last executing test programs: 7.032801129s ago: executing program 2 (id=349): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@empty, @initdev, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@loopback, 0x36, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf5230948453241"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001a000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r9, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x0, &(0x7f00000002c0)}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) 6.842351762s ago: executing program 2 (id=356): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000bc0)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x3a, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x6, 0xd1, "0e4859af30b9b1af5833ee0955ddce1c3a607cff74e3d514395040d1aea472c7f26d21a78aa922ab8f0b18ce6e70024ec3ee26bdc1d6c587e561f56dfa8cd3440fb4773452d712d171f6c6cadab69d5065d9280b6c88d55b98d4bcdd8ef18e020b211be6d170f180fec1ee9c9279d7449161661f20a7588ba38acc4657a762612b515f88579695ebf2bb5fbd7c2170dd44b05a02993350233872a658395e75a4d5827f3982a5fd1b21c9d42b716754c95bd852b0d60342b5ae09bd3bc432b0f8e59a6cddcd0ee1e6151bed6361a635c3d4"}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x81}]}}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x29, 0x21, '\x00', [@ra={0x5, 0x2, 0xe}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x80}, @enc_lim={0x4, 0x1, 0xa7}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x0, 0xbd, "be6de88a8d69889a4c1ab13af5fcab387e48c964bc73be2fb4c8206ac6cec427ca6838d1e7d554ebaa96b4c7c6740c7025bdf07980ebc5a884a630ceba2246658cfa5a01838ce016947e8ffc55727cf3660f9681e26afd7a82b6d36bef762f997d55eae0609686d82501c16e3aeef594a6613ce5a15729b089ca8bb12aa3c9778c57598e02d9871300186da330e7a7e4aaead6f3b665349c3161f00dac6055dc7f1aaa98a8ffd4823c9a0506618692e5c5025c9f4d3ffb0246f7ab55cf"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x40000000}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts={{0xa0, 0x29, 0x36, {0x3b, 0x11, '\x00', [@hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x50}, @pad1, @generic={0xed, 0x22, "ca19534bd1f64b4a13157831613392db93a15540bc9438701113e1ca5518f0092a98"}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x9, 0x1a, "d8ac1623efe86677799db5d819049885733264d4c9ce7fabed18"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0xc}]}}}], 0x2f8}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x8, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000000002900000037000000060000000000000068000000000000002900000037000000620a00000000000007280000000153cf08d2af0004000000000000007643000000000000570800000000000001000000000000000720000000020607090000000000000000007f00000000000000fdffffffffffffff0502ef04b3a9a00304043a62bcc6"], 0x80}}], 0x2, 0x4000000) 6.808516803s ago: executing program 2 (id=357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001700)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x18115, @rand_addr, 0x983a}, 0x1c) 6.787296313s ago: executing program 2 (id=359): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000200)={0x5, 0xfffffffffffffff7, 0x4, 0x0, 0x0, [{{r0}, 0x3}, {{r3}, 0x10001}, {{r0}}, {{r3}, 0xfffffffffffffff8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 6.315498693s ago: executing program 2 (id=363): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x9, 0x80000) timerfd_settime(r0, 0x1, 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000001600075c730b00007f00000000040000d337ff9b5804000000f8986849295f31b76c33ba0f7a2f20267c5ccd6a8143dc8e1ebae7f980e047185704b9c4240b409d65fa13a8457804a6afe26dfd96e48bed4898cf3e2ac0e6bc905c7ac00ffe2f3e07000000ca2ebb5a375368d84d01ba130a8aa8ea365309c2dd9f3e51e7b3b438377e5d03566f5062b1ae11c1a7cf596662dfd49b4ab78f01710377a4d893d5cc9b4e5593a96328c9d0d23c4105406384c7dfeb31ecfba1a9a5e41eb6d9382408d8fcb5b08508f0547ba2309ec7194a2d2efeceb0ea6cd7401d8c1af7f85a76e9002d8450d9165bfe0ca8564dbe45100b88ddbe7e89d8bba09b3a27cefae371f9a5fc579fa520718c74a9aeaba76b0707e3387e3c301deb307d26572d709b556f219ffc8d3f643c345e06b904138445", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000080a809701f0100edff00000000705da2daa04500000000850000000f000000dd4a3e1a0e6b2baa18010000856c012500000000db776228dbeb93edd3bdf8229a728c1de5f443b59e11bb97da604a10f1c7dd0fa95c2f184f5ed68957362e1940c1dfa6cc8feba4be35a24d8363"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)) 5.593320867s ago: executing program 2 (id=368): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@empty, @initdev, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@loopback, 0x36, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001a000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x0, &(0x7f00000002c0)}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 5.400552671s ago: executing program 32 (id=368): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@empty, @initdev, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@loopback, 0x36, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001a000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x0, &(0x7f00000002c0)}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$eJzs3U2IG/fZAPBn1rv+2IAJeV/8BuM4YycvOOBstNpk8y4+JIp2dj2JVlok7YtNKWmI12HJOglJQxtfElNI2tJSempvaa659dZSaKGFpqdCc+ilt0BOJYV+kVAKW2YkrbXr/XD8mY/fT1j/0eiZ+T8zkufRaKW/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpD5bqUwm0cibS2fS7dVn262FHe4frO9XG5oNHt/Qb0RS/Iv9++Pjv/fm/ffluw8VV8fjSO/WkdhfNPvj4h2H7jz1X6Mjg+V3SOhaHbvKuCTix/1kV5df3nzvvhuf2E303V986kU+WSuu57Nm3ol8oTafpXmnlc5MT1ceOj3XSefyRtY52+lmC2m9ndW6rXZ6ov5AOjkzM5VmE2dbS8352VojG8x89MFqpTKdPjmxmNXanVbzoSejUz+dNxp5c76MqVa+EUXMo8UT8am8m3az2kKanl9ZXZ7aLdUiaHLjrD1x+To9cv+dH776wd9Wlosn5HYrSfqPdXVyslqdnH5k5pFHK5XRaqW6YcaeiKgMi/WIGIkoFrkpT1o+R27g0Ruuz0i//kcj8mjGUpyJdIvLWNRjNtrRioXi9h/HrojoG9T//33oL7/fqd/h+j+o8ndfvvtwlPX/aO/W0e3q/5a53srLK/FaXIzn45lYjdVYjpdve0a7XEaudw3JhlvzkUUz8uhEK/JYiFo5J+3PSWMmpmM6KvF0nI656EQac5FHI7LoxNnoRDey8hlVj3ZkUYtutKIdaZyIejwQaUzGTMzEVKSRxUScjVYsRTPmYzZq5VrOx0q536c2ZXnoQPz8uT98+HYxvR40udNmvVG8kIvl+OsOQZvL/RX1f3S49q+tFa8XNkeo/192N+EoDtdmbVD/AQAAgC+spHz3vTj/H4t7yqm5vJF9ZcdFPlkr3bokAQAAgOtS/uX/SNGMFVP3RFKc/1e2iHz/lucGAAAA3BhJ+R27JCLG497e1PlYiTdiObZ6EwAAAAD4HCr//n+0aMYjXi9nDIZLcf4PAAAAXxDf3m6M/Q8GY+x2FvclvxyLiLHk0uKZ+5MLtSKudmFPb7l+8//ra+zOHU4O9ldSNtOjF+9IImK0nh1JBqNf/ntfr/2ovD48ur74dmP9J+32jgnEzgmUt+J7cawXc+xc2dzRX2Q06fUyPpc3sol6q3GqHBKx+Nd99YWVb0YUvX+nuXAwifMrq8sTz764eq7M5VKx+KUL/QEUrxhHcYdc1vp7IO7ZeovHyi9i9Psd7/VbGd7+kd7iIzv3mQz3+WYc78UcH++144N7en3uL/qcnDg1GbXawZFudqb76trQ1vezmFzf8rFr2vI3475ezH0n7us1W2RR3ZDFC1dmUR3e/1e3LwbPsl2zePvY62f++dtWkk3tlsXUVlmMbp3F2p6IzfsC4HY5X476c7kKHSir0L/W+kP8JEn06m5RrGq9gL5djrXFUe4fl3tZf5VxYKw3NVTrRmNzdb98BL266r4WvSN634ne64nRw1vUlcoWR/SXVl56r39Ef/jdH/3kq0d/99Oy32uqbu/GA72YfhN3/XpTFqfeW9pbZFFs8/c3VdV3iiXe2bbfTqOaxKWIPV+/8FIceuW1iw+uXHjmueXnll+oVqemKw9XKo9U9256gLbNFIAvr91/Y2fbiEGdSR7edFYd5zbW3bvWP1IwEc/Gi7Ea5+Jk+W2DiLh3637Hhz6GcHKXs9bxoV94ObnLueXl2OqVsUlsEzs1tMf+54dl8/FNeTgA4JY4vkUd/k3/h213qf/r78yfjBO9iG3OuzfW8k1nx7F9Ld/K/928XQEAXxpZ+6NkvPtW0m7ni09PzsxM1rqns7Tdqj+VtvPZ+Szd2+xm7frpWnM+SxeLU/764I3j2ayTdpYWF1vtbjrXaqcx0snPlL/8nnb292MWas1uXu8sNrJaJ0vrrWa3Vu+ms3mnni4uPdHIO6ezdrlwZzGr53N5vdbNW82001pq17OJNO1k2VBgPps1u/lcXkw208V2vlBrX4qIxtJCls5mnXo7X+y2eisc9JU351rthXK1E1du/p9v5b4GgM+KV167+Pwzq6vLL1/bxJ+uJvh2byMAsJEqDQAAAAAAAAAAAAAAn33rn/+/czBRzL2ObwR+uol9cXXBY3Edfa31h9G9+ZvzmZq4YpP7Iy/H7U7sVk587bHHnh+ac2A45onX7z59deuJq/2mbLx1MGLvz37Qm/P49sHfuqGPxfsR1/IfZC3ZIWbDYWLvLTwkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hMAAP//oXlTQQ==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 4.523991728s ago: executing program 0 (id=379): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x41, 0x7, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc1"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) 3.032708609s ago: executing program 0 (id=393): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x513d2d1fd5738fc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2.98587142s ago: executing program 0 (id=394): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chroot(&(0x7f0000002a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 2.395223712s ago: executing program 3 (id=398): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000200)={0x5, 0xfffffffffffffff7, 0x4, 0x0, 0x0, [{{r0}, 0x3}, {{r3}, 0x10001}, {{r0}}, {{r3}, 0xfffffffffffffff8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.053138749s ago: executing program 0 (id=402): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c000280080003400000000108000140000000040800024000000094090001007379ff30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000200)=""/50, 0xffffff8c}, {&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000000880)=""/133, 0x85}, {&(0x7f0000000940)=""/59, 0x3d}], 0x6, &(0x7f0000000a80)=""/197, 0xc5}, 0xeb87}], 0x1, 0x10122, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.916872721s ago: executing program 3 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) (fail_nth: 6) 1.854155783s ago: executing program 3 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001700)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x18115, @rand_addr, 0x983a}, 0x1c) 1.853565293s ago: executing program 4 (id=406): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./bus\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x2e, 0x2e, 0x30, 0x5f, 0x30, 0x5f, 0x4f]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1, 0x2d8d, 0x10000}, 0x28) syz_io_uring_setup(0x1004b5, &(0x7f0000010400)={0x0, 0x86df, 0x10, 0x8, 0x3}, &(0x7f00000004c0), &(0x7f0000000400)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="20c519ab0197cd9c4672a415de0b46f04bbd7fdf313a79e8acb09e1dff56ec9d685e73a764027004e9d47924c69751418e29152cc0a7641c15b38e7f1d5af0a2200a7b81301038497504e114d065368387624d38229f3a1b543123b401e4c87bdcd7ae96b8311d5e1b09edc8c0331e67ef834488315317056623f515096b5fb6a098a0422d01b0718e2fe6944e8d44267ab683e98fc20f38e64ead30662520435987", @ANYRES16=0x0, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) r10 = dup(r2) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e29600000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() 1.792692434s ago: executing program 1 (id=408): mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x9, 0x80000) timerfd_settime(r0, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000001600075c730b00007f00000000040000d337ff9b5804000000f8986849295f31b76c33ba0f7a2f20267c5ccd6a8143dc8e1ebae7f980e047185704b9c4240b409d65fa13a8457804a6afe26dfd96e48bed4898cf3e2ac0e6bc905c7ac00ffe2f3e07000000ca2ebb5a375368d84d01ba130a8aa8ea365309c2dd9f3e51e7b3b438377e5d03566f5062b1ae11c1a7cf596662dfd49b4ab78f01710377a4d893d5cc9b4e5593a96328c9d0d23c4105406384c7dfeb31ecfba1a9a5e41eb6d9382408d8fcb5b08508f0547ba2309ec7194a2d2efeceb0ea6cd7401d8c1af7f85a76e9002d8450d9165bfe0ca8564dbe45100b88ddbe7e89d8bba09b3a27cefae371f9a5fc579fa520718c74a9aeaba76b0707e3387e3c301deb307d26572d709b556f219ffc8d3f643c345e06b904138445", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000080a809701f0100edff00000000705da2daa04500000000850000000f000000dd4a3e1a0e6b2baa18010000856c012500000000db776228dbeb93edd3bdf8229a728c1de5f443b59e11bb97da604a10f1c7dd0fa95c2f184f5ed68957362e1940c1dfa6cc8feba4be35a24d8363"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)) 1.772712024s ago: executing program 3 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000009}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r4}], 0x1, 0x0, 0x0, 0x0) tkill(r2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000e0, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x4, 0x9fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x400, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffffa, 0x3, 0xfffffffc, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x735, 0x0, 0x1, 0x1a2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 1.623209788s ago: executing program 1 (id=410): syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @private=0xfffffffe}, '\x00\x00eX\x00\x00\x00\x00'}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4ced4f84591f2e4c000000100001040200000000", @ANYRES32=0x0, @ANYBLOB="00200000421004001800128008000100767469000c00028008000500e00000011400030069705f76746930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)={@random="ce0703f2f6b1", @broadcast, @void, {@generic={0x888e}}}, &(0x7f0000000040)={0x0, 0x3, [0x8d6, 0x530, 0xbdd, 0x86]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/cpu_byteorder', 0x40080, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x10ab, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x180402, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r12, &(0x7f00000000c0)='./mnt\x00', r12, &(0x7f0000000000)='./mnt\x00', 0x177) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x2010, r0}, 0x18) r14 = open(&(0x7f0000000800)='./file0\x00', 0x103a40, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x28, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@alu={0x7, 0x0, 0x3, 0x2, 0x6, 0x50, 0xd321f609996b27c0}, @ldst={0x2, 0x1, 0x2, 0x2, 0x5, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x0, 0x6, 0x8, 0xa, 0x10, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x101, 0x0, 0x0, 0x0, 0x48, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xc, 0x1ff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, r6, r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000880)=[{0x1, 0x4, 0x5, 0xa}, {0x5, 0x3, 0xb, 0x2}, {0x3, 0x3, 0x0, 0x7}, {0x3, 0x5, 0x0, 0xa}], 0x10, 0xfffffffd}, 0x94) 1.549348739s ago: executing program 1 (id=411): socket$inet6(0xa, 0x80002, 0x0) chdir(&(0x7f00000007c0)='./file0\x00') perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(&(0x7f00000002c0)=""/229) 1.478860201s ago: executing program 4 (id=412): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f00000004c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001811", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mremap(&(0x7f00001c1000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.379280142s ago: executing program 1 (id=413): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='xdp_cpumap_enqueue\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r7}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000ff0f00000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0xc814) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000003060102000000000000917da700000a000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008884) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2ac, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.356880613s ago: executing program 0 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) clock_nanosleep(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_codel={{}, {0x0, 0x2, [@TCA_CODEL_INTERVAL={0x0, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x0, 0x3, 0x800000}, @TCA_CODEL_TARGET={0x0, 0x1, 0x200000}, @TCA_CODEL_LIMIT={0x0, 0x2, 0x1}, @TCA_CODEL_TARGET={0x0, 0x1, 0x1ff}, @TCA_CODEL_TARGET={0x0, 0x1, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 1.256395575s ago: executing program 0 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.188723536s ago: executing program 5 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 1.141997307s ago: executing program 4 (id=416): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.141341397s ago: executing program 5 (id=417): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mknod$loop(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0x107}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0xb, 0x5, 0x2) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000340)={0x87, 0xe, 0x2, 0x3, 0x0, [@private1, @loopback, @private2, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) kcmp(0x0, 0x0, 0x1, r4, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000004c0)={0xa2, 0x65, 0x0, 'queue0\x00', 0x4}) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) write(r7, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879f", 0x36) sendfile(r7, r6, 0x0, 0x3ffff) 1.069093509s ago: executing program 1 (id=418): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001700)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x18115, @rand_addr, 0x983a}, 0x1c) 1.03639311s ago: executing program 1 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) 654.874987ms ago: executing program 3 (id=420): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8000, 0x0, 0x409, 0x5, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 194.933356ms ago: executing program 5 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 190.939756ms ago: executing program 4 (id=422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) 87.616489ms ago: executing program 4 (id=423): socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(&(0x7f00000002c0)=""/229) 60.528079ms ago: executing program 3 (id=424): mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x9, 0x80000) timerfd_settime(r0, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000001600075c730b00007f00000000040000d337ff9b5804000000f8986849295f31b76c33ba0f7a2f20267c5ccd6a8143dc8e1ebae7f980e047185704b9c4240b409d65fa13a8457804a6afe26dfd96e48bed4898cf3e2ac0e6bc905c7ac00ffe2f3e07000000ca2ebb5a375368d84d01ba130a8aa8ea365309c2dd9f3e51e7b3b438377e5d03566f5062b1ae11c1a7cf596662dfd49b4ab78f01710377a4d893d5cc9b4e5593a96328c9d0d23c4105406384c7dfeb31ecfba1a9a5e41eb6d9382408d8fcb5b08508f0547ba2309ec7194a2d2efeceb0ea6cd7401d8c1af7f85a76e9002d8450d9165bfe0ca8564dbe45100b88ddbe7e89d8bba09b3a27cefae371f9a5fc579fa520718c74a9aeaba76b0707e3387e3c301deb307d26572d709b556f219ffc8d3f643c345e06b904138445", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000080a809701f0100edff00000000705da2daa04500000000850000000f000000dd4a3e1a0e6b2baa18010000856c012500000000db776228dbeb93edd3bdf8229a728c1de5f443b59e11bb97da604a10f1c7dd0fa95c2f184f5ed68957362e1940c1dfa6cc8feba4be35a24d8363"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)) 0s ago: executing program 4 (id=425): socket(0x10, 0x803, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000540)={[{@oldalloc}, {@user_xattr}, {@init_itable}, {@block_validity}, {@sb={'sb', 0x3d, 0x80000000}}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0xa080, 0x28) getdents(r3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f00000012c0)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000680)=@sg0, r4, &(0x7f0000001300)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850080007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x30d200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0xee01, 0x0}}, './file0\x00'}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x80, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,access=client,uname=)^%&}$,directio,cache=fscache,noextend,dfltuid=', @ANYRESHEX=r7, @ANYBLOB='(dfltgid=', @ANYRESHEX=r8, @ANYBLOB=',seclabel,pcr=00000000000000000060,uid>', @ANYRESDEC=r10, @ANYBLOB=',obj_user=kfree\x00,subj_type=iso9660\x00,\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r11, r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r12, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) kernel console output (not intermixed with test programs): ffer I/O error on dev loop1, logical block 87, lost async page write [ 35.489667][ T3519] syz.1.11: attempt to access beyond end of device [ 35.489667][ T3519] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 35.503022][ T3519] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 35.514045][ T3519] syz.1.11: attempt to access beyond end of device [ 35.514045][ T3519] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 35.527971][ T3519] syz.1.11: attempt to access beyond end of device [ 35.527971][ T3519] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 35.541308][ T3519] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 35.554258][ T3519] syz.1.11: attempt to access beyond end of device [ 35.554258][ T3519] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 35.567721][ T3519] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 35.577960][ T3519] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 35.587447][ T3519] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 35.596958][ T3519] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 35.605890][ T3519] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 35.622432][ T3538] loop3: detected capacity change from 0 to 512 [ 35.643101][ T3547] loop2: detected capacity change from 0 to 512 [ 35.649972][ T3547] EXT4-fs: Ignoring removed oldalloc option [ 35.657012][ T3547] EXT4-fs (loop2): unable to read superblock [ 35.664380][ T3538] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.671828][ T3538] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.14: EA inode hash validation failed [ 35.684637][ T3538] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.698033][ T3538] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.14: corrupted inode contents [ 35.712157][ T3548] loop0: detected capacity change from 0 to 512 [ 35.718443][ T3538] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.14: mark_inode_dirty error [ 35.747081][ T3538] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.14: corrupted inode contents [ 35.765631][ T3538] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.14: mark_inode_dirty error [ 35.780669][ T3547] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 35.788341][ T3547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.800165][ T3548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.802778][ T3538] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.14: mark inode dirty (error -117) [ 35.814141][ T3548] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.16: EA inode hash validation failed [ 35.831799][ T3548] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.16: corrupted inode contents [ 35.833766][ T3538] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 35.853942][ T3548] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.16: mark_inode_dirty error [ 35.861053][ T3538] EXT4-fs (loop3): 1 orphan inode deleted [ 35.865545][ T3548] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.16: corrupted inode contents [ 35.887036][ T3555] loop4: detected capacity change from 0 to 512 [ 35.896704][ T3548] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.16: mark_inode_dirty error [ 35.915899][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.928757][ T3548] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.16: mark inode dirty (error -117) [ 35.931728][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.953882][ T3538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.963752][ T3555] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.975135][ T3548] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 36.009035][ T3548] EXT4-fs (loop0): 1 orphan inode deleted [ 36.021563][ T3548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.039906][ T3548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.086696][ T3562] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 36.102066][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.209835][ T3564] Illegal XDP return value 906570129 on prog (id 11) dev syz_tun, expect packet loss! [ 36.426893][ T3577] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 36.593073][ T3579] loop3: detected capacity change from 0 to 2048 [ 36.614957][ T3581] netlink: 'syz.0.30': attribute type 29 has an invalid length. [ 36.669978][ T3489] loop3: p1 < > p4 [ 36.675625][ T3489] loop3: p4 size 8388608 extends beyond EOD, truncated [ 36.694107][ T3579] loop3: p1 < > p4 [ 36.699001][ T3579] loop3: p4 size 8388608 extends beyond EOD, truncated [ 36.741680][ T3586] loop0: detected capacity change from 0 to 512 [ 36.786899][ T3586] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.809795][ T3586] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.30: EA inode hash validation failed [ 36.827250][ T3586] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.30: corrupted inode contents [ 36.840362][ T3586] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.30: mark_inode_dirty error [ 36.851880][ T3586] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.30: corrupted inode contents [ 36.864775][ T3586] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.30: mark_inode_dirty error [ 36.881601][ T3586] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.30: mark inode dirty (error -117) [ 36.894828][ T3586] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 36.904055][ T3586] EXT4-fs (loop0): 1 orphan inode deleted [ 36.912091][ T3586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.916929][ T3598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 36.930594][ T3586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.945766][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 36.969884][ T3600] netlink: 'syz.2.36': attribute type 29 has an invalid length. [ 37.054432][ C1] hrtimer: interrupt took 50504 ns [ 37.091372][ T3608] FAULT_INJECTION: forcing a failure. [ 37.091372][ T3608] name failslab, interval 1, probability 0, space 0, times 0 [ 37.104293][ T3608] CPU: 1 UID: 0 PID: 3608 Comm: syz.4.39 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.104373][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 37.104388][ T3608] Call Trace: [ 37.104395][ T3608] [ 37.104403][ T3608] __dump_stack+0x1d/0x30 [ 37.104428][ T3608] dump_stack_lvl+0xe8/0x140 [ 37.104453][ T3608] dump_stack+0x15/0x1b [ 37.104535][ T3608] should_fail_ex+0x265/0x280 [ 37.104595][ T3608] ? __se_sys_mount+0xef/0x2e0 [ 37.104668][ T3608] should_failslab+0x8c/0xb0 [ 37.104700][ T3608] __kmalloc_cache_noprof+0x4c/0x320 [ 37.104731][ T3608] ? memdup_user+0x99/0xd0 [ 37.104860][ T3608] __se_sys_mount+0xef/0x2e0 [ 37.104882][ T3608] ? fput+0x8f/0xc0 [ 37.104981][ T3608] ? ksys_write+0x192/0x1a0 [ 37.105007][ T3608] __x64_sys_mount+0x67/0x80 [ 37.105066][ T3608] x64_sys_call+0x2b4d/0x2ff0 [ 37.105203][ T3608] do_syscall_64+0xd2/0x200 [ 37.105242][ T3608] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.105268][ T3608] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.105368][ T3608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.105406][ T3608] RIP: 0033:0x7efd18b5eec9 [ 37.105425][ T3608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.105446][ T3608] RSP: 002b:00007efd175bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.105468][ T3608] RAX: ffffffffffffffda RBX: 00007efd18db5fa0 RCX: 00007efd18b5eec9 [ 37.105481][ T3608] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 37.105535][ T3608] RBP: 00007efd175bf090 R08: 0000200000000140 R09: 0000000000000000 [ 37.105618][ T3608] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 37.105630][ T3608] R13: 00007efd18db6038 R14: 00007efd18db5fa0 R15: 00007fffbdb506e8 [ 37.105653][ T3608] [ 37.307761][ T3610] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 37.316040][ T3603] loop2: detected capacity change from 0 to 512 [ 37.324961][ T3612] FAULT_INJECTION: forcing a failure. [ 37.324961][ T3612] name failslab, interval 1, probability 0, space 0, times 0 [ 37.337627][ T3612] CPU: 1 UID: 0 PID: 3612 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.337660][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 37.337676][ T3612] Call Trace: [ 37.337684][ T3612] [ 37.337692][ T3612] __dump_stack+0x1d/0x30 [ 37.337756][ T3612] dump_stack_lvl+0xe8/0x140 [ 37.337777][ T3612] dump_stack+0x15/0x1b [ 37.337797][ T3612] should_fail_ex+0x265/0x280 [ 37.337827][ T3612] ? audit_log_d_path+0x8d/0x150 [ 37.337891][ T3612] should_failslab+0x8c/0xb0 [ 37.337916][ T3612] __kmalloc_cache_noprof+0x4c/0x320 [ 37.337944][ T3612] ? audit_log_d_path+0x7a/0x150 [ 37.338091][ T3612] audit_log_d_path+0x8d/0x150 [ 37.338122][ T3612] audit_log_d_path_exe+0x42/0x70 [ 37.338163][ T3612] audit_log_task+0x1e9/0x250 [ 37.338205][ T3612] audit_seccomp+0x61/0x100 [ 37.338335][ T3612] ? __seccomp_filter+0x68c/0x10d0 [ 37.338361][ T3612] __seccomp_filter+0x69d/0x10d0 [ 37.338383][ T3612] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 37.338501][ T3612] ? vfs_write+0x7e8/0x960 [ 37.338525][ T3612] ? __rcu_read_unlock+0x4f/0x70 [ 37.338578][ T3612] ? __fget_files+0x184/0x1c0 [ 37.338613][ T3612] __secure_computing+0x82/0x150 [ 37.338639][ T3612] syscall_trace_enter+0xcf/0x1e0 [ 37.338708][ T3612] do_syscall_64+0xac/0x200 [ 37.338749][ T3612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.338773][ T3612] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.338874][ T3612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.338895][ T3612] RIP: 0033:0x7f599f0ed8dc [ 37.338979][ T3612] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 37.338996][ T3612] RSP: 002b:00007f599db57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.339017][ T3612] RAX: ffffffffffffffda RBX: 00007f599f345fa0 RCX: 00007f599f0ed8dc [ 37.339029][ T3612] RDX: 000000000000000f RSI: 00007f599db570a0 RDI: 0000000000000005 [ 37.339041][ T3612] RBP: 00007f599db57090 R08: 0000000000000000 R09: 0000000000000000 [ 37.339053][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.339064][ T3612] R13: 00007f599f346038 R14: 00007f599f345fa0 R15: 00007ffeb91ba788 [ 37.339100][ T3612] [ 37.562392][ T3603] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.562984][ T3610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.581776][ T3610] team0: Port device bond0 added [ 37.587758][ T3603] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.36: EA inode hash validation failed [ 37.614261][ T3603] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.36: corrupted inode contents [ 37.640528][ T3603] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.36: mark_inode_dirty error [ 37.652911][ T3603] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.36: corrupted inode contents [ 37.676816][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 37.685605][ T3620] ip6gretap0: entered allmulticast mode [ 37.696197][ T3610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 37.716349][ T3617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.43'. [ 37.719915][ T3610] syz.0.40 (3610) used greatest stack depth: 10184 bytes left [ 37.740250][ T3603] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.36: mark_inode_dirty error [ 37.753682][ T3603] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.36: mark inode dirty (error -117) [ 37.772536][ T3603] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 37.783981][ T3624] netlink: 176 bytes leftover after parsing attributes in process `syz.0.46'. [ 37.815688][ T3603] EXT4-fs (loop2): 1 orphan inode deleted [ 37.822207][ T3603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.834739][ T3603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.894691][ T3634] loop1: detected capacity change from 0 to 128 [ 37.918703][ T3634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 37.937127][ T3634] System zones: 1-3, 19-19, 35-36 [ 37.943895][ T3634] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 37.956974][ T3634] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.102692][ T3640] loop2: detected capacity change from 0 to 512 [ 38.136035][ T3640] EXT4-fs: Ignoring removed oldalloc option [ 38.151721][ T3640] EXT4-fs (loop2): unable to read superblock [ 38.247914][ T3640] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 38.348121][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.355638][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.365325][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.372806][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.415716][ T3644] lo speed is unknown, defaulting to 1000 [ 38.421561][ T3644] lo speed is unknown, defaulting to 1000 [ 38.427564][ T3644] lo speed is unknown, defaulting to 1000 [ 38.433800][ T3644] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.441917][ T3644] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.452029][ T3644] lo speed is unknown, defaulting to 1000 [ 38.458366][ T3644] lo speed is unknown, defaulting to 1000 [ 38.464551][ T3644] lo speed is unknown, defaulting to 1000 [ 38.471181][ T3644] lo speed is unknown, defaulting to 1000 [ 38.477386][ T3644] lo speed is unknown, defaulting to 1000 [ 38.722489][ T3653] lo speed is unknown, defaulting to 1000 [ 38.772153][ T3656] loop4: detected capacity change from 0 to 128 [ 38.812955][ T3661] loop0: detected capacity change from 0 to 512 [ 38.822549][ T3661] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.57: ea_inode file size=0 entry size=6 [ 38.835781][ T3661] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.849345][ T3661] ------------[ cut here ]------------ [ 38.854878][ T3661] EA inode 11 i_nlink=2 [ 38.855161][ T3661] WARNING: CPU: 1 PID: 3661 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 38.870737][ T3661] Modules linked in: [ 38.874908][ T3661] CPU: 1 UID: 0 PID: 3661 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.884682][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 38.894788][ T3661] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 38.901453][ T3661] Code: 90 49 8d 7e 40 e8 9c f8 b7 ff 4d 8b 6e 40 4c 89 e7 e8 b0 f3 b7 ff 41 8b 56 48 48 c7 c7 09 a7 54 86 4c 89 ee e8 dd de 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 ee 9c ad 03 66 66 66 66 66 2e 0f 1f [ 38.921121][ T3661] RSP: 0018:ffffc90001a6f7c8 EFLAGS: 00010246 [ 38.927218][ T3661] RAX: 60e80dc3a8fa5300 RBX: ffff88810723ba20 RCX: ffff88811b4a3180 [ 38.935256][ T3661] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 38.943632][ T3661] RBP: 0000000000000002 R08: 0001c90001a6f63f R09: 0000000000000000 [ 38.952214][ T3661] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88810723b9d0 [ 38.960262][ T3661] R13: 000000000000000b R14: ffff88810723b988 R15: 0000000000000001 [ 38.968245][ T3661] FS: 00007f578d8b76c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 38.977419][ T3661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.984143][ T3661] CR2: 0000001b33708ff8 CR3: 000000011b586000 CR4: 00000000003506f0 [ 38.992186][ T3661] Call Trace: [ 38.995480][ T3661] [ 38.998476][ T3661] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 39.004569][ T3661] ? errseq_check+0x2c/0x50 [ 39.009264][ T3661] ext4_xattr_delete_inode+0x6b7/0x790 [ 39.014795][ T3661] ? ext4_truncate+0x92e/0xae0 [ 39.019860][ T3661] ext4_evict_inode+0xa6a/0xd90 [ 39.024752][ T3661] ? __pfx_ext4_evict_inode+0x10/0x10 [ 39.030611][ T3661] evict+0x2e0/0x550 [ 39.034604][ T3661] ? __dquot_initialize+0x146/0x7c0 [ 39.039842][ T3661] iput+0x447/0x5b0 [ 39.043685][ T3661] ext4_process_orphan+0x1a9/0x1c0 [ 39.048800][ T3661] ext4_orphan_cleanup+0x6a8/0xa00 [ 39.053945][ T3661] ext4_fill_super+0x3260/0x35d0 [ 39.058946][ T3661] ? set_blocksize+0x1a8/0x310 [ 39.063762][ T3661] ? sb_set_blocksize+0xe3/0x100 [ 39.068723][ T3661] ? setup_bdev_super+0x30e/0x370 [ 39.073849][ T3661] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.079173][ T3661] get_tree_bdev_flags+0x291/0x300 [ 39.084352][ T3661] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.089691][ T3661] get_tree_bdev+0x1f/0x30 [ 39.094127][ T3661] ext4_get_tree+0x1c/0x30 [ 39.098600][ T3661] vfs_get_tree+0x54/0x1d0 [ 39.103479][ T3661] do_new_mount+0x207/0x5e0 [ 39.107997][ T3661] ? security_capable+0x83/0x90 [ 39.113208][ T3661] path_mount+0x4a4/0xb20 [ 39.117575][ T3661] ? user_path_at+0x109/0x130 [ 39.122393][ T3661] __se_sys_mount+0x28f/0x2e0 [ 39.127097][ T3661] ? do_mkdirat+0x3ac/0x3f0 [ 39.131628][ T3661] __x64_sys_mount+0x67/0x80 [ 39.136263][ T3661] x64_sys_call+0x2b4d/0x2ff0 [ 39.141133][ T3661] do_syscall_64+0xd2/0x200 [ 39.145767][ T3661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.151888][ T3661] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.157640][ T3661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.163642][ T3661] RIP: 0033:0x7f578ee5066a [ 39.168095][ T3661] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.187951][ T3661] RSP: 002b:00007f578d8b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.196667][ T3661] RAX: ffffffffffffffda RBX: 00007f578d8b6ef0 RCX: 00007f578ee5066a [ 39.204758][ T3661] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f578d8b6eb0 [ 39.212809][ T3661] RBP: 0000200000000180 R08: 00007f578d8b6ef0 R09: 0000000000800700 [ 39.220800][ T3661] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 39.228783][ T3661] R13: 00007f578d8b6eb0 R14: 0000000000000473 R15: 0000200000000680 [ 39.236792][ T3661] [ 39.239881][ T3661] ---[ end trace 0000000000000000 ]--- [ 39.245571][ T3661] EXT4-fs (loop0): 1 orphan inode deleted [ 39.251831][ T3661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.265476][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.287120][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 39.287134][ T29] audit: type=1326 audit(1758826518.882:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.316613][ T29] audit: type=1326 audit(1758826518.882:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.349211][ T29] audit: type=1326 audit(1758826518.902:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.372512][ T29] audit: type=1326 audit(1758826518.902:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.395709][ T29] audit: type=1400 audit(1758826518.902:252): avc: denied { create } for pid=3660 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.415225][ T29] audit: type=1326 audit(1758826518.902:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.438686][ T29] audit: type=1326 audit(1758826518.902:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.462165][ T29] audit: type=1326 audit(1758826518.902:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.485406][ T29] audit: type=1326 audit(1758826518.942:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.508716][ T29] audit: type=1326 audit(1758826518.942:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 39.544189][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.547026][ T3681] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 39.564593][ T3679] netlink: 'syz.2.63': attribute type 30 has an invalid length. [ 39.612910][ T3685] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 39.637571][ T3689] loop0: detected capacity change from 0 to 512 [ 39.664256][ T3689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.677192][ T3689] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.716766][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.964902][ T3713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.973593][ T3713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.204322][ T3715] netlink: 'syz.4.78': attribute type 29 has an invalid length. [ 40.950506][ T3717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.959107][ T3717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.203252][ T3715] loop4: detected capacity change from 0 to 512 [ 41.333318][ T3724] FAULT_INJECTION: forcing a failure. [ 41.333318][ T3724] name failslab, interval 1, probability 0, space 0, times 0 [ 41.346034][ T3724] CPU: 0 UID: 0 PID: 3724 Comm: syz.0.79 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.346089][ T3724] Tainted: [W]=WARN [ 41.346096][ T3724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 41.346108][ T3724] Call Trace: [ 41.346114][ T3724] [ 41.346121][ T3724] __dump_stack+0x1d/0x30 [ 41.346146][ T3724] dump_stack_lvl+0xe8/0x140 [ 41.346210][ T3724] dump_stack+0x15/0x1b [ 41.346226][ T3724] should_fail_ex+0x265/0x280 [ 41.346255][ T3724] ? alloc_mnt_ns+0x72/0x270 [ 41.346283][ T3724] should_failslab+0x8c/0xb0 [ 41.346422][ T3724] __kmalloc_cache_noprof+0x4c/0x320 [ 41.346461][ T3724] alloc_mnt_ns+0x72/0x270 [ 41.346553][ T3724] vfs_open_tree+0x1da/0x540 [ 41.346592][ T3724] __x64_sys_open_tree+0x45/0xc0 [ 41.346620][ T3724] x64_sys_call+0x2a87/0x2ff0 [ 41.346647][ T3724] do_syscall_64+0xd2/0x200 [ 41.346744][ T3724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.346775][ T3724] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.346825][ T3724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.346881][ T3724] RIP: 0033:0x7f578ee4eec9 [ 41.346896][ T3724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.346914][ T3724] RSP: 002b:00007f578d8b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 41.346937][ T3724] RAX: ffffffffffffffda RBX: 00007f578f0a5fa0 RCX: 00007f578ee4eec9 [ 41.346953][ T3724] RDX: 0000000000089101 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 41.346968][ T3724] RBP: 00007f578d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.346980][ T3724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.346991][ T3724] R13: 00007f578f0a6038 R14: 00007f578f0a5fa0 R15: 00007ffccd6bd4c8 [ 41.347019][ T3724] [ 41.575960][ T3715] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.583335][ T3715] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.78: EA inode hash validation failed [ 41.596560][ T3715] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.609822][ T3715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.78: corrupted inode contents [ 41.623655][ T3715] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.78: mark_inode_dirty error [ 41.641012][ T3715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.78: corrupted inode contents [ 41.667601][ T3715] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.78: mark_inode_dirty error [ 41.694535][ T3715] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.78: mark inode dirty (error -117) [ 41.730070][ T3715] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 41.742302][ T3729] bridge0: entered promiscuous mode [ 41.747494][ T3715] EXT4-fs (loop4): 1 orphan inode deleted [ 41.752974][ T3729] macsec1: entered promiscuous mode [ 41.761183][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.768177][ T3729] bridge0: port 3(macsec1) entered blocking state [ 41.779635][ T3729] bridge0: port 3(macsec1) entered disabled state [ 41.781775][ T3715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.795587][ T3729] macsec1: entered allmulticast mode [ 41.800938][ T3729] bridge0: entered allmulticast mode [ 41.822123][ T3729] macsec1: left allmulticast mode [ 41.827231][ T3729] bridge0: left allmulticast mode [ 41.838182][ T3729] bridge0: left promiscuous mode [ 42.000790][ T3739] bridge0: entered promiscuous mode [ 42.006255][ T3739] macsec1: entered promiscuous mode [ 42.013385][ T3739] bridge0: port 3(macsec1) entered blocking state [ 42.019963][ T3739] bridge0: port 3(macsec1) entered disabled state [ 42.027026][ T3739] macsec1: entered allmulticast mode [ 42.032421][ T3739] bridge0: entered allmulticast mode [ 42.038650][ T3739] macsec1: left allmulticast mode [ 42.043792][ T3739] bridge0: left allmulticast mode [ 42.052932][ T3739] bridge0: left promiscuous mode [ 42.073217][ T3737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.095621][ T3740] loop2: detected capacity change from 0 to 512 [ 42.102283][ T9] lo speed is unknown, defaulting to 1000 [ 42.127001][ T3740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.142017][ T3740] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.179424][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.249388][ T3748] lo speed is unknown, defaulting to 1000 [ 42.291188][ T3753] loop2: detected capacity change from 0 to 128 [ 42.343476][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.350767][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.357504][ T3753] bio_check_eod: 70 callbacks suppressed [ 42.357525][ T3753] syz.2.85: attempt to access beyond end of device [ 42.357525][ T3753] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 42.380444][ T3753] syz.2.85: attempt to access beyond end of device [ 42.380444][ T3753] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 42.395197][ T3753] syz.2.85: attempt to access beyond end of device [ 42.395197][ T3753] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 42.408577][ T3753] buffer_io_error: 42 callbacks suppressed [ 42.408593][ T3753] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 42.426083][ T3753] syz.2.85: attempt to access beyond end of device [ 42.426083][ T3753] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 42.439526][ T3753] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 42.450633][ T3753] syz.2.85: attempt to access beyond end of device [ 42.450633][ T3753] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 42.464530][ T3753] syz.2.85: attempt to access beyond end of device [ 42.464530][ T3753] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 42.477929][ T3753] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 42.488223][ T3753] syz.2.85: attempt to access beyond end of device [ 42.488223][ T3753] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 42.501537][ T3753] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 42.511670][ T3753] syz.2.85: attempt to access beyond end of device [ 42.511670][ T3753] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 42.525685][ T3753] syz.2.85: attempt to access beyond end of device [ 42.525685][ T3753] loop2: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 42.527666][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.539047][ T3753] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 42.555681][ T3753] syz.2.85: attempt to access beyond end of device [ 42.555681][ T3753] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 42.569099][ T3753] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 42.581286][ T3753] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 42.593174][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.601016][ T3753] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 42.639017][ T3753] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 42.647867][ T3753] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 42.694851][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.705675][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.737099][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.747019][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.814000][ T3762] loop3: detected capacity change from 0 to 512 [ 42.848926][ T3762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.862325][ T3762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.897340][ T3762] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.990274][ T3762] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.075495][ T3775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.089149][ T3762] EXT4-fs (loop3): 1 truncate cleaned up [ 43.110012][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.111138][ T3775] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.169689][ T3775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.188255][ T3780] loop4: detected capacity change from 0 to 512 [ 43.221262][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.299385][ T3780] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.368602][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.399707][ T3788] loop0: detected capacity change from 0 to 512 [ 43.431763][ T3788] EXT4-fs: Ignoring removed bh option [ 43.439927][ T3788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.453087][ T3788] EXT4-fs (loop0): 1 truncate cleaned up [ 43.459244][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.473922][ T3788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.601703][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.609211][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.617727][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.625322][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.646340][ T3801] loop2: detected capacity change from 0 to 128 [ 43.659312][ T3801] FAT-fs (loop2): Directory bread(block 162) failed [ 43.669496][ T3801] FAT-fs (loop2): Directory bread(block 163) failed [ 43.676581][ T3801] FAT-fs (loop2): Directory bread(block 164) failed [ 43.684269][ T3801] FAT-fs (loop2): Directory bread(block 165) failed [ 43.691043][ T3801] FAT-fs (loop2): Directory bread(block 166) failed [ 43.695632][ T3803] siw: device registration error -23 [ 43.727685][ T3801] FAT-fs (loop2): Directory bread(block 167) failed [ 43.736067][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.749941][ T3801] FAT-fs (loop2): Directory bread(block 168) failed [ 43.764133][ T3801] FAT-fs (loop2): Directory bread(block 169) failed [ 43.875506][ T3820] __nla_validate_parse: 1 callbacks suppressed [ 43.875523][ T3820] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.107'. [ 43.914661][ T3822] loop3: detected capacity change from 0 to 1024 [ 43.922978][ T3824] loop1: detected capacity change from 0 to 128 [ 43.932143][ T3822] EXT4-fs: Ignoring removed orlov option [ 43.938546][ T3824] FAT-fs (loop1): Directory bread(block 162) failed [ 43.947676][ T3824] FAT-fs (loop1): Directory bread(block 163) failed [ 43.955755][ T3824] FAT-fs (loop1): Directory bread(block 164) failed [ 43.963042][ T3824] FAT-fs (loop1): Directory bread(block 165) failed [ 43.971529][ T3824] FAT-fs (loop1): Directory bread(block 166) failed [ 43.971775][ T3822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.978253][ T3824] FAT-fs (loop1): Directory bread(block 167) failed [ 44.000260][ T3824] FAT-fs (loop1): Directory bread(block 168) failed [ 44.006908][ T3824] FAT-fs (loop1): Directory bread(block 169) failed [ 44.020570][ T3824] FAT-fs (loop1): Directory bread(block 162) failed [ 44.033883][ T3824] FAT-fs (loop1): Directory bread(block 163) failed [ 44.053866][ T3824] FAULT_INJECTION: forcing a failure. [ 44.053866][ T3824] name failslab, interval 1, probability 0, space 0, times 0 [ 44.066579][ T3824] CPU: 1 UID: 0 PID: 3824 Comm: syz.1.111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.066659][ T3824] Tainted: [W]=WARN [ 44.066668][ T3824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.066681][ T3824] Call Trace: [ 44.066687][ T3824] [ 44.066695][ T3824] __dump_stack+0x1d/0x30 [ 44.066754][ T3824] dump_stack_lvl+0xe8/0x140 [ 44.066778][ T3824] dump_stack+0x15/0x1b [ 44.066799][ T3824] should_fail_ex+0x265/0x280 [ 44.066830][ T3824] should_failslab+0x8c/0xb0 [ 44.066903][ T3824] kmem_cache_alloc_noprof+0x50/0x310 [ 44.066930][ T3824] ? vfat_add_entry+0x17d/0x1b90 [ 44.067032][ T3824] vfat_add_entry+0x17d/0x1b90 [ 44.067064][ T3824] ? fat_search_long+0x954/0x9c0 [ 44.067122][ T3824] ? __rcu_read_unlock+0x4f/0x70 [ 44.067145][ T3824] ? avc_has_perm_noaudit+0x1b1/0x200 [ 44.067174][ T3824] ? __d_rehash+0x139/0x1f0 [ 44.067210][ T3824] ? _raw_spin_unlock+0x26/0x50 [ 44.067286][ T3824] vfat_create+0xa8/0x190 [ 44.067373][ T3824] ? __pfx_vfat_create+0x10/0x10 [ 44.067405][ T3824] path_openat+0x1105/0x2170 [ 44.067440][ T3824] do_filp_open+0x109/0x230 [ 44.067551][ T3824] do_sys_openat2+0xa6/0x110 [ 44.067594][ T3824] __x64_sys_creat+0x65/0x90 [ 44.067615][ T3824] x64_sys_call+0x2d94/0x2ff0 [ 44.067643][ T3824] do_syscall_64+0xd2/0x200 [ 44.067713][ T3824] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.067744][ T3824] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.067797][ T3824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.067818][ T3824] RIP: 0033:0x7f599f0eeec9 [ 44.067833][ T3824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.067855][ T3824] RSP: 002b:00007f599db57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 44.067889][ T3824] RAX: ffffffffffffffda RBX: 00007f599f345fa0 RCX: 00007f599f0eeec9 [ 44.067937][ T3824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 44.067950][ T3824] RBP: 00007f599db57090 R08: 0000000000000000 R09: 0000000000000000 [ 44.067965][ T3824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.068052][ T3824] R13: 00007f599f346038 R14: 00007f599f345fa0 R15: 00007ffeb91ba788 [ 44.068072][ T3824] [ 44.106441][ T3829] netlink: 'syz.2.112': attribute type 29 has an invalid length. [ 44.305574][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 44.305591][ T29] audit: type=1400 audit(1758826523.902:466): avc: denied { create } for pid=3821 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.361474][ T3830] loop2: detected capacity change from 0 to 512 [ 44.404183][ T3830] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.421635][ T3830] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.112: EA inode hash validation failed [ 44.500293][ T29] audit: type=1400 audit(1758826523.982:467): avc: denied { setopt } for pid=3821 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.519698][ T29] audit: type=1400 audit(1758826523.982:468): avc: denied { connect } for pid=3821 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.519751][ T3830] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.567535][ T3830] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.112: corrupted inode contents [ 44.580839][ T3830] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.112: mark_inode_dirty error [ 44.592955][ T3830] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.112: corrupted inode contents [ 44.635595][ T29] audit: type=1326 audit(1758826524.212:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.659011][ T29] audit: type=1326 audit(1758826524.212:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.682297][ T29] audit: type=1326 audit(1758826524.212:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.705660][ T29] audit: type=1326 audit(1758826524.212:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.728947][ T29] audit: type=1326 audit(1758826524.212:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.736033][ T3830] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.112: mark_inode_dirty error [ 44.752227][ T29] audit: type=1326 audit(1758826524.212:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.752261][ T29] audit: type=1326 audit(1758826524.212:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18b5eec9 code=0x7ffc0000 [ 44.837067][ T3830] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.112: mark inode dirty (error -117) [ 44.871456][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.887765][ T3830] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 44.898186][ T3830] EXT4-fs (loop2): 1 orphan inode deleted [ 44.910259][ T3830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.094489][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.749308][ T3863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.904480][ T3865] loop1: detected capacity change from 0 to 512 [ 46.994174][ T3865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.149215][ T3865] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.320956][ T3884] netlink: 'syz.4.128': attribute type 29 has an invalid length. [ 47.388588][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.401731][ T3884] loop4: detected capacity change from 0 to 512 [ 47.428803][ T3884] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.455734][ T3893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.130'. [ 47.466799][ T3884] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.128: EA inode hash validation failed [ 47.486093][ T3886] loop3: detected capacity change from 0 to 512 [ 47.517244][ T3884] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.128: corrupted inode contents [ 47.517408][ T3893] loop1: detected capacity change from 0 to 8192 [ 47.536366][ T3886] EXT4-fs: Ignoring removed bh option [ 47.545890][ T3886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.556951][ T3884] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.128: mark_inode_dirty error [ 47.574757][ T3884] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.128: corrupted inode contents [ 47.584681][ T3893] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.605873][ T3886] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.633285][ T3886] EXT4-fs (loop3): 1 truncate cleaned up [ 47.639398][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.655931][ T3899] netlink: 35468 bytes leftover after parsing attributes in process `syz.1.130'. [ 47.668856][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 47.669243][ T3884] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.128: mark_inode_dirty error [ 47.691077][ T3886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.692018][ T3901] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 47.711187][ T3884] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.128: mark inode dirty (error -117) [ 47.725791][ T3884] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 47.744335][ T3884] EXT4-fs (loop4): 1 orphan inode deleted [ 47.751039][ T3884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.773146][ T3884] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.894913][ T3913] program syz.1.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.916567][ T3913] FAULT_INJECTION: forcing a failure. [ 47.916567][ T3913] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.929721][ T3913] CPU: 0 UID: 0 PID: 3913 Comm: syz.1.137 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.929756][ T3913] Tainted: [W]=WARN [ 47.929763][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.929776][ T3913] Call Trace: [ 47.929783][ T3913] [ 47.929792][ T3913] __dump_stack+0x1d/0x30 [ 47.929889][ T3913] dump_stack_lvl+0xe8/0x140 [ 47.929913][ T3913] dump_stack+0x15/0x1b [ 47.930005][ T3913] should_fail_ex+0x265/0x280 [ 47.930030][ T3913] should_fail+0xb/0x20 [ 47.930049][ T3913] should_fail_usercopy+0x1a/0x20 [ 47.930077][ T3913] _copy_to_user+0x20/0xa0 [ 47.930146][ T3913] scsi_ioctl+0x13c8/0x14d0 [ 47.930178][ T3913] ? avc_has_perm+0xf7/0x180 [ 47.930257][ T3913] ? file_has_perm+0x324/0x370 [ 47.930285][ T3913] ? do_vfs_ioctl+0x866/0xe10 [ 47.930347][ T3913] sg_ioctl+0xdf6/0x1360 [ 47.930367][ T3913] ? __pfx_sg_ioctl+0x10/0x10 [ 47.930451][ T3913] __se_sys_ioctl+0xcb/0x140 [ 47.930475][ T3913] __x64_sys_ioctl+0x43/0x50 [ 47.930496][ T3913] x64_sys_call+0x1816/0x2ff0 [ 47.930517][ T3913] do_syscall_64+0xd2/0x200 [ 47.930625][ T3913] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.930656][ T3913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.930758][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.930819][ T3913] RIP: 0033:0x7f599f0eeec9 [ 47.930838][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.930930][ T3913] RSP: 002b:00007f599db57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.930953][ T3913] RAX: ffffffffffffffda RBX: 00007f599f345fa0 RCX: 00007f599f0eeec9 [ 47.930968][ T3913] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 0000000000000004 [ 47.930983][ T3913] RBP: 00007f599db57090 R08: 0000000000000000 R09: 0000000000000000 [ 47.930998][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.931012][ T3913] R13: 00007f599f346038 R14: 00007f599f345fa0 R15: 00007ffeb91ba788 [ 47.931030][ T3913] [ 48.148837][ T3916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.203458][ T3929] loop4: detected capacity change from 0 to 512 [ 48.209961][ T3926] netlink: 'syz.2.142': attribute type 39 has an invalid length. [ 48.233918][ T3930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.263056][ T3933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3933 comm=syz.2.142 [ 48.299884][ T3930] loop1: detected capacity change from 0 to 512 [ 48.299901][ T3937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.146'. [ 48.317609][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.357345][ T3929] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.365498][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.547521][ T3937] loop0: detected capacity change from 0 to 8192 [ 48.567833][ T3930] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.618266][ T3937] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 48.630286][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.675151][ T3948] netlink: 35468 bytes leftover after parsing attributes in process `syz.0.146'. [ 48.744175][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 48.824015][ T3957] netlink: 'syz.4.148': attribute type 29 has an invalid length. [ 48.862107][ T3957] loop4: detected capacity change from 0 to 512 [ 48.869809][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.881780][ T3957] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.906442][ T3957] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.148: EA inode hash validation failed [ 48.967731][ T3957] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.981232][ T3957] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.148: corrupted inode contents [ 48.998443][ T3957] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.148: mark_inode_dirty error [ 49.020927][ T3957] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.148: corrupted inode contents [ 49.031181][ T3970] loop3: detected capacity change from 0 to 512 [ 49.046486][ T3957] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.148: mark_inode_dirty error [ 49.058944][ T3970] EXT4-fs: Ignoring removed oldalloc option [ 49.077067][ T3957] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.148: mark inode dirty (error -117) [ 49.100794][ T3970] EXT4-fs (loop3): unable to read superblock [ 49.108218][ T3957] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 49.120938][ T3957] EXT4-fs (loop4): 1 orphan inode deleted [ 49.126629][ T3974] lo speed is unknown, defaulting to 1000 [ 49.128717][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.148098][ T3957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.169896][ T3962] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 49.177717][ T3962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.152'. [ 49.290774][ T3974] loop1: detected capacity change from 0 to 128 [ 49.351301][ T3974] bio_check_eod: 30 callbacks suppressed [ 49.351319][ T3974] syz.1.156: attempt to access beyond end of device [ 49.351319][ T3974] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 49.372685][ T3974] syz.1.156: attempt to access beyond end of device [ 49.372685][ T3974] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 49.393789][ T3974] syz.1.156: attempt to access beyond end of device [ 49.393789][ T3974] loop1: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 49.407195][ T3974] buffer_io_error: 16 callbacks suppressed [ 49.407212][ T3974] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 49.423436][ T3974] syz.1.156: attempt to access beyond end of device [ 49.423436][ T3974] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 49.436804][ T3974] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 49.457175][ T3974] syz.1.156: attempt to access beyond end of device [ 49.457175][ T3974] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 49.482377][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 49.482392][ T29] audit: type=1326 audit(1758826529.072:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945f41eec9 code=0x7ffc0000 [ 49.511750][ T29] audit: type=1326 audit(1758826529.082:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945f41eec9 code=0x7ffc0000 [ 49.534994][ T29] audit: type=1326 audit(1758826529.082:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f945f41eec9 code=0x7ffc0000 [ 49.558212][ T29] audit: type=1326 audit(1758826529.082:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945f41eec9 code=0x7ffc0000 [ 49.621746][ T3974] syz.1.156: attempt to access beyond end of device [ 49.621746][ T3974] loop1: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 49.635150][ T3974] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 49.742073][ T29] audit: type=1326 audit(1758826529.082:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f945f41eec9 code=0x7ffc0000 [ 49.755071][ T3974] syz.1.156: attempt to access beyond end of device [ 49.755071][ T3974] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 49.765396][ T29] audit: type=1326 audit(1758826529.182:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945f41eec9 code=0x7ffc0000 [ 49.778721][ T3974] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 49.821896][ T3974] syz.1.156: attempt to access beyond end of device [ 49.821896][ T3974] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 49.839972][ T3974] syz.1.156: attempt to access beyond end of device [ 49.839972][ T3974] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 49.853478][ T3974] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 49.879526][ T3974] syz.1.156: attempt to access beyond end of device [ 49.879526][ T3974] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 49.892921][ T3974] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 49.910702][ T3974] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 49.932515][ T4006] loop3: detected capacity change from 0 to 128 [ 49.939050][ T3974] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 49.950771][ T29] audit: type=1400 audit(1758826529.552:553): avc: denied { create } for pid=4001 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.970638][ T3974] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 49.975824][ T4006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 49.979190][ T3974] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 49.988872][ T4006] System zones: 1-3, 19-19, 35-36 [ 49.997481][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 50.001503][ T4006] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.024180][ T4006] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.124925][ T4010] loop4: detected capacity change from 0 to 512 [ 50.131957][ T4010] EXT4-fs: Ignoring removed oldalloc option [ 50.137939][ T4011] syz.2.165 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.155057][ T4010] EXT4-fs (loop4): unable to read superblock [ 50.165431][ T4013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.193091][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.202254][ T4013] loop0: detected capacity change from 0 to 512 [ 50.219702][ T4010] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 50.227382][ T4010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.169'. [ 50.252596][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.268688][ T4013] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.298556][ T4023] loop4: detected capacity change from 0 to 736 [ 50.322569][ T4023] rock: directory entry would overflow storage [ 50.328781][ T4023] rock: sig=0x3b10, size=4, remaining=3 [ 50.336111][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.340712][ T4023] FAULT_INJECTION: forcing a failure. [ 50.340712][ T4023] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.358421][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.4.172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.358487][ T4023] Tainted: [W]=WARN [ 50.358494][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.358558][ T4023] Call Trace: [ 50.358564][ T4023] [ 50.358572][ T4023] __dump_stack+0x1d/0x30 [ 50.358592][ T4023] dump_stack_lvl+0xe8/0x140 [ 50.358615][ T4023] dump_stack+0x15/0x1b [ 50.358634][ T4023] should_fail_ex+0x265/0x280 [ 50.358683][ T4023] should_fail_alloc_page+0xf2/0x100 [ 50.358716][ T4023] __alloc_frozen_pages_noprof+0xff/0x360 [ 50.358773][ T4023] alloc_pages_mpol+0xb3/0x250 [ 50.358805][ T4023] alloc_pages_noprof+0x90/0x130 [ 50.358842][ T4023] get_free_pages_noprof+0xc/0x40 [ 50.358863][ T4023] isofs_readdir+0x3e/0xb40 [ 50.359014][ T4023] ? get_pid_task+0x96/0xd0 [ 50.359039][ T4023] ? proc_fail_nth_write+0x13b/0x160 [ 50.359105][ T4023] ? selinux_file_permission+0x1e4/0x320 [ 50.359136][ T4023] iterate_dir+0x114/0x330 [ 50.359154][ T4023] ? mutex_lock+0xd/0x30 [ 50.359254][ T4023] __se_sys_getdents64+0x88/0x1b0 [ 50.359278][ T4023] ? __pfx_filldir64+0x10/0x10 [ 50.359304][ T4023] __x64_sys_getdents64+0x43/0x50 [ 50.359329][ T4023] x64_sys_call+0x2d9f/0x2ff0 [ 50.359354][ T4023] do_syscall_64+0xd2/0x200 [ 50.359414][ T4023] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.359454][ T4023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.359566][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.359587][ T4023] RIP: 0033:0x7efd18b5eec9 [ 50.359703][ T4023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.359724][ T4023] RSP: 002b:00007efd175bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 50.359746][ T4023] RAX: ffffffffffffffda RBX: 00007efd18db5fa0 RCX: 00007efd18b5eec9 [ 50.359761][ T4023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 50.359776][ T4023] RBP: 00007efd175bf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.359789][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.359845][ T4023] R13: 00007efd18db6038 R14: 00007efd18db5fa0 R15: 00007fffbdb506e8 [ 50.359864][ T4023] [ 50.367291][ T29] audit: type=1400 audit(1758826529.942:554): avc: denied { mount } for pid=4022 comm="syz.4.172" name="/" dev="loop4" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.605929][ T29] audit: type=1400 audit(1758826529.992:555): avc: denied { mount } for pid=4024 comm="syz.3.173" name="/" dev="configfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.628444][ T29] audit: type=1400 audit(1758826529.992:556): avc: denied { search } for pid=4024 comm="syz.3.173" name="/" dev="configfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.696972][ T4028] loop3: detected capacity change from 0 to 736 [ 50.791996][ T4039] loop2: detected capacity change from 0 to 512 [ 50.798733][ T4039] EXT4-fs: Ignoring removed bh option [ 50.806029][ T4039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.817964][ T4039] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.831689][ T4039] EXT4-fs (loop2): 1 truncate cleaned up [ 50.838011][ T4039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.867172][ T4039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'. [ 50.909061][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.917683][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.981084][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138732][ T4070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.146273][ T4070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.158893][ T4070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.166642][ T4070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.196769][ T4072] lo speed is unknown, defaulting to 1000 [ 52.213167][ T4075] loop1: detected capacity change from 0 to 128 [ 52.230634][ T4078] siw: device registration error -23 [ 52.338885][ T4090] FAULT_INJECTION: forcing a failure. [ 52.338885][ T4090] name failslab, interval 1, probability 0, space 0, times 0 [ 52.351726][ T4090] CPU: 0 UID: 0 PID: 4090 Comm: syz.0.192 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.351766][ T4090] Tainted: [W]=WARN [ 52.351774][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.351851][ T4090] Call Trace: [ 52.351857][ T4090] [ 52.351864][ T4090] __dump_stack+0x1d/0x30 [ 52.351995][ T4090] dump_stack_lvl+0xe8/0x140 [ 52.352075][ T4090] dump_stack+0x15/0x1b [ 52.352220][ T4090] should_fail_ex+0x265/0x280 [ 52.352247][ T4090] should_failslab+0x8c/0xb0 [ 52.352281][ T4090] __kmalloc_noprof+0xa5/0x3e0 [ 52.352364][ T4090] ? ethnl_default_set_doit+0xf0/0x6c0 [ 52.352394][ T4090] ? __nla_parse+0x40/0x60 [ 52.352440][ T4090] ethnl_default_set_doit+0xf0/0x6c0 [ 52.352469][ T4090] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 52.352525][ T4090] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 52.352565][ T4090] genl_family_rcv_msg_doit+0x140/0x1b0 [ 52.352697][ T4090] genl_rcv_msg+0x422/0x460 [ 52.352789][ T4090] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 52.352865][ T4090] netlink_rcv_skb+0x120/0x220 [ 52.352890][ T4090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.352930][ T4090] genl_rcv+0x28/0x40 [ 52.352982][ T4090] netlink_unicast+0x5c0/0x690 [ 52.353008][ T4090] netlink_sendmsg+0x58b/0x6b0 [ 52.353108][ T4090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.353184][ T4090] __sock_sendmsg+0x142/0x180 [ 52.353234][ T4090] ____sys_sendmsg+0x31e/0x4e0 [ 52.353313][ T4090] ___sys_sendmsg+0x17b/0x1d0 [ 52.353397][ T4090] __x64_sys_sendmsg+0xd4/0x160 [ 52.353453][ T4090] x64_sys_call+0x191e/0x2ff0 [ 52.353476][ T4090] do_syscall_64+0xd2/0x200 [ 52.353510][ T4090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.353536][ T4090] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.353686][ T4090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.353708][ T4090] RIP: 0033:0x7f578ee4eec9 [ 52.353725][ T4090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.353744][ T4090] RSP: 002b:00007f578d8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.353813][ T4090] RAX: ffffffffffffffda RBX: 00007f578f0a5fa0 RCX: 00007f578ee4eec9 [ 52.353828][ T4090] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000f [ 52.353841][ T4090] RBP: 00007f578d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.353854][ T4090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.353867][ T4090] R13: 00007f578f0a6038 R14: 00007f578f0a5fa0 R15: 00007ffccd6bd4c8 [ 52.353916][ T4090] [ 52.893592][ T4110] netlink: 'syz.3.199': attribute type 29 has an invalid length. [ 52.907660][ T4110] loop3: detected capacity change from 0 to 512 [ 52.918502][ T4110] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.930019][ T4110] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.199: EA inode hash validation failed [ 52.942975][ T4110] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.956374][ T4110] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.199: corrupted inode contents [ 52.969020][ T4110] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.199: mark_inode_dirty error [ 52.981046][ T4110] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.199: corrupted inode contents [ 52.981249][ T4110] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.199: mark_inode_dirty error [ 52.981357][ T4110] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.199: mark inode dirty (error -117) [ 52.981509][ T4110] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 52.981552][ T4110] EXT4-fs (loop3): 1 orphan inode deleted [ 52.988062][ T4110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.045902][ T4110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.102873][ T4118] lo speed is unknown, defaulting to 1000 [ 53.163454][ T4118] loop3: detected capacity change from 0 to 512 [ 53.173303][ T4118] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.187278][ T4118] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.199876][ T4118] EXT4-fs (loop3): 1 truncate cleaned up [ 53.206296][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.316802][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=4131 comm=syz.3.202 [ 53.316833][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=4131 comm=syz.3.202 [ 53.316859][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=4131 comm=syz.3.202 [ 53.316884][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=4131 comm=syz.3.202 [ 53.316906][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=4131 comm=syz.3.202 [ 53.914576][ T4145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.925522][ T4146] loop1: detected capacity change from 0 to 512 [ 54.003382][ T4146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.075424][ T4146] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.283333][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.542380][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 54.542398][ T29] audit: type=1400 audit(1758826534.142:736): avc: denied { create } for pid=4144 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.543991][ T3385] IPVS: starting estimator thread 0... [ 54.559088][ T29] audit: type=1400 audit(1758826534.142:737): avc: denied { setopt } for pid=4144 comm="syz.1.211" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.605452][ T29] audit: type=1400 audit(1758826534.192:738): avc: denied { setattr } for pid=4144 comm="syz.1.211" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.644188][ T29] audit: type=1326 audit(1758826534.242:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f9ddeec9 code=0x7ffc0000 [ 54.692742][ T29] audit: type=1326 audit(1758826534.242:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50f9ddeec9 code=0x7ffc0000 [ 54.716090][ T29] audit: type=1326 audit(1758826534.242:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f9ddeec9 code=0x7ffc0000 [ 54.719827][ T4164] IPVS: using max 1968 ests per chain, 98400 per kthread [ 54.739384][ T29] audit: type=1326 audit(1758826534.242:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50f9ddeec9 code=0x7ffc0000 [ 54.769680][ T29] audit: type=1326 audit(1758826534.242:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f9ddeec9 code=0x7ffc0000 [ 54.770119][ T4170] netlink: 'syz.4.219': attribute type 29 has an invalid length. [ 54.807597][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.821870][ T29] audit: type=1400 audit(1758826534.342:744): avc: denied { create } for pid=4169 comm="syz.4.219" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.847239][ T4170] loop4: detected capacity change from 0 to 512 [ 54.869845][ T29] audit: type=1400 audit(1758826534.462:745): avc: denied { mounton } for pid=4169 comm="syz.4.219" path="/44/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.904091][ T4170] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.920450][ T4176] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 54.928139][ T4178] loop0: detected capacity change from 0 to 1764 [ 54.946487][ T4170] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.219: EA inode hash validation failed [ 54.971566][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.219: corrupted inode contents [ 55.004817][ T4170] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.219: mark_inode_dirty error [ 55.018993][ T4186] loop3: detected capacity change from 0 to 128 [ 55.050677][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.219: corrupted inode contents [ 55.074559][ T4186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 55.077108][ T4170] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.219: mark_inode_dirty error [ 55.082712][ T4186] System zones: 1-3, 19-19, 35-36 [ 55.108342][ T4194] loop1: detected capacity change from 0 to 512 [ 55.114910][ T4170] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.219: mark inode dirty (error -117) [ 55.115226][ T4194] ======================================================= [ 55.115226][ T4194] WARNING: The mand mount option has been deprecated and [ 55.115226][ T4194] and is ignored by this kernel. Remove the mand [ 55.115226][ T4194] option from the mount to silence this warning. [ 55.115226][ T4194] ======================================================= [ 55.164317][ T4170] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 55.177052][ T4170] EXT4-fs (loop4): 1 orphan inode deleted [ 55.188646][ T4186] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 55.190536][ T4170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.214087][ T4170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.224024][ T4186] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.225243][ T4194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.272397][ T4194] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.313657][ T4194] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.229: corrupted inode contents [ 55.337915][ T4194] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.229: mark_inode_dirty error [ 55.353553][ T4208] loop4: detected capacity change from 0 to 512 [ 55.360404][ T4194] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.229: corrupted inode contents [ 55.404695][ T4208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.405159][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.430278][ T4208] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.433124][ T4194] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.229: mark_inode_dirty error [ 55.452525][ T4208] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.232: corrupted inode contents [ 55.473064][ T4208] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.232: mark_inode_dirty error [ 55.504530][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.514163][ T4222] loop2: detected capacity change from 0 to 512 [ 55.515012][ T4208] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.232: corrupted inode contents [ 55.536292][ T4208] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.232: mark_inode_dirty error [ 55.551726][ T4222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.565398][ T4222] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.623883][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.634799][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.641978][ T4232] lo speed is unknown, defaulting to 1000 [ 55.695944][ T4237] loop1: detected capacity change from 0 to 128 [ 55.723279][ T4237] bio_check_eod: 53 callbacks suppressed [ 55.723294][ T4237] syz.1.239: attempt to access beyond end of device [ 55.723294][ T4237] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 55.778002][ T4237] syz.1.239: attempt to access beyond end of device [ 55.778002][ T4237] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 55.798497][ T4241] loop0: detected capacity change from 0 to 1024 [ 55.811174][ T4237] syz.1.239: attempt to access beyond end of device [ 55.811174][ T4237] loop1: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 55.824657][ T4237] buffer_io_error: 30 callbacks suppressed [ 55.824675][ T4237] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 55.847288][ T4241] EXT4-fs: Ignoring removed orlov option [ 55.861798][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.881836][ T4237] syz.1.239: attempt to access beyond end of device [ 55.881836][ T4237] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 55.895201][ T4237] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 55.909793][ T4245] loop4: detected capacity change from 0 to 128 [ 55.919049][ T4237] syz.1.239: attempt to access beyond end of device [ 55.919049][ T4237] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 55.934115][ T4237] syz.1.239: attempt to access beyond end of device [ 55.934115][ T4237] loop1: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 55.947590][ T4237] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 55.956166][ T4237] syz.1.239: attempt to access beyond end of device [ 55.956166][ T4237] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 55.969542][ T4237] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 55.978421][ T4237] syz.1.239: attempt to access beyond end of device [ 55.978421][ T4237] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 56.017749][ T4245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 56.025815][ T4245] System zones: 1-3, 19-19, 35-36 [ 56.031595][ T4245] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 56.044544][ T4237] syz.1.239: attempt to access beyond end of device [ 56.044544][ T4237] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 56.057893][ T4237] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 56.067283][ T4237] syz.1.239: attempt to access beyond end of device [ 56.067283][ T4237] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 56.078466][ T4245] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.080666][ T4237] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 56.138821][ T4237] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 56.147839][ T4237] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 56.157123][ T4237] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 56.165871][ T4237] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 56.185155][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.211036][ T4252] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 56.271426][ T4260] loop0: detected capacity change from 0 to 512 [ 56.281753][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.292220][ T4260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.305394][ T4260] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.359664][ T4269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.396415][ T4269] loop2: detected capacity change from 0 to 512 [ 56.448044][ T4269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.463212][ T4269] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.470889][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.587256][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.715045][ T4293] lo speed is unknown, defaulting to 1000 [ 56.758841][ T4293] loop1: detected capacity change from 0 to 128 [ 57.282225][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 57.314323][ T4311] loop1: detected capacity change from 0 to 512 [ 57.321441][ T4311] EXT4-fs: Ignoring removed oldalloc option [ 57.344562][ T4311] EXT4-fs (loop1): unable to read superblock [ 57.385263][ T4313] loop3: detected capacity change from 0 to 512 [ 57.392515][ T4313] EXT4-fs: Ignoring removed bh option [ 57.398612][ T4313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.411338][ T4313] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.411931][ T4311] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 57.432093][ T4311] netlink: 224 bytes leftover after parsing attributes in process `syz.1.269'. [ 57.445980][ T4315] loop2: detected capacity change from 0 to 2048 [ 57.451985][ T4313] EXT4-fs (loop3): 1 truncate cleaned up [ 57.458438][ T4313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.487726][ T4313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 57.503662][ T4320] loop1: detected capacity change from 0 to 512 [ 57.546817][ T3489] Alternate GPT is invalid, using primary GPT. [ 57.553184][ T3489] loop2: p1 p2 p3 [ 57.556394][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.556910][ T3489] loop2: partition table partially beyond EOD, truncated [ 57.576920][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 57.608911][ T4315] Alternate GPT is invalid, using primary GPT. [ 57.615301][ T4315] loop2: p1 p2 p3 [ 57.619481][ T4315] loop2: partition table partially beyond EOD, truncated [ 57.641831][ T4334] FAULT_INJECTION: forcing a failure. [ 57.641831][ T4334] name failslab, interval 1, probability 0, space 0, times 0 [ 57.654579][ T4334] CPU: 1 UID: 0 PID: 4334 Comm: syz.3.274 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.654616][ T4334] Tainted: [W]=WARN [ 57.654623][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.654636][ T4334] Call Trace: [ 57.654643][ T4334] [ 57.654660][ T4334] __dump_stack+0x1d/0x30 [ 57.654680][ T4334] dump_stack_lvl+0xe8/0x140 [ 57.654700][ T4334] dump_stack+0x15/0x1b [ 57.654719][ T4334] should_fail_ex+0x265/0x280 [ 57.654762][ T4334] should_failslab+0x8c/0xb0 [ 57.654843][ T4334] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.654965][ T4334] ? __alloc_skb+0x101/0x320 [ 57.654994][ T4334] __alloc_skb+0x101/0x320 [ 57.655155][ T4334] ? audit_log_start+0x365/0x6c0 [ 57.655274][ T4334] audit_log_start+0x380/0x6c0 [ 57.655316][ T4334] audit_seccomp+0x48/0x100 [ 57.655395][ T4334] ? __seccomp_filter+0x68c/0x10d0 [ 57.655433][ T4334] __seccomp_filter+0x69d/0x10d0 [ 57.655462][ T4334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.655507][ T4334] ? vfs_write+0x7e8/0x960 [ 57.655527][ T4334] ? __rcu_read_unlock+0x4f/0x70 [ 57.655607][ T4334] ? __fget_files+0x184/0x1c0 [ 57.655639][ T4334] __secure_computing+0x82/0x150 [ 57.655663][ T4334] syscall_trace_enter+0xcf/0x1e0 [ 57.655695][ T4334] do_syscall_64+0xac/0x200 [ 57.655811][ T4334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.655860][ T4334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.655962][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.655989][ T4334] RIP: 0033:0x7f945f41eec9 [ 57.656009][ T4334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.656031][ T4334] RSP: 002b:00007f945de7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 57.656115][ T4334] RAX: ffffffffffffffda RBX: 00007f945f675fa0 RCX: 00007f945f41eec9 [ 57.656130][ T4334] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000098 [ 57.656144][ T4334] RBP: 00007f945de7f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.656175][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.656186][ T4334] R13: 00007f945f676038 R14: 00007f945f675fa0 R15: 00007ffd3feb8618 [ 57.656206][ T4334] [ 57.953811][ T4340] lo speed is unknown, defaulting to 1000 [ 57.986840][ T4343] loop4: detected capacity change from 0 to 128 [ 58.089958][ T4349] loop2: detected capacity change from 0 to 128 [ 58.118330][ T4349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 58.133996][ T4349] System zones: 1-3, 19-19, 35-36 [ 58.143776][ T4349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 58.156624][ T4349] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.247974][ T4356] FAULT_INJECTION: forcing a failure. [ 58.247974][ T4356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.261140][ T4356] CPU: 1 UID: 0 PID: 4356 Comm: syz.0.285 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.261244][ T4356] Tainted: [W]=WARN [ 58.261251][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.261263][ T4356] Call Trace: [ 58.261270][ T4356] [ 58.261277][ T4356] __dump_stack+0x1d/0x30 [ 58.261302][ T4356] dump_stack_lvl+0xe8/0x140 [ 58.261321][ T4356] dump_stack+0x15/0x1b [ 58.261336][ T4356] should_fail_ex+0x265/0x280 [ 58.261424][ T4356] should_fail+0xb/0x20 [ 58.261497][ T4356] should_fail_usercopy+0x1a/0x20 [ 58.261522][ T4356] _copy_to_user+0x20/0xa0 [ 58.261553][ T4356] simple_read_from_buffer+0xb5/0x130 [ 58.261619][ T4356] proc_fail_nth_read+0x10e/0x150 [ 58.261646][ T4356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.261697][ T4356] vfs_read+0x1a8/0x770 [ 58.261767][ T4356] ? __put_user_nocheck_8+0x10/0x10 [ 58.261871][ T4356] ? __rcu_read_unlock+0x4f/0x70 [ 58.261893][ T4356] ? __fget_files+0x184/0x1c0 [ 58.261986][ T4356] ksys_read+0xda/0x1a0 [ 58.262010][ T4356] __x64_sys_read+0x40/0x50 [ 58.262090][ T4356] x64_sys_call+0x27bc/0x2ff0 [ 58.262127][ T4356] do_syscall_64+0xd2/0x200 [ 58.262159][ T4356] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.262183][ T4356] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.262294][ T4356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.262332][ T4356] RIP: 0033:0x7f578ee4d8dc [ 58.262348][ T4356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.262365][ T4356] RSP: 002b:00007f578d8b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.262383][ T4356] RAX: ffffffffffffffda RBX: 00007f578f0a5fa0 RCX: 00007f578ee4d8dc [ 58.262396][ T4356] RDX: 000000000000000f RSI: 00007f578d8b70a0 RDI: 0000000000000005 [ 58.262447][ T4356] RBP: 00007f578d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.262459][ T4356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.262471][ T4356] R13: 00007f578f0a6038 R14: 00007f578f0a5fa0 R15: 00007ffccd6bd4c8 [ 58.262490][ T4356] [ 58.504754][ T4360] loop0: detected capacity change from 0 to 512 [ 58.513559][ T4360] EXT4-fs: Ignoring removed bh option [ 58.519353][ T4360] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.549869][ T4365] loop1: detected capacity change from 0 to 512 [ 58.576538][ T4365] EXT4-fs: Ignoring removed bh option [ 58.577280][ T4362] loop4: detected capacity change from 0 to 512 [ 58.605773][ T4365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.611953][ T4362] EXT4-fs: Ignoring removed bh option [ 58.627255][ T4360] EXT4-fs (loop0): 1 truncate cleaned up [ 58.640796][ T4365] EXT4-fs (loop1): 1 truncate cleaned up [ 58.656011][ T4362] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.667713][ T4365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.290'. [ 58.677172][ T4360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 58.717562][ T4362] EXT4-fs (loop4): 1 truncate cleaned up [ 58.786161][ T4380] loop0: detected capacity change from 0 to 512 [ 58.814543][ T4380] EXT4-fs: Ignoring removed bh option [ 58.835299][ T4380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.854097][ T4380] EXT4-fs (loop0): 1 truncate cleaned up [ 58.865351][ T4390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.869894][ T4394] loop3: detected capacity change from 0 to 128 [ 58.900026][ T4394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 58.908247][ T4390] loop4: detected capacity change from 0 to 512 [ 58.919843][ T4394] System zones: 1-3, 19-19, 35-36 [ 58.926041][ T4394] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.971288][ T4389] loop1: detected capacity change from 0 to 512 [ 58.974766][ T4390] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.980241][ T4389] EXT4-fs: Ignoring removed bh option [ 59.003321][ T4389] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.067646][ T4389] EXT4-fs (loop1): 1 truncate cleaned up [ 59.172071][ T4416] netlink: 'syz.3.300': attribute type 11 has an invalid length. [ 59.198192][ T4421] loop1: detected capacity change from 0 to 512 [ 59.201074][ T4422] netlink: 'syz.0.301': attribute type 11 has an invalid length. [ 59.213635][ T4421] EXT4-fs: Ignoring removed bh option [ 59.220075][ T4421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.261823][ T4421] EXT4-fs (loop1): 1 truncate cleaned up [ 59.283553][ T4421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 59.342267][ T4428] loop1: detected capacity change from 0 to 512 [ 59.350022][ T4428] EXT4-fs: Ignoring removed bh option [ 59.360271][ T4428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.377695][ T4428] EXT4-fs (loop1): 1 truncate cleaned up [ 59.580439][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 59.580457][ T29] audit: type=1400 audit(1758826539.182:995): avc: denied { name_bind } for pid=4439 comm="syz.2.311" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.633166][ T4446] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 59.646601][ T4446] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 59.657710][ T4447] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 59.672808][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 59.685108][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 59.693942][ T4451] netlink: 13 bytes leftover after parsing attributes in process `syz.2.315'. [ 59.705783][ T29] audit: type=1400 audit(1758826539.302:996): avc: denied { write } for pid=4450 comm="syz.2.315" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.719784][ T4453] loop1: detected capacity change from 0 to 1024 [ 59.735786][ T4453] EXT4-fs: Ignoring removed orlov option [ 59.755259][ T29] audit: type=1400 audit(1758826539.352:997): avc: denied { execute } for pid=4454 comm="syz.2.317" name="file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.831029][ T4459] loop2: detected capacity change from 0 to 512 [ 59.845685][ T4459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.857829][ T4459] EXT4-fs (loop2): 1 truncate cleaned up [ 59.873208][ T4459] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.318: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 59.893473][ T29] audit: type=1400 audit(1758826539.472:998): avc: denied { remove_name } for pid=4457 comm="syz.2.318" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.915825][ T29] audit: type=1400 audit(1758826539.472:999): avc: denied { rename } for pid=4457 comm="syz.2.318" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.937481][ T29] audit: type=1400 audit(1758826539.472:1000): avc: denied { unlink } for pid=4457 comm="syz.2.318" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.978687][ T4459] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 59.998910][ T4459] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.318: Deleting old file: nlink 4, error=-117 [ 60.037207][ T4466] loop3: detected capacity change from 0 to 164 [ 60.047991][ T29] audit: type=1400 audit(1758826539.642:1001): avc: denied { setopt } for pid=4457 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.067605][ T3385] IPVS: starting estimator thread 0... [ 60.073627][ T4462] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.318: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 60.096980][ T29] audit: type=1400 audit(1758826539.692:1002): avc: denied { setopt } for pid=4465 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.117611][ T29] audit: type=1400 audit(1758826539.692:1003): avc: denied { write } for pid=4465 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.137173][ T29] audit: type=1400 audit(1758826539.692:1004): avc: denied { ioctl } for pid=4465 comm="syz.3.319" path="socket:[8424]" dev="sockfs" ino=8424 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.212250][ T4477] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 60.224035][ T4477] FAULT_INJECTION: forcing a failure. [ 60.224035][ T4477] name failslab, interval 1, probability 0, space 0, times 0 [ 60.236686][ T4471] IPVS: using max 1968 ests per chain, 98400 per kthread [ 60.236709][ T4477] CPU: 1 UID: 0 PID: 4477 Comm: syz.0.324 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.236749][ T4477] Tainted: [W]=WARN [ 60.236757][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.236781][ T4477] Call Trace: [ 60.236790][ T4477] [ 60.236801][ T4477] __dump_stack+0x1d/0x30 [ 60.236830][ T4477] dump_stack_lvl+0xe8/0x140 [ 60.236855][ T4477] dump_stack+0x15/0x1b [ 60.236891][ T4477] should_fail_ex+0x265/0x280 [ 60.236922][ T4477] ? call_usermodehelper_setup+0x72/0x190 [ 60.236966][ T4477] should_failslab+0x8c/0xb0 [ 60.237000][ T4477] ? __pfx_free_modprobe_argv+0x10/0x10 [ 60.237064][ T4477] __kmalloc_cache_noprof+0x4c/0x320 [ 60.237104][ T4477] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 60.237146][ T4477] ? __pfx_free_modprobe_argv+0x10/0x10 [ 60.237183][ T4477] call_usermodehelper_setup+0x72/0x190 [ 60.237227][ T4477] __request_module+0x264/0x3e0 [ 60.237262][ T4477] ? crypto_alg_lookup+0x310/0x360 [ 60.237295][ T4477] crypto_alg_mod_lookup+0xa1/0x490 [ 60.237339][ T4477] crypto_alloc_tfm_node+0xb5/0x2b0 [ 60.237373][ T4477] crypto_alloc_aead+0x2d/0x40 [ 60.237414][ T4477] macsec_validate_attr+0x109/0x640 [ 60.237445][ T4477] rtnl_newlink+0x859/0x12d0 [ 60.237629][ T4477] ? __account_obj_stock+0x211/0x350 [ 60.237665][ T4477] ? xas_load+0x413/0x430 [ 60.237704][ T4477] ? __memcg_slab_free_hook+0x135/0x230 [ 60.237838][ T4477] ? __rcu_read_unlock+0x4f/0x70 [ 60.237866][ T4477] ? avc_has_perm_noaudit+0x1b1/0x200 [ 60.237978][ T4477] ? cred_has_capability+0x210/0x280 [ 60.238012][ T4477] ? selinux_capable+0x31/0x40 [ 60.238068][ T4477] ? security_capable+0x83/0x90 [ 60.238125][ T4477] ? ns_capable+0x7d/0xb0 [ 60.238152][ T4477] ? __pfx_rtnl_newlink+0x10/0x10 [ 60.238195][ T4477] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 60.238247][ T4477] netlink_rcv_skb+0x120/0x220 [ 60.238334][ T4477] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.238384][ T4477] rtnetlink_rcv+0x1c/0x30 [ 60.238421][ T4477] netlink_unicast+0x5c0/0x690 [ 60.238453][ T4477] netlink_sendmsg+0x58b/0x6b0 [ 60.238526][ T4477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.238562][ T4477] __sock_sendmsg+0x142/0x180 [ 60.238631][ T4477] ____sys_sendmsg+0x31e/0x4e0 [ 60.238671][ T4477] ___sys_sendmsg+0x17b/0x1d0 [ 60.238770][ T4477] __x64_sys_sendmsg+0xd4/0x160 [ 60.238817][ T4477] x64_sys_call+0x191e/0x2ff0 [ 60.238886][ T4477] do_syscall_64+0xd2/0x200 [ 60.238930][ T4477] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.238963][ T4477] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.239003][ T4477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.239093][ T4477] RIP: 0033:0x7f578ee4eec9 [ 60.239113][ T4477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.239138][ T4477] RSP: 002b:00007f578d8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.239213][ T4477] RAX: ffffffffffffffda RBX: 00007f578f0a5fa0 RCX: 00007f578ee4eec9 [ 60.239230][ T4477] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 60.239245][ T4477] RBP: 00007f578d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.239262][ T4477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.239278][ T4477] R13: 00007f578f0a6038 R14: 00007f578f0a5fa0 R15: 00007ffccd6bd4c8 [ 60.239304][ T4477] [ 60.316166][ T4482] loop4: detected capacity change from 0 to 512 [ 60.551992][ T4480] Zero length message leads to an empty skb [ 60.583801][ T4482] EXT4-fs: Ignoring removed oldalloc option [ 60.597014][ T4480] loop3: detected capacity change from 0 to 512 [ 60.624664][ T4480] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.639715][ T4482] EXT4-fs (loop4): unable to read superblock [ 60.709678][ T4482] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 60.795616][ T4508] atomic_op ffff88811b0fd528 conn xmit_atomic 0000000000000000 [ 60.814919][ T4504] loop0: detected capacity change from 0 to 512 [ 60.852892][ T4504] EXT4-fs (loop0): too many log groups per flexible block group [ 60.860637][ T4504] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 60.867687][ T4520] loop3: detected capacity change from 0 to 1024 [ 60.883720][ T4520] EXT4-fs: Ignoring removed orlov option [ 60.897571][ T4504] EXT4-fs (loop0): mount failed [ 60.929785][ T4504] loop0: detected capacity change from 0 to 256 [ 60.953076][ T4529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.006249][ T4529] loop4: detected capacity change from 0 to 512 [ 61.043452][ T4529] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.220541][ T4550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.244282][ T4550] loop2: detected capacity change from 0 to 512 [ 61.273972][ T4551] loop4: detected capacity change from 0 to 512 [ 61.281571][ T4550] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.292852][ T4551] EXT4-fs: Ignoring removed bh option [ 61.300349][ T4551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.315430][ T4551] EXT4-fs (loop4): 1 truncate cleaned up [ 61.401125][ T4560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.442294][ T4560] loop2: detected capacity change from 0 to 512 [ 61.465181][ T4560] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.518115][ T4575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.542403][ T4575] loop3: detected capacity change from 0 to 512 [ 61.562755][ T4575] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.637296][ T4585] loop2: detected capacity change from 0 to 1024 [ 61.645445][ T4588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.671294][ T4588] loop0: detected capacity change from 0 to 512 [ 61.703196][ T4591] openvswitch: netlink: Message has 6 unknown bytes. [ 61.729857][ T4585] EXT4-fs: Ignoring removed orlov option [ 61.772814][ T4588] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.085797][ T3311] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 62.121805][ T3311] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 62.145660][ T4603] loop0: detected capacity change from 0 to 8192 [ 62.332835][ T4611] __nla_validate_parse: 6 callbacks suppressed [ 62.332852][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 62.360041][ T4611] FAULT_INJECTION: forcing a failure. [ 62.360041][ T4611] name failslab, interval 1, probability 0, space 0, times 0 [ 62.372717][ T4611] CPU: 1 UID: 0 PID: 4611 Comm: syz.0.366 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.372787][ T4611] Tainted: [W]=WARN [ 62.372793][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.372805][ T4611] Call Trace: [ 62.372822][ T4611] [ 62.372831][ T4611] __dump_stack+0x1d/0x30 [ 62.372856][ T4611] dump_stack_lvl+0xe8/0x140 [ 62.372879][ T4611] dump_stack+0x15/0x1b [ 62.372910][ T4611] should_fail_ex+0x265/0x280 [ 62.372934][ T4611] should_failslab+0x8c/0xb0 [ 62.372959][ T4611] kmem_cache_alloc_noprof+0x50/0x310 [ 62.372993][ T4611] ? skb_clone+0x151/0x1f0 [ 62.373122][ T4611] skb_clone+0x151/0x1f0 [ 62.373166][ T4611] bpf_clone_redirect+0x7a/0x200 [ 62.373197][ T4611] ? __account_obj_stock+0x211/0x350 [ 62.373221][ T4611] bpf_prog_c08ef512837047f4+0x62/0x6b [ 62.373310][ T4611] ? obj_cgroup_charge_account+0x122/0x1a0 [ 62.373345][ T4611] ? should_fail_ex+0x30/0x280 [ 62.373386][ T4611] ? __rcu_read_unlock+0x4f/0x70 [ 62.373476][ T4611] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.373503][ T4611] ? __list_del_entry_valid_or_report+0x65/0x130 [ 62.373608][ T4611] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 62.373654][ T4611] ? __rcu_read_unlock+0x4f/0x70 [ 62.373680][ T4611] ? is_bpf_text_address+0x141/0x160 [ 62.373722][ T4611] ? kernel_text_address+0x94/0xb0 [ 62.373748][ T4611] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.373808][ T4611] ? __kernel_text_address+0xd/0x40 [ 62.373831][ T4611] ? unwind_get_return_address+0x16/0x40 [ 62.373866][ T4611] ? arch_stack_walk+0xfc/0x150 [ 62.373897][ T4611] ? filter_irq_stacks+0x1d/0x70 [ 62.373933][ T4611] ? stack_depot_save_flags+0xa93/0xb80 [ 62.373958][ T4611] ? read_tsc+0x9/0x20 [ 62.373998][ T4611] ? ktime_get+0x1eb/0x210 [ 62.374023][ T4611] bpf_test_run+0x1e3/0x490 [ 62.374051][ T4611] ? __list_add_valid_or_report+0x38/0xe0 [ 62.374134][ T4611] ? bpf_test_run+0xf6/0x490 [ 62.374166][ T4611] bpf_prog_test_run_skb+0x834/0xbd0 [ 62.374195][ T4611] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 62.374256][ T4611] bpf_prog_test_run+0x227/0x390 [ 62.374296][ T4611] __sys_bpf+0x4b9/0x7b0 [ 62.374337][ T4611] __x64_sys_bpf+0x41/0x50 [ 62.374376][ T4611] x64_sys_call+0x2aea/0x2ff0 [ 62.374444][ T4611] do_syscall_64+0xd2/0x200 [ 62.374513][ T4611] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.374549][ T4611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.374585][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.374608][ T4611] RIP: 0033:0x7f578ee4eec9 [ 62.374733][ T4611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.374755][ T4611] RSP: 002b:00007f578d8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.374778][ T4611] RAX: ffffffffffffffda RBX: 00007f578f0a5fa0 RCX: 00007f578ee4eec9 [ 62.374793][ T4611] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 62.374808][ T4611] RBP: 00007f578d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.374822][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.374835][ T4611] R13: 00007f578f0a6038 R14: 00007f578f0a5fa0 R15: 00007ffccd6bd4c8 [ 62.374860][ T4611] [ 62.756591][ T4615] FAULT_INJECTION: forcing a failure. [ 62.756591][ T4615] name failslab, interval 1, probability 0, space 0, times 0 [ 62.769383][ T4615] CPU: 1 UID: 0 PID: 4615 Comm: syz.4.369 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.769414][ T4615] Tainted: [W]=WARN [ 62.769425][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.769438][ T4615] Call Trace: [ 62.769471][ T4615] [ 62.769479][ T4615] __dump_stack+0x1d/0x30 [ 62.769499][ T4615] dump_stack_lvl+0xe8/0x140 [ 62.769522][ T4615] dump_stack+0x15/0x1b [ 62.769542][ T4615] should_fail_ex+0x265/0x280 [ 62.769578][ T4615] ? rds_cong_from_addr+0x38/0x2c0 [ 62.769649][ T4615] should_failslab+0x8c/0xb0 [ 62.769674][ T4615] __kmalloc_cache_noprof+0x4c/0x320 [ 62.769758][ T4615] ? should_fail_ex+0xdb/0x280 [ 62.769832][ T4615] rds_cong_from_addr+0x38/0x2c0 [ 62.769864][ T4615] rds_cong_get_maps+0x1a/0x70 [ 62.769942][ T4615] __rds_conn_create+0x536/0x1040 [ 62.769986][ T4615] rds_conn_create_outgoing+0x43/0x60 [ 62.770021][ T4615] rds_sendmsg+0xbd2/0x14a0 [ 62.770221][ T4615] ? __pfx_rds_sendmsg+0x10/0x10 [ 62.770261][ T4615] __sock_sendmsg+0x142/0x180 [ 62.770319][ T4615] ____sys_sendmsg+0x31e/0x4e0 [ 62.770356][ T4615] ___sys_sendmsg+0x17b/0x1d0 [ 62.770405][ T4615] __x64_sys_sendmsg+0xd4/0x160 [ 62.770465][ T4615] x64_sys_call+0x191e/0x2ff0 [ 62.770492][ T4615] do_syscall_64+0xd2/0x200 [ 62.770531][ T4615] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.770570][ T4615] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.770619][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.770711][ T4615] RIP: 0033:0x7efd18b5eec9 [ 62.770730][ T4615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.770806][ T4615] RSP: 002b:00007efd175bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.770829][ T4615] RAX: ffffffffffffffda RBX: 00007efd18db5fa0 RCX: 00007efd18b5eec9 [ 62.770844][ T4615] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 62.770858][ T4615] RBP: 00007efd175bf090 R08: 0000000000000000 R09: 0000000000000000 [ 62.770934][ T4615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.770949][ T4615] R13: 00007efd18db6038 R14: 00007efd18db5fa0 R15: 00007fffbdb506e8 [ 62.770973][ T4615] [ 63.132480][ T4626] 9pnet_fd: Insufficient options for proto=fd [ 63.254050][ T4617] lo speed is unknown, defaulting to 1000 [ 63.589651][ T4652] loop3: detected capacity change from 0 to 512 [ 63.607164][ T4652] EXT4-fs: Ignoring removed oldalloc option [ 63.634861][ T4652] EXT4-fs (loop3): unable to read superblock [ 63.840421][ T4617] chnl_net:caif_netlink_parms(): no params data found [ 63.876406][ T4652] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 63.884192][ T4652] netlink: 224 bytes leftover after parsing attributes in process `syz.3.378'. [ 63.921087][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.928206][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.938227][ T4617] bridge_slave_0: entered allmulticast mode [ 63.939022][ T4617] bridge_slave_0: entered promiscuous mode [ 63.942898][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.942937][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.943099][ T4617] bridge_slave_1: entered allmulticast mode [ 63.943804][ T4617] bridge_slave_1: entered promiscuous mode [ 64.000721][ T4617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.002268][ T4617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.056578][ T4617] team0: Port device team_slave_0 added [ 64.075233][ T4617] team0: Port device team_slave_1 added [ 64.114232][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.126066][ T4663] geneve1: entered promiscuous mode [ 64.126866][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.126877][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.126929][ T4617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.127602][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.127612][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.127718][ T4617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.127873][ T4662] geneve1: left promiscuous mode [ 64.229183][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.232804][ T4617] hsr_slave_0: entered promiscuous mode [ 64.233446][ T4617] hsr_slave_1: entered promiscuous mode [ 64.233793][ T4617] debugfs: 'hsr0' already exists in 'hsr' [ 64.233806][ T4617] Cannot create hsr debugfs directory [ 64.281071][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.393216][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.408469][ T4671] loop3: detected capacity change from 0 to 1024 [ 64.447958][ T2645] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 64.448062][ T2645] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.448089][ T2645] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.448089][ T2645] [ 64.448100][ T2645] EXT4-fs (loop3): Total free blocks count 0 [ 64.448112][ T2645] EXT4-fs (loop3): Free/Dirty block details [ 64.448123][ T2645] EXT4-fs (loop3): free_blocks=68451041280 [ 64.448135][ T2645] EXT4-fs (loop3): dirty_blocks=32 [ 64.448147][ T2645] EXT4-fs (loop3): Block reservation details [ 64.448194][ T2645] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 64.448422][ T2645] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 64.448493][ T2645] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.448493][ T2645] [ 64.538190][ T59] bridge_slave_1: left allmulticast mode [ 64.538213][ T59] bridge_slave_1: left promiscuous mode [ 64.538352][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.539315][ T59] bridge_slave_0: left allmulticast mode [ 64.539342][ T59] bridge_slave_0: left promiscuous mode [ 64.539552][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.699837][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 64.699852][ T29] audit: type=1400 audit(1758826544.302:1156): avc: denied { add_name } for pid=4682 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.699882][ T29] audit: type=1400 audit(1758826544.302:1157): avc: denied { create } for pid=4682 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.700078][ T29] audit: type=1400 audit(1758826544.302:1158): avc: denied { write } for pid=4682 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.700346][ T29] audit: type=1400 audit(1758826544.302:1159): avc: denied { append } for pid=4682 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.754689][ T29] audit: type=1400 audit(1758826544.352:1160): avc: denied { remove_name } for pid=4699 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.754726][ T29] audit: type=1400 audit(1758826544.352:1161): avc: denied { unlink } for pid=4699 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.795768][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.797065][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.797980][ T59] bond0 (unregistering): Released all slaves [ 64.857852][ T59] hsr_slave_0: left promiscuous mode [ 64.859571][ T59] hsr_slave_1: left promiscuous mode [ 64.862766][ T59] veth1_macvtap: left promiscuous mode [ 64.862788][ T59] veth0_macvtap: left promiscuous mode [ 64.862840][ T59] veth1_vlan: left promiscuous mode [ 64.862863][ T59] veth0_vlan: left promiscuous mode [ 65.124305][ T59] team0 (unregistering): Port device team_slave_1 removed [ 65.127178][ T59] team0 (unregistering): Port device team_slave_0 removed [ 65.158170][ T4716] loop3: detected capacity change from 0 to 512 [ 65.197707][ T3365] lo speed is unknown, defaulting to 1000 [ 65.197727][ T3365] infiniband syz0: ib_query_port failed (-19) [ 65.298293][ T4716] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.336580][ T4712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.354425][ T4617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.388714][ T4617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.420091][ T4617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.447372][ T4617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.534644][ T29] audit: type=1400 audit(1758826545.132:1162): avc: denied { mount } for pid=4729 comm="syz.0.394" name="/" dev="configfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 65.672970][ T59] IPVS: stop unused estimator thread 0... [ 65.718714][ T29] audit: type=1400 audit(1758826545.162:1163): avc: denied { search } for pid=4729 comm="syz.0.394" name="/" dev="configfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.741156][ T29] audit: type=1326 audit(1758826545.162:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 65.764827][ T29] audit: type=1326 audit(1758826545.162:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ee4eec9 code=0x7ffc0000 [ 65.841247][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.853458][ T4617] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.866920][ T1594] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.874143][ T1594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.912400][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.919581][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.990064][ T4617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.033884][ T4766] loop3: detected capacity change from 0 to 1024 [ 66.055364][ T4766] EXT4-fs: Ignoring removed orlov option [ 66.106013][ T4617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.237637][ T4787] loop4: detected capacity change from 0 to 128 [ 66.257243][ T4787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 66.265490][ T4787] System zones: 1-3, 19-19, 35-36 [ 66.272101][ T4787] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.321943][ T4794] loop1: detected capacity change from 0 to 256 [ 66.469131][ T4808] netlink: 'syz.0.402': attribute type 29 has an invalid length. [ 66.586538][ T4818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 66.603602][ T4818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.624884][ T4825] loop0: detected capacity change from 0 to 512 [ 66.657809][ T4617] veth0_vlan: entered promiscuous mode [ 66.674831][ T4818] macvlan2: entered promiscuous mode [ 66.680398][ T4818] macvlan2: entered allmulticast mode [ 66.687296][ T4818] bond1: entered promiscuous mode [ 66.690749][ T4825] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.692823][ T4818] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.706124][ T4825] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.402: EA inode hash validation failed [ 66.719317][ T4825] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.735080][ T4818] bond1: left promiscuous mode [ 66.739740][ T4825] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.402: corrupted inode contents [ 66.752161][ T4825] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.402: mark_inode_dirty error [ 66.764576][ T4825] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.402: corrupted inode contents [ 66.777578][ T4825] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.402: mark_inode_dirty error [ 66.790137][ T4825] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.402: mark inode dirty (error -117) [ 66.803091][ T4825] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 66.803864][ T4617] veth1_vlan: entered promiscuous mode [ 66.817936][ T4825] EXT4-fs (loop0): 1 orphan inode deleted [ 66.829777][ T4833] loop3: detected capacity change from 0 to 1024 [ 66.836523][ T4833] EXT4-fs: Ignoring removed orlov option [ 66.842361][ T4833] EXT4-fs: Ignoring removed nobh option [ 66.847977][ T4833] EXT4-fs: Ignoring removed bh option [ 66.870543][ T4617] veth0_macvtap: entered promiscuous mode [ 66.905855][ T4833] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm +}[@: Allocating blocks 465-513 which overlap fs metadata [ 66.926429][ T4833] EXT4-fs (loop3): pa ffff88810718a380: logic 256, phys. 369, len 9 [ 66.930521][ T4840] loop4: detected capacity change from 0 to 128 [ 66.934489][ T4833] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 66.950987][ T4833] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 66.966883][ T4617] veth1_macvtap: entered promiscuous mode [ 66.977884][ T4833] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.987923][ T4840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 66.999386][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.007992][ T4840] System zones: 1-3, 19-19, 35-36 [ 67.014523][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.025532][ T3947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.035061][ T4840] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.072383][ T3947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.072471][ T3947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.072511][ T3947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.094959][ T4846] loop0: detected capacity change from 0 to 512 [ 67.095193][ T4846] EXT4-fs: Ignoring removed bh option [ 67.095439][ T4846] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.106435][ T4846] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.107105][ T4846] EXT4-fs (loop0): 1 truncate cleaned up [ 67.126617][ T4846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 67.269074][ T4859] loop5: detected capacity change from 0 to 512 [ 67.276862][ T4859] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.284525][ T4859] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.376846][ T4859] EXT4-fs (loop5): 1 truncate cleaned up [ 67.652376][ T4868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.661016][ T4868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.406610][ T3489] ================================================================== [ 68.406666][ T4884] loop4: detected capacity change from 0 to 512 [ 68.414745][ T3489] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 68.427818][ T3489] [ 68.430153][ T3489] write to 0xffff8881023ed218 of 8 bytes by task 4884 on cpu 0: [ 68.437786][ T3489] inc_diskseq+0x2d/0x40 [ 68.442084][ T3489] disk_force_media_change+0x9e/0xe0 [ 68.447386][ T3489] loop_configure+0x6c8/0x9c0 [ 68.452075][ T3489] lo_ioctl+0x1e1/0x12b0 [ 68.456330][ T3489] blkdev_ioctl+0x352/0x440 [ 68.460839][ T3489] __se_sys_ioctl+0xcb/0x140 [ 68.465451][ T3489] __x64_sys_ioctl+0x43/0x50 [ 68.470043][ T3489] x64_sys_call+0x1816/0x2ff0 [ 68.474730][ T3489] do_syscall_64+0xd2/0x200 [ 68.479253][ T3489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.485152][ T3489] [ 68.487474][ T3489] read to 0xffff8881023ed218 of 8 bytes by task 3489 on cpu 1: [ 68.495024][ T3489] block_uevent+0x31/0x50 [ 68.499377][ T3489] dev_uevent+0x375/0x400 [ 68.503709][ T3489] uevent_show+0x117/0x200 [ 68.508131][ T3489] dev_attr_show+0x3c/0xa0 [ 68.512565][ T3489] sysfs_kf_seq_show+0x1a3/0x280 [ 68.517505][ T3489] kernfs_seq_show+0x7f/0xa0 [ 68.522113][ T3489] seq_read_iter+0x316/0x940 [ 68.526722][ T3489] kernfs_fop_read_iter+0xc1/0x330 [ 68.531857][ T3489] vfs_read+0x649/0x770 [ 68.536020][ T3489] ksys_read+0xda/0x1a0 [ 68.540179][ T3489] __x64_sys_read+0x40/0x50 [ 68.544691][ T3489] x64_sys_call+0x27bc/0x2ff0 [ 68.549371][ T3489] do_syscall_64+0xd2/0x200 [ 68.553890][ T3489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.559789][ T3489] [ 68.562112][ T3489] value changed: 0x00000000000000e4 -> 0x00000000000000e8 [ 68.569215][ T3489] [ 68.571537][ T3489] Reported by Kernel Concurrency Sanitizer on: [ 68.577688][ T3489] CPU: 1 UID: 0 PID: 3489 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.588559][ T3489] Tainted: [W]=WARN [ 68.592362][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.602418][ T3489] ================================================================== [ 68.612275][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.620769][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.676227][ T4884] EXT4-fs: Ignoring removed oldalloc option [ 68.692767][ T4884] EXT4-fs (loop4): unable to read superblock [ 69.389484][ T4884] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 69.397185][ T4884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.425'.