 0000000000000000 R09: 0000000000000000 [ 385.543988][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.544057][T20280] R13: 00007fbfb6cb6038 R14: 00007fbfb6cb5fa0 R15: 00007ffd813d0ef8 [ 385.544083][T20280] [ 385.767332][T20284] loop3: detected capacity change from 0 to 1024 [ 385.774225][T20288] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 385.781135][T20283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5661'. [ 385.791186][T20284] EXT4-fs: Ignoring removed orlov option [ 385.809034][T20286] loop6: detected capacity change from 0 to 1024 [ 385.825144][T20284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.840000][T20286] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 385.882692][T20286] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 385.898042][T20286] EXT4-fs (loop6): orphan cleanup on readonly fs [ 385.924266][T20286] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.5662: Freeing blocks not in datazone - block = 0, count = 4096 [ 385.950699][T20303] loop5: detected capacity change from 0 to 1024 [ 385.958307][T20303] EXT4-fs: Ignoring removed nobh option [ 385.964993][T20303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.973972][T20303] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 386.020274][T20286] EXT4-fs (loop6): 1 orphan inode deleted [ 386.053128][T20286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.065819][T20303] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: comm syz.5.5668: inode #4294967295: comm syz.5.5668: iget: illegal inode # [ 386.087641][T20303] EXT4-fs (loop5): no journal found [ 386.092908][T20303] EXT4-fs (loop5): can't get journal size [ 386.111309][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.129539][T20303] EXT4-fs (loop5): failed to initialize system zone (-22) [ 386.142489][T20308] loop0: detected capacity change from 0 to 512 [ 386.148965][T20303] EXT4-fs (loop5): mount failed [ 386.154692][T20308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 386.171851][T20308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 386.180733][T20308] System zones: 1-12 [ 386.185327][T20308] EXT4-fs (loop0): 1 truncate cleaned up [ 386.191748][T20308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.216791][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.286155][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.309263][T20316] lo speed is unknown, defaulting to 1000 [ 386.316369][T20316] vcan0 speed is unknown, defaulting to 1000 [ 386.428862][T20312] loop6: detected capacity change from 0 to 128 [ 386.445082][T20324] loop0: detected capacity change from 0 to 2048 [ 386.509985][T20325] netlink: 'syz.3.5671': attribute type 4 has an invalid length. [ 386.559330][T20324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 386.670000][T20324] netlink: 'syz.0.5674': attribute type 3 has an invalid length. [ 386.843690][T20331] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 386.869041][T20333] loop4: detected capacity change from 0 to 512 [ 386.907269][T20333] EXT4-fs: inline encryption not supported [ 386.913193][T20333] EXT4-fs: test_dummy_encryption option not supported [ 386.959455][T20331] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 402 with error 28 [ 386.972029][T20331] EXT4-fs (loop0): This should not happen!! Data will be lost [ 386.972029][T20331] [ 386.982098][T20331] EXT4-fs (loop0): Total free blocks count 0 [ 386.988150][T20331] EXT4-fs (loop0): Free/Dirty block details [ 386.994217][T20331] EXT4-fs (loop0): free_blocks=2415919104 [ 386.999982][T20331] EXT4-fs (loop0): dirty_blocks=416 [ 387.005274][T20331] EXT4-fs (loop0): Block reservation details [ 387.011269][T20331] EXT4-fs (loop0): i_reserved_data_blocks=26 [ 387.021533][T20340] loop6: detected capacity change from 0 to 128 [ 387.323994][T20345] syz.6.5679: attempt to access beyond end of device [ 387.323994][T20345] loop6: rw=2049, sector=169, nr_sectors = 872 limit=128 [ 387.423612][T20333] SELinux: failed to load policy [ 387.433754][T20348] : renamed from bond_slave_0 [ 387.547633][T20351] loop4: detected capacity change from 0 to 512 [ 387.556293][T20351] EXT4-fs: inline encryption not supported [ 387.562222][T20351] EXT4-fs: test_dummy_encryption option not supported [ 387.671375][T20351] SELinux: failed to load policy [ 387.947456][ T7152] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 2 with error 28 [ 388.036569][T20373] loop5: detected capacity change from 0 to 512 [ 388.068071][T20373] EXT4-fs: inline encryption not supported [ 388.074161][T20373] EXT4-fs: test_dummy_encryption option not supported [ 388.402793][T20373] SELinux: failed to load policy [ 388.740940][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 388.740959][ T29] audit: type=1400 audit(1767424233.017:42430): avc: denied { listen } for pid=20404 comm="syz.4.5704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.856186][ T29] audit: type=1400 audit(1767424233.027:42431): avc: denied { create } for pid=20404 comm="syz.4.5704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 388.876747][ T29] audit: type=1400 audit(1767424233.027:42432): avc: denied { ioctl } for pid=20404 comm="syz.4.5704" path="socket:[63591]" dev="sockfs" ino=63591 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 388.923691][T20418] IPVS: Error connecting to the multicast addr [ 389.099281][T20426] lo speed is unknown, defaulting to 1000 [ 389.106074][T20426] vcan0 speed is unknown, defaulting to 1000 [ 390.110171][T20458] loop4: detected capacity change from 0 to 512 [ 390.140452][T20458] EXT4-fs: inline encryption not supported [ 390.146572][T20458] EXT4-fs: test_dummy_encryption option not supported [ 390.207812][ T29] audit: type=1326 audit(1767424234.477:42433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.231568][ T29] audit: type=1326 audit(1767424234.477:42434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.255194][ T29] audit: type=1326 audit(1767424234.477:42435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.278931][ T29] audit: type=1326 audit(1767424234.477:42436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.302547][ T29] audit: type=1326 audit(1767424234.477:42437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.326302][ T29] audit: type=1326 audit(1767424234.477:42438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.350093][ T29] audit: type=1326 audit(1767424234.487:42439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa44bdbf749 code=0x7ffc0000 [ 390.393762][T20462] x_tables: duplicate underflow at hook 4 [ 390.510265][T20458] SELinux: failed to load policy [ 390.519843][T20475] netlink: 'syz.0.5724': attribute type 39 has an invalid length. [ 390.576086][T20461] __nla_validate_parse: 5 callbacks suppressed [ 390.576103][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 390.592050][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5725'. [ 390.601088][T20461] netlink: 'syz.3.5725': attribute type 18 has an invalid length. [ 390.608962][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 390.620116][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5724'. [ 390.643690][T20467] loop0: detected capacity change from 0 to 512 [ 390.652980][T20467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.682542][T20467] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5724: iget: bad extended attribute block 262144 [ 390.705273][T20467] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5724: couldn't read orphan inode 15 (err -117) [ 390.725144][T20467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.863226][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.013071][T20497] 9p: Bad value for 'rfdno' [ 391.125952][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5739'. [ 391.191847][T20508] loop3: detected capacity change from 0 to 512 [ 391.199836][T20508] EXT4-fs: inline encryption not supported [ 391.205789][T20508] EXT4-fs: test_dummy_encryption option not supported [ 391.337690][T20508] SELinux: failed to load policy [ 391.528034][T20514] tipc: Started in network mode [ 391.533113][T20514] tipc: Node identity ac14140f, cluster identity 4711 [ 391.575407][T20514] tipc: New replicast peer: 255.255.255.83 [ 391.581334][T20514] tipc: Enabled bearer , priority 10 [ 391.627310][T20516] FAULT_INJECTION: forcing a failure. [ 391.627310][T20516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.640736][T20516] CPU: 1 UID: 0 PID: 20516 Comm: syz.4.5744 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 391.640867][T20516] Tainted: [W]=WARN [ 391.640937][T20516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.640954][T20516] Call Trace: [ 391.640963][T20516] [ 391.640974][T20516] __dump_stack+0x1d/0x30 [ 391.640999][T20516] dump_stack_lvl+0x95/0xd0 [ 391.641153][T20516] dump_stack+0x15/0x1b [ 391.641178][T20516] should_fail_ex+0x265/0x280 [ 391.641208][T20516] should_fail_alloc_page+0xf2/0x100 [ 391.641246][T20516] __alloc_frozen_pages_noprof+0x109/0x360 [ 391.641279][T20516] alloc_pages_mpol+0xb3/0x260 [ 391.641314][T20516] ? css_rstat_updated+0xbb/0x280 [ 391.641347][T20516] vma_alloc_folio_noprof+0x1aa/0x300 [ 391.641407][T20516] handle_mm_fault+0xef5/0x2c60 [ 391.641441][T20516] ? mt_find+0x21b/0x330 [ 391.641471][T20516] do_user_addr_fault+0x3fe/0x1080 [ 391.641513][T20516] exc_page_fault+0x62/0xa0 [ 391.641597][T20516] asm_exc_page_fault+0x26/0x30 [ 391.641620][T20516] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 391.641650][T20516] Code: 17 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 391.641674][T20516] RSP: 0018:ffffc9000bcebb38 EFLAGS: 00050206 [ 391.641737][T20516] RAX: ffff88811ea70a90 RBX: ffffc9000bcebcd0 RCX: 0000000000000e80 [ 391.641750][T20516] RDX: 0000000000000000 RSI: ffff888008e83180 RDI: 0000200000004000 [ 391.641762][T20516] RBP: 0000000000003b80 R08: 00000000000004ee R09: 0000000000000000 [ 391.641775][T20516] R10: 0001888008e83000 R11: 0001888008e83fff R12: ffffc9000bcebcb8 [ 391.641787][T20516] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 391.641807][T20516] _copy_to_iter+0x2df/0xe70 [ 391.641886][T20516] ? should_fail_ex+0xdb/0x280 [ 391.641918][T20516] copy_page_to_iter+0x18f/0x2d0 [ 391.641945][T20516] process_vm_rw+0x672/0x960 [ 391.641994][T20516] __x64_sys_process_vm_readv+0x78/0x90 [ 391.642044][T20516] x64_sys_call+0x148a/0x3000 [ 391.642072][T20516] do_syscall_64+0xca/0x2b0 [ 391.642149][T20516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.642170][T20516] RIP: 0033:0x7f8edb86f749 [ 391.642184][T20516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.642207][T20516] RSP: 002b:00007f8eda2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 391.642269][T20516] RAX: ffffffffffffffda RBX: 00007f8edbac5fa0 RCX: 00007f8edb86f749 [ 391.642355][T20516] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000051a [ 391.642371][T20516] RBP: 00007f8eda2cf090 R08: 0000000000000286 R09: 0000000000000000 [ 391.642387][T20516] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002 [ 391.642406][T20516] R13: 00007f8edbac6038 R14: 00007f8edbac5fa0 R15: 00007ffd0316e7a8 [ 391.642433][T20516] [ 392.014004][T20522] 9p: Bad value for 'rfdno' [ 392.057638][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5750'. [ 392.070998][T20532] loop3: detected capacity change from 0 to 512 [ 392.078069][T20532] EXT4-fs: inline encryption not supported [ 392.084840][T20532] EXT4-fs: test_dummy_encryption option not supported [ 392.104477][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5749'. [ 392.120642][T20536] IPVS: Error connecting to the multicast addr [ 392.211211][T20532] SELinux: failed to load policy [ 392.220274][T20540] loop5: detected capacity change from 0 to 512 [ 392.227646][T20540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.265244][T20540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 392.273435][T20540] System zones: 1-12 [ 392.277907][T20540] EXT4-fs (loop5): 1 truncate cleaned up [ 392.299408][T20540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.325338][T20548] lo speed is unknown, defaulting to 1000 [ 392.327581][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5763'. [ 392.344110][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.354116][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.362342][T20548] vcan0 speed is unknown, defaulting to 1000 [ 392.482281][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.633919][ T3863] tipc: Node number set to 2886997007 [ 392.730739][T20591] loop4: detected capacity change from 0 to 512 [ 392.739070][T20591] EXT4-fs: inline encryption not supported [ 392.745063][T20591] EXT4-fs: test_dummy_encryption option not supported [ 392.840847][T20591] SELinux: failed to load policy [ 392.887775][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5773'. [ 392.979345][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5777'. [ 392.992997][T20603] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 393.020437][T20604] IPVS: Error connecting to the multicast addr [ 393.165927][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.174808][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.216412][T20622] loop3: detected capacity change from 0 to 512 [ 393.225376][T20622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 393.265741][T20622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 393.274073][T20622] System zones: 1-12 [ 393.278783][T20622] EXT4-fs (loop3): 1 truncate cleaned up [ 393.285415][T20622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.433939][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.469019][T20631] loop3: detected capacity change from 0 to 512 [ 393.513782][T20631] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5789: error while reading EA inode 32 err=-116 [ 393.533800][T20631] EXT4-fs (loop3): Remounting filesystem read-only [ 393.540404][T20631] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 393.550841][T20631] EXT4-fs (loop3): 1 orphan inode deleted [ 393.557299][T20631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.574106][T20640] loop5: detected capacity change from 0 to 1024 [ 393.580997][T20640] EXT4-fs: Ignoring removed orlov option [ 393.587697][T20631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.597160][T20640] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 393.674621][T20640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.787274][T20666] syzkaller1: entered promiscuous mode [ 393.792844][T20666] syzkaller1: entered allmulticast mode [ 393.810873][T20672] IPVS: Error connecting to the multicast addr [ 393.820030][T20666] loop0: detected capacity change from 0 to 1024 [ 393.827910][T20666] EXT4-fs: Ignoring removed orlov option [ 393.833663][T20640] FAULT_INJECTION: forcing a failure. [ 393.833663][T20640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.834657][T20666] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 393.846859][T20640] CPU: 1 UID: 0 PID: 20640 Comm: syz.5.5791 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 393.847091][T20640] Tainted: [W]=WARN [ 393.847120][T20640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.847165][T20640] Call Trace: [ 393.847179][T20640] [ 393.847209][T20640] __dump_stack+0x1d/0x30 [ 393.847291][T20640] dump_stack_lvl+0x95/0xd0 [ 393.847375][T20640] dump_stack+0x15/0x1b [ 393.847511][T20640] should_fail_ex+0x265/0x280 [ 393.847610][T20640] should_fail+0xb/0x20 [ 393.847681][T20640] should_fail_usercopy+0x1a/0x20 [ 393.847827][T20640] copy_fpstate_to_sigframe+0x628/0x7d0 [ 393.847907][T20640] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 393.847994][T20640] ? x86_task_fpu+0x36/0x60 [ 393.848212][T20640] get_sigframe+0x34d/0x490 [ 393.848353][T20640] ? get_signal+0xdc7/0xf70 [ 393.848500][T20640] x64_setup_rt_frame+0xa8/0x580 [ 393.848595][T20640] arch_do_signal_or_restart+0x24c/0x450 [ 393.848768][T20640] exit_to_user_mode_loop+0x6a/0x740 [ 393.848917][T20640] ? __se_sys_ioctl+0x13a/0x140 [ 393.849029][T20640] do_syscall_64+0x1e1/0x2b0 [ 393.849145][T20640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.849279][T20640] RIP: 0033:0x7f3381ccf747 [ 393.849333][T20640] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 393.849466][T20640] RSP: 002b:00007f338072f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.849538][T20640] RAX: 0000000000000010 RBX: 00007f3381f25fa0 RCX: 00007f3381ccf749 [ 393.849580][T20640] RDX: 0200000003000000 RSI: 000000000000545c RDI: 000000000000000b [ 393.849651][T20640] RBP: 00007f338072f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.849751][T20640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.849802][T20640] R13: 00007f3381f26038 R14: 00007f3381f25fa0 R15: 00007ffd89b303a8 [ 393.849892][T20640] [ 393.957202][T20678] 9pnet_fd: Insufficient options for proto=fd [ 394.063449][T20666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.126447][T13897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.171672][T20687] loop6: detected capacity change from 0 to 4096 [ 394.181124][T20687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.212630][T20698] netlink: 'syz.4.5815': attribute type 39 has an invalid length. [ 394.237543][T20687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 394.261317][T20687] team0: Mode changed to "loadbalance" [ 394.288355][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.299912][T20701] netlink: 'syz.3.5816': attribute type 39 has an invalid length. [ 394.372027][T20709] IPVS: Error connecting to the multicast addr [ 394.429642][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 394.429661][ T29] audit: type=1326 audit(1767424238.707:43020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.461749][ T29] audit: type=1326 audit(1767424238.707:43021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.485406][ T29] audit: type=1326 audit(1767424238.737:43022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.509095][ T29] audit: type=1326 audit(1767424238.737:43023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.532960][ T29] audit: type=1326 audit(1767424238.737:43024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.556608][ T29] audit: type=1326 audit(1767424238.737:43025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.580424][ T29] audit: type=1326 audit(1767424238.737:43026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.604205][ T29] audit: type=1326 audit(1767424238.737:43027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.628187][ T29] audit: type=1326 audit(1767424238.737:43028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.653065][ T29] audit: type=1326 audit(1767424238.737:43029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.3.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04aaf749 code=0x7ffc0000 [ 394.737095][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.137045][T20757] netlink: 'syz.4.5837': attribute type 4 has an invalid length. [ 395.652539][T20769] loop3: detected capacity change from 0 to 512 [ 395.710889][T20769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.794365][T20769] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 395.804505][T20769] System zones: 1-12 [ 395.819989][T20769] EXT4-fs (loop3): 1 truncate cleaned up [ 395.826238][T20769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.872874][T20782] random: crng reseeded on system resumption [ 395.889684][T20790] __nla_validate_parse: 10 callbacks suppressed [ 395.889716][T20790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5846'. [ 395.916790][T20790] IPVS: Error connecting to the multicast addr [ 395.930464][T20784] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5849: couldn't read orphan inode 26 (err -116) [ 395.944150][T20784] EXT4-fs (loop6): Remounting filesystem read-only [ 395.954145][T20784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.967630][T12720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.978417][T20796] netlink: 'syz.0.5850': attribute type 39 has an invalid length. [ 395.988614][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5850'. [ 396.004297][T20784] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.030982][T20801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20801 comm=syz.3.5851 [ 396.047107][T20789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.071732][T20789] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5850: iget: bad extended attribute block 262144 [ 396.086355][T20789] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5850: couldn't read orphan inode 15 (err -117) [ 396.099227][T20789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.126042][T12456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.201450][ T7184] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.211375][ T7184] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.245746][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5857'. [ 396.254742][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5857'. [ 396.286865][ T7184] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.289381][T20824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5858'. [ 396.298689][ T7184] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.360593][ T7184] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.370582][ T7184] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.390104][T20811] lo speed is unknown, defaulting to 1000 [ 396.396331][T20811] vcan0 speed is unknown, defaulting to 1000 [ 396.450517][ T7184] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.460595][ T7184] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.482726][T20831] set_capacity_and_notify: 2 callbacks suppressed [ 396.482745][T20831] loop3: detected capacity change from 0 to 8192 [ 396.542722][T20811] chnl_net:caif_netlink_parms(): no params data found [ 396.749036][ T7184] bond0 (unregistering): Released all slaves [ 396.764796][ T7184] bond1 (unregistering): Released all slaves [ 396.805608][T17567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.844273][ T7184] tipc: Disabling bearer [ 396.849294][ T7184] tipc: Left network mode [ 396.865183][T20811] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.872313][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.879867][T20811] bridge_slave_0: entered allmulticast mode [ 396.881068][ T7184] IPVS: stopping master sync thread 13646 ... [ 396.887315][T20811] bridge_slave_0: entered promiscuous mode [ 396.899737][T20811] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.906864][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.914229][T20811] bridge_slave_1: entered allmulticast mode [ 396.929926][T20811] bridge_slave_1: entered promiscuous mode [ 396.960776][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5865'. [ 396.990239][ T7184] hsr_slave_0: left promiscuous mode [ 397.003789][ T7184] hsr_slave_1: left promiscuous mode [ 397.009708][ T7184] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 397.016837][ T7184] batman_adv: batadv0: Removing interface: veth1_vlan [ 397.026036][ T7184] veth1_vlan: left promiscuous mode [ 397.031348][ T7184] veth0_vlan: left promiscuous mode [ 397.058127][T20858] 9pnet_fd: Insufficient options for proto=fd [ 397.092834][T20860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20860 comm=syz.6.5866 [ 397.198200][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5870'. [ 397.342849][ T7153] smc: removing ib device syz1 [ 397.356305][ T3490] vcan0 speed is unknown, defaulting to 1000 [ 397.362332][ T3490] syz1: Port: 1 Link DOWN [ 397.427166][T20811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.451109][T20811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.548743][T20811] team0: Port device team_slave_0 added [ 397.576991][T20811] team0: Port device team_slave_1 added [ 397.622312][T20811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.629426][T20811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.655747][T20811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.671323][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5878'. [ 397.731653][T20811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.738865][T20811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.765020][T20811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.929681][T20811] hsr_slave_0: entered promiscuous mode [ 397.936470][T20811] hsr_slave_1: entered promiscuous mode [ 397.942494][T20811] debugfs: 'hsr0' already exists in 'hsr' [ 397.948541][T20811] Cannot create hsr debugfs directory [ 397.958285][ T7184] IPVS: stop unused estimator thread 0... [ 398.033228][T20897] netlink: 'syz.5.5879': attribute type 4 has an invalid length. [ 398.177470][T20899] lo speed is unknown, defaulting to 1000 [ 398.219366][T20900] loop6: detected capacity change from 0 to 128 [ 398.566186][T20903] SELinux: failed to load policy [ 398.711542][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5883'. [ 398.868106][T20811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.879729][T20811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.896897][T20811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.907020][T20811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.935235][T20919] netlink: 'syz.3.5888': attribute type 39 has an invalid length. [ 398.944549][T20919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5888'. [ 398.954767][T20925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.963274][T20925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.023509][T20811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.031467][T20930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.045321][T20811] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.065707][T20930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.069215][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.080745][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.100234][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.107441][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.122874][T20933] loop6: detected capacity change from 0 to 1024 [ 399.129853][T20933] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 399.140827][T20933] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 399.156993][ T1039] ================================================================== [ 399.165131][ T1039] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 399.173100][ T1039] [ 399.175440][ T1039] read-write to 0xffff8881005f2af8 of 8 bytes by task 20933 on cpu 1: [ 399.183610][ T1039] __filemap_add_folio+0x5b9/0x7d0 [ 399.188744][ T1039] filemap_add_folio+0x1d9/0x360 [ 399.193696][ T1039] __filemap_get_folio_mpol+0x326/0x650 [ 399.199267][ T1039] bdev_getblk+0x174/0x3f0 [ 399.203716][ T1039] ext4_sb_breadahead_unmovable+0x45/0x180 [ 399.209588][ T1039] __ext4_get_inode_loc+0x709/0x930 [ 399.214820][ T1039] __ext4_iget+0x2ea/0x2350 [ 399.219367][ T1039] ext4_get_journal_inode+0x2a/0x130 [ 399.224683][ T1039] ext4_load_and_init_journal+0x193/0x1600 [ 399.230512][ T1039] ext4_fill_super+0x23cf/0x37a0 [ 399.235483][ T1039] get_tree_bdev_flags+0x291/0x300 [ 399.240626][ T1039] get_tree_bdev+0x1f/0x30 [ 399.245061][ T1039] ext4_get_tree+0x1c/0x30 [ 399.249505][ T1039] vfs_get_tree+0x57/0x1d0 [ 399.253949][ T1039] do_new_mount+0x24d/0x6a0 [ 399.258479][ T1039] path_mount+0x4ab/0xb80 [ 399.262828][ T1039] __se_sys_mount+0x28c/0x2e0 [ 399.267558][ T1039] __x64_sys_mount+0x67/0x80 [ 399.272172][ T1039] x64_sys_call+0x2cca/0x3000 [ 399.276872][ T1039] do_syscall_64+0xca/0x2b0 [ 399.281492][ T1039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.287407][ T1039] [ 399.289750][ T1039] read to 0xffff8881005f2af8 of 8 bytes by task 1039 on cpu 0: [ 399.297309][ T1039] nr_blockdev_pages+0x7e/0xd0 [ 399.302098][ T1039] si_meminfo+0x87/0xd0 [ 399.306276][ T1039] update_defense_level+0x47/0x5c0 [ 399.311420][ T1039] defense_work_handler+0x1f/0x80 [ 399.316475][ T1039] process_scheduled_works+0x4ce/0x9d0 [ 399.321958][ T1039] worker_thread+0x582/0x770 [ 399.326590][ T1039] kthread+0x489/0x510 [ 399.330689][ T1039] ret_from_fork+0x149/0x290 [ 399.335311][ T1039] ret_from_fork_asm+0x1a/0x30 [ 399.340107][ T1039] [ 399.342444][ T1039] value changed: 0x0000000000000005 -> 0x0000000000000006 [ 399.349582][ T1039] [ 399.351929][ T1039] Reported by Kernel Concurrency Sanitizer on: [ 399.358109][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/0:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.369769][ T1039] Tainted: [W]=WARN [ 399.373589][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.383753][ T1039] Workqueue: events_long defense_work_handler [ 399.389855][ T1039] ================================================================== [ 399.408806][T20811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 399.419229][T20811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.437186][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 399.437205][ T29] audit: type=1400 audit(1767424243.687:43363): avc: denied { write } for pid=3289 comm="syz-executor" path="pipe:[478]" dev="pipefs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 399.462400][T20933] JBD2: no valid journal superblock found [ 399.472601][T20933] EXT4-fs (loop6): Could not load journal inode [ 399.502711][ T29] audit: type=1400 audit(1767424243.717:43364): avc: denied { recv } for pid=3288 comm="sshd-session" saddr=10.128.0.163 src=38562 daddr=10.128.10.12 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 399.989449][ T7153] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.065639][ T7153] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.125683][ T7153] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.175750][ T7153] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.240887][ T7153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.251245][ T7153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.277092][ T7153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.287515][ T7153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.316858][ T7153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.327250][ T7153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.406689][ T7153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.417069][ T7153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.459280][ T7153] bridge_slave_1: left allmulticast mode [ 400.465029][ T7153] bridge_slave_1: left promiscuous mode [ 400.470673][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.478777][ T7153] bridge_slave_0: left allmulticast mode [ 400.484555][ T7153] bridge_slave_0: left promiscuous mode [ 400.490216][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.656623][ T7153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.666977][ T7153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.676918][ T7153] bond0 (unregistering): Released all slaves [ 400.685791][ T7153] bond1 (unregistering): Released all slaves [ 400.706627][ T7153] bond1 (unregistering): (slave geneve2): Releasing active interface [ 400.795383][ T7153] bond2 (unregistering): (slave bridge1): Releasing active interface [ 400.845818][ T7153] bond0 (unregistering): Released all slaves [ 400.854801][ T7153] bond1 (unregistering): Released all slaves [ 400.863452][ T7153] bond2 (unregistering): Released all slaves [ 400.888598][ T7153] tipc: Disabling bearer [ 400.893606][ T7153] tipc: Left network mode [ 400.927555][ T7153] hsr_slave_0: left promiscuous mode [ 400.933388][ T7153] hsr_slave_1: left promiscuous mode [ 400.939135][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.946781][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.954958][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.962370][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.972297][ T7153] hsr_slave_0: left promiscuous mode [ 400.978148][ T7153] hsr_slave_1: left promiscuous mode [ 400.983872][ T7153] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 400.991029][ T7153] batman_adv: batadv0: Removing interface: veth1_vlan [ 401.003544][ T7153] veth1_macvtap: left promiscuous mode [ 401.009643][ T7153] veth0_macvtap: left promiscuous mode [ 401.015326][ T7153] veth1_vlan: left promiscuous mode [ 401.020607][ T7153] veth0_vlan: left promiscuous mode [ 401.026755][ T7153] veth1_macvtap: left promiscuous mode [ 401.032387][ T7153] veth0_macvtap: left promiscuous mode [ 401.038013][ T7153] veth1_vlan: left promiscuous mode [ 401.043313][ T7153] veth0_vlan: left promiscuous mode [ 401.141969][ T7153] team0 (unregistering): Port device team_slave_1 removed [ 401.151882][ T7153] team0 (unregistering): Port device team_slave_0 removed [ 401.589002][ T7153] IPVS: stop unused estimator thread 0... [ 401.919950][ T7153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.966350][ T7153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.016766][ T7153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.086678][ T7153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.158173][ T7153] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.185180][ T7153] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.235073][ T7153] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.274975][ T7153] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.348251][ T7153] bridge_slave_1: left allmulticast mode [ 402.354097][ T7153] bridge_slave_1: left promiscuous mode [ 402.360299][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.368209][ T7153] bridge_slave_0: left allmulticast mode [ 402.373996][ T7153] bridge_slave_0: left promiscuous mode [ 402.379790][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.388818][ T7153] bridge_slave_1: left allmulticast mode [ 402.394518][ T7153] bridge_slave_1: left promiscuous mode [ 402.400363][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.408179][ T7153] bridge_slave_0: left allmulticast mode [ 402.413911][ T7153] bridge_slave_0: left promiscuous mode [ 402.419593][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.516298][ T7153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.526311][ T7153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.535817][ T7153] bond0 (unregistering): Released all slaves [ 402.615984][ T7153] bond0 (unregistering): Released all slaves [ 402.636563][ T7153] bond1 (unregistering): (slave geneve2): Releasing active interface [ 402.836258][ T7153] bond0 (unregistering): (slave 30): Releasing backup interface [ 402.845087][ T7153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.854391][ T7153] bond0 (unregistering): Released all slaves [ 402.862727][ T7153] bond1 (unregistering): Released all slaves [ 402.898530][ T7153] tipc: Disabling bearer [ 402.903603][ T7153] tipc: Left network mode [ 402.913110][ T7153] hsr_slave_0: left promiscuous mode [ 402.918949][ T7153] hsr_slave_1: left promiscuous mode [ 402.924662][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.932283][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.941806][ T7153] hsr_slave_0: left promiscuous mode [ 402.947578][ T7153] hsr_slave_1: left promiscuous mode [ 402.955047][ T7153] hsr_slave_0: left promiscuous mode [ 402.960709][ T7153] hsr_slave_1: left promiscuous mode [ 402.966716][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.974363][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.986309][ T7153] veth1_macvtap: left promiscuous mode [ 402.991854][ T7153] veth0_macvtap: left promiscuous mode [ 402.997631][ T7153] veth1_vlan: left promiscuous mode [ 403.002885][ T7153] veth0_vlan: left promiscuous mode [ 403.078174][ T7153] team0 (unregistering): Port device team_slave_1 removed [ 403.088115][ T7153] team0 (unregistering): Port device team_slave_0 removed [ 403.210276][ T7153] team0 (unregistering): Port device team_slave_1 removed [ 403.220370][ T7153] team0 (unregistering): Port device team_slave_0 removed [ 403.247188][ T7153] team0 (unregistering): Port device dummy0 removed [ 403.919387][ T7153] IPVS: stop unused estimator thread 0...