last executing test programs: 3.139143579s ago: executing program 0 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x0, r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2.923883231s ago: executing program 0 (id=1681): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x80}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='cachefiles_mark_inactive\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) write$tun(r6, 0x0, 0x1011) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="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"], 0x1c8}}, 0x24000000) 2.592876124s ago: executing program 0 (id=1685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0x5, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000008a54151701ac4d2995925150000000000000000000000000000000040000000"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 1.598082082s ago: executing program 0 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x45}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095697e78e8a049e459cdc823e2c51053b112f39b7cf6ec4ffde498203b8cc4280f73ea97676dc4179da49ecef1ac85966e73e3f4bca2d7c9a57dfdb10eede799784c36b15daa9a4d348e62edb3c1fa621bff35a092b17d4a4d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r8, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x20014fc, 0x3ff}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0x10}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x17, 0x7800, 0x9, 0x8001, {{0x15, 0x4, 0x0, 0x16, 0x54, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x3f, 0x3, [{0x2, 0x6, "2e085e1f"}, {0x1, 0xd, "210c6830b5fb43c9f4aefb"}, {0x1, 0x8, "0620b7aa0a12"}, {0x0, 0x12, "eeead5a43a9c86a43241fd7f348a0e00"}, {0x2, 0xc, "a43a5d1a4bec62e7c1a1"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x80, 0xc, 0x4, 0x7, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0xb, [@rand_addr=0x64010102, @rand_addr=0x64010100, @loopback, @multicast1, @local]}, @timestamp_prespec={0x44, 0x1c, 0xfa, 0x3, 0x7, [{@private=0xa010101, 0x3}, {@local, 0xc}, {@broadcast, 0x3}]}, @cipso={0x86, 0x12, 0x1, [{0x6, 0x7, "8a4e50b94b"}, {0x5, 0x5, "9a1d23"}]}, @cipso={0x86, 0x27, 0xfffffffffffffffd, [{0x0, 0xf, "fcb6ee16936b13a6fbfb89af4b"}, {0x5, 0x12, "c84501a3a2bcea70fbb16478fc74d6a4"}]}, @timestamp={0x44, 0x14, 0x15, 0x0, 0xc, [0x6, 0x8000, 0xaa5, 0x0]}, @end, @end]}}}}}) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x7, 0x7, 0x84ca3535d7ece68d, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0xfffffffb, 0x5}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14001200760f0068315f766c616e000000000000080001002ac76b51d9e184575651ae619e891cf662a43b1a982b66e810b7257b5bc6bbd56a22087365cfd146c7fcca484defa3a8c3e664b88388c29492cbb3b92a054e961f290babfb9427e986cb79207d8dbafdd1454bdbd5005da08497b017146714b2a925964318a64b29b2362118da19c037c8702d5a8dc7bcd20160ae7626dfde1d0ca6e9c3fe74dcd6adbc53fcbfc95996906b", @ANYRES32=r11, @ANYBLOB="080003000200000014000200776c616e30000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="08000800ef0a00005c00018008000100", @ANYRES32=r14, @ANYBLOB="080003000300000008000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="140002006e6574706369300000000000000000001400020073797a5f74756e000000000000000000080003000200000008000300020000000800060001000000080009000c030000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x1001) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_getevents(r18, 0x3, 0x3, &(0x7f00000005c0)=[{}, {}, {}], &(0x7f0000000640)={0x0, 0x989680}) 1.597254912s ago: executing program 4 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) 1.538874618s ago: executing program 4 (id=1702): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="25120000", @ANYRES16=r1, @ANYBLOB="01002dbd7000feffffff0300000018000180040002800d00010069623a74756e6c3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="395d94c6517334af58023bce392b0de8f48f801eebe7d0e4ee0b7090e73ff2f54ba72fc9e02ed33515a02a86070b058962e92d682ee9457d107c8f69fd7730dbfd27dd76515e35ba", @ANYRESDEC], &(0x7f0000000480)='GPL\x00', 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) inotify_init() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) 1.490063043s ago: executing program 2 (id=1704): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xe, 0xb, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000740)='id\xf7\xff\xffe{') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2810008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000640)="a4a78f44d5a120f911961647507c04d082e30721a7623bb5c5eff7cb635814601ae3bded145d82d182bb8ff84afb31252b7ab451c99727559eb708ca29ee214da110deba372c43e5833ecf2b901278abdc61bfe368e668e3c171a034590eebea0db8aee6d049fa3e12c62da58b9ac425a2c240c026b3", 0x76) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000006c0)={0x3, &(0x7f0000000400)=[{0x3, 0x8c, 0xc6, 0x7}, {0xe7e, 0x0, 0x80, 0x6}, {0x32, 0x1, 0x2, 0x30000}]}) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) write$UHID_INPUT(r1, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) fstat(r2, 0x0) 1.482376314s ago: executing program 3 (id=1705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x3f27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x34020000) 1.476580984s ago: executing program 4 (id=1706): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x108) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000001000010029bd70000000000000000000", @ANYRESOCT=r2, @ANYBLOB="8427000024010000140003006e657464657673696d3000000000000008002900449d00005c0016805800018028"], 0xa0}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 1.393898182s ago: executing program 3 (id=1709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0x5, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000008a54151701ac4d2995925150000000000000000000000000000000040000000"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 1.292001282s ago: executing program 0 (id=1711): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) 1.270964414s ago: executing program 2 (id=1712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a00000200000000000000000000002200c6d6c0c67d574fbafb3b22ed3fc7648f1628c6fae350625f5bfa7e163153cccf461e56cd313513a7e4893bfe2241aa9288f0440eabada4e2e053f88e69a4f99736538eafe4d64ee6321982aa6cc00c03f23d170e6036843b7ffa2b993d24330a3e335054398f99b4b6ef4b4e634fe641e1a2688e"], 0x10}}, 0x0) close(r6) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000095d600", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d44e5c585000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r8, @ANYRESDEC=r7, @ANYRESOCT=0x0, @ANYRESOCT=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x40, 0x20, 0x7, 0xfffff000, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x68, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xf6, 0x3, 0x3, [{@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x2}, {@multicast1, 0x7}]}, @lsrr={0x83, 0xf, 0xbb, [@multicast1, @local, @broadcast]}, @noop]}}}}}) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="dc000000120020012bbd7000fbdbdf25300778024e214e220c000000940500007f00000008000000050000000800000009000000020000007742a4de58bc376fa0986382f4760a10733542c5b6af082696b3eeebe396f5604de297f43d09859dbc592500100000000000000ce8314b09", @ANYRES32=r11, @ANYBLOB="04000000eaa60000040000007f0000001e000100c43ba9ebd6bea99f3400505024650b83aac02abdbd04ef8c056f00006e00010058156f1492af9a56f343eaf8bcb5a2c89ac22cbe12cbf09884323cce47862d2914b5d1237f3828b28fae9f1acfc0eaa19624ea55443c1af37a9e2b699bcad5d81f6a6a77cd2450a5d9c17c61d3808b20f291f74d2855dab298e68d5f539ce084b861c7d9d63eeb7812bd0000"], 0xdc}, 0x1, 0x0, 0x0, 0x44854}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 803.194251ms ago: executing program 0 (id=1714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0x5, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000020000000400000002400000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000008a54151701ac4d2995925150000000000000000000000000000000040000000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 766.545364ms ago: executing program 2 (id=1715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0xff}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r3, &(0x7f0000002c00)=[{{&(0x7f0000000000)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8840) fstatfs(r1, &(0x7f0000000480)=""/129) 728.240128ms ago: executing program 1 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 727.892448ms ago: executing program 2 (id=1717): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="25120000", @ANYRES16=r1, @ANYBLOB="01002dbd7000feffffff0300000018000180040002800d00010069623a74756e6c3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="395d94c6517334af58023bce392b0de8f48f801eebe7d0e4ee0b7090e73ff2f54ba72fc9e02ed33515a02a86070b058962e92d682ee9457d107c8f69fd7730dbfd27dd76515e35ba", @ANYRESDEC], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) inotify_init() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 727.316978ms ago: executing program 1 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYRES16=r1], 0x4c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) sync_file_range(0xffffffffffffffff, 0x1e, 0x6, 0x2) 672.060224ms ago: executing program 2 (id=1719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0xffffffffffffff5e, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x80}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0xc}}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4100, 0x1004}], 0x1, 0x3ff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 671.791794ms ago: executing program 1 (id=1720): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x3544, &(0x7f0000000680)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x3}]}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x2c020400) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 606.91021ms ago: executing program 4 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 533.889587ms ago: executing program 4 (id=1722): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xe, 0xb, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000740)='id\xf7\xff\xffe{') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2810008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000640)="a4a78f44d5a120f911961647507c04d082e30721a7623bb5c5eff7cb635814601ae3bded145d82d182bb8ff84afb31252b7ab451c99727559eb708ca29ee214da110deba372c43e5833ecf2b901278abdc61bfe368e668e3c171a034590eebea0db8aee6d049fa3e12c62da58b9ac425a2c240c026b3", 0x76) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000006c0)={0x3, &(0x7f0000000400)=[{0x3, 0x8c, 0xc6, 0x7}, {0xe7e, 0x0, 0x80, 0x6}, {0x32, 0x1, 0x2, 0x30000}]}) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) write$UHID_INPUT(r1, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) fstat(r2, 0x0) 531.349048ms ago: executing program 3 (id=1723): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (fail_nth: 6) 488.090972ms ago: executing program 1 (id=1724): socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x7ff}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0xfffffffb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x23, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000006000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000020000000b702000014000000b703000000000000bf0900000000000055090100000000009500000000000000181100"/60, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000183600000300000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000009b000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x0, 0x5}, 0x10, r7, r0, 0x5, 0x0, &(0x7f0000000500)=[{0x0, 0x3, 0x8, 0x3}, {0x4, 0x2, 0xe, 0x4}, {0x4, 0x5, 0xc, 0xc}, {0x5, 0x2, 0xb, 0x6}, {0x5, 0x2, 0xe, 0x8}], 0x10, 0x46}, 0x94) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0x8001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x1}, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000580)=@rnullb, r8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) unshare(0x62040200) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0xfc, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x0, 0x0, 0x0, 0x3ff}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0, 0x0) 484.380792ms ago: executing program 2 (id=1725): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x4000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x58, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x17, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0xc5b7, 0x0, 0x2, 0x8, 0x9, 0x5}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x558410e9) 211.055489ms ago: executing program 3 (id=1726): keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000740)='id\xf7\xff\xffe{') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000006c0)={0x3, &(0x7f0000000400)=[{0x3, 0x8c, 0xc6, 0x7}, {0xe7e, 0x0, 0x80, 0x6}, {0x32, 0x1, 0x2, 0x30000}]}) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) fstat(r0, 0x0) 210.49491ms ago: executing program 3 (id=1727): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x2000, 0x8000, 0xa, 0x20, 0x0, 0xc}, {@in=@loopback, 0x20, 0x6c}, @in6=@local, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0xfe52, 0x0, 0x4}, {0xffffffff, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xa3}, [@tfcpad={0x8, 0x16, 0xffffff81}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async) read(r2, &(0x7f0000000040)=""/190, 0xbe) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) 89.956302ms ago: executing program 3 (id=1728): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDSKBENT(r1, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7f, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x5, 0x1, 0xa2d7, 0x1, r3, 0x5, '\x00', 0x0, r4, 0x2, 0x4, 0x5}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f1", 0x1) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000040)='net/tcp6\x00') openat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 30.245927ms ago: executing program 4 (id=1729): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 29.161917ms ago: executing program 1 (id=1730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(r0, &(0x7f0000000140), 0x0, 0x182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.1.877'. [ 86.135974][ T6013] No such timeout policy "syz1" [ 86.156186][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.168019][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 86.374415][ T6034] netem: change failed [ 86.626109][ T6044] loop4: detected capacity change from 0 to 512 [ 86.684169][ T6044] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.889: dx entry: limit 0 != root limit 125 [ 86.695992][ T6044] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.889: Corrupt directory, running e2fsck is recommended [ 86.759654][ T6044] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 86.798121][ T6044] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.889: corrupted in-inode xattr: invalid ea_ino [ 86.826748][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.892'. [ 86.835867][ T6044] EXT4-fs (loop4): Remounting filesystem read-only [ 86.842959][ T6044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.887663][ T3364] IPVS: starting estimator thread 0... [ 86.938402][ T6062] No such timeout policy "syz1" [ 86.982810][ T6056] IPVS: using max 2016 ests per chain, 100800 per kthread [ 87.270336][ T6078] loop3: detected capacity change from 0 to 2048 [ 87.296796][ T6076] 9pnet: Could not find request transport: fT [ 87.353226][ T6086] program syz.1.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.373156][ T6083] loop0: detected capacity change from 0 to 512 [ 87.386306][ T6083] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.905: inode has both inline data and extents flags [ 87.399972][ T6083] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.905: couldn't read orphan inode 15 (err -117) [ 87.412529][ T6083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.427172][ T6092] loop3: detected capacity change from 0 to 128 [ 87.473222][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.488072][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.520731][ T6103] loop0: detected capacity change from 0 to 512 [ 87.534211][ T6103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.544278][ T6100] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 87.563081][ T6103] EXT4-fs (loop0): 1 truncate cleaned up [ 87.569474][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.783073][ T6123] No such timeout policy "syz1" [ 88.021103][ T6137] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 88.104065][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 88.104080][ T29] audit: type=1326 audit(1760984686.669:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.160937][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.168246][ T29] audit: type=1326 audit(1760984686.699:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.193457][ T29] audit: type=1326 audit(1760984686.699:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.216816][ T29] audit: type=1326 audit(1760984686.699:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.216845][ T29] audit: type=1326 audit(1760984686.699:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.216871][ T29] audit: type=1326 audit(1760984686.699:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.216903][ T29] audit: type=1326 audit(1760984686.699:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.310155][ T29] audit: type=1326 audit(1760984686.699:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.333648][ T29] audit: type=1326 audit(1760984686.699:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.357074][ T29] audit: type=1326 audit(1760984686.699:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 88.397807][ T6144] netlink: 'syz.3.927': attribute type 4 has an invalid length. [ 88.408255][ T6144] program syz.3.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.425892][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.926'. [ 88.438664][ T6150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.462520][ T10] IPVS: starting estimator thread 0... [ 88.529487][ T6148] netlink: 256 bytes leftover after parsing attributes in process `syz.2.928'. [ 88.562848][ T6151] IPVS: using max 2208 ests per chain, 110400 per kthread [ 88.592785][ T6166] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 88.602498][ T6166] bond0: (slave dummy0): Releasing backup interface [ 88.603006][ T6169] hub 9-0:1.0: USB hub found [ 88.619921][ T6166] team0: Port device dummy0 added [ 88.627714][ T6169] hub 9-0:1.0: 8 ports detected [ 88.638451][ T6166] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 88.665701][ T6166] team0: Port device dummy0 removed [ 88.683066][ T6166] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.732233][ T6173] loop1: detected capacity change from 0 to 512 [ 88.755480][ T6173] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.936: bg 0: block 248: padding at end of block bitmap is not set [ 88.840802][ T6173] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.936: Failed to acquire dquot type 1 [ 88.863235][ T6182] program syz.3.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.896579][ T6173] EXT4-fs (loop1): 1 truncate cleaned up [ 88.907080][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.921042][ T6173] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.973018][ T6173] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.936: deleted inode referenced: 12 [ 89.014291][ T6173] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.936: deleted inode referenced: 12 [ 89.030929][ T6194] loop4: detected capacity change from 0 to 128 [ 89.111664][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.130978][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 89.555692][ T6229] loop1: detected capacity change from 0 to 128 [ 89.607349][ T6235] loop2: detected capacity change from 0 to 512 [ 89.855118][ T6235] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.958: bg 0: block 248: padding at end of block bitmap is not set [ 89.973740][ T6235] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.958: Failed to acquire dquot type 1 [ 89.993289][ T6235] EXT4-fs (loop2): 1 truncate cleaned up [ 90.030202][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 90.043159][ T6235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.158445][ T6247] netlink: 256 bytes leftover after parsing attributes in process `syz.4.962'. [ 90.173866][ T6235] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.222968][ T6252] hub 9-0:1.0: USB hub found [ 90.227750][ T6252] hub 9-0:1.0: 8 ports detected [ 90.253146][ T6235] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.958: deleted inode referenced: 12 [ 90.314475][ T6255] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.958: deleted inode referenced: 12 [ 90.485146][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 90.728417][ T6270] loop3: detected capacity change from 0 to 128 [ 90.878365][ T6276] loop3: detected capacity change from 0 to 2048 [ 91.297759][ T6287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.634913][ T6297] loop2: detected capacity change from 0 to 128 [ 91.994322][ T6313] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 92.006335][ T6313] bond0: (slave dummy0): Releasing backup interface [ 92.020257][ T6312] program syz.0.987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.025389][ T6313] team0: Port device dummy0 added [ 92.071909][ T6316] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 92.073438][ T6315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.983'. [ 92.093960][ T6316] team0: Port device dummy0 removed [ 92.102372][ T6316] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.164068][ T6326] loop0: detected capacity change from 0 to 128 [ 92.302260][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 92.370374][ T6347] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1000'. [ 92.413612][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'. [ 92.457224][ T6360] hub 9-0:1.0: USB hub found [ 92.495430][ T6360] hub 9-0:1.0: 8 ports detected [ 92.514989][ T6364] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 92.546255][ T6367] loop4: detected capacity change from 0 to 128 [ 92.713417][ T6377] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1013'. [ 92.840641][ T6387] hub 9-0:1.0: USB hub found [ 92.862108][ T6387] hub 9-0:1.0: 8 ports detected [ 92.935107][ T6389] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1016'. [ 93.122606][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 93.129035][ T29] audit: type=1326 audit(1760984691.679:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 93.152625][ T29] audit: type=1326 audit(1760984691.679:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 93.210451][ T29] audit: type=1326 audit(1760984691.769:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 93.233951][ T29] audit: type=1326 audit(1760984691.769:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 93.300463][ T6399] loop1: detected capacity change from 0 to 128 [ 93.382418][ T6404] netlink: 'syz.2.1022': attribute type 10 has an invalid length. [ 93.413033][ T6404] bond0: (slave dummy0): Releasing backup interface [ 93.439431][ T6408] netlink: 'syz.2.1022': attribute type 10 has an invalid length. [ 93.452701][ T29] audit: type=1400 audit(1760984692.009:9673): avc: denied { ioctl } for pid=6393 comm="syz.3.1017" path="socket:[14523]" dev="sockfs" ino=14523 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.462511][ T6404] team0: Port device dummy0 added [ 93.535566][ T6408] team0: Port device dummy0 removed [ 93.536050][ T29] audit: type=1326 audit(1760984692.079:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29145efc9 code=0x7ffc0000 [ 93.557864][ T6408] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.564260][ T29] audit: type=1326 audit(1760984692.079:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29145efc9 code=0x7ffc0000 [ 93.596335][ T29] audit: type=1326 audit(1760984692.079:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa29145efc9 code=0x7ffc0000 [ 93.619794][ T29] audit: type=1326 audit(1760984692.079:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29145efc9 code=0x7ffc0000 [ 93.643222][ T29] audit: type=1326 audit(1760984692.079:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29145efc9 code=0x7ffc0000 [ 93.809521][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 94.024899][ T6434] loop0: detected capacity change from 0 to 2048 [ 94.173433][ T6439] netem: change failed [ 94.446579][ T6458] program syz.2.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.524705][ T6463] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 94.567915][ T6468] loop2: detected capacity change from 0 to 512 [ 94.622904][ T6470] loop0: detected capacity change from 0 to 2048 [ 94.637314][ T6468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1042: bg 0: block 248: padding at end of block bitmap is not set [ 94.653651][ T6468] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1042: Failed to acquire dquot type 1 [ 94.676018][ T6468] EXT4-fs (loop2): 1 truncate cleaned up [ 94.700048][ T6468] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.751010][ T6468] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1042: deleted inode referenced: 12 [ 94.796814][ T6468] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1042: deleted inode referenced: 12 [ 94.858712][ T6483] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 94.896076][ T6483] bond0: (slave dummy0): Releasing backup interface [ 94.909268][ T6479] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1047'. [ 94.924554][ T6488] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 94.935823][ T6483] team0: Port device dummy0 added [ 94.947442][ T6488] team0: Port device dummy0 removed [ 94.955774][ T6490] program syz.0.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.968506][ T6488] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.010125][ T6495] hub 9-0:1.0: USB hub found [ 95.024997][ T6495] hub 9-0:1.0: 8 ports detected [ 95.125394][ T6501] loop4: detected capacity change from 0 to 512 [ 95.132359][ T6501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.143580][ T6496] netem: change failed [ 95.167930][ T6501] EXT4-fs (loop4): 1 truncate cleaned up [ 95.448420][ T6517] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 95.565905][ T6528] FAULT_INJECTION: forcing a failure. [ 95.565905][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.579302][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.0.1065 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.579341][ T6528] Tainted: [W]=WARN [ 95.579349][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.579365][ T6528] Call Trace: [ 95.579373][ T6528] [ 95.579381][ T6528] __dump_stack+0x1d/0x30 [ 95.579469][ T6528] dump_stack_lvl+0xe8/0x140 [ 95.579505][ T6528] dump_stack+0x15/0x1b [ 95.579537][ T6528] should_fail_ex+0x265/0x280 [ 95.579582][ T6528] should_fail+0xb/0x20 [ 95.579748][ T6528] should_fail_usercopy+0x1a/0x20 [ 95.579788][ T6528] copy_fpstate_to_sigframe+0x628/0x7d0 [ 95.579820][ T6528] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 95.579848][ T6528] ? x86_task_fpu+0x36/0x60 [ 95.579925][ T6528] get_sigframe+0x34d/0x490 [ 95.579956][ T6528] ? get_signal+0xdc7/0xf70 [ 95.580053][ T6528] x64_setup_rt_frame+0xa8/0x580 [ 95.580088][ T6528] arch_do_signal_or_restart+0x23e/0x440 [ 95.580120][ T6528] exit_to_user_mode_loop+0x77/0x110 [ 95.580222][ T6528] do_syscall_64+0x1d6/0x200 [ 95.580296][ T6528] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.580323][ T6528] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.580369][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.580396][ T6528] RIP: 0033:0x7fe7d700efc7 [ 95.580417][ T6528] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 95.580440][ T6528] RSP: 002b:00007fe7d5a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 95.580463][ T6528] RAX: 0000000000000013 RBX: 00007fe7d7265fa0 RCX: 00007fe7d700efc9 [ 95.580486][ T6528] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 95.580498][ T6528] RBP: 00007fe7d5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 95.580511][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.580526][ T6528] R13: 00007fe7d7266038 R14: 00007fe7d7265fa0 R15: 00007fffb7c93448 [ 95.580547][ T6528] [ 95.950917][ T6549] loop0: detected capacity change from 0 to 512 [ 95.958420][ T6549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.971188][ T6549] EXT4-fs (loop0): 1 truncate cleaned up [ 96.290832][ T6561] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 96.356010][ T6568] loop1: detected capacity change from 0 to 512 [ 96.374627][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1077'. [ 96.415041][ T6574] blktrace: Concurrent blktraces are not allowed on loop8 [ 96.417613][ T6570] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1080'. [ 96.441106][ T6568] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1079: bg 0: block 248: padding at end of block bitmap is not set [ 96.463146][ T6568] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1079: Failed to acquire dquot type 1 [ 96.499263][ T6568] EXT4-fs (loop1): 1 truncate cleaned up [ 96.521235][ T6581] hub 9-0:1.0: USB hub found [ 96.532814][ T6581] hub 9-0:1.0: 8 ports detected [ 96.533322][ T6568] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.588284][ T6587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.597491][ T6568] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1079: deleted inode referenced: 12 [ 96.610461][ T6568] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1079: deleted inode referenced: 12 [ 96.722546][ T6595] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 96.747451][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 96.772212][ T6598] loop4: detected capacity change from 0 to 512 [ 96.785549][ T6598] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.818571][ T6598] EXT4-fs (loop4): 1 truncate cleaned up [ 96.986451][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1093'. [ 97.036922][ T6610] loop1: detected capacity change from 0 to 512 [ 97.071283][ T6610] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1094: bg 0: block 248: padding at end of block bitmap is not set [ 97.105732][ T6610] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1094: Failed to acquire dquot type 1 [ 97.119964][ T6610] EXT4-fs (loop1): 1 truncate cleaned up [ 97.127220][ T6610] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.264207][ T6610] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1094: deleted inode referenced: 12 [ 97.279072][ T6610] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1094: deleted inode referenced: 12 [ 97.303401][ T6627] loop4: detected capacity change from 0 to 512 [ 97.313795][ T6627] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1100: dx entry: limit 0 != root limit 125 [ 97.325779][ T6627] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1100: Corrupt directory, running e2fsck is recommended [ 97.344782][ T6627] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 97.364059][ T6633] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 97.367815][ T6627] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1100: corrupted in-inode xattr: invalid ea_ino [ 97.399282][ T6627] EXT4-fs (loop4): Remounting filesystem read-only [ 97.455260][ T410] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 97.748132][ T6666] loop3: detected capacity change from 0 to 512 [ 97.764228][ T6666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.782087][ T6666] EXT4-fs (loop3): 1 truncate cleaned up [ 97.866892][ T6674] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1111'. [ 97.933728][ T6677] hub 9-0:1.0: USB hub found [ 97.945679][ T6677] hub 9-0:1.0: 8 ports detected [ 97.960125][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 98.174064][ T29] kauditd_printk_skb: 919 callbacks suppressed [ 98.174078][ T29] audit: type=1326 audit(1760984696.739:10590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.248612][ T29] audit: type=1326 audit(1760984696.769:10591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.272380][ T29] audit: type=1326 audit(1760984696.769:10592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.296066][ T29] audit: type=1326 audit(1760984696.769:10593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.320136][ T29] audit: type=1326 audit(1760984696.769:10594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.343855][ T29] audit: type=1326 audit(1760984696.769:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.367456][ T29] audit: type=1326 audit(1760984696.769:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.391061][ T29] audit: type=1326 audit(1760984696.769:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.415004][ T29] audit: type=1326 audit(1760984696.769:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.438642][ T29] audit: type=1326 audit(1760984696.779:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 98.441988][ T6688] loop0: detected capacity change from 0 to 512 [ 98.527905][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 98.554828][ T6688] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1117: bg 0: block 248: padding at end of block bitmap is not set [ 98.581965][ T6688] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1117: Failed to acquire dquot type 1 [ 98.607492][ T6707] loop1: detected capacity change from 0 to 512 [ 98.619526][ T6688] EXT4-fs (loop0): 1 truncate cleaned up [ 98.625855][ T6688] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.647913][ T6707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.687995][ T6688] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1117: deleted inode referenced: 12 [ 98.719170][ T6707] EXT4-fs (loop1): 1 truncate cleaned up [ 98.782564][ T6714] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1117: deleted inode referenced: 12 [ 98.899182][ T3317] EXT4-fs unmount: 19 callbacks suppressed [ 98.899201][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.914172][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 98.965860][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.095134][ T6740] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 99.105738][ T6740] bond0: (slave dummy0): Releasing backup interface [ 99.116083][ T6740] team0: Port device dummy0 added [ 99.124216][ T6740] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 99.140317][ T6740] team0: Port device dummy0 removed [ 99.149094][ T6740] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.189343][ T6742] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1135'. [ 99.286570][ T6749] hub 9-0:1.0: USB hub found [ 99.298445][ T6749] hub 9-0:1.0: 8 ports detected [ 99.369139][ T6756] loop4: detected capacity change from 0 to 512 [ 99.406501][ T6756] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 99.419277][ T6756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm wÞ£ÿ: bg 0: block 104: invalid block bitmap [ 99.429607][ T6760] loop0: detected capacity change from 0 to 512 [ 99.441742][ T6756] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 99.450643][ T6756] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm wÞ£ÿ: invalid indirect mapped block 1 (level 1) [ 99.463725][ T6756] EXT4-fs (loop4): 1 truncate cleaned up [ 99.465503][ T6760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.469827][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.516918][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.547031][ T6760] EXT4-fs (loop0): 1 truncate cleaned up [ 99.562474][ T6760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.771144][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.854417][ T6776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.891987][ T6778] program syz.0.1147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.228679][ T6801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1156'. [ 100.424046][ T6812] loop1: detected capacity change from 0 to 128 [ 100.452187][ T6814] netlink: 'syz.1.1161': attribute type 10 has an invalid length. [ 100.461254][ T6814] bond0: (slave dummy0): Releasing backup interface [ 100.471706][ T6814] team0: Port device dummy0 added [ 100.524402][ T6814] netlink: 'syz.1.1161': attribute type 10 has an invalid length. [ 100.540796][ T6814] team0: Port device dummy0 removed [ 100.549493][ T6814] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.660349][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1168'. [ 100.909392][ T6853] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 100.920122][ T6854] loop3: detected capacity change from 0 to 512 [ 100.945898][ T6853] bond0: (slave dummy0): Releasing backup interface [ 100.955393][ T6854] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1179: dx entry: limit 0 != root limit 125 [ 100.967274][ T6854] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1179: Corrupt directory, running e2fsck is recommended [ 100.981300][ T6854] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 100.984555][ T6853] team0: Port device dummy0 added [ 100.999760][ T6854] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1179: corrupted in-inode xattr: invalid ea_ino [ 101.021301][ T6854] EXT4-fs (loop3): Remounting filesystem read-only [ 101.037930][ T6854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.141721][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1182'. [ 101.170736][ T6869] loop2: detected capacity change from 0 to 512 [ 101.178020][ T6869] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.189081][ T6869] EXT4-fs (loop2): 1 truncate cleaned up [ 101.195346][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.367134][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.463989][ T6885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1189'. [ 101.731612][ T6894] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 101.741572][ T6894] bond0: (slave dummy0): Releasing backup interface [ 101.751889][ T6894] team0: Port device dummy0 added [ 101.760642][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.901347][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 101.946000][ T6903] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1196'. [ 102.010758][ T6912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1200'. [ 102.016977][ T6913] hub 9-0:1.0: USB hub found [ 102.026757][ T6913] hub 9-0:1.0: 8 ports detected [ 102.523006][ T6939] loop1: detected capacity change from 0 to 128 [ 102.589870][ T6941] loop2: detected capacity change from 0 to 512 [ 102.774852][ T6941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1210: bg 0: block 248: padding at end of block bitmap is not set [ 102.804262][ T6941] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1210: Failed to acquire dquot type 1 [ 102.816753][ T6941] EXT4-fs (loop2): 1 truncate cleaned up [ 102.822902][ T6941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.835892][ T6941] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.852182][ T6941] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1210: deleted inode referenced: 12 [ 102.865613][ T6941] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1210: deleted inode referenced: 12 [ 102.895348][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'. [ 102.950082][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.960988][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 103.006008][ T6963] program syz.2.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.064685][ T6970] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 103.082899][ T6970] bond0: (slave dummy0): Releasing backup interface [ 103.102412][ T6970] team0: Port device dummy0 added [ 103.134960][ T6976] loop2: detected capacity change from 0 to 512 [ 103.154720][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1224: bad orphan inode 11862016 [ 103.166888][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.185427][ T6976] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.245130][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1225'. [ 103.257787][ T6986] loop0: detected capacity change from 0 to 2048 [ 103.291383][ T6988] loop3: detected capacity change from 0 to 512 [ 103.319447][ T6988] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1227: bg 0: block 248: padding at end of block bitmap is not set [ 103.363364][ T6992] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 103.379171][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 103.379241][ T29] audit: type=1326 audit(1760984701.939:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.423176][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.440195][ T6988] Quota error (device loop3): write_blk: dquota write failed [ 103.447729][ T6988] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 103.458469][ T29] audit: type=1326 audit(1760984701.969:11448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.459603][ T6997] program syz.0.1231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.482282][ T29] audit: type=1326 audit(1760984701.969:11449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.492766][ T6988] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1227: Failed to acquire dquot type 1 [ 103.514991][ T29] audit: type=1326 audit(1760984701.969:11450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.527644][ T6988] EXT4-fs (loop3): 1 truncate cleaned up [ 103.549808][ T29] audit: type=1326 audit(1760984701.969:11451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.578992][ T29] audit: type=1326 audit(1760984701.969:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.580949][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.602553][ T29] audit: type=1326 audit(1760984701.969:11453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 103.627225][ T6988] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.686659][ T29] audit: type=1326 audit(1760984702.249:11454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7b25efc9 code=0x7ffc0000 [ 103.716773][ T6988] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1227: deleted inode referenced: 12 [ 103.744791][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'. [ 103.751434][ T6988] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1227: deleted inode referenced: 12 [ 103.810727][ T7016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1239'. [ 103.860127][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.869873][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 103.881339][ T7024] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 103.890194][ T7022] loop2: detected capacity change from 0 to 2048 [ 103.898564][ T7026] FAULT_INJECTION: forcing a failure. [ 103.898564][ T7026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.912054][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.4.1242 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.912169][ T7026] Tainted: [W]=WARN [ 103.912178][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.912194][ T7026] Call Trace: [ 103.912201][ T7026] [ 103.912210][ T7026] __dump_stack+0x1d/0x30 [ 103.912248][ T7026] dump_stack_lvl+0xe8/0x140 [ 103.912292][ T7026] dump_stack+0x15/0x1b [ 103.912330][ T7026] should_fail_ex+0x265/0x280 [ 103.912437][ T7026] should_fail+0xb/0x20 [ 103.912471][ T7026] should_fail_usercopy+0x1a/0x20 [ 103.912511][ T7026] _copy_from_user+0x1c/0xb0 [ 103.912538][ T7026] ___sys_sendmsg+0xc1/0x1d0 [ 103.912641][ T7026] __x64_sys_sendmsg+0xd4/0x160 [ 103.912753][ T7026] x64_sys_call+0x191e/0x3000 [ 103.912793][ T7026] do_syscall_64+0xd2/0x200 [ 103.912910][ T7026] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.912938][ T7026] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.912972][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.912999][ T7026] RIP: 0033:0x7f7976cfefc9 [ 103.913078][ T7026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.913100][ T7026] RSP: 002b:00007f797575f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.913124][ T7026] RAX: ffffffffffffffda RBX: 00007f7976f55fa0 RCX: 00007f7976cfefc9 [ 103.913214][ T7026] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000006 [ 103.913230][ T7026] RBP: 00007f797575f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.913270][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.913284][ T7026] R13: 00007f7976f56038 R14: 00007f7976f55fa0 R15: 00007ffd209fac18 [ 103.913308][ T7026] [ 104.246214][ T7045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1251'. [ 104.262966][ T7051] loop4: detected capacity change from 0 to 512 [ 104.290451][ T7051] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1254: bg 0: block 248: padding at end of block bitmap is not set [ 104.301351][ T7060] FAULT_INJECTION: forcing a failure. [ 104.301351][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 104.317674][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.2.1258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.317708][ T7060] Tainted: [W]=WARN [ 104.317715][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.317794][ T7060] Call Trace: [ 104.317802][ T7060] [ 104.317808][ T7060] __dump_stack+0x1d/0x30 [ 104.317901][ T7060] dump_stack_lvl+0xe8/0x140 [ 104.318004][ T7060] dump_stack+0x15/0x1b [ 104.318062][ T7060] should_fail_ex+0x265/0x280 [ 104.318097][ T7060] should_failslab+0x8c/0xb0 [ 104.318124][ T7060] kmem_cache_alloc_noprof+0x50/0x480 [ 104.318151][ T7060] ? getname_flags+0x80/0x3b0 [ 104.318181][ T7060] getname_flags+0x80/0x3b0 [ 104.318237][ T7060] __se_sys_acct+0x6a/0x530 [ 104.318265][ T7060] __x64_sys_acct+0x1f/0x30 [ 104.318288][ T7060] x64_sys_call+0x2f3a/0x3000 [ 104.318419][ T7060] do_syscall_64+0xd2/0x200 [ 104.318474][ T7060] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.318500][ T7060] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.318532][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.318552][ T7060] RIP: 0033:0x7f5dd289efc9 [ 104.318571][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.318682][ T7060] RSP: 002b:00007f5dd12ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 104.318704][ T7060] RAX: ffffffffffffffda RBX: 00007f5dd2af5fa0 RCX: 00007f5dd289efc9 [ 104.318720][ T7060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 104.318797][ T7060] RBP: 00007f5dd12ff090 R08: 0000000000000000 R09: 0000000000000000 [ 104.318810][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.318900][ T7060] R13: 00007f5dd2af6038 R14: 00007f5dd2af5fa0 R15: 00007ffd70d05c68 [ 104.318920][ T7060] [ 104.504265][ T7051] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1254: Failed to acquire dquot type 1 [ 104.553656][ T7051] EXT4-fs (loop4): 1 truncate cleaned up [ 104.559842][ T7051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.578920][ T7051] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.626124][ T7051] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1254: deleted inode referenced: 12 [ 104.637569][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 104.656490][ T7051] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1254: deleted inode referenced: 12 [ 104.749787][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.764013][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 104.786155][ T7094] FAULT_INJECTION: forcing a failure. [ 104.786155][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 104.798848][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.3.1271 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.798904][ T7094] Tainted: [W]=WARN [ 104.798913][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.798929][ T7094] Call Trace: [ 104.798936][ T7094] [ 104.798944][ T7094] __dump_stack+0x1d/0x30 [ 104.798976][ T7094] dump_stack_lvl+0xe8/0x140 [ 104.799012][ T7094] dump_stack+0x15/0x1b [ 104.799049][ T7094] should_fail_ex+0x265/0x280 [ 104.799087][ T7094] ? tipc_topsrv_queue_evt+0x1c3/0x300 [ 104.799115][ T7094] should_failslab+0x8c/0xb0 [ 104.799149][ T7094] __kmalloc_cache_noprof+0x4c/0x4a0 [ 104.799176][ T7094] tipc_topsrv_queue_evt+0x1c3/0x300 [ 104.799199][ T7094] tipc_sub_report_overlap+0x2ef/0x310 [ 104.799235][ T7094] tipc_nametbl_remove_publ+0x768/0xe20 [ 104.799269][ T7094] tipc_nametbl_withdraw+0xe1/0x200 [ 104.799331][ T7094] tipc_release+0x15f/0xd20 [ 104.799370][ T7094] ? __memcg_slab_free_hook+0xbc/0x230 [ 104.799459][ T7094] sock_close+0x6b/0x150 [ 104.799476][ T7094] ? __pfx_sock_close+0x10/0x10 [ 104.799546][ T7094] __fput+0x29b/0x650 [ 104.799581][ T7094] ____fput+0x1c/0x30 [ 104.799617][ T7094] task_work_run+0x131/0x1a0 [ 104.799681][ T7094] exit_to_user_mode_loop+0xed/0x110 [ 104.799787][ T7094] do_syscall_64+0x1d6/0x200 [ 104.799823][ T7094] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.799848][ T7094] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.799881][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.799945][ T7094] RIP: 0033:0x7f2f7b25efc9 [ 104.799970][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.799993][ T7094] RSP: 002b:00007f2f79ca6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 104.800017][ T7094] RAX: 0000000000000000 RBX: 00007f2f7b4b6090 RCX: 00007f2f7b25efc9 [ 104.800107][ T7094] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 104.800119][ T7094] RBP: 00007f2f79ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.800130][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.800159][ T7094] R13: 00007f2f7b4b6128 R14: 00007f2f7b4b6090 R15: 00007fffaab53c08 [ 104.800177][ T7094] [ 104.801661][ T7097] hub 9-0:1.0: USB hub found [ 104.944675][ T7099] netem: change failed [ 104.948861][ T7097] hub 9-0:1.0: 8 ports detected [ 105.135520][ T7115] FAULT_INJECTION: forcing a failure. [ 105.135520][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 105.148438][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.3.1278 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.148510][ T7115] Tainted: [W]=WARN [ 105.148519][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.148534][ T7115] Call Trace: [ 105.148542][ T7115] [ 105.148619][ T7115] __dump_stack+0x1d/0x30 [ 105.148655][ T7115] dump_stack_lvl+0xe8/0x140 [ 105.148684][ T7115] dump_stack+0x15/0x1b [ 105.148715][ T7115] should_fail_ex+0x265/0x280 [ 105.148789][ T7115] should_failslab+0x8c/0xb0 [ 105.148820][ T7115] __kvmalloc_node_noprof+0x12e/0x670 [ 105.148849][ T7115] ? __nf_hook_entries_try_shrink+0x265/0x460 [ 105.148976][ T7115] ? copy_from_kernel_nofault+0x188/0x200 [ 105.149015][ T7115] __nf_hook_entries_try_shrink+0x265/0x460 [ 105.149107][ T7115] __nf_unregister_net_hook+0x2d1/0x3b0 [ 105.149139][ T7115] nf_unregister_net_hooks+0xab/0xe0 [ 105.149173][ T7115] nf_ct_netns_do_put+0x1c6/0x260 [ 105.149283][ T7115] ? __pfx_nft_ct_set_destroy+0x10/0x10 [ 105.149320][ T7115] nf_ct_netns_put+0xea/0x1f0 [ 105.149412][ T7115] nft_ct_set_destroy+0x42/0x50 [ 105.149448][ T7115] __nft_release_table+0x303/0x8c0 [ 105.149498][ T7115] nft_rcv_nl_event+0x334/0x3d0 [ 105.149557][ T7115] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 105.149593][ T7115] blocking_notifier_call_chain+0x9b/0x1f0 [ 105.149639][ T7115] netlink_release+0xac2/0xf40 [ 105.149680][ T7115] sock_close+0x6b/0x150 [ 105.149747][ T7115] ? __pfx_sock_close+0x10/0x10 [ 105.149770][ T7115] __fput+0x29b/0x650 [ 105.149822][ T7115] ____fput+0x1c/0x30 [ 105.149849][ T7115] task_work_run+0x131/0x1a0 [ 105.149935][ T7115] exit_to_user_mode_loop+0xed/0x110 [ 105.149978][ T7115] do_syscall_64+0x1d6/0x200 [ 105.150016][ T7115] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.150046][ T7115] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.150080][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.150108][ T7115] RIP: 0033:0x7f2f7b25efc9 [ 105.150125][ T7115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.150143][ T7115] RSP: 002b:00007f2f79cc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 105.150237][ T7115] RAX: 0000000000000000 RBX: 00007f2f7b4b5fa0 RCX: 00007f2f7b25efc9 [ 105.150253][ T7115] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 105.150268][ T7115] RBP: 00007f2f79cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.150282][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.150297][ T7115] R13: 00007f2f7b4b6038 R14: 00007f2f7b4b5fa0 R15: 00007fffaab53c08 [ 105.150387][ T7115] [ 105.437961][ T7105] loop4: detected capacity change from 0 to 512 [ 105.456199][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.488749][ T7105] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.635903][ T7130] loop3: detected capacity change from 0 to 512 [ 105.654684][ T7130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1284: bg 0: block 248: padding at end of block bitmap is not set [ 105.669749][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.683222][ T7130] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1284: Failed to acquire dquot type 1 [ 105.703856][ T7130] EXT4-fs (loop3): 1 truncate cleaned up [ 105.730036][ T7130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.799601][ T7130] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.844919][ T7130] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1284: deleted inode referenced: 12 [ 105.857868][ T7130] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1284: deleted inode referenced: 12 [ 105.952586][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.962998][ T410] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 106.037014][ T7155] loop3: detected capacity change from 0 to 512 [ 106.076429][ T7155] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1291: bg 0: block 248: padding at end of block bitmap is not set [ 106.146010][ T7155] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1291: Failed to acquire dquot type 1 [ 106.216631][ T7155] EXT4-fs (loop3): 1 truncate cleaned up [ 106.222927][ T7155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.237542][ T7155] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.271052][ T7155] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1291: deleted inode referenced: 12 [ 106.294559][ T7155] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1291: deleted inode referenced: 12 [ 106.323401][ T7180] FAULT_INJECTION: forcing a failure. [ 106.323401][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 106.336086][ T7180] CPU: 0 UID: 0 PID: 7180 Comm: syz.4.1302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.336178][ T7180] Tainted: [W]=WARN [ 106.336184][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.336197][ T7180] Call Trace: [ 106.336203][ T7180] [ 106.336210][ T7180] __dump_stack+0x1d/0x30 [ 106.336322][ T7180] dump_stack_lvl+0xe8/0x140 [ 106.336352][ T7180] dump_stack+0x15/0x1b [ 106.336433][ T7180] should_fail_ex+0x265/0x280 [ 106.336469][ T7180] ? alloc_pipe_info+0xae/0x350 [ 106.336492][ T7180] should_failslab+0x8c/0xb0 [ 106.336518][ T7180] __kmalloc_cache_noprof+0x4c/0x4a0 [ 106.336559][ T7180] alloc_pipe_info+0xae/0x350 [ 106.336626][ T7180] splice_direct_to_actor+0x592/0x680 [ 106.336658][ T7180] ? kstrtouint_from_user+0x9f/0xf0 [ 106.336836][ T7180] ? __pfx_direct_splice_actor+0x10/0x10 [ 106.336884][ T7180] ? __rcu_read_unlock+0x4f/0x70 [ 106.336939][ T7180] ? avc_policy_seqno+0x15/0x30 [ 106.336971][ T7180] ? selinux_file_permission+0x1e4/0x320 [ 106.337089][ T7180] do_splice_direct+0xda/0x150 [ 106.337119][ T7180] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 106.337209][ T7180] do_sendfile+0x380/0x650 [ 106.337241][ T7180] __x64_sys_sendfile64+0x105/0x150 [ 106.337274][ T7180] x64_sys_call+0x2bb4/0x3000 [ 106.337354][ T7180] do_syscall_64+0xd2/0x200 [ 106.337404][ T7180] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.337430][ T7180] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.337515][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.337538][ T7180] RIP: 0033:0x7f7976cfefc9 [ 106.337556][ T7180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.337579][ T7180] RSP: 002b:00007f797575f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 106.337603][ T7180] RAX: ffffffffffffffda RBX: 00007f7976f55fa0 RCX: 00007f7976cfefc9 [ 106.337662][ T7180] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 106.337677][ T7180] RBP: 00007f797575f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.337692][ T7180] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 106.337707][ T7180] R13: 00007f7976f56038 R14: 00007f7976f55fa0 R15: 00007ffd209fac18 [ 106.337736][ T7180] [ 106.587759][ T7184] __nla_validate_parse: 2 callbacks suppressed [ 106.587799][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 106.603228][ T7182] loop2: detected capacity change from 0 to 512 [ 106.675486][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.689177][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 106.716250][ T7200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1310'. [ 106.786825][ T7208] netlink: 'syz.3.1313': attribute type 10 has an invalid length. [ 106.800311][ T7210] program syz.1.1314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.825813][ T7208] bond0: (slave dummy0): Releasing backup interface [ 106.835927][ T7208] team0: Port device dummy0 added [ 106.893242][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'. [ 106.937577][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 107.036752][ T7224] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1320'. [ 107.133634][ T7239] blktrace: Concurrent blktraces are not allowed on loop8 [ 107.159961][ T7240] hub 9-0:1.0: USB hub found [ 107.172836][ T7240] hub 9-0:1.0: 8 ports detected [ 107.318284][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 107.437385][ T7244] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1328'. [ 107.604179][ T7252] hub 9-0:1.0: USB hub found [ 107.621389][ T7252] hub 9-0:1.0: 8 ports detected [ 107.778365][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 108.290486][ T7280] program syz.2.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.394961][ T29] kauditd_printk_skb: 988 callbacks suppressed [ 108.394978][ T29] audit: type=1326 audit(1760984706.959:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.452786][ T29] audit: type=1326 audit(1760984706.989:12434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.476349][ T29] audit: type=1326 audit(1760984706.989:12435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.499982][ T29] audit: type=1326 audit(1760984706.989:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.523527][ T29] audit: type=1326 audit(1760984706.989:12437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.547067][ T29] audit: type=1326 audit(1760984706.989:12438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.570999][ T29] audit: type=1326 audit(1760984706.989:12439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.594562][ T29] audit: type=1326 audit(1760984706.989:12440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.618149][ T29] audit: type=1326 audit(1760984706.989:12441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.641666][ T29] audit: type=1326 audit(1760984706.989:12442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 108.683760][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 108.946690][ T7301] loop1: detected capacity change from 0 to 512 [ 108.993852][ T7301] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.020427][ T7312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1345'. [ 109.054275][ T7301] EXT4-fs (loop1): 1 truncate cleaned up [ 109.064905][ T7301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.143318][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.192469][ T7327] loop3: detected capacity change from 0 to 128 [ 109.199107][ T7333] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 109.241998][ T7337] loop3: detected capacity change from 0 to 512 [ 109.248615][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.273649][ T7337] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1362: dx entry: limit 0 != root limit 125 [ 109.285496][ T7337] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1362: Corrupt directory, running e2fsck is recommended [ 109.298700][ T7337] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 109.307155][ T7337] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1362: corrupted in-inode xattr: invalid ea_ino [ 109.327569][ T7333] loop1: detected capacity change from 0 to 128 [ 109.329045][ T7337] EXT4-fs (loop3): Remounting filesystem read-only [ 109.345648][ T7337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.346476][ T7333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 109.377634][ T7333] System zones: 1-3, 19-19, 35-36 [ 109.383474][ T7333] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.396040][ T7333] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.480264][ T7333] bond1 (unregistering): Released all slaves [ 109.486418][ T7352] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 109.546780][ T7354] wireguard0: entered promiscuous mode [ 109.552350][ T7354] wireguard0: entered allmulticast mode [ 109.597098][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.607893][ T7360] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 109.630514][ T7360] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 109.642832][ T7360] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 109.655281][ T7360] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 109.669922][ T7360] loop2: detected capacity change from 0 to 512 [ 109.683265][ T7360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.692993][ T7360] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1370: EA inode hash validation failed [ 109.728086][ T7360] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.745979][ T7360] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1370: corrupted inode contents [ 109.758207][ T7360] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.1370: mark_inode_dirty error [ 109.772706][ T7360] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1370: corrupted inode contents [ 109.788252][ T7360] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.1370: mark_inode_dirty error [ 109.802814][ T7360] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1370: mark inode dirty (error -117) [ 109.817202][ T7360] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 109.826455][ T7360] EXT4-fs (loop2): 1 orphan inode deleted [ 109.833411][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.914527][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.979132][ T7387] loop2: detected capacity change from 0 to 4096 [ 109.986163][ T7387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.004336][ T7387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.087214][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.097861][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.125663][ T7396] netlink: 'syz.3.1383': attribute type 10 has an invalid length. [ 110.167297][ T7394] loop2: detected capacity change from 0 to 512 [ 110.205418][ T7394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1384: bg 0: block 248: padding at end of block bitmap is not set [ 110.245975][ T7394] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1384: Failed to acquire dquot type 1 [ 110.259019][ T7394] EXT4-fs (loop2): 1 truncate cleaned up [ 110.265231][ T7394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.278044][ T7394] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.306420][ T7394] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1384: deleted inode referenced: 12 [ 110.319042][ T7394] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1384: deleted inode referenced: 12 [ 110.550541][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.560377][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 110.581558][ T7426] loop3: detected capacity change from 0 to 512 [ 110.618299][ T7430] loop2: detected capacity change from 0 to 512 [ 110.626723][ T7430] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1394: dx entry: limit 0 != root limit 125 [ 110.638587][ T7430] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1394: Corrupt directory, running e2fsck is recommended [ 110.661782][ T7430] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 110.671329][ T7430] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1394: corrupted in-inode xattr: invalid ea_ino [ 110.686076][ T7426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1390: bg 0: block 248: padding at end of block bitmap is not set [ 110.700739][ T7430] EXT4-fs (loop2): Remounting filesystem read-only [ 110.703289][ T7426] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1390: Failed to acquire dquot type 1 [ 110.708147][ T7430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.744872][ T7426] EXT4-fs (loop3): 1 truncate cleaned up [ 110.750927][ T7426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.765055][ T7426] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.789406][ T7426] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1390: deleted inode referenced: 12 [ 110.883772][ T7444] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1390: deleted inode referenced: 12 [ 111.008610][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.025483][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 111.037415][ T7450] netem: change failed [ 111.142128][ T7458] loop3: detected capacity change from 0 to 512 [ 111.165242][ T7458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1402: bg 0: block 248: padding at end of block bitmap is not set [ 111.181635][ T7458] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1402: Failed to acquire dquot type 1 [ 111.236617][ T7458] EXT4-fs (loop3): 1 truncate cleaned up [ 111.242984][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.255906][ T7458] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.300876][ T7462] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 111.306799][ T7458] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1402: deleted inode referenced: 12 [ 111.333217][ T7458] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1402: deleted inode referenced: 12 [ 111.355189][ T7465] loop0: detected capacity change from 0 to 128 [ 111.413240][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.424486][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 111.463895][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.569468][ T7478] loop2: detected capacity change from 0 to 512 [ 111.574820][ T7480] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 111.584666][ T7480] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 111.588752][ T7478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.603112][ T7480] team0: Port device dummy0 removed [ 111.610331][ T7478] EXT4-fs (loop2): 1 truncate cleaned up [ 111.616621][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.631050][ T7480] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.680684][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.705405][ T7486] loop2: detected capacity change from 0 to 512 [ 111.745429][ T7486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1411: bg 0: block 248: padding at end of block bitmap is not set [ 111.770824][ T7486] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1411: Failed to acquire dquot type 1 [ 111.796953][ T7486] EXT4-fs (loop2): 1 truncate cleaned up [ 111.808374][ T7492] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 111.820179][ T7494] loop4: detected capacity change from 0 to 128 [ 111.864680][ T7497] loop4: detected capacity change from 0 to 512 [ 111.883120][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.898841][ T7500] loop1: detected capacity change from 0 to 512 [ 111.908812][ T7497] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1417: dx entry: limit 0 != root limit 125 [ 111.920716][ T7497] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1417: Corrupt directory, running e2fsck is recommended [ 111.942862][ T7486] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.953745][ T7497] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 111.954708][ T7504] loop3: detected capacity change from 0 to 512 [ 111.972354][ T7486] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1411: deleted inode referenced: 12 [ 111.986915][ T7497] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1417: corrupted in-inode xattr: invalid ea_ino [ 112.000934][ T7486] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1411: deleted inode referenced: 12 [ 112.013285][ T7500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1416: bg 0: block 248: padding at end of block bitmap is not set [ 112.027834][ T7497] EXT4-fs (loop4): Remounting filesystem read-only [ 112.035053][ T7504] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1418: dx entry: limit 0 != root limit 125 [ 112.046858][ T7504] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1418: Corrupt directory, running e2fsck is recommended [ 112.089518][ T7497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.103681][ T7500] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1416: Failed to acquire dquot type 1 [ 112.115646][ T7504] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 112.126619][ T7500] EXT4-fs (loop1): 1 truncate cleaned up [ 112.132846][ T7500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.145617][ T7504] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1418: corrupted in-inode xattr: invalid ea_ino [ 112.145684][ T7500] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.176031][ T7504] EXT4-fs (loop3): Remounting filesystem read-only [ 112.176770][ T7500] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1416: deleted inode referenced: 12 [ 112.183215][ T7504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.199312][ T7500] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1416: deleted inode referenced: 12 [ 112.221631][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.231002][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 112.290480][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.299944][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 112.336061][ T7522] dvmrp1: entered allmulticast mode [ 112.519904][ T7536] loop2: detected capacity change from 0 to 128 [ 112.584374][ T7539] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 112.601324][ T7530] dvmrp1: left allmulticast mode [ 112.707339][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.737551][ T7544] qrtr: Invalid version 48 [ 112.828877][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.015546][ T7559] netem: change failed [ 113.091893][ T7566] bridge0: entered promiscuous mode [ 113.098057][ T7566] macsec1: entered promiscuous mode [ 113.104941][ T7564] loop4: detected capacity change from 0 to 128 [ 113.116588][ T7568] loop2: detected capacity change from 0 to 512 [ 113.165890][ T7568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1440: bg 0: block 248: padding at end of block bitmap is not set [ 113.187339][ T7568] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1440: Failed to acquire dquot type 1 [ 113.190937][ T7574] loop0: detected capacity change from 0 to 512 [ 113.207341][ T7574] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1442: dx entry: limit 0 != root limit 125 [ 113.209308][ T7568] EXT4-fs (loop2): 1 truncate cleaned up [ 113.219380][ T7574] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1442: Corrupt directory, running e2fsck is recommended [ 113.238124][ T7574] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 113.246978][ T7574] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1442: corrupted in-inode xattr: invalid ea_ino [ 113.251044][ T7581] FAULT_INJECTION: forcing a failure. [ 113.251044][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 113.260879][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.273276][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.1.1437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.273314][ T7581] Tainted: [W]=WARN [ 113.273321][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.273339][ T7581] Call Trace: [ 113.273348][ T7581] [ 113.273358][ T7581] __dump_stack+0x1d/0x30 [ 113.273457][ T7581] dump_stack_lvl+0xe8/0x140 [ 113.273521][ T7581] dump_stack+0x15/0x1b [ 113.273556][ T7581] should_fail_ex+0x265/0x280 [ 113.273629][ T7581] ? __do_once_done+0x62/0x110 [ 113.273656][ T7581] should_failslab+0x8c/0xb0 [ 113.273686][ T7581] __kmalloc_cache_noprof+0x4c/0x4a0 [ 113.273722][ T7581] __do_once_done+0x62/0x110 [ 113.273749][ T7581] recent_mt_check+0x8e9/0x8f0 [ 113.273807][ T7581] recent_mt_check_v0+0x67/0x90 [ 113.273848][ T7581] xt_check_match+0x2ad/0x4f0 [ 113.273885][ T7581] ? strnlen+0x28/0x50 [ 113.273986][ T7581] ? strcmp+0x22/0x50 [ 113.274025][ T7581] ? xt_find_match+0x1d1/0x210 [ 113.274061][ T7581] translate_table+0xb4b/0x1070 [ 113.274114][ T7581] ? _copy_from_user+0x89/0xb0 [ 113.274145][ T7581] do_ip6t_set_ctl+0x678/0x840 [ 113.274215][ T7581] ? kstrtoull+0x111/0x140 [ 113.274307][ T7581] ? __rcu_read_unlock+0x4f/0x70 [ 113.274360][ T7581] nf_setsockopt+0x199/0x1b0 [ 113.274472][ T7581] ipv6_setsockopt+0x11a/0x130 [ 113.274513][ T7581] tcp_setsockopt+0x98/0xb0 [ 113.274554][ T7581] sock_common_setsockopt+0x69/0x80 [ 113.274660][ T7581] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 113.274691][ T7581] __sys_setsockopt+0x184/0x200 [ 113.274731][ T7581] __x64_sys_setsockopt+0x64/0x80 [ 113.274769][ T7581] x64_sys_call+0x20ec/0x3000 [ 113.274877][ T7581] do_syscall_64+0xd2/0x200 [ 113.274918][ T7581] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.275042][ T7581] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 113.275079][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.275121][ T7581] RIP: 0033:0x7fa29145efc9 [ 113.275184][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.275250][ T7581] RSP: 002b:00007fa28fec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.275276][ T7581] RAX: ffffffffffffffda RBX: 00007fa2916b5fa0 RCX: 00007fa29145efc9 [ 113.275292][ T7581] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 113.275308][ T7581] RBP: 00007fa28fec7090 R08: 00000000000004d8 R09: 0000000000000000 [ 113.275325][ T7581] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 113.275419][ T7581] R13: 00007fa2916b6038 R14: 00007fa2916b5fa0 R15: 00007ffe9aed1458 [ 113.275444][ T7581] [ 113.297400][ T7574] EXT4-fs (loop0): Remounting filesystem read-only [ 113.301150][ T7568] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.311529][ T7581] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 113.315331][ T7574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.396682][ T7568] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1440: deleted inode referenced: 12 [ 113.406382][ T29] kauditd_printk_skb: 1237 callbacks suppressed [ 113.406402][ T29] audit: type=1326 audit(1760984711.969:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 113.414494][ T7568] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1440: deleted inode referenced: 12 [ 113.415281][ T29] audit: type=1326 audit(1760984711.969:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.656378][ T29] audit: type=1326 audit(1760984711.969:13665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.679987][ T29] audit: type=1326 audit(1760984711.969:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.704998][ T29] audit: type=1326 audit(1760984711.969:13667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.728525][ T29] audit: type=1326 audit(1760984711.969:13668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.752383][ T29] audit: type=1326 audit(1760984711.979:13669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.775905][ T29] audit: type=1326 audit(1760984711.979:13670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.799519][ T29] audit: type=1326 audit(1760984711.979:13671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.823063][ T29] audit: type=1326 audit(1760984711.979:13672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd289efc9 code=0x7ffc0000 [ 113.869764][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.879110][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 114.020315][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.034566][ T7608] netlink: 'syz.1.1454': attribute type 10 has an invalid length. [ 114.068944][ T7608] netlink: 'syz.1.1454': attribute type 10 has an invalid length. [ 114.089330][ T7608] team0: Port device dummy0 removed [ 114.097687][ T7608] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.107083][ T7619] netem: change failed [ 114.177158][ T7624] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.318327][ T7629] SELinux: failed to load policy [ 114.372573][ T7633] syz.0.1465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.385817][ T7635] loop4: detected capacity change from 0 to 512 [ 114.408532][ T7637] __nla_validate_parse: 3 callbacks suppressed [ 114.408553][ T7637] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1467'. [ 114.437232][ T7635] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1466: dx entry: limit 0 != root limit 125 [ 114.449149][ T7635] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1466: Corrupt directory, running e2fsck is recommended [ 114.475251][ T7635] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 114.486619][ T7635] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1466: corrupted in-inode xattr: invalid ea_ino [ 114.500373][ T7635] EXT4-fs (loop4): Remounting filesystem read-only [ 114.507875][ T7635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.648824][ T7653] netem: change failed [ 114.730544][ T7661] loop2: detected capacity change from 0 to 512 [ 114.741884][ T7661] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1473: dx entry: limit 0 != root limit 125 [ 114.753759][ T7661] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1473: Corrupt directory, running e2fsck is recommended [ 114.787205][ T7661] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 114.899350][ T7666] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.910059][ T7661] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1473: corrupted in-inode xattr: invalid ea_ino [ 114.946245][ T7661] EXT4-fs (loop2): Remounting filesystem read-only [ 114.963200][ T7661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.218195][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.266220][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 115.304034][ C1] hrtimer: interrupt took 34646 ns [ 115.499930][ T7702] loop4: detected capacity change from 0 to 512 [ 115.514467][ T7702] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1486: bg 0: block 248: padding at end of block bitmap is not set [ 115.531154][ T7702] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1486: Failed to acquire dquot type 1 [ 115.543212][ T7702] EXT4-fs (loop4): 1 truncate cleaned up [ 115.549526][ T7702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.566827][ T7702] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.587463][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.600881][ T7709] netem: change failed [ 115.601188][ T7702] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1486: deleted inode referenced: 12 [ 115.624223][ T7702] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1486: deleted inode referenced: 12 [ 115.643490][ T7713] loop1: detected capacity change from 0 to 512 [ 115.653674][ T7713] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1490: dx entry: limit 0 != root limit 125 [ 115.665539][ T7713] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1490: Corrupt directory, running e2fsck is recommended [ 115.680041][ T7713] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 115.693692][ T7713] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1490: corrupted in-inode xattr: invalid ea_ino [ 115.707647][ T7713] EXT4-fs (loop1): Remounting filesystem read-only [ 115.714797][ T7713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.750041][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.759334][ T410] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 115.793727][ T7719] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 115.808391][ T7719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.820388][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 115.831558][ T7719] bond1 (unregistering): Released all slaves [ 115.879969][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 115.929635][ T7734] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 115.943790][ T7734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.958293][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 115.969417][ T7734] bond1 (unregistering): Released all slaves [ 116.016695][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 116.050153][ T7743] loop2: detected capacity change from 0 to 512 [ 116.063400][ T7743] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1499: dx entry: limit 0 != root limit 125 [ 116.075271][ T7743] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1499: Corrupt directory, running e2fsck is recommended [ 116.095505][ T7741] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1498'. [ 116.105123][ T7743] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 116.119714][ T7743] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1499: corrupted in-inode xattr: invalid ea_ino [ 116.134223][ T7743] EXT4-fs (loop2): Remounting filesystem read-only [ 116.141156][ T7743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.238145][ T7746] hub 9-0:1.0: USB hub found [ 116.262116][ T7746] hub 9-0:1.0: 8 ports detected [ 116.277850][ T7748] loop0: detected capacity change from 0 to 512 [ 116.361979][ T7748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1500: bg 0: block 248: padding at end of block bitmap is not set [ 116.381544][ T7748] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1500: Failed to acquire dquot type 1 [ 116.393710][ T7748] EXT4-fs (loop0): 1 truncate cleaned up [ 116.400062][ T7748] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.415941][ T7755] loop3: detected capacity change from 0 to 512 [ 116.431973][ T7748] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1500: deleted inode referenced: 12 [ 116.447817][ T7755] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1501: bg 0: block 248: padding at end of block bitmap is not set [ 116.463765][ T7748] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1500: deleted inode referenced: 12 [ 116.476070][ T7755] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1501: Failed to acquire dquot type 1 [ 116.488031][ T7755] EXT4-fs (loop3): 1 truncate cleaned up [ 116.494111][ T7755] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.509710][ T7755] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1501: deleted inode referenced: 12 [ 116.523209][ T7755] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1501: deleted inode referenced: 12 [ 116.683785][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 116.729132][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 116.779221][ T7768] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 116.789964][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 116.863906][ T7773] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 116.913198][ T7768] bond0: (slave dummy0): Releasing backup interface [ 116.923315][ T7768] team0: Port device dummy0 added [ 116.934060][ T7773] team0: Port device dummy0 removed [ 116.955913][ T7773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.062041][ T7788] loop2: detected capacity change from 0 to 512 [ 117.081966][ T7788] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1512: dx entry: limit 0 != root limit 125 [ 117.093901][ T7788] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1512: Corrupt directory, running e2fsck is recommended [ 117.107984][ T7788] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 117.116601][ T7788] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1512: corrupted in-inode xattr: invalid ea_ino [ 117.183349][ T7788] EXT4-fs (loop2): Remounting filesystem read-only [ 117.355254][ T7801] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 117.378821][ T7801] bond0: (slave dummy0): Releasing backup interface [ 117.395283][ T7801] team0: Port device dummy0 added [ 117.417873][ T7801] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 117.428441][ T7801] team0: Port device dummy0 removed [ 117.435893][ T7801] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.470739][ T7804] netem: change failed [ 117.587527][ T7810] loop3: detected capacity change from 0 to 512 [ 117.604447][ T7810] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1518: dx entry: limit 0 != root limit 125 [ 117.616415][ T7810] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1518: Corrupt directory, running e2fsck is recommended [ 117.655951][ T7810] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 117.674370][ T7810] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1518: corrupted in-inode xattr: invalid ea_ino [ 117.687990][ T7810] EXT4-fs (loop3): Remounting filesystem read-only [ 117.781696][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1520'. [ 117.817586][ T7819] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 117.831745][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.845866][ T7819] loop4: detected capacity change from 0 to 128 [ 117.853544][ T7819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 117.861593][ T7819] System zones: 1-3, 19-19, 35-36 [ 117.867348][ T7819] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.935157][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 117.950261][ T7819] bond1 (unregistering): Released all slaves [ 117.955860][ T7825] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 117.969596][ T7825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.991468][ T7825] loop1: detected capacity change from 0 to 128 [ 118.009356][ T7825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 118.025705][ T7829] loop4: detected capacity change from 0 to 256 [ 118.029366][ T7825] System zones: 1-3, 19-19, 35-36 [ 118.032590][ T7829] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.049626][ T7825] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.049799][ T7829] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.097511][ T7832] program syz.0.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.117075][ T7825] bond1 (unregistering): Released all slaves [ 118.129262][ T7829] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 118.162078][ T7834] SELinux: failed to load policy [ 118.205436][ T7838] loop1: detected capacity change from 0 to 128 [ 118.440378][ T29] kauditd_printk_skb: 961 callbacks suppressed [ 118.440393][ T29] audit: type=1326 audit(1760984716.999:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.482202][ T29] audit: type=1400 audit(1760984717.029:14625): avc: denied { mount } for pid=7863 comm="syz.4.1538" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.504129][ T29] audit: type=1326 audit(1760984717.029:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.527874][ T29] audit: type=1326 audit(1760984717.029:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.551510][ T29] audit: type=1326 audit(1760984717.029:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.575208][ T29] audit: type=1326 audit(1760984717.029:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.598778][ T29] audit: type=1326 audit(1760984717.029:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.622345][ T29] audit: type=1326 audit(1760984717.029:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 118.646081][ T29] audit: type=1326 audit(1760984717.029:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 118.669833][ T29] audit: type=1326 audit(1760984717.029:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976cfefc9 code=0x7ffc0000 [ 118.718849][ T7881] loop4: detected capacity change from 0 to 512 [ 118.762864][ T7881] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1544: bg 0: block 248: padding at end of block bitmap is not set [ 118.781626][ T7881] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1544: Failed to acquire dquot type 1 [ 118.800623][ T7881] EXT4-fs (loop4): 1 truncate cleaned up [ 118.807246][ T7881] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.828693][ T7881] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1544: deleted inode referenced: 12 [ 118.841330][ T7881] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1544: deleted inode referenced: 12 [ 118.920654][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 118.944613][ T7903] bond0: (slave dummy0): Releasing backup interface [ 118.954377][ T7903] team0: Port device dummy0 added [ 118.970465][ T7903] team0: Port device dummy0 removed [ 118.978584][ T7903] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.010001][ T7909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.026309][ T7909] loop4: detected capacity change from 0 to 128 [ 119.037788][ T7909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 119.046060][ T7909] System zones: 1-3, 19-19, 35-36 [ 119.052152][ T7909] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.084561][ T7912] loop3: detected capacity change from 0 to 512 [ 119.093315][ T7909] bond1 (unregistering): Released all slaves [ 119.197350][ T7925] loop1: detected capacity change from 0 to 512 [ 119.226016][ T7925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1561: bg 0: block 248: padding at end of block bitmap is not set [ 119.241166][ T7925] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1561: Failed to acquire dquot type 1 [ 119.252619][ T7929] loop3: detected capacity change from 0 to 2048 [ 119.255611][ T7925] EXT4-fs (loop1): 1 truncate cleaned up [ 119.259872][ T7929] EXT4-fs: Ignoring removed nobh option [ 119.271151][ T7925] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.291816][ T7925] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1561: deleted inode referenced: 12 [ 119.304959][ T7925] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1561: deleted inode referenced: 12 [ 119.325544][ T7927] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1563: bg 0: block 408: padding at end of block bitmap is not set [ 119.384639][ T410] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 119.407841][ T7941] dvmrp1: entered allmulticast mode [ 119.612388][ T7954] syz_tun: entered allmulticast mode [ 119.618465][ T7954] syz_tun: left allmulticast mode [ 119.950700][ T7971] __nla_validate_parse: 4 callbacks suppressed [ 119.950717][ T7971] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1577'. [ 120.027459][ T7977] hub 9-0:1.0: USB hub found [ 120.043411][ T7977] hub 9-0:1.0: 8 ports detected [ 120.372038][ T7990] loop4: detected capacity change from 0 to 2048 [ 120.512723][ T7994] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.562785][ T7994] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 28 [ 120.575122][ T7994] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.575122][ T7994] [ 120.584906][ T7994] EXT4-fs (loop4): Total free blocks count 0 [ 120.590916][ T7994] EXT4-fs (loop4): Free/Dirty block details [ 120.596871][ T7994] EXT4-fs (loop4): free_blocks=2415919104 [ 120.602601][ T7994] EXT4-fs (loop4): dirty_blocks=3904 [ 120.608013][ T7994] EXT4-fs (loop4): Block reservation details [ 120.614045][ T7994] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 120.703511][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 120.840342][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1590'. [ 120.912938][ T8014] ipvlan2: entered promiscuous mode [ 120.923151][ T7993] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.935755][ T7993] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.935755][ T7993] [ 120.949174][ T8014] FAULT_INJECTION: forcing a failure. [ 120.949174][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 120.961987][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.2.1592 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.962078][ T8014] Tainted: [W]=WARN [ 120.962084][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.962100][ T8014] Call Trace: [ 120.962110][ T8014] [ 120.962117][ T8014] __dump_stack+0x1d/0x30 [ 120.962209][ T8014] dump_stack_lvl+0xe8/0x140 [ 120.962244][ T8014] dump_stack+0x15/0x1b [ 120.962269][ T8014] should_fail_ex+0x265/0x280 [ 120.962312][ T8014] should_failslab+0x8c/0xb0 [ 120.962339][ T8014] kmem_cache_alloc_noprof+0x50/0x480 [ 120.962360][ T8014] ? getname_flags+0x80/0x3b0 [ 120.962396][ T8014] getname_flags+0x80/0x3b0 [ 120.962492][ T8014] __x64_sys_renameat2+0x5f/0x90 [ 120.962519][ T8014] x64_sys_call+0x3f9/0x3000 [ 120.962549][ T8014] do_syscall_64+0xd2/0x200 [ 120.962577][ T8014] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.962615][ T8014] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.962653][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.962742][ T8014] RIP: 0033:0x7f5dd289efc9 [ 120.962760][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.962782][ T8014] RSP: 002b:00007f5dd12ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 120.962805][ T8014] RAX: ffffffffffffffda RBX: 00007f5dd2af5fa0 RCX: 00007f5dd289efc9 [ 120.962832][ T8014] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 120.962844][ T8014] RBP: 00007f5dd12ff090 R08: 0000000000000000 R09: 0000000000000000 [ 120.962858][ T8014] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 120.962873][ T8014] R13: 00007f5dd2af6038 R14: 00007f5dd2af5fa0 R15: 00007ffd70d05c68 [ 120.962895][ T8014] [ 121.171908][ T8022] loop0: detected capacity change from 0 to 512 [ 121.219609][ T8022] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1595: bg 0: block 248: padding at end of block bitmap is not set [ 121.241157][ T8022] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1595: Failed to acquire dquot type 1 [ 121.254286][ T8022] EXT4-fs (loop0): 1 truncate cleaned up [ 121.260446][ T8022] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.283737][ T8022] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1595: deleted inode referenced: 12 [ 121.296174][ T8022] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1595: deleted inode referenced: 12 [ 121.339901][ T8037] validate_nla: 3 callbacks suppressed [ 121.339920][ T8037] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 121.358537][ T8037] bond0: (slave dummy0): Releasing backup interface [ 121.373186][ T8037] team0: Port device dummy0 added [ 121.382276][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 121.388623][ T8037] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 121.408921][ T8037] team0: Port device dummy0 removed [ 121.418386][ T8037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.443658][ T8046] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 121.455966][ T8046] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 121.464834][ T8046] team0: Port device dummy0 removed [ 121.472593][ T8046] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.475339][ T8048] loop4: detected capacity change from 0 to 2048 [ 121.534078][ T8048] loop4: detected capacity change from 0 to 512 [ 121.541185][ T8048] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.550345][ T8048] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048) [ 121.580408][ T8052] loop4: detected capacity change from 0 to 2048 [ 121.819549][ T8058] loop4: detected capacity change from 0 to 512 [ 121.826155][ T8058] EXT4-fs: Ignoring removed nobh option [ 121.834278][ T8058] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.202049][ T8081] loop2: detected capacity change from 0 to 2048 [ 122.202064][ T8083] loop1: detected capacity change from 0 to 512 [ 122.214948][ T8083] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1616: bg 0: block 248: padding at end of block bitmap is not set [ 122.229771][ T8083] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1616: Failed to acquire dquot type 1 [ 122.242821][ T8083] EXT4-fs (loop1): 1 truncate cleaned up [ 122.249319][ T8083] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.275486][ T8083] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1616: deleted inode referenced: 12 [ 122.296837][ T8083] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1616: deleted inode referenced: 12 [ 122.312624][ T8087] wg2: entered promiscuous mode [ 122.317636][ T8087] wg2: entered allmulticast mode [ 122.341853][ T8081] loop2: detected capacity change from 0 to 512 [ 122.349046][ T8081] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.366717][ T8081] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1615: iget: special inode unallocated [ 122.381219][ T8081] EXT4-fs (loop2): get root inode failed [ 122.386963][ T8081] EXT4-fs (loop2): mount failed [ 122.544142][ T410] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 122.719786][ T8129] loop2: detected capacity change from 0 to 512 [ 122.734913][ T8129] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1632: bg 0: block 248: padding at end of block bitmap is not set [ 122.779299][ T8129] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1632: Failed to acquire dquot type 1 [ 122.795230][ T8129] EXT4-fs (loop2): 1 truncate cleaned up [ 122.802256][ T8129] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.845661][ T8129] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1632: deleted inode referenced: 12 [ 122.910154][ T8142] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1632: deleted inode referenced: 12 [ 122.970001][ T8141] loop3: detected capacity change from 0 to 1024 [ 123.031098][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 123.076738][ T8154] netem: change failed [ 123.107855][ T8158] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 123.142839][ T8165] loop2: detected capacity change from 0 to 128 [ 123.394412][ T8179] netem: change failed [ 123.401632][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 123.445480][ T8186] loop3: detected capacity change from 0 to 2048 [ 123.452335][ T8186] EXT4-fs: Ignoring removed nobh option [ 123.462971][ T29] kauditd_printk_skb: 1006 callbacks suppressed [ 123.462989][ T29] audit: type=1326 audit(1760984722.019:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.470366][ T8181] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1655'. [ 123.493010][ T29] audit: type=1326 audit(1760984722.019:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.568928][ T8193] netlink: 'syz.4.1658': attribute type 21 has an invalid length. [ 123.576875][ T8193] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1658'. [ 123.588097][ T8196] hub 9-0:1.0: USB hub found [ 123.595765][ T8185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1657: bg 0: block 408: padding at end of block bitmap is not set [ 123.612624][ T29] audit: type=1326 audit(1760984722.029:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.616387][ T8196] hub 9-0:1.0: 8 ports detected [ 123.636203][ T29] audit: type=1326 audit(1760984722.029:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.636308][ T29] audit: type=1326 audit(1760984722.029:15629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.688484][ T29] audit: type=1326 audit(1760984722.029:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.712110][ T29] audit: type=1326 audit(1760984722.029:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.735649][ T29] audit: type=1326 audit(1760984722.029:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7d700d810 code=0x7ffc0000 [ 123.759227][ T29] audit: type=1326 audit(1760984722.029:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d700efc9 code=0x7ffc0000 [ 123.782779][ T29] audit: type=1326 audit(1760984722.029:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7d700d810 code=0x7ffc0000 [ 124.196034][ T8214] FAULT_INJECTION: forcing a failure. [ 124.196034][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 124.208826][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.1.1664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.208866][ T8214] Tainted: [W]=WARN [ 124.208875][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.208890][ T8214] Call Trace: [ 124.208897][ T8214] [ 124.208904][ T8214] __dump_stack+0x1d/0x30 [ 124.208950][ T8214] dump_stack_lvl+0xe8/0x140 [ 124.208984][ T8214] dump_stack+0x15/0x1b [ 124.209016][ T8214] should_fail_ex+0x265/0x280 [ 124.209113][ T8214] should_failslab+0x8c/0xb0 [ 124.209195][ T8214] __kmalloc_noprof+0xa5/0x570 [ 124.209216][ T8214] ? alloc_trace_uprobe+0x2f/0x1e0 [ 124.209238][ T8214] alloc_trace_uprobe+0x2f/0x1e0 [ 124.209280][ T8214] ? create_local_trace_uprobe+0x91/0x2c0 [ 124.209308][ T8214] create_local_trace_uprobe+0xb5/0x2c0 [ 124.209344][ T8214] perf_uprobe_init+0xc0/0x150 [ 124.209384][ T8214] perf_uprobe_event_init+0xc4/0x140 [ 124.209451][ T8214] perf_try_init_event+0xd9/0x540 [ 124.209470][ T8214] ? perf_event_alloc+0xb1c/0x1740 [ 124.209493][ T8214] perf_event_alloc+0xb27/0x1740 [ 124.209516][ T8214] __se_sys_perf_event_open+0x4a5/0x11c0 [ 124.209537][ T8214] ? __rcu_read_unlock+0x4f/0x70 [ 124.209643][ T8214] __x64_sys_perf_event_open+0x67/0x80 [ 124.209670][ T8214] x64_sys_call+0x7bd/0x3000 [ 124.209756][ T8214] do_syscall_64+0xd2/0x200 [ 124.209794][ T8214] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.209876][ T8214] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.209905][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.209928][ T8214] RIP: 0033:0x7fa29145efc9 [ 124.209941][ T8214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.210065][ T8214] RSP: 002b:00007fa28fec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 124.210169][ T8214] RAX: ffffffffffffffda RBX: 00007fa2916b5fa0 RCX: 00007fa29145efc9 [ 124.210185][ T8214] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 124.210201][ T8214] RBP: 00007fa28fec7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.210295][ T8214] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 124.210309][ T8214] R13: 00007fa2916b6038 R14: 00007fa2916b5fa0 R15: 00007ffe9aed1458 [ 124.210332][ T8214] [ 124.210347][ T8214] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 124.559269][ T8231] dvmrp1: entered allmulticast mode [ 124.779973][ T8251] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1677'. [ 124.851761][ T8245] hub 9-0:1.0: USB hub found [ 124.869939][ T8245] hub 9-0:1.0: 8 ports detected [ 124.908058][ T8250] loop2: detected capacity change from 0 to 512 [ 124.945267][ T8250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1678: bg 0: block 248: padding at end of block bitmap is not set [ 124.959948][ T8250] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1678: Failed to acquire dquot type 1 [ 124.983687][ T8250] EXT4-fs (loop2): 1 truncate cleaned up [ 124.990089][ T8250] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.005681][ T8250] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1678: deleted inode referenced: 12 [ 125.018807][ T8250] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1678: deleted inode referenced: 12 [ 125.040488][ T8263] FAULT_INJECTION: forcing a failure. [ 125.040488][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.053625][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.4.1682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.053665][ T8263] Tainted: [W]=WARN [ 125.053674][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.053689][ T8263] Call Trace: [ 125.053697][ T8263] [ 125.053705][ T8263] __dump_stack+0x1d/0x30 [ 125.053741][ T8263] dump_stack_lvl+0xe8/0x140 [ 125.053834][ T8263] dump_stack+0x15/0x1b [ 125.053865][ T8263] should_fail_ex+0x265/0x280 [ 125.053948][ T8263] should_fail+0xb/0x20 [ 125.053982][ T8263] should_fail_usercopy+0x1a/0x20 [ 125.054019][ T8263] _copy_from_user+0x1c/0xb0 [ 125.054119][ T8263] __sys_bpf+0x183/0x7c0 [ 125.054171][ T8263] __x64_sys_bpf+0x41/0x50 [ 125.054265][ T8263] x64_sys_call+0x2aee/0x3000 [ 125.054298][ T8263] do_syscall_64+0xd2/0x200 [ 125.054327][ T8263] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.054352][ T8263] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.054433][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.054460][ T8263] RIP: 0033:0x7f7976cfefc9 [ 125.054478][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.054496][ T8263] RSP: 002b:00007f797575f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.054514][ T8263] RAX: ffffffffffffffda RBX: 00007f7976f55fa0 RCX: 00007f7976cfefc9 [ 125.054529][ T8263] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 125.054625][ T8263] RBP: 00007f797575f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.054638][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.054649][ T8263] R13: 00007f7976f56038 R14: 00007f7976f55fa0 R15: 00007ffd209fac18 [ 125.054667][ T8263] [ 125.244634][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 125.298033][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 125.376530][ T8274] loop2: detected capacity change from 0 to 512 [ 125.395053][ T8274] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1684: bg 0: block 248: padding at end of block bitmap is not set [ 125.425339][ T8274] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1684: Failed to acquire dquot type 1 [ 125.438700][ T8274] EXT4-fs (loop2): 1 truncate cleaned up [ 125.459083][ T8274] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.495602][ T8274] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1684: deleted inode referenced: 12 [ 125.518625][ T8274] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1684: deleted inode referenced: 12 [ 125.563597][ T8287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 125.601951][ T8290] loop1: detected capacity change from 0 to 512 [ 125.626135][ T410] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 125.647320][ T8290] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1692: dx entry: limit 0 != root limit 125 [ 125.659339][ T8290] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1692: Corrupt directory, running e2fsck is recommended [ 125.673747][ T8290] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 125.686500][ T8296] loop2: detected capacity change from 0 to 512 [ 125.693474][ T8290] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1692: corrupted in-inode xattr: invalid ea_ino [ 125.708490][ T8290] EXT4-fs (loop1): Remounting filesystem read-only [ 125.719603][ T8296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1694: bg 0: block 248: padding at end of block bitmap is not set [ 125.741511][ T8296] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1694: Failed to acquire dquot type 1 [ 125.753721][ T8296] EXT4-fs (loop2): 1 truncate cleaned up [ 125.760073][ T8296] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.775450][ T8296] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1694: deleted inode referenced: 12 [ 125.792537][ T8296] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1694: deleted inode referenced: 12 [ 126.299288][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 126.329024][ T8312] netem: change failed [ 126.364382][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'. [ 126.391617][ T8322] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 126.446287][ T8329] loop2: detected capacity change from 0 to 512 [ 126.470796][ T8329] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1704: bg 0: block 248: padding at end of block bitmap is not set [ 126.489082][ T8333] SELinux: failed to load policy [ 126.494534][ T8329] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1704: Failed to acquire dquot type 1 [ 126.524176][ T8329] EXT4-fs (loop2): 1 truncate cleaned up [ 126.530342][ T8329] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.546448][ T8329] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1704: deleted inode referenced: 12 [ 126.559347][ T8329] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1704: deleted inode referenced: 12 [ 127.086831][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 127.116002][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 127.176307][ T8362] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 127.205448][ T8368] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 127.220019][ T8368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.237900][ T8368] loop2: detected capacity change from 0 to 128 [ 127.245740][ T8368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 127.254309][ T8368] System zones: 1-3, 19-19, 35-36 [ 127.260136][ T8368] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.305842][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 127.318521][ T8368] bond1 (unregistering): Released all slaves [ 127.391122][ T8377] loop4: detected capacity change from 0 to 512 [ 127.405138][ T8379] FAULT_INJECTION: forcing a failure. [ 127.405138][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 127.417833][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.3.1723 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.417871][ T8379] Tainted: [W]=WARN [ 127.417907][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.417922][ T8379] Call Trace: [ 127.417929][ T8379] [ 127.417939][ T8379] __dump_stack+0x1d/0x30 [ 127.417972][ T8379] dump_stack_lvl+0xe8/0x140 [ 127.418000][ T8379] dump_stack+0x15/0x1b [ 127.418024][ T8379] should_fail_ex+0x265/0x280 [ 127.418117][ T8379] should_failslab+0x8c/0xb0 [ 127.418138][ T8379] __kmalloc_node_noprof+0xaa/0x580 [ 127.418227][ T8379] ? qdisc_alloc+0x65/0x440 [ 127.418257][ T8379] qdisc_alloc+0x65/0x440 [ 127.418288][ T8379] ? nla_strcmp+0xc3/0xe0 [ 127.418382][ T8379] qdisc_create+0xf5/0x9e0 [ 127.418409][ T8379] tc_modify_qdisc+0xf2e/0x1420 [ 127.418520][ T8379] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 127.418545][ T8379] rtnetlink_rcv_msg+0x65a/0x6d0 [ 127.418656][ T8379] netlink_rcv_skb+0x123/0x220 [ 127.418682][ T8379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.418724][ T8379] rtnetlink_rcv+0x1c/0x30 [ 127.418767][ T8379] netlink_unicast+0x5c0/0x690 [ 127.418793][ T8379] netlink_sendmsg+0x58b/0x6b0 [ 127.418823][ T8379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.418921][ T8379] __sock_sendmsg+0x145/0x180 [ 127.418942][ T8379] ____sys_sendmsg+0x31e/0x4e0 [ 127.419122][ T8379] ___sys_sendmsg+0x17b/0x1d0 [ 127.419174][ T8379] __x64_sys_sendmsg+0xd4/0x160 [ 127.419214][ T8379] x64_sys_call+0x191e/0x3000 [ 127.419323][ T8379] do_syscall_64+0xd2/0x200 [ 127.419416][ T8379] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.419438][ T8379] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.419464][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.419521][ T8379] RIP: 0033:0x7f2f7b25efc9 [ 127.419537][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.419558][ T8379] RSP: 002b:00007f2f79cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.419580][ T8379] RAX: ffffffffffffffda RBX: 00007f2f7b4b5fa0 RCX: 00007f2f7b25efc9 [ 127.419604][ T8379] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000005 [ 127.419618][ T8379] RBP: 00007f2f79cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.419633][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.419646][ T8379] R13: 00007f2f7b4b6038 R14: 00007f2f7b4b5fa0 R15: 00007fffaab53c08 [ 127.419664][ T8379] [ 127.707299][ T8377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1722: bg 0: block 248: padding at end of block bitmap is not set [ 127.722190][ T8377] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1722: Failed to acquire dquot type 1 [ 127.738560][ T8377] EXT4-fs (loop4): 1 truncate cleaned up [ 127.753375][ T8377] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.775560][ T8377] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1722: deleted inode referenced: 12 [ 127.793255][ T8377] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1722: deleted inode referenced: 12 [ 127.794875][ T8393] loop3: detected capacity change from 0 to 1024 [ 127.811429][ T8393] EXT4-fs: Ignoring removed oldalloc option [ 127.817546][ T8393] EXT4-fs: Ignoring removed bh option [ 127.887081][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 127.937003][ T8393] ================================================================== [ 127.945199][ T8393] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 127.953129][ T8393] [ 127.955465][ T8393] write to 0xffff88811b464f94 of 4 bytes by task 8399 on cpu 1: [ 127.963105][ T8393] xas_set_mark+0x12b/0x140 [ 127.967630][ T8393] __folio_start_writeback+0x155/0x390 [ 127.973111][ T8393] ext4_bio_write_folio+0x5ad/0x9f0 [ 127.978333][ T8393] mpage_process_page_bufs+0x4a1/0x620 [ 127.983811][ T8393] mpage_prepare_extent_to_map+0x786/0xc00 [ 127.989658][ T8393] ext4_do_writepages+0xa05/0x2750 [ 127.994793][ T8393] ext4_writepages+0x176/0x300 [ 127.999582][ T8393] do_writepages+0x1c6/0x310 [ 128.004181][ T8393] file_write_and_wait_range+0x156/0x2c0 [ 128.009825][ T8393] generic_buffers_fsync_noflush+0x45/0x120 [ 128.015731][ T8393] ext4_sync_file+0x1ab/0x690 [ 128.020428][ T8393] vfs_fsync_range+0x10d/0x130 [ 128.025195][ T8393] ext4_buffered_write_iter+0x34f/0x3c0 [ 128.030762][ T8393] ext4_file_write_iter+0x387/0xf60 [ 128.035969][ T8393] iter_file_splice_write+0x666/0xa60 [ 128.041364][ T8393] direct_splice_actor+0x156/0x2a0 [ 128.046487][ T8393] splice_direct_to_actor+0x312/0x680 [ 128.051873][ T8393] do_splice_direct+0xda/0x150 [ 128.056643][ T8393] do_sendfile+0x380/0x650 [ 128.061066][ T8393] __x64_sys_sendfile64+0x105/0x150 [ 128.066269][ T8393] x64_sys_call+0x2bb4/0x3000 [ 128.070972][ T8393] do_syscall_64+0xd2/0x200 [ 128.075498][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.081411][ T8393] [ 128.083743][ T8393] read to 0xffff88811b464f94 of 4 bytes by task 8393 on cpu 0: [ 128.091292][ T8393] __writeback_single_inode+0x1f9/0x7c0 [ 128.096851][ T8393] writeback_single_inode+0x16d/0x3f0 [ 128.102228][ T8393] sync_inode_metadata+0x5b/0x90 [ 128.107172][ T8393] generic_buffers_fsync_noflush+0xd9/0x120 [ 128.113080][ T8393] ext4_sync_file+0x1ab/0x690 [ 128.117784][ T8393] vfs_fsync_range+0x10d/0x130 [ 128.122554][ T8393] ext4_buffered_write_iter+0x34f/0x3c0 [ 128.128107][ T8393] ext4_file_write_iter+0x387/0xf60 [ 128.133319][ T8393] iter_file_splice_write+0x666/0xa60 [ 128.138712][ T8393] direct_splice_actor+0x156/0x2a0 [ 128.143840][ T8393] splice_direct_to_actor+0x312/0x680 [ 128.149238][ T8393] do_splice_direct+0xda/0x150 [ 128.154017][ T8393] do_sendfile+0x380/0x650 [ 128.158468][ T8393] __x64_sys_sendfile64+0x105/0x150 [ 128.163671][ T8393] x64_sys_call+0x2bb4/0x3000 [ 128.168367][ T8393] do_syscall_64+0xd2/0x200 [ 128.172883][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.178793][ T8393] [ 128.181110][ T8393] value changed: 0x0a000021 -> 0x04000021 [ 128.186818][ T8393] [ 128.189137][ T8393] Reported by Kernel Concurrency Sanitizer on: [ 128.195293][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.3.1728 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.206586][ T8393] Tainted: [W]=WARN [ 128.210380][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.220438][ T8393] ==================================================================