last executing test programs: 1m5.822935909s ago: executing program 4 (id=177): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000700000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000004000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000003000000180000000000000000000000000000009500000000000000950000000000000005cd9e55929d2d5eb8cd22d5d49c7d5aa3f6f92cc1791ff5231b324e4b6a51cb6ec9bedafb00e47068b69d165752f7bc56d6e50bda0cd901000100000000003f63ee70393bdb09eea635d690d88d71aedf2a4abf08eb2fc974004ea9b9e471dcd57c2b88b54c5f0b5eb74c36494b4992b7331309b9e613db8cb711a16fc23163b59ff9b711bdc012"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) fsmount(0xffffffffffffffff, 0x1, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1m5.675884523s ago: executing program 4 (id=180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) pipe2(&(0x7f0000000440), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='find_free_extent\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x200000000000006}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x200000000000006}, 0x18) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES32=r8], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) 1m5.612162349s ago: executing program 4 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x20000000) 1m5.576653573s ago: executing program 4 (id=184): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) io_uring_enter(r0, 0x18b8, 0x3afd, 0x37, &(0x7f00000003c0)={[0xc2d0]}, 0x8) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth1_macvtap\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x4, 0x2d, 0x29, r4, 0x9, '\x00', r7, r0, 0x4, 0x0, 0x4, 0x7}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) lseek(r3, 0x77fffffffffffffd, 0x4) 1m5.035413453s ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2fe, 0xe5, 0x0, 0xfe, 0x0}) 1m4.768216109s ago: executing program 4 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x6de6, &(0x7f0000000180)={0x0, 0xcbd1, 0x2}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000024c0)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) 1m4.716099664s ago: executing program 32 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x6de6, &(0x7f0000000180)={0x0, 0xcbd1, 0x2}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000024c0)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) 4.161280713s ago: executing program 5 (id=1036): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) close(0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 3.300314465s ago: executing program 5 (id=1048): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x24}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x102}, 0x18) r3 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f0000000180)=@pppol2tpv3, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000001240)=""/242, 0xf2}, 0x43) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, {&(0x7f0000000200)=""/208, 0xd0}, &(0x7f0000000000), 0x42}, 0xa0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'ip_vti0\x00'}) 3.278883637s ago: executing program 5 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4", 0x27}], 0x1}, 0x20000000) 3.260070339s ago: executing program 5 (id=1050): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600"], 0x78) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x30000000) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.020211042s ago: executing program 5 (id=1054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) 2.731466519s ago: executing program 5 (id=1061): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x6a0a4000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0xfc, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x81}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000004, 0x8010, 0xffffffffffffffff, 0x2000) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) pause() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 2.509532471s ago: executing program 0 (id=1063): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fallocate(r0, 0x0, 0x3, 0x800000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.264537474s ago: executing program 2 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100005042cbd700000000000000000002a6e640fe9401a1d5d730c774da35966913cfb519d1c5460cf2f73b60d499e76f57fa04bf7c6c6ab662d81ea0e5151e051b71b82c7dbcac01ca87a201d26fd3d731424a9926e05403d8346ff013a720f6396d191bfd8df92bd4aaef01b0290f59306524246448e51c479d20a08c731183b8d4af57716c85850a996480cb8fa06c4f81ae7480239688b2322c36b2a3c8bc12dcf3b17e0dba0bc3012b3de427c4a35260002e069496ca0035046d92cc4e2224251e1b891ea808b76d59dae87af75186c0fb148c4cdd5cbe3635236ccbb8e7ff79fb4cc69c4573dcba679b25d7447", @ANYRES32=0x0, @ANYBLOB="0000000000100000200012800b00010065727370616e000010000280060010000001000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) (async) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) listen(r3, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100005042cbd700000000000000000002a6e640fe9401a1d5d730c774da35966913cfb519d1c5460cf2f73b60d499e76f57fa04bf7c6c6ab662d81ea0e5151e051b71b82c7dbcac01ca87a201d26fd3d731424a9926e05403d8346ff013a720f6396d191bfd8df92bd4aaef01b0290f59306524246448e51c479d20a08c731183b8d4af57716c85850a996480cb8fa06c4f81ae7480239688b2322c36b2a3c8bc12dcf3b17e0dba0bc3012b3de427c4a35260002e069496ca0035046d92cc4e2224251e1b891ea808b76d59dae87af75186c0fb148c4cdd5cbe3635236ccbb8e7ff79fb4cc69c4573dcba679b25d7447", @ANYRES32=0x0, @ANYBLOB="0000000000100000200012800b00010065727370616e000010000280060010000001000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) 2.135449426s ago: executing program 2 (id=1068): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600"], 0x78) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x30000000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect(r5, &(0x7f0000000100)=@sco={0x1f, @none}, 0x80) ptrace(0x10, r6) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 1.665735931s ago: executing program 0 (id=1073): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) close(0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 1.269103589s ago: executing program 2 (id=1080): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600"], 0x78) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x30000000) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.172534678s ago: executing program 3 (id=1081): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x1, 0x7}, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x537e) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0x4, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x10c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x800, 0x3, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) 1.090602146s ago: executing program 3 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 932.998491ms ago: executing program 3 (id=1083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) 930.413431ms ago: executing program 2 (id=1084): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fallocate(r0, 0x0, 0x3, 0x800000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 890.909465ms ago: executing program 3 (id=1085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) 819.481571ms ago: executing program 3 (id=1086): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0x0, 0x2000005, 0x4, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>=0||6') 737.089319ms ago: executing program 3 (id=1087): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x1000}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x10c}}, 0x2404c884) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0xffffff00, 0x0, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0xf, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, {[@noop, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fcntl$setpipe(r6, 0x407, 0x80000001) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r12, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x38000, 0x0) ioctl$TIOCMIWAIT(r13, 0x5453, 0x0) 736.567689ms ago: executing program 0 (id=1097): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 701.557082ms ago: executing program 0 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xce, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 658.912806ms ago: executing program 0 (id=1089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2fe, 0xe5, 0x0, 0xfe, 0x0}) 618.24673ms ago: executing program 0 (id=1091): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600"], 0x78) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x30000000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect(r5, &(0x7f0000000100)=@sco={0x1f, @none}, 0x80) ptrace(0x10, r6) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 133.907797ms ago: executing program 1 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2fe, 0xe5, 0x0, 0xfe, 0x0}) 116.570828ms ago: executing program 1 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) 79.819462ms ago: executing program 1 (id=1098): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0x0, 0x2000005, 0x4, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>=0||6') 53.631924ms ago: executing program 2 (id=1099): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 27.711497ms ago: executing program 1 (id=1100): socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='io_uring_file_get\x00'}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000008000000000000000400050000000000100000000000000020"], 0x24, 0x3) fcntl$setlease(r5, 0x400, 0x2) fchmodat(r5, &(0x7f00000001c0)='./file0\x00', 0x60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00020000000000000000000400"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r7, r8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r6}, 0xc) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 27.140877ms ago: executing program 2 (id=1101): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x9, 0x8, 0x5, 0x3, "b9517524db92542e0f1beafb17021a67153120"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x0) 23.728687ms ago: executing program 1 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xce, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x1c}}, 0x0) 0s ago: executing program 1 (id=1103): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 14: 00007f06f36d5fa0 R15: 00007ffc5e0854d8 [ 80.184781][ T5291] [ 80.421453][ T5295] lo speed is unknown, defaulting to 1000 [ 80.442319][ T5297] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.472906][ T5300] loop3: detected capacity change from 0 to 512 [ 80.480054][ T5300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.492922][ T5298] lo speed is unknown, defaulting to 1000 [ 80.501722][ T5297] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.516781][ T5300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.530077][ T5300] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.561246][ T5297] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.581920][ T5302] lo speed is unknown, defaulting to 1000 [ 80.613638][ T5295] netlink: 'syz.2.541': attribute type 6 has an invalid length. [ 80.621705][ T5300] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.543: iget: bad i_size value: 2533274857506816 [ 80.644172][ T5297] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.661237][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.732679][ T4035] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787961][ T4056] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.796285][ T4056] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.796341][ T4056] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.803574][ T4015] tipc: Subscription rejected, illegal request [ 80.848045][ T5321] loop1: detected capacity change from 0 to 512 [ 80.857284][ T5321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.868942][ T5321] EXT4-fs (loop1): 1 truncate cleaned up [ 80.875135][ T5321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.980961][ T29] audit: type=1400 audit(1766331179.272:5475): avc: denied { write } for pid=5314 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.015787][ T29] audit: type=1400 audit(1766331179.302:5476): avc: denied { relabelfrom } for pid=5328 comm="syz.0.552" name="NETLINK" dev="sockfs" ino=13799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.041652][ T29] audit: type=1400 audit(1766331179.302:5477): avc: denied { relabelto } for pid=5328 comm="syz.0.552" name="NETLINK" dev="sockfs" ino=13799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 81.086569][ T5333] syz.2.549 uses obsolete (PF_INET,SOCK_PACKET) [ 81.509065][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.535277][ T5345] __nla_validate_parse: 19 callbacks suppressed [ 81.535297][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 81.550783][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 81.586055][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 81.599640][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 81.767174][ T5366] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.779852][ T5367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.821451][ T5366] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.849831][ T5367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.869737][ T5366] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.900084][ T5367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.929882][ T5366] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.959865][ T5367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.007965][ T4035] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020447][ T4035] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.032896][ T4035] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.044199][ T4035] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.061955][ T4035] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.073917][ T4035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.087177][ T4035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.100060][ T4035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.134075][ T5374] loop3: detected capacity change from 0 to 512 [ 82.141296][ T5374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.153006][ T5374] EXT4-fs (loop3): 1 truncate cleaned up [ 82.159807][ T5374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.345529][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.407336][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 82.416296][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 82.434171][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 82.443237][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 82.504611][ T5395] FAULT_INJECTION: forcing a failure. [ 82.504611][ T5395] name failslab, interval 1, probability 0, space 0, times 0 [ 82.517369][ T5395] CPU: 1 UID: 0 PID: 5395 Comm: syz.5.572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.517395][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.517412][ T5395] Call Trace: [ 82.517420][ T5395] [ 82.517430][ T5395] __dump_stack+0x1d/0x30 [ 82.517461][ T5395] dump_stack_lvl+0x95/0xd0 [ 82.517490][ T5395] dump_stack+0x15/0x1b [ 82.517509][ T5395] should_fail_ex+0x265/0x280 [ 82.517532][ T5395] should_failslab+0x8c/0xb0 [ 82.517556][ T5395] __kmalloc_cache_noprof+0x65/0x4c0 [ 82.517609][ T5395] ? v9fs_init_fs_context+0x34/0x220 [ 82.517640][ T5395] v9fs_init_fs_context+0x34/0x220 [ 82.517667][ T5395] alloc_fs_context+0x4a4/0x590 [ 82.517693][ T5395] fs_context_for_mount+0x22/0x30 [ 82.517731][ T5395] do_new_mount+0xea/0x6a0 [ 82.517754][ T5395] ? security_capable+0x83/0x90 [ 82.517786][ T5395] path_mount+0x4ab/0xb80 [ 82.517811][ T5395] ? user_path_at+0xbf/0x130 [ 82.517848][ T5395] __se_sys_mount+0x28c/0x2e0 [ 82.517882][ T5395] ? fput+0x8f/0xc0 [ 82.517994][ T5395] __x64_sys_mount+0x67/0x80 [ 82.518063][ T5395] x64_sys_call+0x2cca/0x3000 [ 82.518166][ T5395] do_syscall_64+0xca/0x2b0 [ 82.518210][ T5395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.518277][ T5395] RIP: 0033:0x7f88ce37f749 [ 82.518296][ T5395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.518320][ T5395] RSP: 002b:00007f88ccddf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.518346][ T5395] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce37f749 [ 82.518362][ T5395] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000 [ 82.518378][ T5395] RBP: 00007f88ccddf090 R08: 0000200000000600 R09: 0000000000000000 [ 82.518390][ T5395] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001 [ 82.518452][ T5395] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffe79a960b8 [ 82.518474][ T5395] [ 82.786250][ T5401] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.829202][ T5401] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.890091][ T5401] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.914924][ T5408] loop1: detected capacity change from 0 to 512 [ 82.946671][ T5408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.961345][ T5401] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.961499][ T5408] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.038236][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.205451][ T5414] syzkaller1: entered promiscuous mode [ 83.211003][ T5414] syzkaller1: entered allmulticast mode [ 83.225294][ T5414] bond0: entered allmulticast mode [ 83.632762][ T5417] FAULT_INJECTION: forcing a failure. [ 83.632762][ T5417] name failslab, interval 1, probability 0, space 0, times 0 [ 83.645543][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: syz.5.579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.645635][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.645651][ T5417] Call Trace: [ 83.645658][ T5417] [ 83.645668][ T5417] __dump_stack+0x1d/0x30 [ 83.645700][ T5417] dump_stack_lvl+0x95/0xd0 [ 83.645809][ T5417] dump_stack+0x15/0x1b [ 83.645835][ T5417] should_fail_ex+0x265/0x280 [ 83.645866][ T5417] should_failslab+0x8c/0xb0 [ 83.645933][ T5417] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 83.645964][ T5417] ? __alloc_skb+0x2ff/0x4b0 [ 83.645995][ T5417] __alloc_skb+0x2ff/0x4b0 [ 83.646022][ T5417] ? __alloc_skb+0x228/0x4b0 [ 83.646096][ T5417] netlink_alloc_large_skb+0xbf/0xf0 [ 83.646124][ T5417] netlink_sendmsg+0x3cf/0x6b0 [ 83.646182][ T5417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.646224][ T5417] __sock_sendmsg+0x145/0x180 [ 83.646249][ T5417] ____sys_sendmsg+0x31e/0x4a0 [ 83.646288][ T5417] ___sys_sendmsg+0x17b/0x1d0 [ 83.646409][ T5417] __x64_sys_sendmsg+0xd4/0x160 [ 83.646443][ T5417] x64_sys_call+0x17ba/0x3000 [ 83.646516][ T5417] do_syscall_64+0xca/0x2b0 [ 83.646560][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.646587][ T5417] RIP: 0033:0x7f88ce37f749 [ 83.646659][ T5417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.646683][ T5417] RSP: 002b:00007f88ccddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.646768][ T5417] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce37f749 [ 83.646786][ T5417] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 83.646802][ T5417] RBP: 00007f88ccddf090 R08: 0000000000000000 R09: 0000000000000000 [ 83.646818][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.646833][ T5417] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffe79a960b8 [ 83.646854][ T5417] [ 83.704661][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 83.704686][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 83.910491][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 83.910513][ T29] audit: type=1326 audit(1766331182.202:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 83.940342][ T29] audit: type=1326 audit(1766331182.202:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 83.963890][ T29] audit: type=1326 audit(1766331182.202:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 83.987675][ T29] audit: type=1326 audit(1766331182.202:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 84.011029][ T29] audit: type=1326 audit(1766331182.202:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 84.043678][ T5436] FAULT_INJECTION: forcing a failure. [ 84.043678][ T5436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.057080][ T5436] CPU: 1 UID: 0 PID: 5436 Comm: syz.5.587 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.057135][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.057149][ T5436] Call Trace: [ 84.057155][ T5436] [ 84.057163][ T5436] __dump_stack+0x1d/0x30 [ 84.057261][ T5436] dump_stack_lvl+0x95/0xd0 [ 84.057354][ T5436] dump_stack+0x15/0x1b [ 84.057372][ T5436] should_fail_ex+0x265/0x280 [ 84.057393][ T5436] should_fail+0xb/0x20 [ 84.057437][ T5436] should_fail_usercopy+0x1a/0x20 [ 84.057484][ T5436] _copy_to_user+0x20/0xa0 [ 84.057520][ T5436] simple_read_from_buffer+0xb5/0x130 [ 84.057546][ T5436] proc_fail_nth_read+0x10e/0x150 [ 84.057651][ T5436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.057686][ T5436] vfs_read+0x1a8/0x770 [ 84.057708][ T5436] ? __rcu_read_unlock+0x4f/0x70 [ 84.057735][ T5436] ? __fget_files+0x184/0x1c0 [ 84.057764][ T5436] ? mutex_lock+0x58/0x90 [ 84.057828][ T5436] ksys_read+0xda/0x1a0 [ 84.057848][ T5436] __x64_sys_read+0x40/0x50 [ 84.057873][ T5436] x64_sys_call+0x2889/0x3000 [ 84.058047][ T5436] do_syscall_64+0xca/0x2b0 [ 84.058079][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.058099][ T5436] RIP: 0033:0x7f88ce37e15c [ 84.058113][ T5436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.058134][ T5436] RSP: 002b:00007f88ccddf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.058151][ T5436] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce37e15c [ 84.058163][ T5436] RDX: 000000000000000f RSI: 00007f88ccddf0a0 RDI: 0000000000000007 [ 84.058174][ T5436] RBP: 00007f88ccddf090 R08: 0000000000000000 R09: 0000000000000000 [ 84.058185][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.058195][ T5436] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffe79a960b8 [ 84.058240][ T5436] [ 84.281842][ T29] audit: type=1400 audit(1766331182.572:5492): avc: denied { setopt } for pid=5442 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.304472][ T29] audit: type=1326 audit(1766331182.592:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 84.328041][ T29] audit: type=1326 audit(1766331182.592:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 84.351666][ T29] audit: type=1326 audit(1766331182.602:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 84.375044][ T29] audit: type=1326 audit(1766331182.602:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 84.466726][ T5443] program syz.5.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.021731][ T5461] loop5: detected capacity change from 0 to 512 [ 85.047118][ T5461] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.594: EA inode hash validation failed [ 85.047243][ T5461] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.594: corrupted inode contents [ 85.047401][ T5461] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.594: mark_inode_dirty error [ 85.047752][ T5461] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.594: corrupted inode contents [ 85.289220][ T5461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.594: mark_inode_dirty error [ 85.289681][ T5461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.594: mark inode dirty (error -117) [ 85.289792][ T5461] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 85.289882][ T5461] EXT4-fs (loop5): 1 orphan inode deleted [ 85.290497][ T5461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.291404][ T5461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.430443][ T5474] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.489061][ T5474] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.513682][ T5477] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.529639][ T5474] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.561592][ T5477] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.600868][ T5477] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.631915][ T5474] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.646546][ T5484] loop5: detected capacity change from 0 to 512 [ 85.653997][ T5484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.689946][ T5477] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.732202][ T4038] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.746112][ T4038] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.754624][ T4038] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.767286][ T4038] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.789485][ T4038] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810161][ T4038] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.824013][ T4038] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.838524][ T4038] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.849280][ T5484] EXT4-fs (loop5): 1 truncate cleaned up [ 85.856041][ T5484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.980054][ T4056] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.037966][ T4056] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.046226][ T4056] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.059539][ T5491] lo speed is unknown, defaulting to 1000 [ 86.069436][ T5491] lo speed is unknown, defaulting to 1000 [ 86.087609][ T4056] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.105439][ T5491] lo speed is unknown, defaulting to 1000 [ 86.129909][ T5491] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.216886][ T5493] nftables ruleset with unbound set [ 86.220530][ T5491] lo speed is unknown, defaulting to 1000 [ 86.229084][ T5491] lo speed is unknown, defaulting to 1000 [ 86.230304][ T5493] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 86.235811][ T5491] lo speed is unknown, defaulting to 1000 [ 86.252119][ T5491] lo speed is unknown, defaulting to 1000 [ 86.259584][ T5491] lo speed is unknown, defaulting to 1000 [ 86.326581][ T5495] loop2: detected capacity change from 0 to 512 [ 86.333546][ T5497] netlink: 'syz.0.603': attribute type 5 has an invalid length. [ 86.348715][ T5495] EXT4-fs: Ignoring removed bh option [ 86.359406][ T5495] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.368591][ T5495] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 86.383189][ T5495] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 86.392693][ T5495] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 86.402042][ T5495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.415039][ T5495] FAULT_INJECTION: forcing a failure. [ 86.415039][ T5495] name failslab, interval 1, probability 0, space 0, times 0 [ 86.427910][ T5495] CPU: 0 UID: 0 PID: 5495 Comm: syz.2.604 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.427940][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.427955][ T5495] Call Trace: [ 86.427961][ T5495] [ 86.427969][ T5495] __dump_stack+0x1d/0x30 [ 86.428051][ T5495] dump_stack_lvl+0x95/0xd0 [ 86.428074][ T5495] dump_stack+0x15/0x1b [ 86.428095][ T5495] should_fail_ex+0x265/0x280 [ 86.428120][ T5495] should_failslab+0x8c/0xb0 [ 86.428167][ T5495] __kmalloc_cache_noprof+0x65/0x4c0 [ 86.428193][ T5495] ? ext4_init_fs_context+0x32/0x90 [ 86.428217][ T5495] ext4_init_fs_context+0x32/0x90 [ 86.428237][ T5495] alloc_fs_context+0x4a4/0x590 [ 86.428334][ T5495] fs_context_for_reconfigure+0x42/0x50 [ 86.428364][ T5495] path_mount+0xa41/0xb80 [ 86.428389][ T5495] ? user_path_at+0xbf/0x130 [ 86.428496][ T5495] __se_sys_mount+0x28c/0x2e0 [ 86.428520][ T5495] ? fput+0x8f/0xc0 [ 86.428634][ T5495] __x64_sys_mount+0x67/0x80 [ 86.428702][ T5495] x64_sys_call+0x2cca/0x3000 [ 86.428728][ T5495] do_syscall_64+0xca/0x2b0 [ 86.428827][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.428853][ T5495] RIP: 0033:0x7f02b450f749 [ 86.428871][ T5495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.428892][ T5495] RSP: 002b:00007f02b2f6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.428973][ T5495] RAX: ffffffffffffffda RBX: 00007f02b4765fa0 RCX: 00007f02b450f749 [ 86.428988][ T5495] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 86.429003][ T5495] RBP: 00007f02b2f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.429019][ T5495] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 86.429035][ T5495] R13: 00007f02b4766038 R14: 00007f02b4765fa0 R15: 00007ffdba59a778 [ 86.429059][ T5495] [ 86.701541][ T4121] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.726313][ T5505] loop1: detected capacity change from 0 to 512 [ 86.733911][ T5505] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.744367][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.763754][ T5505] EXT4-fs (loop1): 1 truncate cleaned up [ 86.777187][ T5505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.828445][ T5516] loop0: detected capacity change from 0 to 512 [ 86.842641][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.851608][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.863844][ T5516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.889748][ T5516] EXT4-fs (loop0): 1 truncate cleaned up [ 86.896981][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.121503][ T5524] loop2: detected capacity change from 0 to 512 [ 87.130252][ T5524] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.614: EA inode hash validation failed [ 87.143209][ T5524] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.614: corrupted inode contents [ 87.157609][ T5524] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.614: mark_inode_dirty error [ 87.182936][ T5524] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.614: corrupted inode contents [ 87.204966][ T5524] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.614: mark_inode_dirty error [ 87.231392][ T5524] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.614: mark inode dirty (error -117) [ 87.244233][ T5524] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 87.253497][ T5524] EXT4-fs (loop2): 1 orphan inode deleted [ 87.259954][ T5524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.278111][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.296740][ T5524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.300366][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.337340][ T5533] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.371775][ T5537] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.410013][ T5533] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.446236][ T5537] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.479965][ T5533] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.495872][ T5544] loop3: detected capacity change from 0 to 1024 [ 87.503059][ T5544] EXT4-fs: inline encryption not supported [ 87.519567][ T5544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.533418][ T5537] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.539839][ T5544] __nla_validate_parse: 2 callbacks suppressed [ 87.539890][ T5544] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 87.560834][ T5544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.568380][ T5544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.576296][ T5544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.583920][ T5544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.630201][ T5537] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.642785][ T5533] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.683905][ T5567] netlink: 'syz.5.628': attribute type 1 has an invalid length. [ 88.691854][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.628'. [ 88.707936][ T5567] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.747835][ T5569] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 89.195248][ T5583] loop2: detected capacity change from 0 to 512 [ 89.203792][ T5583] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.634: EA inode hash validation failed [ 89.216687][ T5583] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.634: corrupted inode contents [ 89.228712][ T5583] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.634: mark_inode_dirty error [ 89.240348][ T5583] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.634: corrupted inode contents [ 89.252120][ T5563] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.252899][ T5583] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.634: mark_inode_dirty error [ 89.272613][ T5583] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.634: mark inode dirty (error -117) [ 89.276216][ T5563] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.285988][ T5583] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 89.303183][ T5583] EXT4-fs (loop2): 1 orphan inode deleted [ 89.310218][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.311733][ T5563] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.324428][ T5583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.344957][ T5563] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380490][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 89.380507][ T29] audit: type=1326 audit(1766331187.672:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.410484][ T29] audit: type=1326 audit(1766331187.672:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.433890][ T29] audit: type=1326 audit(1766331187.672:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.457234][ T29] audit: type=1326 audit(1766331187.672:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.480971][ T29] audit: type=1326 audit(1766331187.672:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.504338][ T29] audit: type=1326 audit(1766331187.672:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.527590][ T29] audit: type=1326 audit(1766331187.672:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.534445][ T5592] loop1: detected capacity change from 0 to 1764 [ 89.551087][ T29] audit: type=1326 audit(1766331187.672:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.551123][ T29] audit: type=1326 audit(1766331187.672:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.551157][ T29] audit: type=1326 audit(1766331187.672:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 89.694621][ T5592] team0 (unregistering): Port device team_slave_0 removed [ 89.705018][ T5592] team0 (unregistering): Port device team_slave_1 removed [ 89.880330][ T4019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899505][ T4019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907917][ T5610] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 89.920170][ T4019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.932223][ T4019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.062151][ T5624] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.100175][ T5624] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.149897][ T5624] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.223940][ T5624] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.717014][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.740916][ T5641] loop2: detected capacity change from 0 to 512 [ 90.749809][ T5641] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.654: EA inode hash validation failed [ 90.750445][ T5644] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.763007][ T5641] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.654: corrupted inode contents [ 90.784967][ T5641] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.654: mark_inode_dirty error [ 90.797183][ T5641] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.654: corrupted inode contents [ 90.811487][ T5641] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.654: mark_inode_dirty error [ 90.823774][ T5641] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.654: mark inode dirty (error -117) [ 90.837146][ T5641] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 90.839077][ T5644] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.848746][ T5641] EXT4-fs (loop2): 1 orphan inode deleted [ 90.910469][ T5644] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.925599][ T5649] loop5: detected capacity change from 0 to 1024 [ 90.932690][ T5649] EXT4-fs: Ignoring removed oldalloc option [ 90.939002][ T5649] EXT4-fs: dax option not supported [ 90.951168][ T5644] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.977818][ T5654] loop5: detected capacity change from 0 to 512 [ 91.004519][ T5654] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.047825][ T4007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.061048][ T4029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.072484][ T4007] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.089245][ T4007] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.126182][ T5658] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 91.133414][ T5658] FAULT_INJECTION: forcing a failure. [ 91.133414][ T5658] name failslab, interval 1, probability 0, space 0, times 0 [ 91.146292][ T5658] CPU: 0 UID: 0 PID: 5658 Comm: syz.5.658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.146369][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.146385][ T5658] Call Trace: [ 91.146394][ T5658] [ 91.146404][ T5658] __dump_stack+0x1d/0x30 [ 91.146436][ T5658] dump_stack_lvl+0x95/0xd0 [ 91.146464][ T5658] dump_stack+0x15/0x1b [ 91.146495][ T5658] should_fail_ex+0x265/0x280 [ 91.146559][ T5658] should_failslab+0x8c/0xb0 [ 91.146581][ T5658] __kmalloc_cache_noprof+0x65/0x4c0 [ 91.146612][ T5658] ? fifo_set_limit+0x9f/0x130 [ 91.146643][ T5658] fifo_set_limit+0x9f/0x130 [ 91.146743][ T5658] tbf_change+0x5d8/0xc30 [ 91.146775][ T5658] ? __nla_validate_parse+0x1652/0x1d00 [ 91.146812][ T5658] ? nla_strcmp+0xc3/0xe0 [ 91.146844][ T5658] tc_modify_qdisc+0x117e/0x1480 [ 91.146873][ T5658] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 91.146947][ T5658] rtnetlink_rcv_msg+0x65a/0x6d0 [ 91.146978][ T5658] netlink_rcv_skb+0x123/0x220 [ 91.147016][ T5658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.147043][ T5658] rtnetlink_rcv+0x1c/0x30 [ 91.147109][ T5658] netlink_unicast+0x5c0/0x690 [ 91.147148][ T5658] netlink_sendmsg+0x58b/0x6b0 [ 91.147192][ T5658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.147275][ T5658] __sock_sendmsg+0x145/0x180 [ 91.147299][ T5658] ____sys_sendmsg+0x31e/0x4a0 [ 91.147414][ T5658] ___sys_sendmsg+0x17b/0x1d0 [ 91.147469][ T5658] __x64_sys_sendmsg+0xd4/0x160 [ 91.147546][ T5658] x64_sys_call+0x17ba/0x3000 [ 91.147578][ T5658] do_syscall_64+0xca/0x2b0 [ 91.147621][ T5658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.147649][ T5658] RIP: 0033:0x7f88ce37f749 [ 91.147726][ T5658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.147750][ T5658] RSP: 002b:00007f88ccddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.147781][ T5658] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce37f749 [ 91.147792][ T5658] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 91.147842][ T5658] RBP: 00007f88ccddf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.147853][ T5658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.147865][ T5658] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffe79a960b8 [ 91.147895][ T5658] [ 91.608572][ T5677] FAULT_INJECTION: forcing a failure. [ 91.608572][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 91.621416][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.3.664 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.621456][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.621515][ T5677] Call Trace: [ 91.621523][ T5677] [ 91.621532][ T5677] __dump_stack+0x1d/0x30 [ 91.621568][ T5677] dump_stack_lvl+0x95/0xd0 [ 91.621598][ T5677] dump_stack+0x15/0x1b [ 91.621627][ T5677] should_fail_ex+0x265/0x280 [ 91.621651][ T5677] should_failslab+0x8c/0xb0 [ 91.621750][ T5677] kmem_cache_alloc_noprof+0x69/0x4b0 [ 91.621775][ T5677] ? ep_insert+0x2cf/0xdb0 [ 91.621875][ T5677] ep_insert+0x2cf/0xdb0 [ 91.621915][ T5677] do_epoll_ctl+0x686/0x8a0 [ 91.621968][ T5677] __x64_sys_epoll_ctl+0xcb/0x100 [ 91.622049][ T5677] x64_sys_call+0x745/0x3000 [ 91.622080][ T5677] do_syscall_64+0xca/0x2b0 [ 91.622131][ T5677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.622155][ T5677] RIP: 0033:0x7f7b9821f749 [ 91.622172][ T5677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.622206][ T5677] RSP: 002b:00007f7b96c5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 91.622232][ T5677] RAX: ffffffffffffffda RBX: 00007f7b98476090 RCX: 00007f7b9821f749 [ 91.622249][ T5677] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 91.622266][ T5677] RBP: 00007f7b96c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.622299][ T5677] R10: 0000200000c85000 R11: 0000000000000246 R12: 0000000000000001 [ 91.622316][ T5677] R13: 00007f7b98476128 R14: 00007f7b98476090 R15: 00007ffc7407b2b8 [ 91.622337][ T5677] [ 91.885694][ T5683] loop2: detected capacity change from 0 to 512 [ 91.893867][ T5683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.908546][ T5683] EXT4-fs (loop2): 1 truncate cleaned up [ 92.196207][ T5693] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.216939][ T5694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.224183][ T5694] IPv6: NLM_F_CREATE should be set when creating new route [ 92.249736][ T5693] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.310269][ T5693] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.370129][ T5693] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.879594][ T5700] loop5: detected capacity change from 0 to 512 [ 92.888571][ T5700] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.671: EA inode hash validation failed [ 92.901269][ T5700] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.671: corrupted inode contents [ 92.913613][ T5700] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.671: mark_inode_dirty error [ 92.925371][ T5700] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.671: corrupted inode contents [ 92.937753][ T5700] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.671: mark_inode_dirty error [ 92.950801][ T5700] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.671: mark inode dirty (error -117) [ 92.964230][ T5700] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 92.973468][ T5700] EXT4-fs (loop5): 1 orphan inode deleted [ 93.155888][ T5715] loop2: detected capacity change from 0 to 512 [ 93.664765][ T4052] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684748][ T4052] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.700126][ T4052] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.712084][ T4052] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.814994][ T5743] FAULT_INJECTION: forcing a failure. [ 93.814994][ T5743] name failslab, interval 1, probability 0, space 0, times 0 [ 93.828140][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.0.688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.828176][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.828218][ T5743] Call Trace: [ 93.828227][ T5743] [ 93.828237][ T5743] __dump_stack+0x1d/0x30 [ 93.828263][ T5743] dump_stack_lvl+0x95/0xd0 [ 93.828284][ T5743] dump_stack+0x15/0x1b [ 93.828306][ T5743] should_fail_ex+0x265/0x280 [ 93.828376][ T5743] should_failslab+0x8c/0xb0 [ 93.828399][ T5743] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 93.828423][ T5743] ? __alloc_skb+0x2ff/0x4b0 [ 93.828455][ T5743] __alloc_skb+0x2ff/0x4b0 [ 93.828503][ T5743] ? __alloc_skb+0x228/0x4b0 [ 93.828601][ T5743] audit_log_start+0x3a0/0x720 [ 93.828630][ T5743] ? kstrtouint+0x76/0xc0 [ 93.828653][ T5743] audit_seccomp+0x48/0x100 [ 93.828700][ T5743] ? __seccomp_filter+0x832/0x1260 [ 93.828736][ T5743] __seccomp_filter+0x843/0x1260 [ 93.828774][ T5743] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.828810][ T5743] ? vfs_write+0x7e8/0x960 [ 93.828872][ T5743] __secure_computing+0x82/0x150 [ 93.828908][ T5743] syscall_trace_enter+0xcf/0x1e0 [ 93.828998][ T5743] do_syscall_64+0xa4/0x2b0 [ 93.829077][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.829159][ T5743] RIP: 0033:0x7fa8b67ff749 [ 93.829177][ T5743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.829200][ T5743] RSP: 002b:00007fa8b5267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 93.829225][ T5743] RAX: ffffffffffffffda RBX: 00007fa8b6a55fa0 RCX: 00007fa8b67ff749 [ 93.829291][ T5743] RDX: 000000000000006f RSI: 0000000000000084 RDI: ffffffffffffffff [ 93.829303][ T5743] RBP: 00007fa8b5267090 R08: 0000000000000000 R09: 0000000000000000 [ 93.829315][ T5743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.829327][ T5743] R13: 00007fa8b6a56038 R14: 00007fa8b6a55fa0 R15: 00007ffd8aaacb88 [ 93.829351][ T5743] [ 94.097756][ T5748] loop2: detected capacity change from 0 to 512 [ 94.115409][ T5748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.149185][ T5748] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.156427][ T5748] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm LX[X: bg 0: block 248: padding at end of block bitmap is not set [ 94.172308][ T5748] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm LX[X: Failed to acquire dquot type 1 [ 94.183801][ T5748] EXT4-fs (loop2): 1 truncate cleaned up [ 94.196444][ T5749] loop1: detected capacity change from 0 to 512 [ 94.208207][ T5749] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.689: EA inode hash validation failed [ 94.222090][ T5749] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.689: corrupted inode contents [ 94.234387][ T5749] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.689: mark_inode_dirty error [ 94.246817][ T5749] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.689: corrupted inode contents [ 94.271663][ T5749] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.689: mark_inode_dirty error [ 94.284385][ T5749] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.689: mark inode dirty (error -117) [ 94.298355][ T5762] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.308684][ T5749] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 94.318088][ T5749] EXT4-fs (loop1): 1 orphan inode deleted [ 94.349389][ T5762] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.419952][ T5762] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.445276][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 94.499252][ T5762] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.607991][ T5774] process 'syz.2.699' launched './file1' with NULL argv: empty string added [ 94.616861][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 94.616954][ T29] audit: type=1400 audit(1766331192.902:5851): avc: denied { execute_no_trans } for pid=5773 comm="syz.2.699" path="/157/file1" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.704115][ T29] audit: type=1326 audit(1766331192.992:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.727623][ T29] audit: type=1326 audit(1766331192.992:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.751079][ T29] audit: type=1326 audit(1766331192.992:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.774383][ T29] audit: type=1326 audit(1766331192.992:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.797784][ T29] audit: type=1326 audit(1766331192.992:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.821722][ T29] audit: type=1326 audit(1766331192.992:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.845321][ T29] audit: type=1326 audit(1766331192.992:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.868757][ T29] audit: type=1326 audit(1766331192.992:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.870781][ T5778] loop5: detected capacity change from 0 to 8192 [ 94.892210][ T29] audit: type=1326 audit(1766331192.992:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f06f347f749 code=0x7ffc0000 [ 94.948526][ T5778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=5778 comm=syz.5.701 [ 95.343737][ T4029] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355195][ T4029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.366846][ T4029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.378436][ T4029] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.398250][ T5797] loop1: detected capacity change from 0 to 512 [ 95.412425][ T5797] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.707: EA inode hash validation failed [ 95.425201][ T5797] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.707: corrupted inode contents [ 95.437606][ T5797] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.707: mark_inode_dirty error [ 95.449219][ T5797] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.707: corrupted inode contents [ 95.461360][ T5797] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.707: mark_inode_dirty error [ 95.473573][ T5797] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.707: mark inode dirty (error -117) [ 95.486527][ T5797] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 95.495767][ T5797] EXT4-fs (loop1): 1 orphan inode deleted [ 95.941052][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 95.941140][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 96.541376][ T5835] lo speed is unknown, defaulting to 1000 [ 96.601669][ T5836] lo speed is unknown, defaulting to 1000 [ 96.628231][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 96.628271][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 96.744349][ T5842] lo speed is unknown, defaulting to 1000 [ 96.816906][ T5835] netlink: 'syz.5.722': attribute type 6 has an invalid length. [ 96.829865][ T5835] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.722'. [ 96.829908][ T5835] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.722'. [ 96.900125][ T5849] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.940331][ T5849] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.959756][ T5855] loop5: detected capacity change from 0 to 512 [ 96.967322][ T5855] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.979697][ T5855] EXT4-fs (loop5): 1 truncate cleaned up [ 97.029680][ T5849] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.042019][ T5865] netlink: 'syz.5.731': attribute type 12 has an invalid length. [ 97.104172][ T5867] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.117170][ T5849] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.164100][ T5867] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.271314][ T4052] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.281217][ T5867] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.366606][ T4029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.387833][ T4029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.395275][ T4029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.419375][ T5867] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.519973][ T4025] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.529261][ T5886] lo speed is unknown, defaulting to 1000 [ 97.552960][ T4052] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.570514][ T4052] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.585964][ T4052] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.591503][ T5888] lo speed is unknown, defaulting to 1000 [ 97.661368][ T5886] netlink: 'syz.3.741': attribute type 6 has an invalid length. [ 97.675537][ T5886] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.741'. [ 97.675574][ T5886] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.741'. [ 97.737679][ T4025] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.750324][ T4025] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.766713][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 97.776945][ T4025] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781346][ T4025] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.834352][ T5905] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.890270][ T5905] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.950977][ T5905] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.967789][ T5916] loop0: detected capacity change from 0 to 1024 [ 97.971401][ T5916] EXT4-fs: inline encryption not supported [ 97.980804][ T5916] EXT4-fs: Ignoring removed orlov option [ 97.987929][ T5916] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.002583][ T5905] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.013595][ T5916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 98.013625][ T5916] System zones: 0-1, 3-12 [ 98.191141][ T5931] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.207275][ T5929] lo speed is unknown, defaulting to 1000 [ 98.232641][ T5931] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.260877][ T5932] lo speed is unknown, defaulting to 1000 [ 98.284362][ T5929] netlink: 'syz.1.758': attribute type 6 has an invalid length. [ 98.307927][ T5931] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.386100][ T5931] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.453304][ T4019] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.461757][ T4019] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.483910][ T4019] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.495904][ T4019] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.541132][ T5926] loop0: detected capacity change from 0 to 512 [ 98.551127][ T5926] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.757: EA inode hash validation failed [ 98.567784][ T5926] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.757: corrupted inode contents [ 98.580070][ T5926] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.757: mark_inode_dirty error [ 98.591824][ T5926] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.757: corrupted inode contents [ 98.604220][ T5926] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.757: mark_inode_dirty error [ 98.619649][ T5926] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.757: mark inode dirty (error -117) [ 98.632655][ T5926] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 98.641932][ T5926] EXT4-fs (loop0): 1 orphan inode deleted [ 98.670197][ T5948] loop5: detected capacity change from 0 to 512 [ 98.677076][ T5948] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.689903][ T5948] EXT4-fs (loop5): 1 truncate cleaned up [ 98.751158][ T5955] netlink: 'syz.5.764': attribute type 12 has an invalid length. [ 98.900771][ T5958] loop5: detected capacity change from 0 to 1024 [ 98.907980][ T5958] EXT4-fs: inline encryption not supported [ 98.913835][ T5958] EXT4-fs: Ignoring removed orlov option [ 98.920099][ T5958] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.950338][ T5958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 98.958705][ T5958] System zones: 0-1, 3-12 [ 99.176848][ T5981] loop3: detected capacity change from 0 to 512 [ 99.184028][ T5981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.195955][ T5981] EXT4-fs (loop3): 1 truncate cleaned up [ 99.256050][ T5985] netlink: 'syz.3.777': attribute type 12 has an invalid length. [ 99.268786][ T5984] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.344803][ T5984] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.422985][ T5984] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.481535][ T5984] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.595879][ T5995] loop3: detected capacity change from 0 to 1024 [ 99.603290][ T5995] EXT4-fs: inline encryption not supported [ 99.609221][ T5995] EXT4-fs: Ignoring removed orlov option [ 99.615337][ T5995] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 99.628652][ T5995] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 99.636992][ T5995] System zones: 0-1, 3-12 [ 99.642321][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 99.642337][ T29] audit: type=1326 audit(1766331197.932:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9821df90 code=0x7ffc0000 [ 99.672378][ T29] audit: type=1326 audit(1766331197.932:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7b9821e497 code=0x7ffc0000 [ 99.695767][ T29] audit: type=1326 audit(1766331197.932:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9821df90 code=0x7ffc0000 [ 99.719151][ T29] audit: type=1326 audit(1766331197.932:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.742599][ T29] audit: type=1326 audit(1766331197.932:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.765911][ T29] audit: type=1326 audit(1766331197.932:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.789365][ T29] audit: type=1326 audit(1766331197.932:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.812963][ T29] audit: type=1326 audit(1766331197.932:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.836449][ T29] audit: type=1326 audit(1766331197.932:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.860062][ T29] audit: type=1326 audit(1766331197.932:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9821f749 code=0x7ffc0000 [ 99.926518][ T6002] lo speed is unknown, defaulting to 1000 [ 99.959383][ T6002] netlink: 'syz.5.784': attribute type 6 has an invalid length. [ 99.976507][ T6002] __nla_validate_parse: 3 callbacks suppressed [ 99.976526][ T6002] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.784'. [ 99.992028][ T6002] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.784'. [ 100.112534][ T6015] loop5: detected capacity change from 0 to 512 [ 100.137539][ T6015] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.156646][ T6015] EXT4-fs (loop5): 1 truncate cleaned up [ 100.216135][ T6019] netlink: 'syz.5.789': attribute type 12 has an invalid length. [ 100.262733][ T6006] loop3: detected capacity change from 0 to 512 [ 100.286020][ T6006] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.782: EA inode hash validation failed [ 100.298886][ T6006] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.782: corrupted inode contents [ 100.310981][ T6006] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.782: mark_inode_dirty error [ 100.322767][ T6006] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.782: corrupted inode contents [ 100.334969][ T6006] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.782: mark_inode_dirty error [ 100.347151][ T6006] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.782: mark inode dirty (error -117) [ 100.359976][ T6006] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 100.369552][ T6006] EXT4-fs (loop3): 1 orphan inode deleted [ 100.523428][ T4029] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.535913][ T4029] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.547967][ T4029] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.562409][ T6029] loop5: detected capacity change from 0 to 1024 [ 100.567648][ T4025] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.570914][ T6029] EXT4-fs: inline encryption not supported [ 100.582911][ T6029] EXT4-fs: Ignoring removed orlov option [ 100.590550][ T4025] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.600103][ T6029] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 100.607593][ T4025] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.624268][ T4025] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.638067][ T4025] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.649345][ T6029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 100.665140][ T6029] System zones: 0-1, 3-12 [ 100.716452][ T6039] EXT4-fs: inline encryption not supported [ 100.722384][ T6039] EXT4-fs: Ignoring removed orlov option [ 100.729370][ T6039] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 100.759185][ T6039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 100.786091][ T6046] lo speed is unknown, defaulting to 1000 [ 100.792095][ T6039] System zones: 0-1, 3-12 [ 100.831067][ T6046] netlink: 'syz.3.798': attribute type 6 has an invalid length. [ 100.842744][ T6046] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.798'. [ 100.852078][ T6046] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.798'. [ 100.941091][ T6059] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.994796][ T6059] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.090274][ T6059] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.190462][ T6069] EXT4-fs: inline encryption not supported [ 101.190484][ T6069] EXT4-fs: Ignoring removed orlov option [ 101.190525][ T6059] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.193278][ T6069] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.238658][ T6069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 101.246840][ T6069] System zones: 0-1, 3-12 [ 101.530700][ T6080] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.809: EA inode hash validation failed [ 101.545607][ T6080] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.809: corrupted inode contents [ 101.557960][ T6080] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.809: mark_inode_dirty error [ 101.569823][ T6080] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.809: corrupted inode contents [ 101.582427][ T6080] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.809: mark_inode_dirty error [ 101.584079][ T4121] EXT4-fs unmount: 37 callbacks suppressed [ 101.584134][ T4121] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.612767][ T6080] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.809: mark inode dirty (error -117) [ 101.628007][ T6080] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 101.639236][ T6080] EXT4-fs (loop3): 1 orphan inode deleted [ 101.645375][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.659155][ T6080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.669661][ T6086] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.721157][ T6086] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.770550][ T6086] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.819374][ T6086] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.212773][ T6100] set_capacity_and_notify: 3 callbacks suppressed [ 102.212793][ T6100] loop0: detected capacity change from 0 to 512 [ 102.233399][ T6100] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.816: EA inode hash validation failed [ 102.246234][ T6100] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.816: corrupted inode contents [ 102.258355][ T6100] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.816: mark_inode_dirty error [ 102.269973][ T6100] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.816: corrupted inode contents [ 102.282037][ T6100] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.816: mark_inode_dirty error [ 102.294186][ T6100] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.816: mark inode dirty (error -117) [ 102.307135][ T6100] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 102.316269][ T6100] EXT4-fs (loop0): 1 orphan inode deleted [ 102.322578][ T6100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.335719][ T6100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.561669][ T6114] loop2: detected capacity change from 0 to 1024 [ 102.569078][ T6114] EXT4-fs: inline encryption not supported [ 102.575028][ T6114] EXT4-fs: Ignoring removed orlov option [ 102.582300][ T6114] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 102.598798][ T6114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 102.606992][ T6114] System zones: 0-1, 3-12 [ 102.611868][ T6114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.653409][ T4007] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.665513][ T4007] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.676873][ T4007] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.688934][ T4007] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.834791][ T4029] tipc: Subscription rejected, illegal request [ 102.882898][ T6124] lo speed is unknown, defaulting to 1000 [ 102.941811][ T6127] lo speed is unknown, defaulting to 1000 [ 102.997579][ T6124] netlink: 'syz.5.825': attribute type 6 has an invalid length. [ 103.006874][ T6124] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.825'. [ 103.016298][ T6124] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.825'. [ 103.220188][ T6142] loop0: detected capacity change from 0 to 512 [ 103.228696][ T6142] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.827: EA inode hash validation failed [ 103.241538][ T6142] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.827: corrupted inode contents [ 103.253910][ T6142] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.827: mark_inode_dirty error [ 103.265635][ T6142] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.827: corrupted inode contents [ 103.277841][ T6142] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.827: mark_inode_dirty error [ 103.289990][ T6142] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.827: mark inode dirty (error -117) [ 103.302737][ T6142] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 103.311945][ T6142] EXT4-fs (loop0): 1 orphan inode deleted [ 103.318273][ T6142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.331429][ T6142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.398871][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.418383][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 103.427324][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 103.490178][ T4019] tipc: Subscription rejected, illegal request [ 103.563910][ T4052] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.577281][ T4052] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.588362][ T4052] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.600618][ T4052] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.714029][ T6156] loop2: detected capacity change from 0 to 512 [ 103.722953][ T6156] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.837: EA inode hash validation failed [ 103.736025][ T6156] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.837: corrupted inode contents [ 103.748286][ T6156] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.837: mark_inode_dirty error [ 103.760026][ T6156] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.837: corrupted inode contents [ 103.772120][ T6156] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.837: mark_inode_dirty error [ 103.784270][ T6156] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.837: mark inode dirty (error -117) [ 103.797209][ T6156] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 103.806447][ T6156] EXT4-fs (loop2): 1 orphan inode deleted [ 103.812604][ T6156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.825669][ T6156] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.989840][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.845'. [ 103.989864][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.845'. [ 103.992536][ T6175] loop0: detected capacity change from 0 to 1024 [ 104.016642][ T6175] EXT4-fs: inline encryption not supported [ 104.022601][ T6175] EXT4-fs: Ignoring removed orlov option [ 104.029327][ T6175] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.042571][ T6175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 104.042670][ T6175] System zones: 0-1, 3-12 [ 104.043183][ T6175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.071655][ T6181] loop5: detected capacity change from 0 to 1024 [ 104.072344][ T6181] EXT4-fs: inline encryption not supported [ 104.072366][ T6181] EXT4-fs: Ignoring removed orlov option [ 104.074182][ T6181] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.108633][ T6181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 104.116930][ T6181] System zones: 0-1, 3-12 [ 104.122062][ T6181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.159470][ T4121] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.181354][ T4019] tipc: Subscription rejected, illegal request [ 104.379159][ T6192] loop5: detected capacity change from 0 to 512 [ 104.387959][ T6192] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.849: EA inode hash validation failed [ 104.400898][ T6192] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.849: corrupted inode contents [ 104.412970][ T6192] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.849: mark_inode_dirty error [ 104.424962][ T6192] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.849: corrupted inode contents [ 104.437336][ T6192] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.849: mark_inode_dirty error [ 104.449578][ T6192] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.849: mark inode dirty (error -117) [ 104.462532][ T6192] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 104.471677][ T6192] EXT4-fs (loop5): 1 orphan inode deleted [ 104.477975][ T6192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.491268][ T6192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.826060][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.029718][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 105.029734][ T29] audit: type=1326 audit(1766331203.322:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.066417][ T6215] loop0: detected capacity change from 0 to 1024 [ 105.073848][ T6215] EXT4-fs: inline encryption not supported [ 105.079831][ T6215] EXT4-fs: Ignoring removed orlov option [ 105.085826][ T29] audit: type=1326 audit(1766331203.352:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.108453][ T6215] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 105.109093][ T29] audit: type=1326 audit(1766331203.352:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.142243][ T29] audit: type=1326 audit(1766331203.352:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.165768][ T29] audit: type=1326 audit(1766331203.352:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.189083][ T29] audit: type=1326 audit(1766331203.352:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.212929][ T29] audit: type=1326 audit(1766331203.352:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.236420][ T29] audit: type=1326 audit(1766331203.352:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.260185][ T29] audit: type=1326 audit(1766331203.352:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.283760][ T29] audit: type=1326 audit(1766331203.352:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 105.310320][ T6215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 105.322769][ T6215] System zones: 0-1, 3-12 [ 105.329066][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.367327][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.393484][ T6229] loop1: detected capacity change from 0 to 1024 [ 105.394405][ T6229] EXT4-fs: inline encryption not supported [ 105.406096][ T6229] EXT4-fs: Ignoring removed orlov option [ 105.414038][ T6229] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 105.430286][ T6229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 105.430323][ T6229] System zones: 0-1, 3-12 [ 105.430906][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.490519][ T6239] __nla_validate_parse: 2 callbacks suppressed [ 105.490610][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 105.490630][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 105.599715][ T6247] loop3: detected capacity change from 0 to 512 [ 105.606555][ T6247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.623416][ T6247] EXT4-fs (loop3): 1 truncate cleaned up [ 105.629926][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.695802][ T6254] netlink: 'syz.3.870': attribute type 12 has an invalid length. [ 105.809391][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.834748][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 105.843842][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 105.891135][ T6255] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.872: EA inode hash validation failed [ 105.904053][ T6255] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.872: corrupted inode contents [ 105.916189][ T6255] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.872: mark_inode_dirty error [ 105.928224][ T6255] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.872: corrupted inode contents [ 105.940318][ T6255] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.872: mark_inode_dirty error [ 105.952520][ T6255] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.872: mark inode dirty (error -117) [ 105.965227][ T6255] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 105.974410][ T6255] EXT4-fs (loop0): 1 orphan inode deleted [ 105.980702][ T6255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.993936][ T6255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.140441][ T6265] lo speed is unknown, defaulting to 1000 [ 106.182325][ T6265] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.876'. [ 106.191834][ T6265] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.876'. [ 106.230208][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 106.239259][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 106.258077][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.509220][ T6290] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.883: EA inode hash validation failed [ 106.522745][ T6290] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.883: corrupted inode contents [ 106.534996][ T6290] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.883: mark_inode_dirty error [ 106.535247][ T6290] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.883: corrupted inode contents [ 106.535428][ T6290] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.883: mark_inode_dirty error [ 106.535640][ T6290] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.883: mark inode dirty (error -117) [ 106.584614][ T6290] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 106.584715][ T6290] EXT4-fs (loop5): 1 orphan inode deleted [ 106.600396][ T6290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.614374][ T6290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.650394][ T6304] EXT4-fs: inline encryption not supported [ 106.656378][ T6304] EXT4-fs: Ignoring removed orlov option [ 106.663598][ T6304] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 106.678658][ T6304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 106.686958][ T6304] System zones: 0-1, 3-12 [ 106.691941][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.860030][ T6312] lo speed is unknown, defaulting to 1000 [ 106.892632][ T6312] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.892'. [ 106.901920][ T6312] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.892'. [ 107.304671][ T6326] set_capacity_and_notify: 3 callbacks suppressed [ 107.304692][ T6326] loop2: detected capacity change from 0 to 512 [ 107.376420][ T6335] x_tables: duplicate underflow at hook 1 [ 107.496629][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.549522][ T6342] lo speed is unknown, defaulting to 1000 [ 107.579383][ T6338] loop1: detected capacity change from 0 to 512 [ 107.587066][ T6338] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.899: EA inode hash validation failed [ 107.587336][ T6338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.899: corrupted inode contents [ 107.587639][ T6338] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.899: mark_inode_dirty error [ 107.587854][ T6338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.899: corrupted inode contents [ 107.588019][ T6338] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.899: mark_inode_dirty error [ 107.588203][ T6338] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.899: mark inode dirty (error -117) [ 107.588373][ T6338] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 107.588412][ T6338] EXT4-fs (loop1): 1 orphan inode deleted [ 107.588959][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.590004][ T6338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.727344][ T6346] loop0: detected capacity change from 0 to 1024 [ 107.729110][ T6346] EXT4-fs: inline encryption not supported [ 107.740499][ T6346] EXT4-fs: Ignoring removed orlov option [ 107.746853][ T6346] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.760465][ T6346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 107.760510][ T6346] System zones: 0-1, 3-12 [ 107.761132][ T6346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.812032][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.864360][ T6355] loop3: detected capacity change from 0 to 512 [ 107.871624][ T6355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.883374][ T6355] EXT4-fs (loop3): 1 truncate cleaned up [ 107.889795][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.966890][ T6358] netlink: 'syz.3.909': attribute type 12 has an invalid length. [ 108.066217][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.088551][ T6357] loop0: detected capacity change from 0 to 512 [ 108.097743][ T6357] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.908: EA inode hash validation failed [ 108.097897][ T6357] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.908: corrupted inode contents [ 108.098031][ T6357] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.908: mark_inode_dirty error [ 108.098251][ T6357] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.908: corrupted inode contents [ 108.098372][ T6357] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.908: mark_inode_dirty error [ 108.098593][ T6357] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.908: mark inode dirty (error -117) [ 108.098736][ T6357] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 108.218142][ T6357] EXT4-fs (loop0): 1 orphan inode deleted [ 108.218727][ T6357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.280671][ T4029] tipc: Subscription rejected, illegal request [ 108.290990][ T6357] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.333046][ T6379] loop5: detected capacity change from 0 to 1024 [ 108.340373][ T6379] EXT4-fs: inline encryption not supported [ 108.346259][ T6379] EXT4-fs: Ignoring removed orlov option [ 108.353048][ T6379] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 108.370041][ T6384] loop1: detected capacity change from 0 to 512 [ 108.377008][ T6384] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.388324][ T6379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 108.390425][ T6384] EXT4-fs (loop1): 1 truncate cleaned up [ 108.396638][ T6379] System zones: 0-1, 3-12 [ 108.403920][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.407736][ T6379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.458962][ T4121] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.507137][ T6392] netlink: 'syz.1.920': attribute type 12 has an invalid length. [ 108.620996][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.747081][ T6398] loop2: detected capacity change from 0 to 512 [ 108.754096][ T6407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6407 comm=syz.1.928 [ 108.757828][ T6398] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.923: EA inode hash validation failed [ 108.779450][ T6398] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.923: corrupted inode contents [ 108.791722][ T6398] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.923: mark_inode_dirty error [ 108.803305][ T6398] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.923: corrupted inode contents [ 108.815420][ T6398] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.923: mark_inode_dirty error [ 108.827782][ T6398] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.923: mark inode dirty (error -117) [ 108.841912][ T6398] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 108.851132][ T6398] EXT4-fs (loop2): 1 orphan inode deleted [ 108.857435][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.871067][ T6398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.905858][ T4029] tipc: Subscription rejected, illegal request [ 108.952196][ T6418] loop1: detected capacity change from 0 to 1024 [ 108.959286][ T6418] EXT4-fs: inline encryption not supported [ 108.965196][ T6418] EXT4-fs: Ignoring removed orlov option [ 108.971483][ T6418] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 108.988851][ T6418] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 108.997156][ T6418] System zones: 0-1, 3-12 [ 109.002326][ T6418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.039449][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.077689][ T6424] loop1: detected capacity change from 0 to 512 [ 109.085056][ T6424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.098267][ T6424] EXT4-fs (loop1): 1 truncate cleaned up [ 109.104598][ T6424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.171889][ T6429] netlink: 'syz.1.935': attribute type 12 has an invalid length. [ 109.292779][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.340005][ T6434] lo speed is unknown, defaulting to 1000 [ 109.357412][ T6430] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.936: EA inode hash validation failed [ 109.374724][ T6430] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.936: corrupted inode contents [ 109.387257][ T6430] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.936: mark_inode_dirty error [ 109.399044][ T6430] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.936: corrupted inode contents [ 109.417674][ T6430] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.936: mark_inode_dirty error [ 109.442674][ T6430] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.936: mark inode dirty (error -117) [ 109.465976][ T6443] EXT4-fs: inline encryption not supported [ 109.472124][ T6443] EXT4-fs: Ignoring removed orlov option [ 109.472502][ T6430] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 109.487221][ T6443] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.500878][ T6430] EXT4-fs (loop3): 1 orphan inode deleted [ 109.507318][ T6430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.520744][ T6430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.524331][ T6443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 109.563633][ T6443] System zones: 0-1, 3-12 [ 109.564738][ T6450] EXT4-fs: inline encryption not supported [ 109.573049][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.573944][ T6450] EXT4-fs: Ignoring removed orlov option [ 109.590530][ T6450] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.631049][ T6450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 109.639565][ T6450] System zones: 0-1, 3-12 [ 109.640275][ T6450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.685019][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.706153][ T6462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.721029][ T6462] EXT4-fs (loop0): 1 truncate cleaned up [ 109.727378][ T6462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.794032][ T6466] netlink: 'syz.0.948': attribute type 12 has an invalid length. [ 109.860921][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.888430][ T6468] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.942576][ T6468] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.990899][ T6468] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.051017][ T6468] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.139536][ T4019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.190676][ T4019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.199570][ T4019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.208392][ T6476] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.952: EA inode hash validation failed [ 110.221030][ T4019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.229636][ T6476] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.952: corrupted inode contents [ 110.241949][ T6476] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.952: mark_inode_dirty error [ 110.254133][ T6476] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.952: corrupted inode contents [ 110.266549][ T6476] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.952: mark_inode_dirty error [ 110.278773][ T6476] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.952: mark inode dirty (error -117) [ 110.291742][ T6476] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 110.301137][ T6476] EXT4-fs (loop3): 1 orphan inode deleted [ 110.307843][ T6476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.321029][ T6476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.337077][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.390869][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 110.390886][ T29] audit: type=1326 audit(1766331208.682:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.392878][ T29] audit: type=1326 audit(1766331208.682:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.445531][ T29] audit: type=1326 audit(1766331208.732:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.445600][ T29] audit: type=1326 audit(1766331208.732:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.514969][ T6491] lo speed is unknown, defaulting to 1000 [ 110.544247][ T6491] __nla_validate_parse: 22 callbacks suppressed [ 110.544265][ T6491] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.957'. [ 110.544312][ T6491] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.957'. [ 110.579669][ T29] audit: type=1326 audit(1766331208.872:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.603261][ T29] audit: type=1326 audit(1766331208.872:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.603331][ T29] audit: type=1326 audit(1766331208.872:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.603363][ T29] audit: type=1326 audit(1766331208.872:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.603399][ T29] audit: type=1326 audit(1766331208.872:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.603434][ T29] audit: type=1326 audit(1766331208.872:6988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88ce37f749 code=0x7ffc0000 [ 110.631595][ T6493] EXT4-fs: inline encryption not supported [ 110.727065][ T6493] EXT4-fs: Ignoring removed orlov option [ 110.733528][ T6493] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.759561][ T6493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 110.771121][ T6493] System zones: 0-1, 3-12 [ 110.771781][ T6493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.835778][ T4121] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.854137][ T6499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.875016][ T6499] EXT4-fs (loop1): 1 truncate cleaned up [ 110.875723][ T6499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.955456][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955522][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955566][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955594][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955616][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955716][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955743][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955788][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955817][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955849][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955876][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955921][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955948][ T6508] syz_tun: tun_net_xmit 1514 [ 110.955972][ T6508] syz_tun: tun_net_xmit 1514 [ 110.956046][ T6508] syz_tun: tun_net_xmit 1514 [ 110.956100][ T6508] syz_tun: tun_net_xmit 1514 [ 110.956121][ T6508] syz_tun: tun_net_xmit 1514 [ 110.956155][ T6508] syz_tun: tun_net_xmit 1514 [ 110.956205][ T6508] syz_tun: tun_net_xmit 1514 [ 110.956232][ T6508] syz_tun: tun_net_xmit 928 [ 111.010024][ T6510] netlink: 'syz.1.960': attribute type 12 has an invalid length. [ 111.248095][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.277811][ T6513] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.295013][ T6515] EXT4-fs: inline encryption not supported [ 111.301083][ T6515] EXT4-fs: Ignoring removed orlov option [ 111.337578][ T6515] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.368765][ T6515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 111.376971][ T6515] System zones: 0-1, 3-12 [ 111.383402][ T6513] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.403810][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.500908][ T6513] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.563122][ T6531] EXT4-fs: inline encryption not supported [ 111.569391][ T6531] EXT4-fs: Ignoring removed orlov option [ 111.577657][ T6513] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.589048][ T6531] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.608930][ T6531] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 111.617295][ T6531] System zones: 0-1, 3-12 [ 111.622603][ T6531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.645016][ T4029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.656940][ T4029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.670201][ T4029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.682238][ T4029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.706969][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.770913][ T6538] lo speed is unknown, defaulting to 1000 [ 111.816173][ T6539] lo speed is unknown, defaulting to 1000 [ 111.842913][ T6544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.853621][ T6545] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.973'. [ 111.866276][ T6545] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.973'. [ 111.880628][ T6544] EXT4-fs (loop2): 1 truncate cleaned up [ 111.941815][ T6548] netlink: 'syz.2.975': attribute type 12 has an invalid length. [ 112.037520][ T6540] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.972: EA inode hash validation failed [ 112.037693][ T6540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.972: corrupted inode contents [ 112.038834][ T6540] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.972: mark_inode_dirty error [ 112.090961][ T6540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.972: corrupted inode contents [ 112.104287][ T6540] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.972: mark_inode_dirty error [ 112.144078][ T6540] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.972: mark inode dirty (error -117) [ 112.144311][ T6540] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 112.144346][ T6540] EXT4-fs (loop3): 1 orphan inode deleted [ 112.606906][ T6561] set_capacity_and_notify: 11 callbacks suppressed [ 112.606928][ T6561] loop2: detected capacity change from 0 to 512 [ 112.621512][ T6561] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.978: EA inode hash validation failed [ 112.621675][ T6561] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.978: corrupted inode contents [ 112.622026][ T6561] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.978: mark_inode_dirty error [ 112.657879][ T6561] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.978: corrupted inode contents [ 112.658075][ T6561] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.978: mark_inode_dirty error [ 112.658212][ T6561] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.978: mark inode dirty (error -117) [ 112.658400][ T6561] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 112.658451][ T6561] EXT4-fs (loop2): 1 orphan inode deleted [ 112.721884][ T6575] loop3: detected capacity change from 0 to 1024 [ 112.723093][ T6575] EXT4-fs: inline encryption not supported [ 112.734261][ T6575] EXT4-fs: Ignoring removed orlov option [ 112.741728][ T6575] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 112.814527][ T6575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 112.829863][ T6575] System zones: 0-1, 3-12 [ 112.894377][ T6583] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.962992][ T6587] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.999952][ T6581] loop1: detected capacity change from 0 to 512 [ 113.001781][ T6583] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.005694][ T6581] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.984: inode has both inline data and extents flags [ 113.049945][ T6587] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.075930][ T6581] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.984: couldn't read orphan inode 15 (err -117) [ 113.081891][ T6587] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.086714][ T6583] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.141201][ T6587] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.144656][ T6583] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.189422][ T6594] loop2: detected capacity change from 0 to 1024 [ 113.190277][ T6594] EXT4-fs: inline encryption not supported [ 113.190302][ T6594] EXT4-fs: Ignoring removed orlov option [ 113.228399][ T2814] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.267204][ T2814] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.283787][ T6594] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 113.299943][ T2814] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.300045][ T2814] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.300081][ T2814] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.300185][ T2814] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.300261][ T2814] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.308425][ T2814] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.356264][ T6594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 113.364597][ T6594] System zones: 0-1, 3-12 [ 113.397060][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 113.406031][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 113.449140][ T6612] loop3: detected capacity change from 0 to 1024 [ 113.456431][ T6612] EXT4-fs: inline encryption not supported [ 113.462378][ T6612] EXT4-fs: Ignoring removed orlov option [ 113.469064][ T6612] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 113.490547][ T6612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 113.508169][ T6612] System zones: 0-1, 3-12 [ 113.613651][ T6621] lo speed is unknown, defaulting to 1000 [ 113.672648][ T6623] lo speed is unknown, defaulting to 1000 [ 113.753429][ T6621] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.998'. [ 113.753474][ T6621] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.998'. [ 113.922636][ T6630] loop3: detected capacity change from 0 to 512 [ 113.930587][ T6630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.960235][ T6630] EXT4-fs (loop3): 1 truncate cleaned up [ 114.016690][ T6639] netlink: 'syz.3.1001': attribute type 12 has an invalid length. [ 114.075866][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 114.075896][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 114.115848][ T6645] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.180529][ T6645] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.231005][ T6645] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.345612][ T6645] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.456695][ T6666] loop5: detected capacity change from 0 to 1024 [ 114.470198][ T4019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.477077][ T6666] EXT4-fs: inline encryption not supported [ 114.484301][ T6666] EXT4-fs: Ignoring removed orlov option [ 114.500815][ T6666] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.520578][ T4019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.541742][ T4019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.597768][ T4007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.611301][ T6666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 114.648876][ T4019] tipc: Subscription rejected, illegal request [ 114.671947][ T6666] System zones: 0-1, 3-12 [ 114.893698][ T6690] loop3: detected capacity change from 0 to 1024 [ 114.901545][ T6690] EXT4-fs: inline encryption not supported [ 114.907576][ T6690] EXT4-fs: Ignoring removed orlov option [ 114.920455][ T6690] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.942215][ T6690] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 114.981742][ T6690] System zones: 0-1, 3-12 [ 115.065835][ T6702] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.090525][ T6702] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.114530][ T6685] loop0: detected capacity change from 0 to 512 [ 115.132508][ T6685] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1019: EA inode hash validation failed [ 115.132654][ T6685] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1019: corrupted inode contents [ 115.132867][ T6685] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1019: mark_inode_dirty error [ 115.133367][ T6685] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1019: corrupted inode contents [ 115.287633][ T6685] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1019: mark_inode_dirty error [ 115.300673][ T6685] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1019: mark inode dirty (error -117) [ 115.300849][ T6685] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 115.300907][ T6685] EXT4-fs (loop0): 1 orphan inode deleted [ 115.325613][ T6702] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.371693][ T6702] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.741829][ T6729] __nla_validate_parse: 4 callbacks suppressed [ 115.741848][ T6729] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1038'. [ 115.741889][ T6729] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1038'. [ 115.907172][ T6740] loop0: detected capacity change from 0 to 1024 [ 115.907522][ T6740] EXT4-fs: inline encryption not supported [ 115.907572][ T6740] EXT4-fs: Ignoring removed orlov option [ 115.908810][ T6740] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 115.949157][ T6740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 115.969850][ T6740] System zones: 0-1, 3-12 [ 116.384101][ T6754] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1047: EA inode hash validation failed [ 116.397072][ T6754] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1047: corrupted inode contents [ 116.397872][ T6754] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1047: mark_inode_dirty error [ 116.421587][ T6754] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1047: corrupted inode contents [ 116.421802][ T6754] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1047: mark_inode_dirty error [ 116.421957][ T6754] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1047: mark inode dirty (error -117) [ 116.422135][ T6754] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 116.422178][ T6754] EXT4-fs (loop1): 1 orphan inode deleted [ 116.808359][ T6777] FAULT_INJECTION: forcing a failure. [ 116.808359][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 116.808393][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.0.1055 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.808443][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.808456][ T6777] Call Trace: [ 116.808462][ T6777] [ 116.808469][ T6777] __dump_stack+0x1d/0x30 [ 116.808497][ T6777] dump_stack_lvl+0x95/0xd0 [ 116.808562][ T6777] dump_stack+0x15/0x1b [ 116.808587][ T6777] should_fail_ex+0x265/0x280 [ 116.808620][ T6777] should_failslab+0x8c/0xb0 [ 116.808648][ T6777] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 116.808674][ T6777] ? __get_vm_area_node+0x106/0x1d0 [ 116.808758][ T6777] __get_vm_area_node+0x106/0x1d0 [ 116.808792][ T6777] get_vm_area+0x65/0xa0 [ 116.808852][ T6777] ? arena_map_alloc+0x1e6/0x360 [ 116.808881][ T6777] arena_map_alloc+0x1e6/0x360 [ 116.808908][ T6777] map_create+0x862/0xda0 [ 116.808978][ T6777] ? security_bpf+0x2b/0x90 [ 116.809014][ T6777] __sys_bpf+0x54e/0x7c0 [ 116.809051][ T6777] __x64_sys_bpf+0x41/0x50 [ 116.809100][ T6777] x64_sys_call+0x28e1/0x3000 [ 116.809205][ T6777] do_syscall_64+0xca/0x2b0 [ 116.809240][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.809328][ T6777] RIP: 0033:0x7fa8b67ff749 [ 116.809373][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.809402][ T6777] RSP: 002b:00007fa8b5267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.809427][ T6777] RAX: ffffffffffffffda RBX: 00007fa8b6a55fa0 RCX: 00007fa8b67ff749 [ 116.809443][ T6777] RDX: 0000000000000050 RSI: 0000200000001140 RDI: 0000000000000000 [ 116.809565][ T6777] RBP: 00007fa8b5267090 R08: 0000000000000000 R09: 0000000000000000 [ 116.809578][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.809589][ T6777] R13: 00007fa8b6a56038 R14: 00007fa8b6a55fa0 R15: 00007ffd8aaacb88 [ 116.809609][ T6777] [ 117.065222][ T4019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.072660][ T4019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.076271][ T4019] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.098215][ T4019] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.122837][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 117.122854][ T29] audit: type=1326 audit(1766331215.412:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.123010][ T29] audit: type=1326 audit(1766331215.412:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.123296][ T29] audit: type=1326 audit(1766331215.412:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.123431][ T29] audit: type=1326 audit(1766331215.412:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.123551][ T29] audit: type=1326 audit(1766331215.412:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.123843][ T29] audit: type=1326 audit(1766331215.412:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.271459][ T29] audit: type=1400 audit(1766331215.462:7386): avc: denied { validate_trans } for pid=6789 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.271530][ T29] audit: type=1400 audit(1766331215.462:7387): avc: denied { setopt } for pid=6789 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.271557][ T29] audit: type=1326 audit(1766331215.492:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.271652][ T29] audit: type=1326 audit(1766331215.492:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b67ff749 code=0x7ffc0000 [ 117.317137][ T6798] EXT4-fs: inline encryption not supported [ 117.317162][ T6798] EXT4-fs: Ignoring removed orlov option [ 117.321379][ T6798] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.391719][ T6798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 117.391763][ T6798] System zones: 0-1, 3-12 [ 117.438422][ T6807] EXT4-fs: inline encryption not supported [ 117.444373][ T6807] EXT4-fs: Ignoring removed orlov option [ 117.451510][ T6807] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.470550][ T6807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 117.487139][ T6807] System zones: 0-1, 3-12 [ 117.627122][ T6813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1067'. [ 117.749730][ T6824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6824 comm=syz.1.1071 [ 117.793593][ T6827] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.840062][ T6827] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.884967][ T6825] set_capacity_and_notify: 3 callbacks suppressed [ 117.885011][ T6825] loop2: detected capacity change from 0 to 512 [ 117.900351][ T6827] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.913783][ T6825] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1068: EA inode hash validation failed [ 117.933457][ T6825] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1068: corrupted inode contents [ 117.946363][ T6825] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1068: mark_inode_dirty error [ 117.958220][ T6825] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1068: corrupted inode contents [ 117.972786][ T6827] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.984568][ T6825] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.1068: mark_inode_dirty error [ 117.997036][ T6825] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.1068: mark inode dirty (error -117) [ 118.010077][ T6825] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 118.020486][ T6825] EXT4-fs (loop2): 1 orphan inode deleted [ 118.048075][ T4048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.065555][ T4048] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.078571][ T4048] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.090227][ T4048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.412902][ T6847] loop3: detected capacity change from 0 to 512 [ 118.414070][ T6847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.431779][ T6847] EXT4-fs (loop3): 1 truncate cleaned up [ 118.489486][ T6849] netlink: 'syz.3.1079': attribute type 12 has an invalid length. [ 118.894339][ T6860] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1083'. [ 118.894381][ T6860] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1083'. [ 118.938565][ T6862] loop2: detected capacity change from 0 to 1024 [ 118.945709][ T6862] EXT4-fs: inline encryption not supported [ 118.945789][ T6862] EXT4-fs: Ignoring removed orlov option [ 118.946239][ T6862] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 118.961125][ T6862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 118.977095][ T6862] System zones: 0-1, 3-12 [ 119.054784][ T6870] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.100008][ T6870] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.171469][ T6870] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.251755][ T6870] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.301356][ T6885] loop1: detected capacity change from 0 to 512 [ 119.308798][ T6885] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.329237][ T6885] EXT4-fs (loop1): 1 truncate cleaned up [ 119.392677][ T6887] netlink: 'syz.1.1092': attribute type 12 has an invalid length. [ 119.482519][ T6883] loop0: detected capacity change from 0 to 512 [ 119.492494][ T6883] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1091: EA inode hash validation failed [ 119.505649][ T6883] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1091: corrupted inode contents [ 119.518329][ T6883] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1091: mark_inode_dirty error [ 119.530166][ T6883] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1091: corrupted inode contents [ 119.542536][ T6883] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1091: mark_inode_dirty error [ 119.554929][ T6883] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1091: mark inode dirty (error -117) [ 119.568184][ T6883] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 119.577338][ T6883] EXT4-fs (loop0): 1 orphan inode deleted [ 119.709628][ T6899] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1096'. [ 119.719049][ T6899] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1096'. [ 119.857252][ T6908] ================================================================== [ 119.865396][ T6908] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 119.872481][ T6908] [ 119.874824][ T6908] write to 0xffff8881229b5d08 of 44 bytes by task 6912 on cpu 0: [ 119.882561][ T6908] tty_set_termios+0xc0/0x8c0 [ 119.887270][ T6908] set_termios+0x35b/0x4d0 [ 119.891819][ T6908] tty_mode_ioctl+0x379/0x5c0 [ 119.896553][ T6908] n_tty_ioctl_helper+0x91/0x210 [ 119.901531][ T6908] n_tty_ioctl+0x101/0x230 [ 119.905980][ T6908] tty_ioctl+0x83f/0xb80 [ 119.910245][ T6908] __se_sys_ioctl+0xce/0x140 [ 119.914879][ T6908] __x64_sys_ioctl+0x43/0x50 [ 119.919590][ T6908] x64_sys_call+0x14b0/0x3000 [ 119.924296][ T6908] do_syscall_64+0xca/0x2b0 [ 119.928844][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.934878][ T6908] [ 119.937263][ T6908] read to 0xffff8881229b5d14 of 4 bytes by task 6908 on cpu 1: [ 119.944826][ T6908] n_tty_write+0x9c/0xbf0 [ 119.949191][ T6908] file_tty_write+0x378/0x690 [ 119.953911][ T6908] tty_write+0x25/0x30 [ 119.958017][ T6908] vfs_write+0x52a/0x960 [ 119.962290][ T6908] ksys_write+0xda/0x1a0 [ 119.966592][ T6908] __x64_sys_write+0x40/0x50 [ 119.971210][ T6908] x64_sys_call+0x2847/0x3000 [ 119.975932][ T6908] do_syscall_64+0xca/0x2b0 [ 119.980485][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.986422][ T6908] [ 119.988846][ T6908] value changed: 0x00008a3b -> 0x00000005 [ 119.994575][ T6908] [ 119.996914][ T6908] Reported by Kernel Concurrency Sanitizer on: [ 120.003116][ T6908] CPU: 1 UID: 0 PID: 6908 Comm: syz.2.1101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.012860][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.022945][ T6908] ================================================================== [ 121.263850][ T4053] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.275340][ T4053] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.286465][ T4053] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.298157][ T4008] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0