last executing test programs: 3.279633691s ago: executing program 1 (id=560): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f0000000900)) r1 = creat(0x0, 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=ANY=[], 0x1c}], 0x1}, 0x8000) 3.102289318s ago: executing program 0 (id=562): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x3b8, 0x1b0, 0x3b8, 0x0, 0x3b8, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0x0, 0x0, 0xff000000], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) 3.068318362s ago: executing program 0 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000280)={0x0, ""/190}, 0xc6, 0x3, 0x2000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r6 = syz_io_uring_setup(0x749, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000900)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) io_uring_enter(r6, 0x749f, 0x4, 0x1, 0x0, 0x0) 3.008854058s ago: executing program 0 (id=564): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f0000000900)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=ANY=[], 0x1c}], 0x1}, 0x8000) 2.724896675s ago: executing program 1 (id=566): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=ANY=[], 0x1c}], 0x1}, 0x8000) 2.689872719s ago: executing program 4 (id=567): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x40040600, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x14507e, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pipe(&(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015000a0000"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) 2.534027082s ago: executing program 4 (id=570): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x40040600, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x14507e, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pipe(&(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015000a0000"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) 2.521905482s ago: executing program 0 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00100000000000000000000000ef000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) tee(r3, 0xffffffffffffffff, 0x4e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/hci\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r6, 0x4b4a, 0x10000000000004) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/dev?H\xa6t/t\x89;B'}], 0xa, "accadf0a429db504d823f49490e1e4c6553b1f870dd113e2ade2af77421b3e4106205de4a535932bc7f3804528ee0ad7ae83db0a25b5936bfb9f481da3e0e15166a0e37d66876155b52cc5c62ba572"}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") 2.394254867s ago: executing program 3 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8054) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 2.376989583s ago: executing program 4 (id=578): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d00)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYBLOB="01000000230800007800128009000100766c616e00000000680002800600010003000000100004804c000100020000007c0a000040000380fcfe010001000000070000000c00010004000000080000000c00010007000000280b00000c000100810000", @ANYRES8], 0xa0}, 0x1, 0x0, 0x0, 0x4044064}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000ffffffffffff", @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000700)=""/208, 0xd0, 0x0, &(0x7f0000001940)=""/135, 0x87}}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000001c80), &(0x7f0000001cc0)=0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@enum64={0xb, 0x4, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x1b, 0x7}, {0x6, 0x1, 0x8}, {0x8, 0x8, 0x9}, {0xd, 0x3, 0x9}]}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0x6, [{0xe, 0x3, 0x4}, {0x2, 0x1, 0xfffffffe}, {0x6, 0x4}]}]}, {0x0, [0x2e, 0x61, 0x3e, 0x5f, 0x2e]}}, &(0x7f0000001b80)=""/219, 0x8b, 0xdb, 0x0, 0x6, 0x10000, @value=r8}, 0x28) write$binfmt_misc(r4, &(0x7f0000000640)="ca46fb6ee44b3c09ef40899a4a4a024116eac79f8bbddac96069afa1760c9330d5460609a54209c406a184a3d0e70f5ef962427e04f711540dfb695de0d1fda187ba0ad33ecfcb6bb6b01f72b72afce0c08159c4e2cc63113388855579eb59cd26f59497123bd1e27ba90640d64ca9324e8756a4d7eafb8be2852532aae7858d4bf974033bee14a3776faca005e82fba142370f5a8b8043588e8acce8694fbdf", 0xa0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="240003"], 0x10e0}}, 0x20000000) 2.306494441s ago: executing program 2 (id=579): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f0000000900)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0xc}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a91010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6070000004e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af555f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f52766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000000900010073797a30000000000900020073797a32"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=ANY=[], 0x1c}], 0x1}, 0x8000) 2.263263268s ago: executing program 4 (id=580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x40001e0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") 1.955750688s ago: executing program 1 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 1.564673404s ago: executing program 2 (id=582): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f0000000900)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=ANY=[], 0x1c}], 0x1}, 0x8000) 1.371188499s ago: executing program 4 (id=583): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.337768254s ago: executing program 4 (id=584): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00100000000000000000000000ef000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/hci\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r5, 0x4b4a, 0x10000000000004) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/dev?H\xa6t/t\x89;B'}], 0xa, "accadf0a429db504d823f49490e1e4c6553b1f870dd113e2ade2af77421b3e4106205de4a535932bc7f3804528ee0ad7ae83db0a25b5936bfb9f481da3e0e15166a0e37d66876155b52cc5c62ba572"}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") 1.290069368s ago: executing program 3 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r2, &(0x7f00000018c0)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xa, @private0, 0x800}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)="2c80c0ef1729baff9f7f24e3d88db6b44731d491d5b2c89317479587fa24b5d9a157e448b550903698d51f4d5ffeb0bc8d5904ecdf9c6a5c9c3e005e3a2e2546ce0fe013f16d6570921dc02908ef9ea3d8c6923142188e7f5d1319f1eb5848", 0x5f}, {&(0x7f0000000600)="fc083d96b45a036e56cfd675dc29a7a3cae65248509ee4503acafc83baf580ce2b1a4fe43ab1a6097bc9886fe0de93b04857353ebfedcd547ecdeb32bf5c1fdd11f24cba94e3881903c81261e14d4ad278d80e03a81020e3a38eac5bb25bda3a9016b7fbc4fa7fdf750cbd880b81689c49c62b22f60d12c1f7b161d0fdd5636ae75bca31cfdb308f90ce3ea344f00c1c93b5af580ec83c4aa0d30b57e9f29da8ba4f8cc4", 0xa4}, {&(0x7f00000006c0)="9679a00bec04543c8587d2aff87a03ed708bd17c6f098ead6f54dbbec7346deb384f6fe705a9a6969c5ec2288fb13c2bbe958729b80880f0ecd632a981ee4f075989ddb580c6f30397826e89896c88954af0ba46a4c6c07877260e25c34ae15b40de61e4cd205f96e038e33c1b46a7e9085140aaa355dcc97594a4b8ee896661d836392417c69dbeb467b6cdc46d14018c98c93bf762cee8361f59cd0bf00a1cd46df9df3d09c7404c602ec57c2b1744621b145056d3ca31bc22ec2a50af2ffff37acab6cd8675a40faad3ad8f44b1e948ff0d87a1", 0xd5}, {&(0x7f00000007c0)="7c9da71bd563bd9c9d96144ee8eb332ed6ba6b0cdd5225a7f388c853c3ce4bc9ad55b645fb89a1042bbdef72040a18dee2fcd73c3cd9844997285bc1ee069bb422c74a5cab93690c9174248c513b3a74875df410f0eb2ab01b8ad87c0c168d2a5cb68331bf9961c0bb1390a107abe884657dd01583703708374a4d1981dff373c387999744880b08b92ec847fd580df24d09fbc1ee576128f0c7d98699a7c2b77b28ee33cd52df7c0855b03e5b5fe235ce627440224b26a4613770684a5e95ad9ec7592433340032c2b5a1b9da9b3b947a6861725c8b4e1e35c65951289f626b3c549ec47ad62e869a31f18a2c807b6dfba275357bee937f3abe774e71c20743d029f9b7e740ebba6512877d67804e7096d3d3e6dbc230111a6a81470d450a1140c90625a1c0da3faabb9a2a3510191e428563baed0ca985a8ba694b2560e4526ef9b4d201365964bfa4e6e4cc706e38fde9f26c53b8a62a0442d6f48a269ea45be32725e0cc1cb941eac87cc0fc23aabe1165db3f88d5ab618f1ee88afa48903eb50a956d7046ce82d855391dd61b79fb9536921147767c938baa38518c067d4629c7c2f65c439a7760aede30403e5f163d507de5097e9e11907f6947dc4fcf0c000bf52f7153802e3eecf02f3d612d2f0c51e290bcca4a227cfc45809b13b3ba888e25bc3de68efc97aa2771873642a42091b90b21c037d7dadc94df0949f001a05a63bfe14f6bb573e28f140f80bcab87f7be25fc4277532f4e7fdf3668858ff0a1ded7e6df057f134abf51d58556716e8f8351b9053c5abf0cf1feff42d5402fb0b3691c0c9d00727137d19a05f3fd41a64317b220a263cc2b879e8bbeebd5a505c8d0105443c11991bee0bd55755ec7f0057806730f410a3d8c4b0bc6d10074576164e18c0168510223f2a3d82b8c16f1466ef1baddf6dd994440b98a3d4045f1e1267b5407f0b818fc738b008dda3a3ab8ae200d5e2450dcbbf5be6b9b159a6f101746ca3ab1a23186142f60b44cdc158f66667a8aca7c576dd022b124b4c9a4956a9cc48478ebc4f99e8d8d61bcb54a7c7c1e65d656d61d44ce343fb26b92535f0beb9dc88c881938f4c23f175275e17dafe686b1a225dc2deda9bc1f8304ab2af2252e042df4e9291a1bcbe3edf162fd69250414cbd865725fb341c2ab0f330959803f9f6e4c4a39717a6c3d78b5642ba2fc9b465b77c0e2f9d9ded51df7f88e83026d85b5ea499308edfc54bfa88be18b00226fae43619e04eacf953e65ec91c552451dcbdc34729c64290856632e446d0e6735bbd29c2784d6f6462441e8f27dc7567981dcc165b4aef1872733b2459acca6584ac7aca222112f5b7102601a84cada4e48edcc9db8196829ac7b75ae98edf22bc9d08abc815dbf9f6a577283ffac34fc6320b57544eb9bacbaea5bb6dde118581023231585a40ad48a847840d9bfb8dd3704b54d850d9355efbc1038688989af590cf1611443914b185e6b10ee0266b4ef8e160b6a4fd6eb2cd5e73ce7bd6f5180293a69c42dce866c7b161e3a50b301ac76ffd7f996f6e5e33dc93f2a1ab7167a4ae12942bb6b6eded219240df26750ba3d07d5f27a95895c14b51e8ac57ac0b4036929c971728c45608763c76a06a183f803b2748a414004cde83e4aca8f9fddd7cd3371df396a37071798607aab67a82d0a6ec289c9f487cb8400a49e6ab946ad6460f1729ac62d2cfb8256ef106871db868d6078868e226107d820f7da1c58857917a97eea699d04dcda9025ee5b7dcbf37c6059884cb65b9ee075b9892ad9fd65f62ece29dcf2accc823131e80910291f96a18532e50fc43c2760e61ddd2d13c0aa0cf0a8a8ef5fcd277f32c33b528b93069075f8de282dedd177688d313047fce62d1c748bb5d06b52d9ab41e83d4522d8f6528f8b3cb6f8923ca02709d7c9bbce0b39486278369cd42ac8e3449f9483d5ec81d2bee4bf50c80a93a30a76966af47fae9a198e083fa743b9c9a7b59e2d83449554607da75ef188cb7fd27ae86b6266b54cec5037d742be896afdec27103eaede1cb1209c32ba94fcc006df69100447a05fe7eb805a070311241fa390416d4eeec7596fb80d8783785ebeabd27a8a78300dc5f30ff2cd2b6515a5f88df8167cd38740cdcc484ae9f75baa2d19f3785356a0ad8d9f4e1ba8cb330b079b6219a420565010a4f1664ed88a33d0bdcc42a8d0e1a3e770dfc1f13b3466cafab178c375195524650e6515715e8d0cdc471463501562359ab1ed7eab65f052e6bd40d2c9c92e7511874933f104510b615aa87c01261910b4f7d152f57e5e0e8c1740db9e8f381e886f045eb4783c5091f597187dcceb1d4fd03eca704893988da1d544569ac6ee76442665b30b4ad1ef07f1b1121bc1db93c698413ccc2b4979c065f85c9a302a1977015c75a0e548cd5153f9194cfb843ac040adfc4d7b44e63e027edc2abbfba09ee5cd7dd2d9230db90adec07a0cbaf61bd4f28919e1b7af85ee14b9711293dc4e3d98ba05f37dc6c169f5b53dbf47e464a9c5955f03d73788b6011d4a2778129ff2ba12847ab96bfc548c3ee7837d0b2647555f40fc0e574a2cba2f5f0404ef49ffb8cc578deb44125af7addeb75901409e8b03ccdb590059a76eeb9dcbbed37a26a708d63fedb7ddec0ffca6bbda4193b87a1cfb147a2af7fb2eaee736dd4cdc58b770d2ac72cf36233183477e97ecb0ef3722f0cac7e497860c115cf5180a2147a757a279db9573cff2b8e14f975ac81dd2a69b488ff4c8fd44419e5777d32602396846a3f50548cb9e41be1266c6eea2c93fba4079cba33dd5ccd831bad403cad45106c411afdbbeb018f5b9c43a48e29e962587775091fea03321f8b418e8a49f715c94ca2211eba361a6c14a6a1e0cc702b7f11a8e056f4812675e5b7a9ff9a5859c3e6ce83ccf56600435a7d21aa304de32280afad84b435498563c8a93a9bfb41decce88e1c35dc8f45214f7bc7465ce72501ae35b8e2d7eeeab84a14c2996e6aefaf54d78adfe0e982b6a0cef23f2db13dddb50d1810c654db660cca8e191054fccd2466da0cc0f52cfa6bc0ecd93ecd69da62347fa984bd96be4a551c56095affda60ff8fbd62273918fcaf89ff20d48f46098d54699bbe657601ea3fc0fd6f8a7a9e99c45ff6a5aae0c6ea578f8b7c755300d4524692d79dd9bd6cb4c56417b0bd26f62bcbba2b8f5808b13ce3b1de49f51b3851f144bdfe42f0861ad95aae1f6777e414311bbf4fc8b7ab129e06c9da50d8a870a483e91d0dbc16b7a8268e800bf6be2ff89950deb991bbb4cf5f300e125abeabaac811c00d646b7e721d7b75536c405b70cbd61524d585e8533d996d59b5477f57cceda872e6234552e6bc1ef16db4d51436b3d3690e84a11bef5e986327d037aca4836113d0affa9367655cc49d8a55dc0f3e8cac28613fd40d1015d231d7327cf2b1456beefbcc79aea79c2e1b87d3ea87703326c2444dcc92c7108fd00b667e674ed326509f09fa7c94c35ab3d84e5423f77c198f3d71e180beb73d1a1e5caf3e6a138fbe8c65ce8ca633924673177a8b1ac10c94cc5026e470c43ef69f56fcd1797d000a1d2bb26de96c034c58278d7f59a763ff726335431f370eb407c8584af126bd0b27dea92271093aa5656264b0651f897c96335ba3ca861cb62a9b7cc61c6c8bf9ce68f9dfcb7129001699bd3a13be03b1f28567e465f2ea5c8c2a5ea2db5156a35fcfef78f6d60f8ad3f1a57238f24f24d6efc57e65ddc7d1c4a9564aac998b12fe1f0965a34566e6e4d5adacf7edee457ad0487689f5fc72223e8b2594a25545530d3b15ebed0e605e0d0efc47e294d7b6422950c3b93a53c47aabc962287d3b94edac27727675575adb4757f9f573f542ce27abaa627867cbf914a8ff5d78d40d5682367d8bdba3e42b2da46b547f409b65949bf670a5c6c61cac2811c90b61b1225981e44b252e864cc9141a8269bf840c5c86ed2f7580a0b1b33be4cfa94e2f336094cd89c5a87857bf0df5d1eda752a75a2597c40a1f07ac053c4e4ecce6216ba7736477ad02e1e645a84564753d36a22ac829b08c516207ee6b2866ae99cccbd005f3dd6ace70cd360df29418f1b5fdd6b95357beb80b78759e8f36be65dc8f16440e61c475f1bd42a719663b46c7cd7e3973b59015829f9dbf7cf55249c3ecedb3fbdd623ccd92fa513ab987db3db63ad483459245efa5c9eca4cad8b82d0928e57fb526ff38e8b16faccb3701eca0ccfacfd59e459ef78fdac91dc613efd6259cf87f0002bda8084335ab85ea13e153a25c5fcdb2e6611ddef9c7436b1d05044c28149c3d9aa0a41c5b389b5faf8db52092741b3094f4b407f730d308b98e78e15a47e35ddef4e5bab7fe5ee6b010c42f5c0aa3e4052796292175906a1d2133f0692a1a8d2672371ffd5ae3894658501837936e4c69eeb7bf15557e8268e90004342cfcd478ef8738029c56210cf21eff3cf2816296d9082734bfaf40c06f2047b28e0d241a6038eaae08b354992822d0da1b27ef017e735f13a56ff9bfb19d39aaacc5b6bf4fc9b16d80a744cf2bc143a6d639ee671c45c5b2916ce79b2d2f31ba82c07637952802eee3efafa7e2879eb33796eba88f236e0937de2510e616704026cc732b3ca477c8a75340e4385cbf92f4f1223138ddacf58ae0d8e74f074f8f5ac01bbfe56d55c18eaf09ad4665c805626850a8467a0634c874203d4bb5379707db761bdc5cbdfd7b2615d6e13a2353c2afbf56e3add51830d26c3d325741bb27ae980f22dbf18d90c62bcfb1cd2a710ef0d0a9c2aa48e908bc94bbafda44636cb1e4992302c2318f04f29eb56ffd33b9bd9d963c2b7c07bbda85647d96dc7902ab09ca45e70e09125701e81a84b81bbcad14d02fac77396afee4b0409b8758872e09c55716b8c388e2969bea79c6ea36fe37ce9daaf2181c1a7400af31c52111a4aaab9d2a3869db8312d571d67289794adbeebd23a7399d49bc2ebe36860077ad9898eb364cc4347e95f29f2f8a35d03c4f02b8ec217d1ae1173dd1fc488cf531bec52b9a08567d562e9f22238a952190afc189d202109a46cc02d62bd58d2c51a13959a616d17bca50d10a46750d355d6a7d9bb715cbb39f15fbfc8e22a253d55d676f36d3809e1ae64d90d4a39178da84f92d01d5b8c10bd330d3fde53f0d3c9b714ddf058184585c2260d07cb88e9d46e95d2afa031487ce8117a6ba3527078c927be6e37a66928aa6289ce2d72cf6a021507f0873998c74232c1aede22649c397073f99d21cf4453d1068d31ac6d387e88d063c0e320b4b8fabfebde3e71b771745d5bd8e7e3d27661f9e7eb7a2843b73b3c45ef8091c5371f5c98900969d653c17a7c1bffcf1e2e4519f00a13866bf071c4a49e2242e3e579fc8da370b86eb9edc6a59a2145fb0430f15932eb6d398db0ae14c99b354f14bbe53ee1d5597d834e98cc0f5f049eebe9a74ef0d14080a305cb7af4ebfa0eb46e77a869bc9a8789722137fbd2f04735e58bc112793760686350c2c6e6177022554d063fe61949a7a6682c35467cab919969bf357a76de4d1fb4413cdf5b485a7d798677493f4b923360b1865393a5ebfbb4afa8cd4d66e6030510f144cd2cfccfd6a481a85b505c30d41fc9939c55c25e0568bfcd2f6e386315018a28eb1afe51754cc3fdcbb6cbafb5f47bb1334aa00ef9922679184a1b342c1dd69690391950cfc178152bc4e815ab1dd615f0b046e06bdd545adab7d84d89ed13cbed1a2238fd8f797cf323c062dd50dc2d4c", 0x1000}], 0x4, &(0x7f00000017c0)=[{0x70, 0x10d, 0xffffffff, "c88605f84c446b4c3617f35f5435b282cd63a632230ed57583186855890c66e4fbc78ace5108556baaca0e566998bd3cd55938a6671b066d818bb318343809aae3632554a91391669524b22104d5299b490062458df75859f1166144"}, {0x88, 0x11, 0xffff1e7c, "e8812258f9846859fee4ca5acd1fe7254ea5bc6dbf45f365b3deded4e52324dcd9703d19d3f232060a1a10bc0f50abe22c4d30acda50d062013d59589396e78216536d1acfaeae410b5841d4acd1394b9d5e5525c32d1b5b1a7a9de596f2e171daa263c43fbf3a9ca21ffd3347802dd9ef063256"}], 0xf8}}], 0x1, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x2, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{r0}, &(0x7f0000001900), &(0x7f0000001940)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x3a2) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e400002f5875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.263946078s ago: executing program 3 (id=586): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000077af5246bdb1ca3a495c2b0ac4a4b162be57f06fd500"/33, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ad11cb0ff4179bee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r7 = syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200450153af000000000006040000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x14, &(0x7f00000001c0)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") io_uring_enter(r7, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 1.104895169s ago: executing program 0 (id=587): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x2, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) listen(r1, 0x4) close_range(r0, r1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socket$tipc(0x1e, 0xd2a51b478ed5424e, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020810}, 0x0) 1.103742278s ago: executing program 2 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000005c0), &(0x7f00000008c0)='%-010d \x00'}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x200100) r7 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r9}, 0x18) r10 = fsmount(r7, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)={@fallback=r0, r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r12 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r11, 0x0) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendto$inet6(r14, &(0x7f00000005c0)="aa", 0x1, 0x4008881, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1, 0x3}, 0x1c) 1.031231154s ago: executing program 1 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 1.020342905s ago: executing program 0 (id=590): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00100000000000000000000000ef000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/hci\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r5, 0x4b4a, 0x10000000000004) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/dev?H\xa6t/t\x89;B'}], 0xa, "accadf0a429db504d823f49490e1e4c6553b1f870dd113e2ade2af77421b3e4106205de4a535932bc7f3804528ee0ad7ae83db0a25b5936bfb9f481da3e0e15166a0e37d66876155b52cc5c62ba572"}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") 978.379334ms ago: executing program 2 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 945.319559ms ago: executing program 1 (id=592): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f0000000900)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0xc}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x281a, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=ANY=[], 0x1c}], 0x1}, 0x8000) 874.420945ms ago: executing program 2 (id=593): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x40001e0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") 686.760395ms ago: executing program 3 (id=594): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 630.226313ms ago: executing program 3 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ff5000/0x1000)=nil) 583.703738ms ago: executing program 3 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8054) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 344.542908ms ago: executing program 1 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00100000000000000000000000ef000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) tee(r3, 0xffffffffffffffff, 0x4e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/hci\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r6, 0x4b4a, 0x10000000000004) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/dev?H\xa6t/t\x89;B'}], 0xa, "accadf0a429db504d823f49490e1e4c6553b1f870dd113e2ade2af77421b3e4106205de4a535932bc7f3804528ee0ad7ae83db0a25b5936bfb9f481da3e0e15166a0e37d66876155b52cc5c62ba572"}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") 0s ago: executing program 2 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300200000000000000800000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) close(0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000300)={r8, 0x8, 0x30, 0x7fffffff, 0x6}, &(0x7f00000003c0)=0x18) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/llc/socket\x00') preadv(r9, &(0x7f00000001c0)=[{0x0}], 0x1, 0x80, 0x1) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered forwarding state [ 31.364140][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.371181][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.404569][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.411782][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.426661][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.439587][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.446808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.456301][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.479270][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.489774][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.510922][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.521394][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.542077][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.556818][ T2365] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.563988][ T2365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.573404][ T2365] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.580506][ T2365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.599308][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.609701][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.623212][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.641849][ T2365] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.648945][ T2365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.671762][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.682259][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.689382][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.705988][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.753352][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.769434][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.779895][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.826062][ T3312] veth0_vlan: entered promiscuous mode [ 31.842811][ T3312] veth1_vlan: entered promiscuous mode [ 31.869419][ T3312] veth0_macvtap: entered promiscuous mode [ 31.890384][ T3312] veth1_macvtap: entered promiscuous mode [ 31.921643][ T3319] veth0_vlan: entered promiscuous mode [ 31.931247][ T3319] veth1_vlan: entered promiscuous mode [ 31.939449][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.957508][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.966720][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.978291][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.998887][ T3322] veth0_vlan: entered promiscuous mode [ 32.007967][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.023438][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034741][ T3322] veth1_vlan: entered promiscuous mode [ 32.042992][ T3319] veth0_macvtap: entered promiscuous mode [ 32.050299][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.074934][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.074948][ T29] audit: type=1400 audit(1759946814.405:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.NJu7uh/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.078950][ T3322] veth0_macvtap: entered promiscuous mode [ 32.092334][ T29] audit: type=1400 audit(1759946814.405:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.111263][ T3322] veth1_macvtap: entered promiscuous mode [ 32.132832][ T29] audit: type=1400 audit(1759946814.405:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.NJu7uh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.143092][ T3319] veth1_macvtap: entered promiscuous mode [ 32.163701][ T29] audit: type=1400 audit(1759946814.405:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.175774][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.191240][ T29] audit: type=1400 audit(1759946814.405:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.NJu7uh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.200459][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.225103][ T29] audit: type=1400 audit(1759946814.405:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.NJu7uh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.225137][ T29] audit: type=1400 audit(1759946814.405:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.240444][ T3317] veth0_vlan: entered promiscuous mode [ 32.286001][ T29] audit: type=1400 audit(1759946814.565:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.308786][ T29] audit: type=1400 audit(1759946814.565:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.333817][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.334185][ T3317] veth1_vlan: entered promiscuous mode [ 32.355893][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.365200][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.374084][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.387739][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.395036][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.414144][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.424740][ T29] audit: type=1400 audit(1759946814.735:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.453563][ T3317] veth0_macvtap: entered promiscuous mode [ 32.468902][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.483482][ T3317] veth1_macvtap: entered promiscuous mode [ 32.497296][ T3311] veth0_vlan: entered promiscuous mode [ 32.504161][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.513978][ T3311] veth1_vlan: entered promiscuous mode [ 32.526493][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538910][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.566348][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.584228][ T3311] veth0_macvtap: entered promiscuous mode [ 32.596795][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.605020][ T3311] veth1_macvtap: entered promiscuous mode [ 32.637206][ T382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.660280][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.688538][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.695898][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.752834][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.773835][ T3502] loop1: detected capacity change from 0 to 512 [ 32.795632][ T3502] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.8: inode #0: comm syz.1.8: iget: illegal inode # [ 32.811517][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.825126][ T3502] EXT4-fs (loop1): get orphan inode failed [ 32.836213][ T3502] EXT4-fs (loop1): mount failed [ 32.845394][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.863008][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888933][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.911313][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401825][ T3534] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10'. [ 33.410778][ T3534] xt_policy: neither incoming nor outgoing policy selected [ 33.782086][ T3512] loop2: detected capacity change from 0 to 512 [ 33.829527][ T3489] loop0: detected capacity change from 0 to 512 [ 33.832454][ T3512] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3: bad orphan inode 11862016 [ 33.856359][ T3549] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13'. [ 33.874280][ T3489] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.6: bad orphan inode 11862016 [ 33.892866][ T3512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.919915][ T3549] xt_policy: neither incoming nor outgoing policy selected [ 33.924295][ T3512] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.944447][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.968560][ T3489] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.317236][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.373439][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.562839][ T3540] loop1: detected capacity change from 0 to 512 [ 34.650520][ T3540] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.11: bad orphan inode 11862016 [ 34.702859][ T3540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.732465][ T3540] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.956319][ T3586] ALSA: seq fatal error: cannot create timer (-22) [ 35.107605][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.334722][ T3589] netlink: 1 bytes leftover after parsing attributes in process `syz.1.26'. [ 35.367815][ T3589] xt_policy: neither incoming nor outgoing policy selected [ 35.640798][ T3569] syz.3.20 (3569) used greatest stack depth: 7480 bytes left [ 35.685565][ T3591] loop3: detected capacity change from 0 to 512 [ 35.721068][ T3591] /dev/loop3: Can't open blockdev [ 36.076451][ T3604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.244879][ T3608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 36.383893][ T3615] Zero length message leads to an empty skb [ 36.414319][ T3619] loop1: detected capacity change from 0 to 512 [ 36.446899][ T3619] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.35: inode #0: comm syz.1.35: iget: illegal inode # [ 36.485629][ T3619] EXT4-fs (loop1): get orphan inode failed [ 36.504940][ T3619] EXT4-fs (loop1): mount failed [ 37.037462][ T3639] netlink: 1 bytes leftover after parsing attributes in process `syz.2.39'. [ 37.042546][ T3600] syz.3.30 (3600) used greatest stack depth: 7224 bytes left [ 37.057088][ T3639] xt_policy: neither incoming nor outgoing policy selected [ 37.172334][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 37.172349][ T29] audit: type=1400 audit(1759946819.495:150): avc: denied { kexec_image_load } for pid=3653 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 37.208516][ T3658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 37.241417][ T3658] team0: No ports can be present during mode change [ 37.261689][ T3660] bridge0: entered promiscuous mode [ 37.272108][ T29] audit: type=1326 audit(1759946819.535:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.295562][ T29] audit: type=1400 audit(1759946819.535:152): avc: denied { create } for pid=3653 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.304417][ T3660] bridge0: port 3(macsec1) entered blocking state [ 37.315796][ T29] audit: type=1326 audit(1759946819.535:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.321912][ T3660] bridge0: port 3(macsec1) entered disabled state [ 37.345020][ T29] audit: type=1326 audit(1759946819.535:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.345052][ T29] audit: type=1326 audit(1759946819.535:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.345079][ T29] audit: type=1326 audit(1759946819.535:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.421294][ T29] audit: type=1326 audit(1759946819.535:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.444567][ T29] audit: type=1326 audit(1759946819.535:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.466978][ T3660] macsec1: entered allmulticast mode [ 37.467931][ T29] audit: type=1326 audit(1759946819.535:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 37.473135][ T3660] bridge0: entered allmulticast mode [ 37.532845][ T3660] macsec1: left allmulticast mode [ 37.537947][ T3660] bridge0: left allmulticast mode [ 37.543738][ T3660] bridge0: left promiscuous mode [ 37.635790][ T3672] loop0: detected capacity change from 0 to 1024 [ 37.685916][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.778668][ T3672] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.815943][ T3672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.108298][ T3638] loop1: detected capacity change from 0 to 512 [ 38.144203][ T3638] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.36: bad orphan inode 11862016 [ 38.196708][ T3638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.227240][ T3725] FAULT_INJECTION: forcing a failure. [ 38.227240][ T3725] name failslab, interval 1, probability 0, space 0, times 1 [ 38.237215][ T3717] netlink: 1 bytes leftover after parsing attributes in process `syz.2.67'. [ 38.240082][ T3725] CPU: 1 UID: 0 PID: 3725 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.240110][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 38.240123][ T3725] Call Trace: [ 38.240129][ T3725] [ 38.240137][ T3725] __dump_stack+0x1d/0x30 [ 38.240161][ T3725] dump_stack_lvl+0xe8/0x140 [ 38.240185][ T3725] dump_stack+0x15/0x1b [ 38.240202][ T3725] should_fail_ex+0x265/0x280 [ 38.240238][ T3725] should_failslab+0x8c/0xb0 [ 38.240291][ T3725] kmem_cache_alloc_noprof+0x50/0x480 [ 38.240321][ T3725] ? skb_clone+0x151/0x1f0 [ 38.240431][ T3725] skb_clone+0x151/0x1f0 [ 38.240460][ T3725] __netlink_deliver_tap+0x2c9/0x500 [ 38.240494][ T3725] netlink_unicast+0x66b/0x690 [ 38.240559][ T3725] netlink_sendmsg+0x58b/0x6b0 [ 38.240591][ T3725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.240697][ T3725] __sock_sendmsg+0x142/0x180 [ 38.240717][ T3725] ____sys_sendmsg+0x31e/0x4e0 [ 38.240749][ T3725] ___sys_sendmsg+0x17b/0x1d0 [ 38.240843][ T3725] __x64_sys_sendmsg+0xd4/0x160 [ 38.240876][ T3725] x64_sys_call+0x191e/0x3000 [ 38.240977][ T3725] do_syscall_64+0xd2/0x200 [ 38.241001][ T3725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.241066][ T3725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.241159][ T3725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.241180][ T3725] RIP: 0033:0x7fbce90feec9 [ 38.241194][ T3725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.241228][ T3725] RSP: 002b:00007fbce7b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.241252][ T3725] RAX: ffffffffffffffda RBX: 00007fbce9355fa0 RCX: 00007fbce90feec9 [ 38.241287][ T3725] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 38.241300][ T3725] RBP: 00007fbce7b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.241313][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.241326][ T3725] R13: 00007fbce9356038 R14: 00007fbce9355fa0 R15: 00007ffc6f10acc8 [ 38.241345][ T3725] [ 38.242160][ T3638] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.250254][ T3717] xt_policy: neither incoming nor outgoing policy selected [ 38.272517][ T3725] bridge0: entered promiscuous mode [ 38.478743][ T3725] bridge0: port 3(macsec1) entered blocking state [ 38.485365][ T3725] bridge0: port 3(macsec1) entered disabled state [ 38.491990][ T3725] macsec1: entered allmulticast mode [ 38.497326][ T3725] bridge0: entered allmulticast mode [ 38.503271][ T3725] macsec1: left allmulticast mode [ 38.508415][ T3725] bridge0: left allmulticast mode [ 38.514013][ T3725] bridge0: left promiscuous mode [ 38.575402][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 38.708661][ T3743] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 38.739040][ T3730] netlink: 1 bytes leftover after parsing attributes in process `syz.3.72'. [ 38.753020][ T3730] xt_policy: neither incoming nor outgoing policy selected [ 38.766476][ T3746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 38.857867][ T3753] loop4: detected capacity change from 0 to 512 [ 38.866135][ T3753] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.82: inode #0: comm syz.4.82: iget: illegal inode # [ 38.891402][ T3753] EXT4-fs (loop4): get orphan inode failed [ 38.908945][ T3753] EXT4-fs (loop4): mount failed [ 38.942996][ T3756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'. [ 39.055326][ T3771] FAULT_INJECTION: forcing a failure. [ 39.055326][ T3771] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.068452][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.068479][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 39.068561][ T3771] Call Trace: [ 39.068567][ T3771] [ 39.068575][ T3771] __dump_stack+0x1d/0x30 [ 39.068596][ T3771] dump_stack_lvl+0xe8/0x140 [ 39.068619][ T3771] dump_stack+0x15/0x1b [ 39.068641][ T3771] should_fail_ex+0x265/0x280 [ 39.068708][ T3771] should_fail+0xb/0x20 [ 39.068738][ T3771] should_fail_usercopy+0x1a/0x20 [ 39.068758][ T3771] _copy_from_iter+0xd2/0xe80 [ 39.068786][ T3771] ? alloc_pages_mpol+0x217/0x260 [ 39.068908][ T3771] copy_page_from_iter+0x178/0x2a0 [ 39.068931][ T3771] tun_get_user+0x679/0x26e0 [ 39.068966][ T3771] ? ref_tracker_alloc+0x1f2/0x2f0 [ 39.069034][ T3771] tun_chr_write_iter+0x15e/0x210 [ 39.069091][ T3771] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 39.069120][ T3771] vfs_write+0x52a/0x960 [ 39.069156][ T3771] ksys_write+0xda/0x1a0 [ 39.069236][ T3771] __x64_sys_write+0x40/0x50 [ 39.069262][ T3771] x64_sys_call+0x2802/0x3000 [ 39.069342][ T3771] do_syscall_64+0xd2/0x200 [ 39.069421][ T3771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.069451][ T3771] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.069472][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.069493][ T3771] RIP: 0033:0x7fbce90fd97f [ 39.069508][ T3771] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 39.069528][ T3771] RSP: 002b:00007fbce7b5f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 39.069549][ T3771] RAX: ffffffffffffffda RBX: 00007fbce9355fa0 RCX: 00007fbce90fd97f [ 39.069562][ T3771] RDX: 000000000000003e RSI: 0000200000001140 RDI: 00000000000000c8 [ 39.069573][ T3771] RBP: 00007fbce7b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.069585][ T3771] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 39.069678][ T3771] R13: 00007fbce9356038 R14: 00007fbce9355fa0 R15: 00007ffc6f10acc8 [ 39.069697][ T3771] [ 39.301739][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 39.392843][ T3786] loop0: detected capacity change from 0 to 512 [ 39.406887][ T3786] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.96: inode #0: comm syz.0.96: iget: illegal inode # [ 39.420304][ T3786] EXT4-fs (loop0): get orphan inode failed [ 39.426574][ T3786] EXT4-fs (loop0): mount failed [ 39.564489][ T3807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 39.649401][ T3813] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET) [ 39.658626][ T3813] syzkaller1: entered promiscuous mode [ 39.659181][ T3816] FAULT_INJECTION: forcing a failure. [ 39.659181][ T3816] name failslab, interval 1, probability 0, space 0, times 0 [ 39.664191][ T3813] syzkaller1: entered allmulticast mode [ 39.676923][ T3816] CPU: 0 UID: 0 PID: 3816 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.676953][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 39.677038][ T3816] Call Trace: [ 39.677045][ T3816] [ 39.677054][ T3816] __dump_stack+0x1d/0x30 [ 39.677077][ T3816] dump_stack_lvl+0xe8/0x140 [ 39.677110][ T3816] dump_stack+0x15/0x1b [ 39.677128][ T3816] should_fail_ex+0x265/0x280 [ 39.677164][ T3816] ? assoc_array_delete+0x58/0x950 [ 39.677189][ T3816] should_failslab+0x8c/0xb0 [ 39.677253][ T3816] __kmalloc_cache_noprof+0x4c/0x4a0 [ 39.677286][ T3816] assoc_array_delete+0x58/0x950 [ 39.677311][ T3816] ? security_key_permission+0x27/0x80 [ 39.677364][ T3816] ? key_task_permission+0x2ac/0x2c0 [ 39.677399][ T3816] ? key_validate+0xad/0xd0 [ 39.677518][ T3816] key_move+0x11a/0x550 [ 39.677546][ T3816] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 39.677569][ T3816] ? __pfx_keyring_search_iterator+0x10/0x10 [ 39.677674][ T3816] keyctl_keyring_move+0xd6/0x110 [ 39.677706][ T3816] __se_sys_keyctl+0x5f7/0xb80 [ 39.677764][ T3816] ? __rcu_read_unlock+0x4f/0x70 [ 39.677799][ T3816] ? __fget_files+0x184/0x1c0 [ 39.677827][ T3816] ? fput+0x8f/0xc0 [ 39.677859][ T3816] __x64_sys_keyctl+0x67/0x80 [ 39.677938][ T3816] x64_sys_call+0x2f7c/0x3000 [ 39.677962][ T3816] do_syscall_64+0xd2/0x200 [ 39.677988][ T3816] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.678016][ T3816] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.678057][ T3816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.678081][ T3816] RIP: 0033:0x7fbce90feec9 [ 39.678097][ T3816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.678117][ T3816] RSP: 002b:00007fbce7b5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 39.678137][ T3816] RAX: ffffffffffffffda RBX: 00007fbce9355fa0 RCX: 00007fbce90feec9 [ 39.678150][ T3816] RDX: 0000000019d01f99 RSI: 0000000019d01f99 RDI: 000000000000001e [ 39.678163][ T3816] RBP: 00007fbce7b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.678217][ T3816] R10: 000000001893408b R11: 0000000000000246 R12: 0000000000000001 [ 39.678231][ T3816] R13: 00007fbce9356038 R14: 00007fbce9355fa0 R15: 00007ffc6f10acc8 [ 39.678249][ T3816] [ 39.728238][ T3802] netlink: 1 bytes leftover after parsing attributes in process `syz.0.101'. [ 39.918481][ T3802] xt_policy: neither incoming nor outgoing policy selected [ 39.946450][ T3824] loop3: detected capacity change from 0 to 512 [ 39.956466][ T3824] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.110: inode #0: comm syz.3.110: iget: illegal inode # [ 39.969879][ T3824] EXT4-fs (loop3): get orphan inode failed [ 39.975956][ T3824] EXT4-fs (loop3): mount failed [ 40.064438][ T3831] loop3: detected capacity change from 0 to 512 [ 40.075345][ T3831] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.088622][ T3831] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.117429][ T3831] EXT4-fs (loop3): 1 truncate cleaned up [ 40.123691][ T3831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.140662][ T3838] random: crng reseeded on system resumption [ 40.149225][ T3831] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.112: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 40.218585][ T3831] EXT4-fs (loop3): Remounting filesystem read-only [ 40.225215][ T3831] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.112: Deleting old file: nlink 5, error=-117 [ 40.265425][ T3849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3849 comm=syz.0.116 [ 40.305985][ T3855] loop1: detected capacity change from 0 to 512 [ 40.335676][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.357546][ T3855] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.123: inode #0: comm syz.1.123: iget: illegal inode # [ 40.393366][ T3855] EXT4-fs (loop1): get orphan inode failed [ 40.406378][ T3867] loop2: detected capacity change from 0 to 512 [ 40.417279][ T3855] EXT4-fs (loop1): mount failed [ 40.433180][ T3867] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.126: inode #0: comm syz.2.126: iget: illegal inode # [ 40.472034][ T3857] netlink: 1 bytes leftover after parsing attributes in process `syz.4.124'. [ 40.489712][ T3857] xt_policy: neither incoming nor outgoing policy selected [ 40.507261][ T3867] EXT4-fs (loop2): get orphan inode failed [ 40.517910][ T3867] EXT4-fs (loop2): mount failed [ 40.617277][ T3887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 40.623979][ T3887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.631551][ T3887] vhci_hcd vhci_hcd.0: Device attached [ 40.902343][ T2965] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 40.996906][ T3904] ALSA: seq fatal error: cannot create timer (-22) [ 41.118319][ T3910] loop0: detected capacity change from 0 to 512 [ 41.140461][ T3910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.182898][ T3910] EXT4-fs (loop0): 1 truncate cleaned up [ 41.199966][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.247307][ T3910] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.136: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 41.268109][ T3910] EXT4-fs (loop0): Remounting filesystem read-only [ 41.275866][ T3910] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #2: comm syz.0.136: Deleting old file: nlink 5, error=-117 [ 41.301571][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.702624][ T3926] team0 (unregistering): Port device team_slave_0 removed [ 41.770737][ T3926] team0 (unregistering): Port device team_slave_1 removed [ 41.880521][ T3935] ALSA: seq fatal error: cannot create timer (-22) [ 42.055532][ T3936] loop0: detected capacity change from 0 to 512 [ 42.477756][ T3936] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.143: inode #0: comm syz.0.143: iget: illegal inode # [ 42.517349][ T3936] EXT4-fs (loop0): get orphan inode failed [ 42.526528][ T3936] EXT4-fs (loop0): mount failed [ 42.544316][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 42.544330][ T29] audit: type=1400 audit(1759946824.875:252): avc: denied { create } for pid=3940 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.570407][ T29] audit: type=1400 audit(1759946824.875:253): avc: denied { write } for pid=3940 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.697628][ T3948] loop4: detected capacity change from 0 to 2048 [ 42.789142][ T3948] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 42.798839][ T3948] FAT-fs (loop4): Filesystem has been set read-only [ 42.824892][ T3946] SELinux: failed to load policy [ 42.882883][ T29] audit: type=1400 audit(1759946825.145:254): avc: denied { load_policy } for pid=3945 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.938607][ T3948] SELinux: policydb magic number 0x6c657385 does not match expected magic number 0xf97cff8c [ 42.951186][ T3889] vhci_hcd: connection reset by peer [ 42.967638][ T3948] SELinux: failed to load policy [ 42.974110][ T382] vhci_hcd: stop threads [ 42.978407][ T382] vhci_hcd: release socket [ 42.982865][ T382] vhci_hcd: disconnect device [ 42.997133][ T29] audit: type=1326 audit(1759946825.325:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbce90feec9 code=0x0 [ 43.082801][ T3954] loop0: detected capacity change from 0 to 8192 [ 43.095767][ T29] audit: type=1326 audit(1759946825.425:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd6384eec9 code=0x0 [ 43.145242][ T3954] ======================================================= [ 43.145242][ T3954] WARNING: The mand mount option has been deprecated and [ 43.145242][ T3954] and is ignored by this kernel. Remove the mand [ 43.145242][ T3954] option from the mount to silence this warning. [ 43.145242][ T3954] ======================================================= [ 43.210458][ T29] audit: type=1400 audit(1759946825.535:257): avc: denied { mount } for pid=3953 comm="syz.0.151" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.351305][ T29] audit: type=1400 audit(1759946825.675:258): avc: denied { remount } for pid=3953 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.406284][ T29] audit: type=1400 audit(1759946825.735:259): avc: denied { read } for pid=3973 comm="syz.2.158" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.407063][ T3974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.158'. [ 43.429179][ T29] audit: type=1400 audit(1759946825.735:260): avc: denied { open } for pid=3973 comm="syz.2.158" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.521281][ T29] audit: type=1400 audit(1759946825.825:261): avc: denied { read write } for pid=3973 comm="syz.2.158" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 43.584389][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 43.598912][ T3980] loop2: detected capacity change from 0 to 512 [ 43.633789][ T3980] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.642564][ T3980] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.651484][ T3980] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.160: corrupted inode contents [ 43.663677][ T3980] EXT4-fs (loop2): Remounting filesystem read-only [ 43.670355][ T3980] EXT4-fs (loop2): 1 truncate cleaned up [ 43.676162][ T49] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.686796][ T49] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.697581][ T49] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.708255][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.721984][ T3980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.738761][ T3980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 43.750103][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 43.820123][ T3989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'. [ 43.837623][ T3989] team0: No ports can be present during mode change [ 44.083140][ T4016] ALSA: seq fatal error: cannot create timer (-22) [ 44.130421][ T4005] netlink: 1 bytes leftover after parsing attributes in process `syz.2.169'. [ 44.844027][ T4036] netlink: 1 bytes leftover after parsing attributes in process `syz.2.180'. [ 44.873736][ T4036] xt_policy: neither incoming nor outgoing policy selected [ 45.075780][ T4051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.161095][ T4053] loop2: detected capacity change from 0 to 764 [ 45.204059][ T4051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.293461][ T4059] netlink: 'syz.3.189': attribute type 5 has an invalid length. [ 45.301157][ T4059] netlink: 168 bytes leftover after parsing attributes in process `syz.3.189'. [ 45.313857][ T4053] hsr0: entered allmulticast mode [ 45.318929][ T4053] hsr_slave_0: entered allmulticast mode [ 45.324716][ T4053] hsr_slave_1: entered allmulticast mode [ 45.330984][ T4053] hsr_slave_0: left promiscuous mode [ 45.335409][ T4053] hsr_slave_1: left promiscuous mode [ 45.342181][ T4053] hsr0 (unregistering): left allmulticast mode [ 45.375539][ T4051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.391494][ T4059] netlink: 'syz.3.189': attribute type 13 has an invalid length. [ 45.401102][ T4067] FAULT_INJECTION: forcing a failure. [ 45.401102][ T4067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.414288][ T4067] CPU: 1 UID: 0 PID: 4067 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.414326][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.414338][ T4067] Call Trace: [ 45.414345][ T4067] [ 45.414353][ T4067] __dump_stack+0x1d/0x30 [ 45.414375][ T4067] dump_stack_lvl+0xe8/0x140 [ 45.414431][ T4067] dump_stack+0x15/0x1b [ 45.414441][ T4067] should_fail_ex+0x265/0x280 [ 45.414584][ T4067] should_fail+0xb/0x20 [ 45.414601][ T4067] should_fail_usercopy+0x1a/0x20 [ 45.414612][ T4067] _copy_to_user+0x20/0xa0 [ 45.414645][ T4067] pagemap_read+0x379/0x5e0 [ 45.414662][ T4067] ? __pfx_pagemap_read+0x10/0x10 [ 45.414677][ T4067] vfs_read+0x1a8/0x770 [ 45.414689][ T4067] ? __fget_files+0x184/0x1c0 [ 45.414733][ T4067] ? __rcu_read_unlock+0x4f/0x70 [ 45.414748][ T4067] ? __fget_files+0x184/0x1c0 [ 45.414775][ T4067] __x64_sys_pread64+0xfd/0x150 [ 45.414800][ T4067] x64_sys_call+0x29e6/0x3000 [ 45.414812][ T4067] do_syscall_64+0xd2/0x200 [ 45.414898][ T4067] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.414911][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.414979][ T4067] RIP: 0033:0x7f48902deec9 [ 45.414988][ T4067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.415019][ T4067] RSP: 002b:00007f488ed3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 45.415031][ T4067] RAX: ffffffffffffffda RBX: 00007f4890535fa0 RCX: 00007f48902deec9 [ 45.415039][ T4067] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000006 [ 45.415046][ T4067] RBP: 00007f488ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.415054][ T4067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.415061][ T4067] R13: 00007f4890536038 R14: 00007f4890535fa0 R15: 00007ffef444b928 [ 45.415074][ T4067] [ 45.440440][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 45.489354][ T4053] loop2: detected capacity change from 0 to 512 [ 45.634352][ T4059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.653335][ T4072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.669202][ T4051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.684222][ T4075] capability: warning: `syz.3.193' uses deprecated v2 capabilities in a way that may be insecure [ 45.707436][ T4072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.768803][ T382] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.782234][ T4072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.796312][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.808935][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.817511][ T4082] loop3: detected capacity change from 0 to 2048 [ 45.821471][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.836808][ T4072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.848348][ T4082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.860886][ T4082] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.921249][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.942043][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.952681][ T2965] usb 3-1: enqueue for inactive port 0 [ 45.970076][ T2965] usb 3-1: enqueue for inactive port 0 [ 45.980509][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.015602][ T4095] loop4: detected capacity change from 0 to 512 [ 46.032652][ T4086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 46.050433][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.068207][ T4095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.078659][ T2965] vhci_hcd: vhci_device speed not set [ 46.085676][ T4086] EXT4-fs (loop3): Remounting filesystem read-only [ 46.099076][ T4095] EXT4-fs (loop4): 1 truncate cleaned up [ 46.105286][ T4095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.135622][ T4095] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.197: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 46.156712][ T4095] EXT4-fs (loop4): Remounting filesystem read-only [ 46.163293][ T4095] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.197: Deleting old file: nlink 5, error=-117 [ 46.188904][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.266309][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.407732][ T4116] loop0: detected capacity change from 0 to 128 [ 46.459209][ T4116] 1mòj: attempt to access beyond end of device [ 46.459209][ T4116] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 46.487027][ T4116] 1mòj: attempt to access beyond end of device [ 46.487027][ T4116] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 46.498343][ T4119] Cannot find add_set index 4 as target [ 46.511771][ T4114] netlink: 1 bytes leftover after parsing attributes in process `syz.3.204'. [ 46.522440][ T4116] 1mòj: attempt to access beyond end of device [ 46.522440][ T4116] loop0: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 46.535432][ T4116] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 46.544242][ T4114] xt_policy: neither incoming nor outgoing policy selected [ 46.558069][ T4116] 1mòj: attempt to access beyond end of device [ 46.558069][ T4116] loop0: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 46.571034][ T4116] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 46.593116][ T4116] 1mòj: attempt to access beyond end of device [ 46.593116][ T4116] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 46.607503][ T4116] 1mòj: attempt to access beyond end of device [ 46.607503][ T4116] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 46.620915][ T4116] 1mòj: attempt to access beyond end of device [ 46.620915][ T4116] loop0: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 46.633906][ T4116] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 46.660092][ T4116] 1mòj: attempt to access beyond end of device [ 46.660092][ T4116] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 46.673181][ T4116] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 46.894075][ T4116] 1mòj: attempt to access beyond end of device [ 46.894075][ T4116] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 46.907586][ T4116] 1mòj: attempt to access beyond end of device [ 46.907586][ T4116] loop0: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 46.920585][ T4116] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 46.968248][ T4126] random: crng reseeded on system resumption [ 46.981141][ T4116] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 47.060822][ T4116] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 47.105656][ T4116] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 47.163842][ T4116] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 47.204692][ T4116] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 47.545930][ T4143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.213'. [ 47.596863][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 47.596879][ T29] audit: type=1400 audit(1759946829.925:476): avc: denied { ioctl } for pid=4142 comm="syz.0.213" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 ioctlcmd=0x4b3a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.707107][ T4123] syz.1.207 (4123) used greatest stack depth: 7032 bytes left [ 47.741606][ T29] audit: type=1326 audit(1759946830.065:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.765110][ T29] audit: type=1326 audit(1759946830.065:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.788374][ T29] audit: type=1326 audit(1759946830.065:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.811592][ T29] audit: type=1326 audit(1759946830.065:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.834856][ T29] audit: type=1326 audit(1759946830.065:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.858196][ T29] audit: type=1326 audit(1759946830.065:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.881441][ T29] audit: type=1326 audit(1759946830.065:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.904755][ T29] audit: type=1326 audit(1759946830.065:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.905607][ T4157] netlink: 'syz.0.215': attribute type 13 has an invalid length. [ 47.928036][ T29] audit: type=1326 audit(1759946830.065:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.4.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48902deec9 code=0x7ffc0000 [ 47.960719][ T4154] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 48.001594][ T4154] bond1: entered promiscuous mode [ 48.007222][ T4154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.118670][ T4157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.626995][ T4200] loop2: detected capacity change from 0 to 2048 [ 48.649560][ T4202] loop0: detected capacity change from 0 to 2048 [ 48.714235][ T4202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.059339][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 49.400395][ T4215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.235'. [ 49.426770][ T4215] team0: No ports can be present during mode change [ 49.705889][ T4226] netlink: 14 bytes leftover after parsing attributes in process `syz.3.237'. [ 49.727879][ T4226] loop3: detected capacity change from 0 to 512 [ 49.768661][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.795616][ T4226] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.821810][ T4226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.900841][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.925312][ T4232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.240'. [ 49.985968][ T4237] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 49.992508][ T4237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.000011][ T4237] vhci_hcd vhci_hcd.0: Device attached [ 50.006576][ T4236] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 50.013089][ T4236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.020619][ T4236] vhci_hcd vhci_hcd.0: Device attached [ 50.034962][ T4237] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 50.048993][ T4236] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 50.055522][ T4236] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.063047][ T4236] vhci_hcd vhci_hcd.0: Device attached [ 50.072535][ T4247] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 50.082417][ T4248] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 50.089114][ T4248] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.096725][ T4248] vhci_hcd vhci_hcd.0: Device attached [ 50.124128][ T4253] vhci_hcd: connection closed [ 50.124193][ T12] vhci_hcd: stop threads [ 50.124528][ T4249] vhci_hcd: connection closed [ 50.128914][ T12] vhci_hcd: release socket [ 50.142233][ T12] vhci_hcd: disconnect device [ 50.144730][ T4242] vhci_hcd: connection closed [ 50.147276][ T4240] vhci_hcd: connection closed [ 50.162894][ T12] vhci_hcd: stop threads [ 50.171955][ T12] vhci_hcd: release socket [ 50.176440][ T12] vhci_hcd: disconnect device [ 50.181442][ T12] vhci_hcd: stop threads [ 50.185747][ T12] vhci_hcd: release socket [ 50.190200][ T12] vhci_hcd: disconnect device [ 50.195289][ T12] vhci_hcd: stop threads [ 50.199702][ T12] vhci_hcd: release socket [ 50.204299][ T12] vhci_hcd: disconnect device [ 50.205011][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.252511][ T3419] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 50.259875][ T3419] usb 1-1: enqueue for inactive port 0 [ 50.273813][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.299181][ T3419] usb 1-1: enqueue for inactive port 0 [ 50.317343][ T3419] usb 1-1: enqueue for inactive port 0 [ 50.404201][ T3419] vhci_hcd: vhci_device speed not set [ 50.417695][ T4274] netlink: 52 bytes leftover after parsing attributes in process `syz.0.251'. [ 50.511851][ T2965] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.529500][ T2965] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.692785][ T4276] netlink: 1 bytes leftover after parsing attributes in process `syz.0.252'. [ 50.714247][ T4276] xt_policy: neither incoming nor outgoing policy selected [ 50.912333][ T4291] loop2: detected capacity change from 0 to 512 [ 50.933969][ T4291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.022464][ T4291] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.093827][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.346409][ T4309] can0: slcan on ptm0. [ 51.742225][ T4314] loop0: detected capacity change from 0 to 2048 [ 51.767668][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.816819][ T4314] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.886641][ T4297] netlink: 1 bytes leftover after parsing attributes in process `syz.3.257'. [ 52.052518][ T4299] can0 (unregistered): slcan off ptm0. [ 52.156359][ T4344] program syz.4.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.268462][ T4302] netlink: 1 bytes leftover after parsing attributes in process `syz.2.258'. [ 52.346876][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 52.375567][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 52.382222][ T49] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 52.430120][ T4369] FAULT_INJECTION: forcing a failure. [ 52.430120][ T4369] name failslab, interval 1, probability 0, space 0, times 0 [ 52.443027][ T4369] CPU: 1 UID: 0 PID: 4369 Comm: syz.4.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.443058][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.443073][ T4369] Call Trace: [ 52.443079][ T4369] [ 52.443087][ T4369] __dump_stack+0x1d/0x30 [ 52.443112][ T4369] dump_stack_lvl+0xe8/0x140 [ 52.443148][ T4369] dump_stack+0x15/0x1b [ 52.443244][ T4369] should_fail_ex+0x265/0x280 [ 52.443285][ T4369] should_failslab+0x8c/0xb0 [ 52.443316][ T4369] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 52.443411][ T4369] ? __request_module+0x1df/0x3e0 [ 52.443439][ T4369] ? should_failslab+0x8c/0xb0 [ 52.443542][ T4369] kstrdup+0x3e/0xd0 [ 52.443569][ T4369] __request_module+0x1df/0x3e0 [ 52.443668][ T4369] ? capable+0x7c/0xb0 [ 52.443750][ T4369] dev_load+0x61/0xc0 [ 52.443786][ T4369] dev_ioctl+0x2d1/0x960 [ 52.443821][ T4369] sock_do_ioctl+0x197/0x220 [ 52.443864][ T4369] sock_ioctl+0x41b/0x610 [ 52.443981][ T4369] ? __pfx_sock_ioctl+0x10/0x10 [ 52.444063][ T4369] __se_sys_ioctl+0xcb/0x140 [ 52.444103][ T4369] __x64_sys_ioctl+0x43/0x50 [ 52.444141][ T4369] x64_sys_call+0x1816/0x3000 [ 52.444219][ T4369] do_syscall_64+0xd2/0x200 [ 52.444245][ T4369] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.444334][ T4369] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.444358][ T4369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.444383][ T4369] RIP: 0033:0x7f48902deec9 [ 52.444400][ T4369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.444420][ T4369] RSP: 002b:00007f488ed3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.444443][ T4369] RAX: ffffffffffffffda RBX: 00007f4890535fa0 RCX: 00007f48902deec9 [ 52.444522][ T4369] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000009 [ 52.444606][ T4369] RBP: 00007f488ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.444621][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.444654][ T4369] R13: 00007f4890536038 R14: 00007f4890535fa0 R15: 00007ffef444b928 [ 52.444675][ T4369] [ 52.487777][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.560208][ T4372] loop4: detected capacity change from 0 to 512 [ 52.697398][ T4372] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.273: inode #0: comm syz.4.273: iget: illegal inode # [ 52.718507][ T4372] EXT4-fs (loop4): get orphan inode failed [ 52.725328][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 52.725361][ T29] audit: type=1326 audit(1759946835.055:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.741137][ T4372] EXT4-fs (loop4): mount failed [ 52.768440][ T29] audit: type=1326 audit(1759946835.095:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.791824][ T29] audit: type=1326 audit(1759946835.095:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.815065][ T29] audit: type=1326 audit(1759946835.095:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.838382][ T29] audit: type=1326 audit(1759946835.095:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.861511][ T29] audit: type=1326 audit(1759946835.095:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.875352][ T4375] team0: No ports can be present during mode change [ 52.884826][ T29] audit: type=1326 audit(1759946835.095:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.914757][ T29] audit: type=1326 audit(1759946835.095:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.938182][ T29] audit: type=1326 audit(1759946835.105:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 52.961418][ T29] audit: type=1326 audit(1759946835.105:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 53.276386][ T4410] team0: No ports can be present during mode change [ 53.348519][ T4415] loop2: detected capacity change from 0 to 128 [ 53.408921][ T4408] netlink: 1 bytes leftover after parsing attributes in process `syz.3.284'. [ 53.546751][ T4424] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 53.554547][ T4424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.292'. [ 53.564169][ T4424] veth1_macvtap: entered allmulticast mode [ 53.570743][ T4424] bridge0: port 3(veth1_macvtap) entered blocking state [ 53.577865][ T4424] bridge0: port 3(veth1_macvtap) entered disabled state [ 53.587198][ T4424] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 54.029738][ T4393] loop4: detected capacity change from 0 to 512 [ 54.070034][ T4393] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.277: bad orphan inode 11862016 [ 54.086035][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.102129][ T4393] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.286008][ T4446] FAULT_INJECTION: forcing a failure. [ 54.286008][ T4446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.299122][ T4446] CPU: 1 UID: 0 PID: 4446 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.299243][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.299257][ T4446] Call Trace: [ 54.299326][ T4446] [ 54.299335][ T4446] __dump_stack+0x1d/0x30 [ 54.299356][ T4446] dump_stack_lvl+0xe8/0x140 [ 54.299375][ T4446] dump_stack+0x15/0x1b [ 54.299394][ T4446] should_fail_ex+0x265/0x280 [ 54.299427][ T4446] should_fail+0xb/0x20 [ 54.299456][ T4446] should_fail_usercopy+0x1a/0x20 [ 54.299624][ T4446] _copy_to_user+0x20/0xa0 [ 54.299649][ T4446] simple_read_from_buffer+0xb5/0x130 [ 54.299671][ T4446] proc_fail_nth_read+0x10e/0x150 [ 54.299700][ T4446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.299743][ T4446] vfs_read+0x1a8/0x770 [ 54.299764][ T4446] ? __rcu_read_unlock+0x4f/0x70 [ 54.299825][ T4446] ? __fget_files+0x184/0x1c0 [ 54.299851][ T4446] ksys_read+0xda/0x1a0 [ 54.299874][ T4446] __x64_sys_read+0x40/0x50 [ 54.299895][ T4446] x64_sys_call+0x27c0/0x3000 [ 54.299989][ T4446] do_syscall_64+0xd2/0x200 [ 54.300012][ T4446] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.300038][ T4446] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.300058][ T4446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.300079][ T4446] RIP: 0033:0x7f7eb626d8dc [ 54.300128][ T4446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.300145][ T4446] RSP: 002b:00007f7eb4cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.300164][ T4446] RAX: ffffffffffffffda RBX: 00007f7eb64c5fa0 RCX: 00007f7eb626d8dc [ 54.300176][ T4446] RDX: 000000000000000f RSI: 00007f7eb4cd70a0 RDI: 0000000000000003 [ 54.300188][ T4446] RBP: 00007f7eb4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.300250][ T4446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.300262][ T4446] R13: 00007f7eb64c6038 R14: 00007f7eb64c5fa0 R15: 00007fff897c8918 [ 54.300308][ T4446] [ 54.536184][ T4431] syz.0.293 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 54.550247][ T4431] CPU: 1 UID: 0 PID: 4431 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.550274][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.550288][ T4431] Call Trace: [ 54.550295][ T4431] [ 54.550304][ T4431] __dump_stack+0x1d/0x30 [ 54.550327][ T4431] dump_stack_lvl+0xe8/0x140 [ 54.550365][ T4431] dump_stack+0x15/0x1b [ 54.550381][ T4431] dump_header+0x81/0x220 [ 54.550497][ T4431] oom_kill_process+0x342/0x400 [ 54.550568][ T4431] out_of_memory+0x979/0xb80 [ 54.550601][ T4431] try_charge_memcg+0x5e6/0x9e0 [ 54.550640][ T4431] obj_cgroup_charge_pages+0xa6/0x150 [ 54.550737][ T4431] __memcg_kmem_charge_page+0x9f/0x170 [ 54.550777][ T4431] __alloc_frozen_pages_noprof+0x188/0x360 [ 54.550815][ T4431] alloc_pages_mpol+0xb3/0x260 [ 54.550885][ T4431] ? alloc_pages_noprof+0x61/0x130 [ 54.550965][ T4431] alloc_pages_noprof+0x90/0x130 [ 54.550985][ T4431] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 54.551032][ T4431] __kvmalloc_node_noprof+0x483/0x670 [ 54.551080][ T4431] ? ip_set_alloc+0x24/0x30 [ 54.551177][ T4431] ? ip_set_alloc+0x24/0x30 [ 54.551200][ T4431] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 54.551236][ T4431] ip_set_alloc+0x24/0x30 [ 54.551260][ T4431] hash_netiface_create+0x282/0x740 [ 54.551302][ T4431] ? __pfx_hash_netiface_create+0x10/0x10 [ 54.551331][ T4431] ip_set_create+0x3c9/0x970 [ 54.551375][ T4431] ? __nla_parse+0x40/0x60 [ 54.551432][ T4431] nfnetlink_rcv_msg+0x4c3/0x590 [ 54.551479][ T4431] netlink_rcv_skb+0x123/0x220 [ 54.551510][ T4431] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 54.551540][ T4431] nfnetlink_rcv+0x167/0x16c0 [ 54.551559][ T4431] ? kmem_cache_free+0xe4/0x3d0 [ 54.551629][ T4431] ? __kfree_skb+0x109/0x150 [ 54.551653][ T4431] ? nlmon_xmit+0x4f/0x60 [ 54.551679][ T4431] ? consume_skb+0x49/0x150 [ 54.551777][ T4431] ? nlmon_xmit+0x4f/0x60 [ 54.551804][ T4431] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 54.551896][ T4431] ? __dev_queue_xmit+0x1200/0x2000 [ 54.551923][ T4431] ? __dev_queue_xmit+0x182/0x2000 [ 54.551952][ T4431] ? ref_tracker_free+0x37d/0x3e0 [ 54.552023][ T4431] ? __netlink_deliver_tap+0x4dc/0x500 [ 54.552056][ T4431] netlink_unicast+0x5bd/0x690 [ 54.552087][ T4431] netlink_sendmsg+0x58b/0x6b0 [ 54.552192][ T4431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.552221][ T4431] __sock_sendmsg+0x142/0x180 [ 54.552240][ T4431] ____sys_sendmsg+0x31e/0x4e0 [ 54.552334][ T4431] ___sys_sendmsg+0x17b/0x1d0 [ 54.552492][ T4431] __x64_sys_sendmsg+0xd4/0x160 [ 54.552523][ T4431] x64_sys_call+0x191e/0x3000 [ 54.552546][ T4431] do_syscall_64+0xd2/0x200 [ 54.552574][ T4431] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.552653][ T4431] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.552728][ T4431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.552753][ T4431] RIP: 0033:0x7fe0ba02eec9 [ 54.552770][ T4431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.552816][ T4431] RSP: 002b:00007fe0b8a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.552837][ T4431] RAX: ffffffffffffffda RBX: 00007fe0ba285fa0 RCX: 00007fe0ba02eec9 [ 54.552899][ T4431] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 54.552914][ T4431] RBP: 00007fe0ba0b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 54.552929][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.552944][ T4431] R13: 00007fe0ba286038 R14: 00007fe0ba285fa0 R15: 00007ffd2b0c7a58 [ 54.552965][ T4431] [ 54.608243][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.610421][ T4431] memory: usage 307200kB, limit 307200kB, failcnt 254 [ 54.654760][ T4451] mmap: syz.2.299 (4451): VmData 29118464 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 54.657989][ T4431] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 54.658007][ T4431] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 54.917807][ T4459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.301'. [ 54.926104][ T4431] Memory cgroup stats for /syz0: [ 54.951546][ T4431] cache 0 [ 54.959464][ T4431] rss 0 [ 54.962352][ T4431] shmem 0 [ 54.965283][ T4431] mapped_file 0 [ 54.968739][ T4431] dirty 0 [ 54.971665][ T4431] writeback 0 [ 54.974983][ T4431] workingset_refault_anon 35 [ 54.979561][ T4431] workingset_refault_file 136 [ 54.984256][ T4431] swap 208896 [ 54.987537][ T4431] swapcached 0 [ 54.990902][ T4431] pgpgin 41120 [ 54.994309][ T4431] pgpgout 41120 [ 54.997930][ T4431] pgfault 38542 [ 55.001376][ T4431] pgmajfault 33 [ 55.004959][ T4431] inactive_anon 0 [ 55.008581][ T4431] active_anon 0 [ 55.012080][ T4431] inactive_file 0 [ 55.015741][ T4431] active_file 0 [ 55.019268][ T4431] unevictable 0 [ 55.022744][ T4431] hierarchical_memory_limit 314572800 [ 55.028096][ T4431] hierarchical_memsw_limit 9223372036854771712 [ 55.034278][ T4431] total_cache 0 [ 55.037727][ T4431] total_rss 0 [ 55.040997][ T4431] total_shmem 0 [ 55.044484][ T4431] total_mapped_file 0 [ 55.048477][ T4431] total_dirty 0 [ 55.051983][ T4431] total_writeback 0 [ 55.055820][ T4431] total_workingset_refault_anon 35 [ 55.060996][ T4431] total_workingset_refault_file 136 [ 55.066284][ T4431] total_swap 208896 [ 55.070094][ T4431] total_swapcached 0 [ 55.074014][ T4431] total_pgpgin 41120 [ 55.077898][ T4431] total_pgpgout 41120 [ 55.081866][ T4431] total_pgfault 38542 [ 55.085894][ T4431] total_pgmajfault 33 [ 55.089941][ T4431] total_inactive_anon 0 [ 55.094236][ T4431] total_active_anon 0 [ 55.098206][ T4431] total_inactive_file 0 [ 55.102380][ T4431] total_active_file 0 [ 55.106390][ T4431] total_unevictable 0 [ 55.110371][ T4431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.293,pid=4430,uid=0 [ 55.125076][ T4431] Memory cgroup out of memory: Killed process 4430 (syz.0.293) total-vm:93956kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 55.259458][ T4471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.304'. [ 55.533568][ T4480] loop2: detected capacity change from 0 to 128 [ 55.563655][ T4480] bio_check_eod: 28 callbacks suppressed [ 55.563672][ T4480] 1mòj: attempt to access beyond end of device [ 55.563672][ T4480] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 55.596315][ T4480] 1mòj: attempt to access beyond end of device [ 55.596315][ T4480] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 55.610011][ T4480] 1mòj: attempt to access beyond end of device [ 55.610011][ T4480] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 55.623085][ T4480] buffer_io_error: 14 callbacks suppressed [ 55.623100][ T4480] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 55.653739][ T4483] netlink: 'syz.3.308': attribute type 3 has an invalid length. [ 55.672001][ T4480] 1mòj: attempt to access beyond end of device [ 55.672001][ T4480] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 55.685102][ T4480] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 55.722255][ T4480] 1mòj: attempt to access beyond end of device [ 55.722255][ T4480] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 55.756603][ T4480] 1mòj: attempt to access beyond end of device [ 55.756603][ T4480] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 55.763837][ T4487] loop0: detected capacity change from 0 to 164 [ 55.770155][ T4480] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 55.782346][ T4480] 1mòj: attempt to access beyond end of device [ 55.782346][ T4480] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 55.797895][ T4480] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 55.819639][ T4487] syz.0.310: attempt to access beyond end of device [ 55.819639][ T4487] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.863820][ T4480] 1mòj: attempt to access beyond end of device [ 55.863820][ T4480] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 55.882475][ T4456] loop4: detected capacity change from 0 to 512 [ 55.894581][ T4480] 1mòj: attempt to access beyond end of device [ 55.894581][ T4480] loop2: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 55.899316][ T4492] loop3: detected capacity change from 0 to 512 [ 55.907513][ T4480] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 55.922737][ T4480] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 55.939403][ T4492] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.312: inode #0: comm syz.3.312: iget: illegal inode # [ 55.953025][ T4480] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 55.953061][ T4492] EXT4-fs (loop3): get orphan inode failed [ 55.967057][ T4456] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.297: bad orphan inode 11862016 [ 55.968321][ T4492] EXT4-fs (loop3): mount failed [ 55.979720][ T4480] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 55.993534][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.002719][ T4480] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 56.040995][ T4456] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.051657][ T4480] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 56.080455][ T4499] netlink: 'syz.3.314': attribute type 3 has an invalid length. [ 56.153919][ T4509] netlink: 'syz.3.319': attribute type 4 has an invalid length. [ 56.161664][ T4509] netlink: 17 bytes leftover after parsing attributes in process `syz.3.319'. [ 56.171658][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 56.303989][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.333144][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 56.418200][ T4503] netlink: 1 bytes leftover after parsing attributes in process `syz.0.316'. [ 56.427327][ T4503] xt_policy: neither incoming nor outgoing policy selected [ 56.483644][ T4541] loop2: detected capacity change from 0 to 128 [ 56.502499][ C0] hrtimer: interrupt took 36266 ns [ 56.521638][ T4545] loop3: detected capacity change from 0 to 512 [ 56.561029][ T4545] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.330: inode #0: comm syz.3.330: iget: illegal inode # [ 56.589627][ T4551] netlink: 52 bytes leftover after parsing attributes in process `syz.2.332'. [ 56.613777][ T4553] ALSA: seq fatal error: cannot create timer (-22) [ 56.632777][ T4545] EXT4-fs (loop3): get orphan inode failed [ 56.650534][ T4545] EXT4-fs (loop3): mount failed [ 56.681433][ T4557] FAULT_INJECTION: forcing a failure. [ 56.681433][ T4557] name failslab, interval 1, probability 0, space 0, times 0 [ 56.694092][ T4557] CPU: 0 UID: 0 PID: 4557 Comm: syz.2.334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.694118][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.694204][ T4557] Call Trace: [ 56.694211][ T4557] [ 56.694219][ T4557] __dump_stack+0x1d/0x30 [ 56.694241][ T4557] dump_stack_lvl+0xe8/0x140 [ 56.694259][ T4557] dump_stack+0x15/0x1b [ 56.694346][ T4557] should_fail_ex+0x265/0x280 [ 56.694387][ T4557] should_failslab+0x8c/0xb0 [ 56.694438][ T4557] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 56.694467][ T4557] ? __d_alloc+0x3d/0x340 [ 56.694503][ T4557] __d_alloc+0x3d/0x340 [ 56.694561][ T4557] d_alloc_parallel+0x53/0xc60 [ 56.694604][ T4557] ? selinux_inode_permission+0x62d/0x740 [ 56.694635][ T4557] ? make_vfsuid+0x49/0xa0 [ 56.694679][ T4557] ? lockref_get_not_dead+0x120/0x1c0 [ 56.694793][ T4557] ? __rcu_read_unlock+0x4f/0x70 [ 56.694938][ T4557] __lookup_slow+0x8c/0x250 [ 56.694977][ T4557] lookup_slow+0x3c/0x60 [ 56.695006][ T4557] walk_component+0x1ec/0x220 [ 56.695080][ T4557] path_lookupat+0xfe/0x2a0 [ 56.695115][ T4557] filename_lookup+0x147/0x340 [ 56.695157][ T4557] user_path_at+0x3e/0x130 [ 56.695242][ T4557] do_utimes+0xd9/0x210 [ 56.695267][ T4557] __x64_sys_utime+0xbc/0x140 [ 56.695374][ T4557] x64_sys_call+0x2b0f/0x3000 [ 56.695397][ T4557] do_syscall_64+0xd2/0x200 [ 56.695423][ T4557] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.695503][ T4557] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.695525][ T4557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.695550][ T4557] RIP: 0033:0x7f7eb626eec9 [ 56.695568][ T4557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.695667][ T4557] RSP: 002b:00007f7eb4cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 56.695685][ T4557] RAX: ffffffffffffffda RBX: 00007f7eb64c5fa0 RCX: 00007f7eb626eec9 [ 56.695778][ T4557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 56.695793][ T4557] RBP: 00007f7eb4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.695806][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.695820][ T4557] R13: 00007f7eb64c6038 R14: 00007f7eb64c5fa0 R15: 00007fff897c8918 [ 56.695839][ T4557] [ 57.114198][ T4566] team0: No ports can be present during mode change [ 57.202874][ T4574] FAULT_INJECTION: forcing a failure. [ 57.202874][ T4574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.216014][ T4574] CPU: 1 UID: 0 PID: 4574 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.216042][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.216056][ T4574] Call Trace: [ 57.216063][ T4574] [ 57.216076][ T4574] __dump_stack+0x1d/0x30 [ 57.216109][ T4574] dump_stack_lvl+0xe8/0x140 [ 57.216146][ T4574] dump_stack+0x15/0x1b [ 57.216164][ T4574] should_fail_ex+0x265/0x280 [ 57.216206][ T4574] should_fail+0xb/0x20 [ 57.216312][ T4574] should_fail_usercopy+0x1a/0x20 [ 57.216446][ T4574] _copy_to_user+0x20/0xa0 [ 57.216477][ T4574] simple_read_from_buffer+0xb5/0x130 [ 57.216504][ T4574] proc_fail_nth_read+0x10e/0x150 [ 57.216539][ T4574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.216645][ T4574] vfs_read+0x1a8/0x770 [ 57.216671][ T4574] ? __rcu_read_unlock+0x4f/0x70 [ 57.216698][ T4574] ? __fget_files+0x184/0x1c0 [ 57.216762][ T4574] ksys_read+0xda/0x1a0 [ 57.216789][ T4574] __x64_sys_read+0x40/0x50 [ 57.216812][ T4574] x64_sys_call+0x27c0/0x3000 [ 57.216835][ T4574] do_syscall_64+0xd2/0x200 [ 57.216916][ T4574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.216948][ T4574] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.216973][ T4574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.217008][ T4574] RIP: 0033:0x7fe0ba02d8dc [ 57.217037][ T4574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.217057][ T4574] RSP: 002b:00007fe0b8a8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.217079][ T4574] RAX: ffffffffffffffda RBX: 00007fe0ba285fa0 RCX: 00007fe0ba02d8dc [ 57.217094][ T4574] RDX: 000000000000000f RSI: 00007fe0b8a8f0a0 RDI: 0000000000000007 [ 57.217108][ T4574] RBP: 00007fe0b8a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.217124][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.217193][ T4574] R13: 00007fe0ba286038 R14: 00007fe0ba285fa0 R15: 00007ffd2b0c7a58 [ 57.217210][ T4574] [ 57.479660][ T4581] 9pnet_fd: Insufficient options for proto=fd [ 57.535949][ T4579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 57.828291][ T4607] loop3: detected capacity change from 0 to 512 [ 57.849184][ T4607] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.346: inode #0: comm syz.3.346: iget: illegal inode # [ 57.884081][ T4607] EXT4-fs (loop3): get orphan inode failed [ 57.891566][ T4607] EXT4-fs (loop3): mount failed [ 58.104499][ T4564] loop2: detected capacity change from 0 to 512 [ 58.189517][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.335: bad orphan inode 11862016 [ 58.214474][ T4564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.285306][ T4564] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.564080][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 58.564094][ T29] audit: type=1400 audit(1759946840.895:887): avc: denied { bind } for pid=4646 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.593951][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.621155][ T29] audit: type=1400 audit(1759946840.925:888): avc: denied { setopt } for pid=4646 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.660737][ T4649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.735286][ T4649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.783589][ T4653] loop2: detected capacity change from 0 to 2048 [ 58.835070][ T4649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.876429][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.902356][ T4636] netlink: 1 bytes leftover after parsing attributes in process `syz.1.353'. [ 58.922586][ T4653] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.937379][ T4649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.955782][ T4659] FAULT_INJECTION: forcing a failure. [ 58.955782][ T4659] name failslab, interval 1, probability 0, space 0, times 0 [ 58.968696][ T4659] CPU: 1 UID: 0 PID: 4659 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.968726][ T4659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.968738][ T4659] Call Trace: [ 58.968744][ T4659] [ 58.968754][ T4659] __dump_stack+0x1d/0x30 [ 58.968774][ T4659] dump_stack_lvl+0xe8/0x140 [ 58.968878][ T4659] dump_stack+0x15/0x1b [ 58.968897][ T4659] should_fail_ex+0x265/0x280 [ 58.968932][ T4659] should_failslab+0x8c/0xb0 [ 58.968976][ T4659] __kmalloc_noprof+0xa5/0x570 [ 58.969017][ T4659] ? sock_kmalloc+0x85/0xc0 [ 58.969047][ T4659] ? iovec_from_user+0x5e/0x210 [ 58.969076][ T4659] sock_kmalloc+0x85/0xc0 [ 58.969174][ T4659] ____sys_sendmsg+0xf8/0x4e0 [ 58.969231][ T4659] ___sys_sendmsg+0x17b/0x1d0 [ 58.969268][ T4659] __sys_sendmmsg+0x178/0x300 [ 58.969304][ T4659] __x64_sys_sendmmsg+0x57/0x70 [ 58.969332][ T4659] x64_sys_call+0x1c4a/0x3000 [ 58.969408][ T4659] do_syscall_64+0xd2/0x200 [ 58.969434][ T4659] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.969466][ T4659] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.969486][ T4659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.969543][ T4659] RIP: 0033:0x7fe0ba02eec9 [ 58.969640][ T4659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.969657][ T4659] RSP: 002b:00007fe0b8a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.969675][ T4659] RAX: ffffffffffffffda RBX: 00007fe0ba285fa0 RCX: 00007fe0ba02eec9 [ 58.969705][ T4659] RDX: 0000000000000002 RSI: 0000200000001900 RDI: 0000000000000003 [ 58.969719][ T4659] RBP: 00007fe0b8a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.969733][ T4659] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002 [ 58.969790][ T4659] R13: 00007fe0ba286038 R14: 00007fe0ba285fa0 R15: 00007ffd2b0c7a58 [ 58.969808][ T4659] [ 59.194196][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.284034][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.306713][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.331646][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.368662][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.406644][ T4674] loop2: detected capacity change from 0 to 512 [ 59.428732][ T29] audit: type=1326 audit(1759946841.755:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.3.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbce90feec9 code=0x0 [ 59.452451][ T4676] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.460655][ T4676] FAULT_INJECTION: forcing a failure. [ 59.460655][ T4676] name failslab, interval 1, probability 0, space 0, times 0 [ 59.473675][ T4676] CPU: 0 UID: 0 PID: 4676 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.473749][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.473763][ T4676] Call Trace: [ 59.473769][ T4676] [ 59.473777][ T4676] __dump_stack+0x1d/0x30 [ 59.473799][ T4676] dump_stack_lvl+0xe8/0x140 [ 59.473863][ T4676] dump_stack+0x15/0x1b [ 59.473879][ T4676] should_fail_ex+0x265/0x280 [ 59.473912][ T4676] should_failslab+0x8c/0xb0 [ 59.473966][ T4676] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 59.473994][ T4676] ? __alloc_skb+0x101/0x320 [ 59.474042][ T4676] __alloc_skb+0x101/0x320 [ 59.474089][ T4676] netlink_ack+0xfd/0x500 [ 59.474140][ T4676] netlink_rcv_skb+0x192/0x220 [ 59.474170][ T4676] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.474208][ T4676] rtnetlink_rcv+0x1c/0x30 [ 59.474243][ T4676] netlink_unicast+0x5bd/0x690 [ 59.474273][ T4676] netlink_sendmsg+0x58b/0x6b0 [ 59.474308][ T4676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.474370][ T4676] __sock_sendmsg+0x142/0x180 [ 59.474438][ T4676] ____sys_sendmsg+0x31e/0x4e0 [ 59.474498][ T4676] ___sys_sendmsg+0x17b/0x1d0 [ 59.474536][ T4676] __x64_sys_sendmsg+0xd4/0x160 [ 59.474643][ T4676] x64_sys_call+0x191e/0x3000 [ 59.474666][ T4676] do_syscall_64+0xd2/0x200 [ 59.474688][ T4676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.474714][ T4676] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.474737][ T4676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.474800][ T4676] RIP: 0033:0x7fe0ba02eec9 [ 59.474815][ T4676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.474840][ T4676] RSP: 002b:00007fe0b8a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.474862][ T4676] RAX: ffffffffffffffda RBX: 00007fe0ba285fa0 RCX: 00007fe0ba02eec9 [ 59.474874][ T4676] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000005 [ 59.474966][ T4676] RBP: 00007fe0b8a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.474980][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.474995][ T4676] R13: 00007fe0ba286038 R14: 00007fe0ba285fa0 R15: 00007ffd2b0c7a58 [ 59.475049][ T4676] [ 59.477468][ T4674] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.364: inode #0: comm syz.2.364: iget: illegal inode # [ 59.696074][ T4645] loop4: detected capacity change from 0 to 512 [ 59.719167][ T4674] EXT4-fs (loop2): get orphan inode failed [ 59.725305][ T4674] EXT4-fs (loop2): mount failed [ 59.749443][ T4645] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.355: bad orphan inode 11862016 [ 59.772039][ T4645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.789439][ T4686] loop0: detected capacity change from 0 to 512 [ 59.799843][ T4686] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.369: inode #0: comm syz.0.369: iget: illegal inode # [ 59.814790][ T4686] EXT4-fs (loop0): get orphan inode failed [ 59.820969][ T4686] EXT4-fs (loop0): mount failed [ 59.822491][ T4645] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.980448][ T4705] loop0: detected capacity change from 0 to 512 [ 59.998971][ T4705] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 60.067216][ T4711] loop2: detected capacity change from 0 to 512 [ 60.082031][ T4711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.100286][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 60.127430][ T4711] EXT4-fs (loop2): 1 truncate cleaned up [ 60.148348][ T4711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.165242][ T4711] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.373: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 60.192239][ T4711] EXT4-fs (loop2): Remounting filesystem read-only [ 60.198847][ T4711] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.373: Deleting old file: nlink 5, error=-117 [ 60.239932][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.273645][ T29] audit: type=1326 audit(1759946842.605:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 60.298836][ T4718] FAULT_INJECTION: forcing a failure. [ 60.298836][ T4718] name failslab, interval 1, probability 0, space 0, times 0 [ 60.311555][ T4718] CPU: 0 UID: 0 PID: 4718 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.311686][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.311706][ T4718] Call Trace: [ 60.311713][ T4718] [ 60.311722][ T4718] __dump_stack+0x1d/0x30 [ 60.311746][ T4718] dump_stack_lvl+0xe8/0x140 [ 60.311769][ T4718] dump_stack+0x15/0x1b [ 60.311839][ T4718] should_fail_ex+0x265/0x280 [ 60.311878][ T4718] should_failslab+0x8c/0xb0 [ 60.311904][ T4718] kmem_cache_alloc_noprof+0x50/0x480 [ 60.311990][ T4718] ? audit_log_start+0x342/0x720 [ 60.312047][ T4718] audit_log_start+0x342/0x720 [ 60.312069][ T4718] ? kstrtouint+0x76/0xc0 [ 60.312177][ T4718] audit_seccomp+0x48/0x100 [ 60.312213][ T4718] ? __seccomp_filter+0x82d/0x1250 [ 60.312244][ T4718] __seccomp_filter+0x83e/0x1250 [ 60.312319][ T4718] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.312354][ T4718] ? vfs_write+0x7e8/0x960 [ 60.312379][ T4718] ? __rcu_read_unlock+0x4f/0x70 [ 60.312408][ T4718] ? __fget_files+0x184/0x1c0 [ 60.312475][ T4718] __secure_computing+0x82/0x150 [ 60.312544][ T4718] syscall_trace_enter+0xcf/0x1e0 [ 60.312577][ T4718] do_syscall_64+0xac/0x200 [ 60.312599][ T4718] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.312625][ T4718] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.312644][ T4718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.312681][ T4718] RIP: 0033:0x7fe0ba02eec9 [ 60.312705][ T4718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.312723][ T4718] RSP: 002b:00007fe0b8a8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 60.312742][ T4718] RAX: ffffffffffffffda RBX: 00007fe0ba285fa0 RCX: 00007fe0ba02eec9 [ 60.312755][ T4718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.312767][ T4718] RBP: 00007fe0b8a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.312833][ T4718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.312845][ T4718] R13: 00007fe0ba286038 R14: 00007fe0ba285fa0 R15: 00007ffd2b0c7a58 [ 60.312864][ T4718] [ 60.522945][ T4718] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 60.524279][ T29] audit: type=1326 audit(1759946842.625:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0ba02d710 code=0x7ffc0000 [ 60.530926][ T4718] audit: out of memory in audit_log_start [ 60.560260][ T29] audit: type=1326 audit(1759946842.625:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0ba02d97f code=0x7ffc0000 [ 60.588842][ T29] audit: type=1326 audit(1759946842.915:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe0ba02d8dc code=0x7ffc0000 [ 60.650724][ T29] audit: type=1326 audit(1759946842.955:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0ba02d97f code=0x7ffc0000 [ 60.775576][ T4748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'. [ 60.850030][ T4756] netlink: 14 bytes leftover after parsing attributes in process `syz.1.387'. [ 60.860786][ T4756] hsr_slave_0: left promiscuous mode [ 60.875708][ T4756] hsr_slave_1: left promiscuous mode [ 61.013562][ T4726] netlink: 1 bytes leftover after parsing attributes in process `syz.3.381'. [ 61.104676][ T4755] netlink: 1 bytes leftover after parsing attributes in process `syz.0.390'. [ 61.130640][ T4755] xt_policy: neither incoming nor outgoing policy selected [ 61.284842][ T4776] FAULT_INJECTION: forcing a failure. [ 61.284842][ T4776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.298154][ T4776] CPU: 1 UID: 0 PID: 4776 Comm: syz.3.396 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.298240][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.298257][ T4776] Call Trace: [ 61.298265][ T4776] [ 61.298274][ T4776] __dump_stack+0x1d/0x30 [ 61.298308][ T4776] dump_stack_lvl+0xe8/0x140 [ 61.298327][ T4776] dump_stack+0x15/0x1b [ 61.298342][ T4776] should_fail_ex+0x265/0x280 [ 61.298442][ T4776] should_fail+0xb/0x20 [ 61.298477][ T4776] should_fail_usercopy+0x1a/0x20 [ 61.298500][ T4776] _copy_from_iter+0xd2/0xe80 [ 61.298520][ T4776] ? __build_skb_around+0x1ab/0x200 [ 61.298662][ T4776] ? __alloc_skb+0x223/0x320 [ 61.298691][ T4776] netlink_sendmsg+0x471/0x6b0 [ 61.298727][ T4776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.298788][ T4776] __sock_sendmsg+0x142/0x180 [ 61.298807][ T4776] ____sys_sendmsg+0x31e/0x4e0 [ 61.298838][ T4776] ___sys_sendmsg+0x17b/0x1d0 [ 61.298946][ T4776] __x64_sys_sendmsg+0xd4/0x160 [ 61.298982][ T4776] x64_sys_call+0x191e/0x3000 [ 61.299008][ T4776] do_syscall_64+0xd2/0x200 [ 61.299050][ T4776] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.299085][ T4776] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.299150][ T4776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.299176][ T4776] RIP: 0033:0x7fbce90feec9 [ 61.299213][ T4776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.299254][ T4776] RSP: 002b:00007fbce7b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.299276][ T4776] RAX: ffffffffffffffda RBX: 00007fbce9355fa0 RCX: 00007fbce90feec9 [ 61.299288][ T4776] RDX: 00000000000400c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 61.299300][ T4776] RBP: 00007fbce7b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.299312][ T4776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.299323][ T4776] R13: 00007fbce9356038 R14: 00007fbce9355fa0 R15: 00007ffc6f10acc8 [ 61.299341][ T4776] [ 61.667242][ T4749] loop4: detected capacity change from 0 to 512 [ 61.715159][ T4749] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.385: bad orphan inode 11862016 [ 61.746704][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 61.767381][ T4749] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.769101][ T4781] netlink: 1 bytes leftover after parsing attributes in process `syz.3.398'. [ 61.792379][ T4781] xt_policy: neither incoming nor outgoing policy selected [ 61.960375][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.971057][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.979302][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 61.989149][ T4793] netlink: 'syz.1.401': attribute type 16 has an invalid length. [ 61.997048][ T4793] netlink: 'syz.1.401': attribute type 17 has an invalid length. [ 62.037193][ T4795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.402'. [ 62.086692][ T4771] loop2: detected capacity change from 0 to 512 [ 62.115340][ T4793] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.122766][ T4793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.133280][ T4793] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.133818][ T4771] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.394: bad orphan inode 11862016 [ 62.140384][ T4793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.152260][ T4771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 62.170758][ T4771] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.195125][ T4798] team0: No ports can be present during mode change [ 62.398859][ T4805] loop4: detected capacity change from 0 to 2048 [ 62.406393][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 62.428528][ T4805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.462664][ T4805] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.552092][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.570404][ T4820] netlink: 52 bytes leftover after parsing attributes in process `syz.2.408'. [ 62.735501][ T4832] loop0: detected capacity change from 0 to 512 [ 62.753308][ T4834] loop4: detected capacity change from 0 to 512 [ 62.865603][ T4834] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.413: inode #0: comm syz.4.413: iget: illegal inode # [ 62.883194][ T4834] EXT4-fs (loop4): get orphan inode failed [ 62.883595][ T4832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.903702][ T4834] EXT4-fs (loop4): mount failed [ 62.934755][ T4832] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.979699][ T4832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.015157][ T4825] netlink: 1 bytes leftover after parsing attributes in process `syz.2.410'. [ 63.033841][ T4825] xt_policy: neither incoming nor outgoing policy selected [ 63.134245][ T4822] loop3: detected capacity change from 0 to 512 [ 63.183863][ T4822] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.403: bad orphan inode 11862016 [ 63.205662][ T4822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 63.246442][ T4822] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.341680][ T4846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 63.361721][ T4841] netlink: 1 bytes leftover after parsing attributes in process `syz.4.414'. [ 63.373863][ T4841] xt_policy: neither incoming nor outgoing policy selected [ 63.428286][ T4856] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 63.440199][ T4856] SET target dimension over the limit! [ 63.491141][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 63.709213][ T4872] random: crng reseeded on system resumption [ 63.804643][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 63.804656][ T29] audit: type=1326 audit(1759946846.135:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 63.866842][ T4879] team0: No ports can be present during mode change [ 63.882515][ T29] audit: type=1326 audit(1759946846.195:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 63.905994][ T29] audit: type=1326 audit(1759946846.195:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 63.929272][ T29] audit: type=1326 audit(1759946846.195:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 63.952501][ T29] audit: type=1326 audit(1759946846.195:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 63.975778][ T29] audit: type=1326 audit(1759946846.195:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 63.999376][ T29] audit: type=1326 audit(1759946846.195:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 64.003865][ T4888] loop0: detected capacity change from 0 to 512 [ 64.022983][ T29] audit: type=1326 audit(1759946846.195:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 64.052336][ T29] audit: type=1326 audit(1759946846.195:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 64.075584][ T29] audit: type=1326 audit(1759946846.195:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ba02eec9 code=0x7ffc0000 [ 64.084570][ T4888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.173907][ T4888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.220781][ T4888] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.363990][ T4895] loop4: detected capacity change from 0 to 2048 [ 64.422918][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.455251][ T4895] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.566111][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.739730][ T4925] team0: No ports can be present during mode change [ 64.753621][ T4905] xt_policy: neither incoming nor outgoing policy selected [ 65.178785][ T4888] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 65.202368][ T4888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 65.215077][ T4888] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.215077][ T4888] [ 65.224825][ T4888] EXT4-fs (loop0): Total free blocks count 0 [ 65.230837][ T4888] EXT4-fs (loop0): Free/Dirty block details [ 65.236782][ T4888] EXT4-fs (loop0): free_blocks=39626 [ 65.242153][ T4888] EXT4-fs (loop0): dirty_blocks=4051 [ 65.247695][ T4888] EXT4-fs (loop0): Block reservation details [ 65.253874][ T4888] EXT4-fs (loop0): i_reserved_data_blocks=4051 [ 65.391365][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2001 with error 28 [ 65.586259][ T4963] xt_policy: neither incoming nor outgoing policy selected [ 65.921408][ T4978] loop3: detected capacity change from 0 to 1024 [ 65.934877][ T4978] EXT4-fs: Ignoring removed orlov option [ 65.953702][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.233501][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.317961][ T4993] loop3: detected capacity change from 0 to 512 [ 66.344074][ T4993] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 66.430221][ T4997] loop3: detected capacity change from 0 to 512 [ 66.443250][ T4997] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.464: corrupted in-inode xattr: invalid ea_ino [ 66.461253][ T4997] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.464: couldn't read orphan inode 15 (err -117) [ 66.474778][ T4997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.509877][ T5000] __nla_validate_parse: 8 callbacks suppressed [ 66.509895][ T5000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 66.539654][ T5000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.465'. [ 66.549295][ T5000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5000 comm=syz.1.465 [ 66.698152][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 66.856463][ T5018] FAULT_INJECTION: forcing a failure. [ 66.856463][ T5018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.869649][ T5018] CPU: 1 UID: 0 PID: 5018 Comm: syz.4.471 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.869675][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.869688][ T5018] Call Trace: [ 66.869696][ T5018] [ 66.869704][ T5018] __dump_stack+0x1d/0x30 [ 66.869727][ T5018] dump_stack_lvl+0xe8/0x140 [ 66.869747][ T5018] dump_stack+0x15/0x1b [ 66.869822][ T5018] should_fail_ex+0x265/0x280 [ 66.869902][ T5018] should_fail+0xb/0x20 [ 66.869989][ T5018] should_fail_usercopy+0x1a/0x20 [ 66.870009][ T5018] strncpy_from_user+0x25/0x230 [ 66.870104][ T5018] ? kmem_cache_alloc_noprof+0x242/0x480 [ 66.870159][ T5018] ? getname_flags+0x80/0x3b0 [ 66.870187][ T5018] getname_flags+0xae/0x3b0 [ 66.870261][ T5018] user_path_at+0x28/0x130 [ 66.870292][ T5018] do_utimes+0xd9/0x210 [ 66.870319][ T5018] __x64_sys_utimes+0xc6/0x180 [ 66.870353][ T5018] x64_sys_call+0x1e3d/0x3000 [ 66.870439][ T5018] do_syscall_64+0xd2/0x200 [ 66.870464][ T5018] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.870494][ T5018] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.870519][ T5018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.870541][ T5018] RIP: 0033:0x7f48902deec9 [ 66.870633][ T5018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.870650][ T5018] RSP: 002b:00007f488ed3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 66.870668][ T5018] RAX: ffffffffffffffda RBX: 00007f4890535fa0 RCX: 00007f48902deec9 [ 66.870691][ T5018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 66.870704][ T5018] RBP: 00007f488ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.870716][ T5018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.870727][ T5018] R13: 00007f4890536038 R14: 00007f4890535fa0 R15: 00007ffef444b928 [ 66.870745][ T5018] [ 67.265679][ T4997] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.282484][ T5016] netlink: 1 bytes leftover after parsing attributes in process `syz.1.470'. [ 67.348586][ T5037] loop2: detected capacity change from 0 to 512 [ 67.361312][ T5037] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.477: inode #0: comm syz.2.477: iget: illegal inode # [ 67.384274][ T5037] EXT4-fs (loop2): get orphan inode failed [ 67.402912][ T5037] EXT4-fs (loop2): mount failed [ 67.426680][ T5040] loop3: detected capacity change from 0 to 512 [ 67.487927][ T5040] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.478: inode #0: comm syz.3.478: iget: illegal inode # [ 67.603744][ T5040] EXT4-fs (loop3): get orphan inode failed [ 67.610049][ T5040] EXT4-fs (loop3): mount failed [ 67.620593][ T5022] loop0: detected capacity change from 0 to 512 [ 67.711353][ T5022] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.466: bad orphan inode 11862016 [ 67.783434][ T5022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 67.808590][ T5022] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.033124][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 68.127071][ T5082] loop0: detected capacity change from 0 to 512 [ 68.149169][ T5082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.163121][ T5082] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.173673][ T5088] loop3: detected capacity change from 0 to 512 [ 68.180904][ T5088] /dev/loop3: Can't open blockdev [ 68.215500][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.282404][ T5083] netlink: 1 bytes leftover after parsing attributes in process `syz.1.490'. [ 68.520475][ T5105] SELinux: failed to load policy [ 69.070941][ T5128] loop3: detected capacity change from 0 to 2048 [ 69.144585][ T5128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.192392][ T5128] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.203204][ T5119] loop2: detected capacity change from 0 to 512 [ 69.221624][ T5119] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.500: bad orphan inode 11862016 [ 69.232717][ T5119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.245350][ T5119] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.331315][ T5140] random: crng reseeded on system resumption [ 69.339119][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.410719][ T5143] FAULT_INJECTION: forcing a failure. [ 69.410719][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 69.423513][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: syz.2.507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.423636][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.423651][ T5143] Call Trace: [ 69.423658][ T5143] [ 69.423666][ T5143] __dump_stack+0x1d/0x30 [ 69.423688][ T5143] dump_stack_lvl+0xe8/0x140 [ 69.423709][ T5143] dump_stack+0x15/0x1b [ 69.423749][ T5143] should_fail_ex+0x265/0x280 [ 69.423826][ T5143] should_failslab+0x8c/0xb0 [ 69.423857][ T5143] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 69.423889][ T5143] ? __alloc_skb+0x101/0x320 [ 69.423917][ T5143] __alloc_skb+0x101/0x320 [ 69.423967][ T5143] netlink_alloc_large_skb+0xbf/0xf0 [ 69.423997][ T5143] netlink_sendmsg+0x3cf/0x6b0 [ 69.424027][ T5143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.424067][ T5143] __sock_sendmsg+0x142/0x180 [ 69.424119][ T5143] ____sys_sendmsg+0x31e/0x4e0 [ 69.424187][ T5143] ___sys_sendmsg+0x17b/0x1d0 [ 69.424228][ T5143] __x64_sys_sendmsg+0xd4/0x160 [ 69.424260][ T5143] x64_sys_call+0x191e/0x3000 [ 69.424339][ T5143] do_syscall_64+0xd2/0x200 [ 69.424380][ T5143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.424411][ T5143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.424432][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.424454][ T5143] RIP: 0033:0x7f7eb626eec9 [ 69.424470][ T5143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.424488][ T5143] RSP: 002b:00007f7eb4cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.424518][ T5143] RAX: ffffffffffffffda RBX: 00007f7eb64c5fa0 RCX: 00007f7eb626eec9 [ 69.424605][ T5143] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000006 [ 69.424618][ T5143] RBP: 00007f7eb4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.424631][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.424699][ T5143] R13: 00007f7eb64c6038 R14: 00007f7eb64c5fa0 R15: 00007fff897c8918 [ 69.424720][ T5143] [ 69.734558][ T41] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 69.770778][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 69.813696][ T41] EXT4-fs (loop3): Remounting filesystem read-only [ 69.820264][ T142] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 69.862887][ T5156] SELinux: failed to load policy [ 69.926451][ T5169] loop2: detected capacity change from 0 to 512 [ 69.942920][ T5148] netlink: 1 bytes leftover after parsing attributes in process `syz.0.510'. [ 69.962127][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.962561][ T5169] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.518: inode #0: comm syz.2.518: iget: illegal inode # [ 69.971460][ T5148] xt_policy: neither incoming nor outgoing policy selected [ 70.070112][ T5169] EXT4-fs (loop2): get orphan inode failed [ 70.104472][ T5160] netlink: 1 bytes leftover after parsing attributes in process `syz.1.516'. [ 70.104932][ T5169] EXT4-fs (loop2): mount failed [ 70.291672][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 70.291687][ T29] audit: type=1326 audit(1759946852.615:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb626eec9 code=0x7ffc0000 [ 70.324055][ T5184] loop2: detected capacity change from 0 to 128 [ 70.345932][ T5181] random: crng reseeded on system resumption [ 70.379104][ T5184] bio_check_eod: 31 callbacks suppressed [ 70.379119][ T5184] 1mòj: attempt to access beyond end of device [ 70.379119][ T5184] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 70.398391][ T29] audit: type=1326 audit(1759946852.655:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7eb626eec9 code=0x7ffc0000 [ 70.422060][ T29] audit: type=1326 audit(1759946852.655:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb626eec9 code=0x7ffc0000 [ 70.439904][ T5184] 1mòj: attempt to access beyond end of device [ 70.439904][ T5184] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 70.445678][ T29] audit: type=1326 audit(1759946852.655:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7eb626eec9 code=0x7ffc0000 [ 70.469646][ T5184] 1mòj: attempt to access beyond end of device [ 70.469646][ T5184] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 70.482252][ T29] audit: type=1326 audit(1759946852.655:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7eb626ef03 code=0x7ffc0000 [ 70.495309][ T5184] buffer_io_error: 16 callbacks suppressed [ 70.495324][ T5184] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 70.518490][ T29] audit: type=1326 audit(1759946852.655:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7eb626d97f code=0x7ffc0000 [ 70.556052][ T29] audit: type=1326 audit(1759946852.655:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7eb626ef57 code=0x7ffc0000 [ 70.566840][ T5186] SELinux: failed to load policy [ 70.579421][ T29] audit: type=1326 audit(1759946852.655:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7eb626d710 code=0x7ffc0000 [ 70.579455][ T29] audit: type=1326 audit(1759946852.655:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eb626eacb code=0x7ffc0000 [ 70.631418][ T29] audit: type=1326 audit(1759946852.685:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7eb626db2a code=0x7ffc0000 [ 70.655417][ T5184] 1mòj: attempt to access beyond end of device [ 70.655417][ T5184] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 70.670234][ T5184] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 70.693512][ T5184] 1mòj: attempt to access beyond end of device [ 70.693512][ T5184] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 70.695269][ T5171] netlink: 1 bytes leftover after parsing attributes in process `syz.4.519'. [ 70.723530][ T5184] 1mòj: attempt to access beyond end of device [ 70.723530][ T5184] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 70.757564][ T5184] 1mòj: attempt to access beyond end of device [ 70.757564][ T5184] loop2: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 70.770550][ T5184] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 70.802428][ T5184] 1mòj: attempt to access beyond end of device [ 70.802428][ T5184] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 70.815390][ T5184] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 70.846291][ T5184] 1mòj: attempt to access beyond end of device [ 70.846291][ T5184] loop2: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 70.847496][ T5204] loop3: detected capacity change from 0 to 512 [ 70.881121][ T5204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.881840][ T5184] 1mòj: attempt to access beyond end of device [ 70.881840][ T5184] loop2: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 70.903972][ T5184] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 70.924156][ T5184] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 70.933799][ T5184] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 70.952921][ T5204] EXT4-fs (loop3): 1 truncate cleaned up [ 70.959145][ T5204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.963725][ T5184] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 70.993031][ T5184] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 71.002804][ T5184] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 71.027320][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.092698][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 71.177047][ T5218] loop3: detected capacity change from 0 to 128 [ 71.331149][ T5223] random: crng reseeded on system resumption [ 71.445703][ T5234] loop2: detected capacity change from 0 to 512 [ 71.454656][ T5234] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.541: inode #0: comm syz.2.541: iget: illegal inode # [ 71.480079][ T5234] EXT4-fs (loop2): get orphan inode failed [ 71.490067][ T5234] EXT4-fs (loop2): mount failed [ 71.514157][ T5241] loop3: detected capacity change from 0 to 512 [ 71.539264][ T5241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.570396][ T5245] __nla_validate_parse: 2 callbacks suppressed [ 71.570446][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.545'. [ 71.590324][ T5241] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.621195][ T5241] EXT4-fs (loop3): 1 truncate cleaned up [ 71.640072][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.645475][ T5248] loop4: detected capacity change from 0 to 512 [ 71.669555][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.706381][ T5248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.735973][ T5238] netlink: 1 bytes leftover after parsing attributes in process `syz.1.542'. [ 71.749340][ T5248] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.771905][ T5238] xt_policy: neither incoming nor outgoing policy selected [ 71.785049][ T5255] loop2: detected capacity change from 0 to 2048 [ 71.785180][ T5257] loop3: detected capacity change from 0 to 128 [ 71.802375][ T5248] EXT4-fs (loop4): 1 truncate cleaned up [ 71.814971][ T5248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.931948][ T5255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.945645][ T5255] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.965043][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.253934][ T5275] ALSA: seq fatal error: cannot create timer (-22) [ 72.335652][ T2365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 72.401217][ T5277] netlink: 'syz.1.554': attribute type 12 has an invalid length. [ 72.409520][ T2365] EXT4-fs (loop2): Remounting filesystem read-only [ 72.416269][ T382] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 72.704106][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.716845][ T5285] loop3: detected capacity change from 0 to 512 [ 72.761629][ T5285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.832381][ T5285] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.867190][ T5285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.023228][ T5301] random: crng reseeded on system resumption [ 73.059062][ T5293] netlink: 1 bytes leftover after parsing attributes in process `syz.1.560'. [ 73.108562][ T5293] xt_policy: neither incoming nor outgoing policy selected [ 73.150101][ T5291] netlink: 1 bytes leftover after parsing attributes in process `syz.2.555'. [ 73.284516][ T5304] netlink: 1 bytes leftover after parsing attributes in process `syz.0.564'. [ 73.309473][ T5304] xt_policy: neither incoming nor outgoing policy selected [ 73.745039][ T5308] netlink: 1 bytes leftover after parsing attributes in process `syz.1.566'. [ 73.786623][ T5308] xt_policy: neither incoming nor outgoing policy selected [ 73.890878][ T5350] loop4: detected capacity change from 0 to 512 [ 73.891053][ T5351] ALSA: seq fatal error: cannot create timer (-22) [ 74.012247][ T5350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.045314][ T5350] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.096247][ T5350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.203813][ T5359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 74.266425][ T5344] netlink: 1 bytes leftover after parsing attributes in process `syz.2.579'. [ 74.625540][ T5348] loop0: detected capacity change from 0 to 512 [ 74.666636][ T5364] netlink: 1 bytes leftover after parsing attributes in process `syz.2.582'. [ 74.680300][ T5348] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.571: bad orphan inode 11862016 [ 74.692867][ T5364] xt_policy: neither incoming nor outgoing policy selected [ 74.711609][ T5348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.730361][ T5348] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.871233][ T5383] loop3: detected capacity change from 0 to 512 [ 74.886096][ T5383] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.586: inode #0: comm syz.3.586: iget: illegal inode # [ 74.930910][ T5383] EXT4-fs (loop3): get orphan inode failed [ 74.942038][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.948559][ T5383] EXT4-fs (loop3): mount failed [ 75.273681][ T5408] loop2: detected capacity change from 0 to 512 [ 75.310851][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.323761][ T5408] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.418527][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 75.707649][ T5421] ALSA: seq fatal error: cannot create timer (-22) [ 76.035477][ T5372] loop4: detected capacity change from 0 to 512 [ 76.061283][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.104581][ T3542] ================================================================== [ 76.112692][ T3542] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 76.119740][ T3542] [ 76.122060][ T3542] write to 0xffff888104721e04 of 4 bytes by task 3298 on cpu 0: [ 76.129776][ T3542] shmem_unlink+0x13c/0x170 [ 76.134293][ T3542] shmem_rename2+0x1a1/0x290 [ 76.138894][ T3542] vfs_rename+0x7e8/0xa30 [ 76.143228][ T3542] do_renameat2+0x52a/0x9e0 [ 76.147739][ T3542] __x64_sys_rename+0x58/0x70 [ 76.152421][ T3542] x64_sys_call+0x1f9/0x3000 [ 76.157009][ T3542] do_syscall_64+0xd2/0x200 [ 76.161950][ T3542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.167846][ T3542] [ 76.170170][ T3542] read to 0xffff888104721e04 of 4 bytes by task 3542 on cpu 1: [ 76.177796][ T3542] fill_mg_cmtime+0x5b/0x260 [ 76.182396][ T3542] generic_fillattr+0x24a/0x340 [ 76.187254][ T3542] shmem_getattr+0x181/0x200 [ 76.191849][ T3542] vfs_getattr_nosec+0x146/0x1e0 [ 76.196793][ T3542] vfs_statx+0x113/0x390 [ 76.201134][ T3542] vfs_fstatat+0x115/0x170 [ 76.205550][ T3542] __se_sys_newfstatat+0x55/0x260 [ 76.210582][ T3542] __x64_sys_newfstatat+0x55/0x70 [ 76.216132][ T3542] x64_sys_call+0x135a/0x3000 [ 76.220806][ T3542] do_syscall_64+0xd2/0x200 [ 76.225571][ T3542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.231464][ T3542] [ 76.233869][ T3542] value changed: 0x1a8a4d15 -> 0x1a8d5280 [ 76.239680][ T3542] [ 76.241994][ T3542] Reported by Kernel Concurrency Sanitizer on: [ 76.248164][ T3542] CPU: 1 UID: 0 PID: 3542 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.257447][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.267537][ T3542] ================================================================== [ 76.310921][ T5401] loop0: detected capacity change from 0 to 512 [ 76.344459][ T5372] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.584: bad orphan inode 11862016 [ 76.387728][ T5401] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.590: bad orphan inode 11862016 [ 76.402456][ T5372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.415162][ T5372] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.420417][ T5401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.443600][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 76.443612][ T29] audit: type=1400 audit(1759946858.775:1543): avc: denied { name_connect } for pid=5431 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 76.449042][ T5401] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.453449][ T5432] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 76.502415][ T5432] SELinux: failed to load policy [ 76.709836][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.725328][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.