last executing test programs: 18.397996688s ago: executing program 2 (id=2283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "2f8c46c5aae7"}}) (fail_nth: 6) 18.079181243s ago: executing program 2 (id=2286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000940)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 18.014863219s ago: executing program 2 (id=2289): pipe(&(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x19, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x11, r1, 0x9, 0x803) r2 = dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be12442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r4 = io_uring_setup(0x1dc5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x1bb}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 17.744305771s ago: executing program 2 (id=2295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x2, 0x0, 0x4004) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="e5f1fddfe175759743a2d6055bef6ad67f4a06ff6ac3a93555c1b5b8427ed70a249e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 17.468889533s ago: executing program 2 (id=2300): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syslog(0x9, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x20044080, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @local, 0xd}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0xfe4, 0x1, 0xa, 0x6, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000231200000000002000e5ff95"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20060400) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 17.26888718s ago: executing program 2 (id=2305): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060c00034000000000000000015800048054020000000000000065746100000000440002800800024000000000080003400000000008000240000000140800014000000012080001400000000b080b01400003000000000340000000000800024000000020"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000700000000000007000000000030002e612e2e2e2e3e0084938b62677848d28d0d0a291defd17b199576101fece696f2e397839c7d79acff1b4b15f1e10447b80a397a622d254f33b6b655c000e83dc201bf77a74ed9cd9d7438063ef7ac0e5b69b080ac42d149ad4bbce77026e1a0c11ea91a1603343db4fa483a3e8f9161ba7e5fcbf38608374b19c48fe50ff59c1e53ca6f5b6f71c164de7550feeea43fdc9a4702d433c2e157e07b8feb799e81d0bce91fdf1c24d699b1464035832b02d7c7d10ca1955fb84fdf30679d7f6a5009ce0fcfb4fe4a44b26c"], 0x0, 0x2f, 0x0, 0x1, 0x8, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x1}, @request_death, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @dead_binder_done], 0x80, 0x0, &(0x7f0000000240)="3342d66d054854aa76a8c54fbc79e3bed852c42f8ac813013cf2bf3709d5b143397ff47100658d34cd0b48362d927fa290f66da26b88f36a90a6297a6a152a1c24e3ef903119637529eba4ef0a875524dd2207ca978a1eca8847708de646ed045ef11ae2c9cd6cc6da89ea46838a08f1508e0f8e863d30dfac99a4472c17bd09"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000001, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x400c0d0, &(0x7f0000000240)={0xa, 0x4e21, 0x1, @local, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.455116881s ago: executing program 0 (id=2582): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) open(&(0x7f0000000740)='.\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r2, 0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x4df, 0x6, 0x3, 0x5}, 0x14) r3 = dup(r1) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @loopback, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="d9", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x8850) 2.21544149s ago: executing program 32 (id=2305): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060c00034000000000000000015800048054020000000000000065746100000000440002800800024000000000080003400000000008000240000000140800014000000012080001400000000b080b01400003000000000340000000000800024000000020"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000700000000000007000000000030002e612e2e2e2e3e0084938b62677848d28d0d0a291defd17b199576101fece696f2e397839c7d79acff1b4b15f1e10447b80a397a622d254f33b6b655c000e83dc201bf77a74ed9cd9d7438063ef7ac0e5b69b080ac42d149ad4bbce77026e1a0c11ea91a1603343db4fa483a3e8f9161ba7e5fcbf38608374b19c48fe50ff59c1e53ca6f5b6f71c164de7550feeea43fdc9a4702d433c2e157e07b8feb799e81d0bce91fdf1c24d699b1464035832b02d7c7d10ca1955fb84fdf30679d7f6a5009ce0fcfb4fe4a44b26c"], 0x0, 0x2f, 0x0, 0x1, 0x8, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x1}, @request_death, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @dead_binder_done], 0x80, 0x0, &(0x7f0000000240)="3342d66d054854aa76a8c54fbc79e3bed852c42f8ac813013cf2bf3709d5b143397ff47100658d34cd0b48362d927fa290f66da26b88f36a90a6297a6a152a1c24e3ef903119637529eba4ef0a875524dd2207ca978a1eca8847708de646ed045ef11ae2c9cd6cc6da89ea46838a08f1508e0f8e863d30dfac99a4472c17bd09"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000001, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x400c0d0, &(0x7f0000000240)={0xa, 0x4e21, 0x1, @local, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.120110908s ago: executing program 0 (id=2588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000008500000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="e5f1fddfe175759743a2d6055bef6ad67f4a06ff6ac3a93555c1b5b8427ed70a249e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) 2.016776057s ago: executing program 0 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) 1.952230952s ago: executing program 0 (id=2596): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x26, 0x40000, 0x0, 0x0) 1.925704814s ago: executing program 0 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff00000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.894601777s ago: executing program 0 (id=2599): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x2800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x6, &(0x7f00000003c0)=[{0x4, 0x8, 0x4, 0x9}, {0x8, 0x3, 0x10, 0xf}, {0x2, 0x5, 0x5}, {0x4, 0x10, 0x5, 0xa04}, {0x2, 0x0, 0x0, 0x4}, {0xfffe, 0x7, 0xf1, 0x1}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711044000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000007c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@sysvgroups}, {@dioread_nolock}]}, 0x1, 0x564, &(0x7f0000000fc0)="$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") ioperm(0x5, 0xa, 0x100000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) close(r3) syz_clone3(&(0x7f0000000000)={0x100044200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r7, &(0x7f0000000300)=""/176, 0xb0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) 1.222310651s ago: executing program 1 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x871}, 0x40) 1.149524217s ago: executing program 1 (id=2609): unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x20) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "fffffffffffff1ff"}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e20, 0xc619, @mcast1, 0xc}, 0x1c) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x9) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) mkdir(0x0, 0x0) r9 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xb, 0x0, 0x0}) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 949.240523ms ago: executing program 4 (id=2613): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 892.140268ms ago: executing program 4 (id=2614): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r1, 0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x4df, 0x6, 0x3, 0x5}, 0x14) r2 = dup(r0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @loopback, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="d9", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x8850) 783.776346ms ago: executing program 4 (id=2616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100"], 0x18}}, 0x2000) 771.775458ms ago: executing program 4 (id=2617): r0 = socket(0x1e, 0x80004, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r0, 0x0) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 529.862997ms ago: executing program 3 (id=2620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000940)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 509.580929ms ago: executing program 3 (id=2621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000340)={0x4, 0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b00)=""/248, 0xf7}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180), 0x52}, {&(0x7f0000000a00)=""/200, 0xc8}], &(0x7f0000000300)=[0x1, 0x8]}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='veth1_virt_wifi\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000bef000450000240000000000119078000000000000000000004e20001090788204000100000000"], 0x0) inotify_init1(0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x24a00) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0xd00, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4bfa, 0x10000000000004) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 505.480799ms ago: executing program 4 (id=2622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0xf}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2e, &(0x7f0000000140)=""/46, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x1, 0x4, 0x6}, {0x2, 0x2, 0x1, 0x9}, {0x0, 0x2, 0x10, 0x2}, {0x5, 0x1, 0xb, 0x8}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r0, r2, 0xf, 0xe, 0xffffffffffffffff, @void, @value=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 429.734285ms ago: executing program 3 (id=2623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="e5f1fddfe175759743a2d6055bef6ad67f4a06ff6ac3a93555c1b5b8427ed70a249e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) 404.359177ms ago: executing program 3 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100"], 0x18}}, 0x2000) 369.40417ms ago: executing program 3 (id=2625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x2, 0x0, 0x4004) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="e5f1fddfe175759743a2d6055bef6ad67f4a06ff6ac3a93555c1b5b8427ed70a249e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 350.506482ms ago: executing program 4 (id=2626): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060c00034000000000000000015800048054020000000000000065746100000000440002800800024000000000080003400000000008000240000000140800014000000012080001400000000b080b01400003000000000340000000000800024000000020"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000700000000000007000000000030002e612e2e2e2e3e0084938b62677848d28d0d0a291defd17b199576101fece696f2e397839c7d79acff1b4b15f1e10447b80a397a622d254f33b6b655c000e83dc201bf77a74ed9cd9d7438063ef7ac0e5b69b080ac42d149ad4bbce77026e1a0c11ea91a1603343db4fa483a3e8f9161ba7e5fcbf38608374b19c48fe50ff59c1e53ca6f5b6f71c164de7550feeea43fdc9a4702d433c2e157e07b8feb799e81d0bce91fdf1c24d699b1464035832b02d7c7d10ca1955fb84fdf30679d7f6a5009ce0fcfb4fe4a44b2"], 0x0, 0x2f, 0x0, 0x1, 0x8, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x1}, @request_death, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @dead_binder_done], 0x82, 0x0, &(0x7f0000000240)="3342d66d054854aa76a8c54fbc79e3bed852c42f8ac813013cf2bf3709d5b143397ff47100658d34cd0b48362d927fa290f66da26b88f36a90a6297a6a152a1c24e3ef903119637529eba4ef0a875524dd2207ca978a1eca8847708de646ed045ef11ae2c9cd6cc6da89ea46838a08f1508e0f8e863d30dfac99a4472c17bd0933e0"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000001, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x400c0d0, &(0x7f0000000240)={0xa, 0x4e21, 0x1, @local, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 260.025859ms ago: executing program 1 (id=2627): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 259.458749ms ago: executing program 1 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) fcntl$notify(r2, 0x402, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2, 0x7, 0x20000004}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000049) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 201.211134ms ago: executing program 1 (id=2629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x7) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x80, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 150.740958ms ago: executing program 3 (id=2630): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x19, 0x16, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9c25d07fde460e677df7009000000fab4afaaf755a3f6a004000000000000000000000000000200", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2835966c10000000000d300e6d60200000000555c581a0000000100", [0x8000000000000000]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000e80)={0x0, 0x1d0e, 0x10, 0x1, 0x17a, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000f00)=""/80, 0x328000, 0x1000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) creat(&(0x7f00000002c0)='./file0\x00', 0xfe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0x192}, {&(0x7f0000000f80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x95d}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 0s ago: executing program 1 (id=2631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='inode_switch_wbs\x00', r0, 0x0, 0x40000}, 0x18) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001000)={0x0, 0xe}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700ec1beb1e00000802c7e646010021000020dfe1a52f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES16=r7, @ANYRES32=r5, @ANYBLOB="faef520b097600000c0111"], 0x15c}}, 0x20008080) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r8) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r9, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r11 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001600)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) kernel console output (not intermixed with test programs): nk_deliver_tap+0x4dc/0x500 [ 148.948428][ T9288] netlink_unicast+0x5bd/0x690 [ 148.948461][ T9288] netlink_sendmsg+0x58b/0x6b0 [ 148.948484][ T9288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.948505][ T9288] __sock_sendmsg+0x145/0x180 [ 148.948583][ T9288] ____sys_sendmsg+0x31e/0x4e0 [ 148.948608][ T9288] ___sys_sendmsg+0x17b/0x1d0 [ 148.948646][ T9288] __x64_sys_sendmsg+0xd4/0x160 [ 148.948670][ T9288] x64_sys_call+0x191e/0x2ff0 [ 148.948708][ T9288] do_syscall_64+0xd2/0x200 [ 148.948736][ T9288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.948760][ T9288] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.948815][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.948836][ T9288] RIP: 0033:0x7f20fc69ebe9 [ 148.948852][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.948869][ T9288] RSP: 002b:00007f20fb0ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.948889][ T9288] RAX: ffffffffffffffda RBX: 00007f20fc8c5fa0 RCX: 00007f20fc69ebe9 [ 148.948978][ T9288] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 148.948991][ T9288] RBP: 00007f20fc721e19 R08: 0000000000000000 R09: 0000000000000000 [ 148.949062][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.949075][ T9288] R13: 00007f20fc8c6038 R14: 00007f20fc8c5fa0 R15: 00007ffd31309968 [ 148.949093][ T9288] [ 148.949099][ T9288] memory: usage 307200kB, limit 307200kB, failcnt 3010 [ 148.957310][ T9348] loop9: unable to read partition table [ 148.967491][ T9288] memory+swap: usage 307796kB, limit 9007199254740988kB, failcnt 0 [ 148.967510][ T9288] kmem: usage 303564kB, limit 9007199254740988kB, failcnt 0 [ 148.987858][ T9348] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 148.987858][ T9348] ) failed (rc=-5) [ 148.991720][ T9288] Memory cgroup stats for /syz3: [ 148.992581][ T9288] cache 16384 [ 149.006950][ T9351] loop0: detected capacity change from 0 to 1024 [ 149.012285][ T9288] rss 3706880 [ 149.012308][ T9288] shmem 0 [ 149.012315][ T9288] mapped_file 0 [ 149.048409][ T9350] loop2: detected capacity change from 0 to 512 [ 149.053408][ T9288] dirty 0 [ 149.146151][ T9351] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2004: Failed to acquire dquot type 0 [ 149.148858][ T9288] writeback 0 [ 149.148868][ T9288] workingset_refault_anon 587 [ 149.148874][ T9288] workingset_refault_file 2650 [ 149.148880][ T9288] swap 610304 [ 149.148887][ T9288] swapcached 0 [ 149.148893][ T9288] pgpgin 114456 [ 149.148899][ T9288] pgpgout 113547 [ 149.148906][ T9288] pgfault 129399 [ 149.155543][ T9351] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, [ 149.159960][ T9288] pgmajfault 409 [ 149.159971][ T9288] inactive_anon 0 [ 149.164917][ T9351] inode 13: [ 149.169933][ T9288] active_anon 0 [ 149.175538][ T9351] block 144: [ 149.180580][ T9288] inactive_file 3706880 [ 149.185633][ T9351] freeing already freed block (bit 9); block bitmap corrupt. [ 149.190494][ T9288] active_file 16384 [ 149.196572][ T9351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.2004: corrupted inode contents [ 149.200581][ T9288] unevictable 0 [ 149.205202][ T9351] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.2004: mark_inode_dirty error [ 149.211296][ T9288] hierarchical_memory_limit 314572800 [ 149.211306][ T9288] hierarchical_memsw_limit 9223372036854771712 [ 149.211314][ T9288] total_cache 16384 [ 149.218963][ T9351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.2004: corrupted inode contents [ 149.223310][ T9288] total_rss 3706880 [ 149.223319][ T9288] total_shmem 0 [ 149.223325][ T9288] total_mapped_file 0 [ 149.223331][ T9288] total_dirty 0 [ 149.223339][ T9288] total_writeback 0 [ 149.228318][ T9351] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2004: mark_inode_dirty error [ 149.248076][ T9288] total_workingset_refault_anon 587 [ 149.248115][ T9288] total_workingset_refault_file 2650 [ 149.248123][ T9288] total_swap 610304 [ 149.258808][ T9350] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.264986][ T9288] total_swapcached 0 [ 149.289757][ T9351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.2004: corrupted inode contents [ 149.297934][ T9288] total_pgpgin 114456 [ 149.297944][ T9288] total_pgpgout 113547 [ 149.297950][ T9288] total_pgfault 129399 [ 149.297957][ T9288] total_pgmajfault 409 [ 149.297964][ T9288] total_inactive_anon 0 [ 149.302434][ T9351] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 149.308294][ T9288] total_active_anon 0 [ 149.308302][ T9288] total_inactive_file 3706880 [ 149.308309][ T9288] total_active_file 16384 [ 149.308316][ T9288] total_unevictable 0 [ 149.308323][ T9288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 149.314404][ T9351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.2004: corrupted inode contents [ 149.322303][ T9288] /,mems_allowed=0,oom_memcg=/syz3,task_memcg= [ 149.330937][ T9351] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.2004: mark_inode_dirty error [ 149.343092][ T9288] /syz3,task=syz.3.1988,pid=9287,uid=0 [ 149.349179][ T9351] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 149.351829][ T9288] Memory cgroup out of memory: Killed process 9287 (syz.3.1988) total-vm:93896kB, anon-rss:4528kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 149.374654][ T9351] EXT4-fs (loop0): 1 truncate cleaned up [ 149.431989][ T9344] vlan0: entered allmulticast mode [ 149.726618][ T9344] dummy0: entered allmulticast mode [ 149.951674][ T9374] lo speed is unknown, defaulting to 1000 [ 150.035280][ T9374] lo speed is unknown, defaulting to 1000 [ 150.604062][ T9388] loop2: detected capacity change from 0 to 1024 [ 150.758103][ T9388] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.947379][ T9407] netlink: 'syz.2.2023': attribute type 7 has an invalid length. [ 150.998253][ T9407] loop9: detected capacity change from 0 to 7 [ 151.004474][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 151.004485][ T29] audit: type=1400 audit(1756398157.653:13429): avc: denied { ioctl } for pid=9399 comm="syz.1.2022" path="socket:[25224]" dev="sockfs" ino=25224 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.051277][ T9407] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.062318][ T9409] bond0: (slave bond_slave_0): Releasing backup interface [ 151.080377][ T9407] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.088465][ T9407] loop9: unable to read partition table [ 151.114290][ T9409] bond0: (slave bond_slave_1): Releasing backup interface [ 151.126322][ T9407] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 151.126322][ T9407] ) failed (rc=-5) [ 151.164205][ T9409] team0: Port device team_slave_0 removed [ 151.193797][ T9409] team0: Port device team_slave_1 removed [ 151.225100][ T9400] team0: Mode changed to "activebackup" [ 151.421250][ T30] oom_reaper: reaped process 9287 (syz.3.1988), now anon-rss:0kB, file-rss:21192kB, shmem-rss:0kB [ 151.626029][ T9295] EXT4-fs (loop3): 1 truncate cleaned up [ 151.632454][ T9295] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.683593][ T9421] __nla_validate_parse: 4 callbacks suppressed [ 151.683608][ T9421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2027'. [ 151.707623][ T9421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2027'. [ 151.731279][ T9423] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2028'. [ 151.751440][ T9423] loop3: detected capacity change from 0 to 1024 [ 151.758885][ T9428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2031'. [ 151.774521][ T9428] loop2: detected capacity change from 0 to 1024 [ 151.778233][ T9423] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.800246][ T9428] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.818365][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2032'. [ 151.827517][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2032'. [ 151.862410][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2033'. [ 151.872070][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2033'. [ 151.904966][ T29] audit: type=1326 audit(1756398158.553:13430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 151.939175][ T9443] loop3: detected capacity change from 0 to 512 [ 152.054938][ T29] audit: type=1326 audit(1756398158.583:13431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 152.079052][ T29] audit: type=1326 audit(1756398158.583:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 152.103080][ T29] audit: type=1326 audit(1756398158.583:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 152.126975][ T29] audit: type=1326 audit(1756398158.583:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20fc69ec23 code=0x7ffc0000 [ 152.150767][ T29] audit: type=1326 audit(1756398158.583:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20fc69d69f code=0x7ffc0000 [ 152.174550][ T29] audit: type=1326 audit(1756398158.583:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f20fc69ec77 code=0x7ffc0000 [ 152.198188][ T29] audit: type=1326 audit(1756398158.583:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20fc69d550 code=0x7ffc0000 [ 152.222117][ T29] audit: type=1326 audit(1756398158.593:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20fc69e7eb code=0x7ffc0000 [ 152.258133][ T9443] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.458253][ T9455] netlink: 'syz.2.2037': attribute type 7 has an invalid length. [ 152.466123][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 152.589208][ T9455] loop9: detected capacity change from 0 to 7 [ 152.601823][ T9455] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.625686][ T9455] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.633911][ T9455] loop9: unable to read partition table [ 152.639801][ T9455] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.639801][ T9455] ) failed (rc=-5) [ 153.044134][ T9472] 9pnet_fd: Insufficient options for proto=fd [ 153.068446][ T9477] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2047'. [ 153.088032][ T9477] loop4: detected capacity change from 0 to 1024 [ 153.101411][ T9477] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.377165][ T9493] bridge_slave_1: left allmulticast mode [ 153.382860][ T9493] bridge_slave_1: left promiscuous mode [ 153.388712][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.417069][ T9493] bridge_slave_0: left allmulticast mode [ 153.423059][ T9493] bridge_slave_0: left promiscuous mode [ 153.429008][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.469582][ T9499] loop0: detected capacity change from 0 to 512 [ 153.490705][ T9499] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.945799][ T9510] loop3: detected capacity change from 0 to 512 [ 153.998884][ T9510] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.168694][ T9517] loop3: detected capacity change from 0 to 1024 [ 154.217664][ T9517] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.428246][ T9527] loop2: detected capacity change from 0 to 512 [ 154.447973][ T9494] loop4: detected capacity change from 0 to 512 [ 154.455220][ T9494] EXT4-fs: Ignoring removed nobh option [ 154.501452][ T9494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2049: corrupted inode contents [ 154.558208][ T9527] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.576888][ T9494] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2049: mark_inode_dirty error [ 154.677893][ T9494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2049: corrupted inode contents [ 154.822673][ T9494] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2049: mark_inode_dirty error [ 154.889492][ T9494] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2049: Failed to acquire dquot type 0 [ 154.923405][ T9547] serio: Serial port ttyS3 [ 154.937630][ T9494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2049: corrupted inode contents [ 154.994195][ T9494] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2049: mark_inode_dirty error [ 155.032591][ T9548] loop3: detected capacity change from 0 to 164 [ 155.046181][ T9494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2049: corrupted inode contents [ 155.064390][ T9548] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.104307][ T9494] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2049: mark_inode_dirty error [ 155.127724][ T9548] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.235363][ T9494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2049: corrupted inode contents [ 155.288989][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.298477][ T9494] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 155.318219][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.345289][ T9494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2049: corrupted inode contents [ 155.427688][ T9494] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2049: mark_inode_dirty error [ 155.642972][ T9561] veth0_to_bond: entered allmulticast mode [ 155.717899][ T9563] netlink: 'syz.2.2071': attribute type 11 has an invalid length. [ 155.830100][ T9494] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 155.917067][ T9494] EXT4-fs (loop4): 1 truncate cleaned up [ 155.932481][ T9572] netlink: 'syz.3.2075': attribute type 7 has an invalid length. [ 155.947831][ T9572] loop9: detected capacity change from 0 to 7 [ 155.954324][ T9572] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.962724][ T9572] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.970732][ T9572] loop9: unable to read partition table [ 155.976764][ T9572] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 155.976764][ T9572] ) failed (rc=-5) [ 155.994732][ T9494] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.387451][ T9580] serio: Serial port ptm0 [ 156.687263][ T9583] netlink: 'syz.1.2079': attribute type 11 has an invalid length. [ 156.695361][ T9583] __nla_validate_parse: 8 callbacks suppressed [ 156.695415][ T9583] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2079'. [ 156.733972][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 156.734005][ T29] audit: type=1326 audit(1756398163.383:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85c5aebe9 code=0x7ffc0000 [ 156.858004][ T29] audit: type=1326 audit(1756398163.383:13571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff85c5aebe9 code=0x7ffc0000 [ 156.882428][ T29] audit: type=1326 audit(1756398163.383:13572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85c5aebe9 code=0x7ffc0000 [ 156.906755][ T29] audit: type=1326 audit(1756398163.383:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ff85c5aebe9 code=0x7ffc0000 [ 156.931426][ T29] audit: type=1326 audit(1756398163.383:13574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85c5aebe9 code=0x7ffc0000 [ 157.008377][ T9593] netlink: 'syz.2.2083': attribute type 11 has an invalid length. [ 157.016774][ T9593] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2083'. [ 157.027181][ T9593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2083'. [ 157.169823][ T9601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2087'. [ 157.241787][ T9607] loop0: detected capacity change from 0 to 512 [ 157.249270][ T29] audit: type=1326 audit(1756398163.893:13575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 157.273451][ T29] audit: type=1326 audit(1756398163.893:13576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 157.297937][ T29] audit: type=1326 audit(1756398163.893:13577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 157.322012][ T29] audit: type=1326 audit(1756398163.893:13578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 157.345996][ T29] audit: type=1326 audit(1756398163.893:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 157.372074][ T3302] EXT4-fs unmount: 86 callbacks suppressed [ 157.372090][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.388505][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 157.388944][ T9607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.427473][ T9607] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.460445][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.471853][ T9617] loop3: detected capacity change from 0 to 512 [ 157.511258][ T9617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.527445][ T9617] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.552073][ T9621] loop0: detected capacity change from 0 to 512 [ 157.563846][ T9627] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2095'. [ 157.568710][ T9621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.608676][ T9621] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.631805][ T9627] loop4: detected capacity change from 0 to 1024 [ 157.640961][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.661155][ T9627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.673872][ T9627] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.708494][ T9633] netlink: 'syz.3.2096': attribute type 11 has an invalid length. [ 157.716536][ T9633] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2096'. [ 157.731003][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2096'. [ 157.741863][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.761851][ T9635] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2097'. [ 157.781938][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.886038][ T9639] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2098'. [ 158.028822][ T9649] loop4: detected capacity change from 0 to 512 [ 158.057672][ T9649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.074022][ T9654] loop0: detected capacity change from 0 to 1024 [ 158.082242][ T9649] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.099917][ T9654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.112368][ T9654] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.154557][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.164572][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.183271][ T9664] loop2: detected capacity change from 0 to 1024 [ 158.198584][ T9664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.213950][ T9664] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.306404][ T9682] dummy0: entered promiscuous mode [ 158.311360][ T9684] loop0: detected capacity change from 0 to 1024 [ 158.311769][ T9682] macsec1: entered promiscuous mode [ 158.323590][ T9682] macsec1: entered allmulticast mode [ 158.327801][ T9684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.341333][ T9684] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.372554][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.392101][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.415631][ T9694] loop0: detected capacity change from 0 to 1024 [ 158.423010][ T9694] ext2: Unknown parameter 'noacl' [ 158.459670][ T9699] loop2: detected capacity change from 0 to 512 [ 158.478872][ T9699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.492262][ T9699] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.519007][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.976955][ T9729] loop2: detected capacity change from 0 to 512 [ 158.985817][ T9729] EXT4-fs: Ignoring removed nobh option [ 159.019713][ T9729] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2126: corrupted inode contents [ 159.032294][ T9729] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.2126: mark_inode_dirty error [ 159.069775][ T9729] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2126: corrupted inode contents [ 159.084543][ T9729] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2126: mark_inode_dirty error [ 159.105315][ T9729] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2126: Failed to acquire dquot type 0 [ 159.117289][ T9729] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2126: corrupted inode contents [ 159.133656][ T9729] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2126: mark_inode_dirty error [ 159.146154][ T9729] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2126: corrupted inode contents [ 159.166662][ T9729] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2126: mark_inode_dirty error [ 159.186769][ T9729] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2126: corrupted inode contents [ 159.209769][ T9729] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 159.236977][ T9729] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2126: corrupted inode contents [ 159.288092][ T9749] loop3: detected capacity change from 0 to 512 [ 159.295143][ T9749] EXT4-fs: Ignoring removed i_version option [ 159.302922][ T9749] EXT4-fs: journaled quota format not specified [ 159.360236][ T9729] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2126: mark_inode_dirty error [ 159.387237][ T9729] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 159.418839][ T9729] EXT4-fs (loop2): 1 truncate cleaned up [ 159.430615][ T9729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.465447][ T9729] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.562334][ T9756] loop4: detected capacity change from 0 to 512 [ 159.570604][ T9756] EXT4-fs: Ignoring removed nobh option [ 159.591264][ T9756] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2137: corrupted inode contents [ 159.604852][ T9756] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2137: mark_inode_dirty error [ 159.617739][ T9756] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2137: corrupted inode contents [ 159.630220][ T9756] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2137: mark_inode_dirty error [ 159.642931][ T9756] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2137: Failed to acquire dquot type 0 [ 159.655203][ T9756] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2137: corrupted inode contents [ 159.668992][ T9756] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2137: mark_inode_dirty error [ 159.681459][ T9756] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2137: corrupted inode contents [ 159.694823][ T9756] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2137: mark_inode_dirty error [ 159.724064][ T9756] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2137: corrupted inode contents [ 159.746790][ T9756] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 159.757357][ T9756] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2137: corrupted inode contents [ 159.773990][ T9756] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2137: mark_inode_dirty error [ 159.790039][ T9756] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 159.800895][ T9756] EXT4-fs (loop4): 1 truncate cleaned up [ 159.808545][ T9756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.822038][ T9756] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.034238][ T9760] loop3: detected capacity change from 0 to 512 [ 160.049606][ T9760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.067459][ T9760] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.139397][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.165534][ T9764] FAULT_INJECTION: forcing a failure. [ 160.165534][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 160.178625][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.3.2139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.178650][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.178698][ T9764] Call Trace: [ 160.178714][ T9764] [ 160.178721][ T9764] __dump_stack+0x1d/0x30 [ 160.178820][ T9764] dump_stack_lvl+0xe8/0x140 [ 160.178839][ T9764] dump_stack+0x15/0x1b [ 160.178856][ T9764] should_fail_ex+0x265/0x280 [ 160.178877][ T9764] should_failslab+0x8c/0xb0 [ 160.178898][ T9764] kmem_cache_alloc_node_noprof+0x57/0x320 [ 160.178992][ T9764] ? __alloc_skb+0x101/0x320 [ 160.179005][ T9764] ? xas_load+0x413/0x430 [ 160.179086][ T9764] __alloc_skb+0x101/0x320 [ 160.179170][ T9764] tipc_nl_compat_dumpit+0xbb/0x420 [ 160.179256][ T9764] tipc_nl_compat_recv+0x64e/0x800 [ 160.179284][ T9764] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 160.179308][ T9764] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 160.179450][ T9764] genl_family_rcv_msg_doit+0x140/0x1b0 [ 160.179492][ T9764] genl_rcv_msg+0x422/0x460 [ 160.179520][ T9764] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 160.179543][ T9764] netlink_rcv_skb+0x123/0x220 [ 160.179558][ T9764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.179646][ T9764] genl_rcv+0x28/0x40 [ 160.179668][ T9764] netlink_unicast+0x5bd/0x690 [ 160.179701][ T9764] netlink_sendmsg+0x58b/0x6b0 [ 160.179722][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.179761][ T9764] __sock_sendmsg+0x145/0x180 [ 160.179879][ T9764] ____sys_sendmsg+0x31e/0x4e0 [ 160.179899][ T9764] ___sys_sendmsg+0x17b/0x1d0 [ 160.179926][ T9764] __x64_sys_sendmsg+0xd4/0x160 [ 160.179947][ T9764] x64_sys_call+0x191e/0x2ff0 [ 160.180021][ T9764] do_syscall_64+0xd2/0x200 [ 160.180042][ T9764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.180078][ T9764] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.180119][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.180136][ T9764] RIP: 0033:0x7f20fc69ebe9 [ 160.180151][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.180164][ T9764] RSP: 002b:00007f20fb0ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.180181][ T9764] RAX: ffffffffffffffda RBX: 00007f20fc8c5fa0 RCX: 00007f20fc69ebe9 [ 160.180194][ T9764] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 160.180278][ T9764] RBP: 00007f20fb0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 160.180289][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.180301][ T9764] R13: 00007f20fc8c6038 R14: 00007f20fc8c5fa0 R15: 00007ffd31309968 [ 160.180319][ T9764] [ 160.381458][ T9719] syz.2.2126 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 160.464521][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.2.2126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.464626][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.464638][ T9719] Call Trace: [ 160.464644][ T9719] [ 160.464652][ T9719] __dump_stack+0x1d/0x30 [ 160.464673][ T9719] dump_stack_lvl+0xe8/0x140 [ 160.464694][ T9719] dump_stack+0x15/0x1b [ 160.464713][ T9719] dump_header+0x81/0x220 [ 160.464746][ T9719] oom_kill_process+0x342/0x400 [ 160.464786][ T9719] out_of_memory+0x979/0xb80 [ 160.464815][ T9719] try_charge_memcg+0x5e6/0x9e0 [ 160.464847][ T9719] obj_cgroup_charge_pages+0xa6/0x150 [ 160.464880][ T9719] __memcg_kmem_charge_page+0x9f/0x170 [ 160.464995][ T9719] __alloc_frozen_pages_noprof+0x188/0x360 [ 160.465029][ T9719] alloc_pages_mpol+0xb3/0x250 [ 160.465059][ T9719] alloc_pages_noprof+0x90/0x130 [ 160.465114][ T9719] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 160.465156][ T9719] __kvmalloc_node_noprof+0x30f/0x4e0 [ 160.465197][ T9719] ? ip_set_alloc+0x1f/0x30 [ 160.465294][ T9719] ? ip_set_alloc+0x1f/0x30 [ 160.465401][ T9719] ? __kmalloc_cache_noprof+0x189/0x320 [ 160.465431][ T9719] ip_set_alloc+0x1f/0x30 [ 160.465530][ T9719] hash_netiface_create+0x282/0x740 [ 160.465562][ T9719] ? __pfx_hash_netiface_create+0x10/0x10 [ 160.465596][ T9719] ip_set_create+0x3c9/0x960 [ 160.465648][ T9719] ? __nla_parse+0x40/0x60 [ 160.465721][ T9719] nfnetlink_rcv_msg+0x4c3/0x590 [ 160.465765][ T9719] netlink_rcv_skb+0x123/0x220 [ 160.465782][ T9719] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.465833][ T9719] nfnetlink_rcv+0x16b/0x1690 [ 160.465922][ T9719] ? free_frozen_page_commit+0x6f/0x2a0 [ 160.465974][ T9719] ? _raw_spin_unlock+0x26/0x50 [ 160.466005][ T9719] ? __free_frozen_pages+0x25a/0x4e0 [ 160.466095][ T9719] ? xas_load+0x413/0x430 [ 160.466172][ T9719] ? __rcu_read_unlock+0x4f/0x70 [ 160.466193][ T9719] ? xa_load+0xb1/0xe0 [ 160.466220][ T9719] ? __account_obj_stock+0x211/0x350 [ 160.466248][ T9719] ? obj_cgroup_charge_account+0x122/0x1a0 [ 160.466277][ T9719] ? __rcu_read_unlock+0x4f/0x70 [ 160.466312][ T9719] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 160.466340][ T9719] ? __account_obj_stock+0x211/0x350 [ 160.466359][ T9719] ? should_fail_ex+0x30/0x280 [ 160.466400][ T9719] ? selinux_nlmsg_lookup+0x99/0x890 [ 160.466450][ T9719] ? __rcu_read_unlock+0x34/0x70 [ 160.466515][ T9719] ? __netlink_lookup+0x266/0x2a0 [ 160.466547][ T9719] netlink_unicast+0x5bd/0x690 [ 160.466587][ T9719] netlink_sendmsg+0x58b/0x6b0 [ 160.466612][ T9719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.466634][ T9719] __sock_sendmsg+0x145/0x180 [ 160.466672][ T9719] ____sys_sendmsg+0x31e/0x4e0 [ 160.466692][ T9719] ___sys_sendmsg+0x17b/0x1d0 [ 160.466728][ T9719] __x64_sys_sendmsg+0xd4/0x160 [ 160.466788][ T9719] x64_sys_call+0x191e/0x2ff0 [ 160.466808][ T9719] do_syscall_64+0xd2/0x200 [ 160.466859][ T9719] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.466882][ T9719] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.466907][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.466973][ T9719] RIP: 0033:0x7ff85c5aebe9 [ 160.466988][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.467003][ T9719] RSP: 002b:00007ff85b00f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.467023][ T9719] RAX: ffffffffffffffda RBX: 00007ff85c7d5fa0 RCX: 00007ff85c5aebe9 [ 160.467034][ T9719] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 160.467044][ T9719] RBP: 00007ff85c631e19 R08: 0000000000000000 R09: 0000000000000000 [ 160.467074][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.467085][ T9719] R13: 00007ff85c7d6038 R14: 00007ff85c7d5fa0 R15: 00007ffd9c69cdf8 [ 160.467101][ T9719] [ 160.840499][ T9719] memory: usage 307200kB, limit 307200kB, failcnt 1450 [ 160.847617][ T9719] memory+swap: usage 307960kB, limit 9007199254740988kB, failcnt 0 [ 160.855558][ T9719] kmem: usage 302348kB, limit 9007199254740988kB, failcnt 0 [ 160.863022][ T9719] Memory cgroup stats for /syz2: [ 160.868865][ T9719] cache 12288 [ 160.874323][ T9766] FAULT_INJECTION: forcing a failure. [ 160.874323][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 160.877108][ T9719] rss 4956160 [ 160.889847][ T9766] CPU: 1 UID: 0 PID: 9766 Comm: syz.3.2140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.889944][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.889957][ T9766] Call Trace: [ 160.889964][ T9766] [ 160.889972][ T9766] __dump_stack+0x1d/0x30 [ 160.889992][ T9766] dump_stack_lvl+0xe8/0x140 [ 160.890010][ T9766] dump_stack+0x15/0x1b [ 160.890026][ T9766] should_fail_ex+0x265/0x280 [ 160.890190][ T9766] ? audit_log_d_path+0x8d/0x150 [ 160.890258][ T9766] should_failslab+0x8c/0xb0 [ 160.890280][ T9766] __kmalloc_cache_noprof+0x4c/0x320 [ 160.890376][ T9766] audit_log_d_path+0x8d/0x150 [ 160.890402][ T9766] audit_log_d_path_exe+0x42/0x70 [ 160.890430][ T9766] audit_log_task+0x1e9/0x250 [ 160.890530][ T9766] audit_seccomp+0x61/0x100 [ 160.890552][ T9766] ? __seccomp_filter+0x68c/0x10d0 [ 160.890572][ T9766] __seccomp_filter+0x69d/0x10d0 [ 160.890592][ T9766] ? __list_add_valid_or_report+0x38/0xe0 [ 160.890618][ T9766] ? __set_next_task_fair+0x5b/0x150 [ 160.890636][ T9766] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 160.890668][ T9766] ? _raw_spin_unlock+0x26/0x50 [ 160.890700][ T9766] __secure_computing+0x82/0x150 [ 160.890717][ T9766] syscall_trace_enter+0xcf/0x1e0 [ 160.890769][ T9766] do_syscall_64+0xac/0x200 [ 160.890794][ T9766] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.890883][ T9766] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.890906][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.890925][ T9766] RIP: 0033:0x7f20fc69d5fc [ 160.890940][ T9766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.891013][ T9766] RSP: 002b:00007f20fb0ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.891031][ T9766] RAX: ffffffffffffffda RBX: 00007f20fc8c5fa0 RCX: 00007f20fc69d5fc [ 160.891043][ T9766] RDX: 000000000000000f RSI: 00007f20fb0ff0a0 RDI: 0000000000000004 [ 160.891055][ T9766] RBP: 00007f20fb0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 160.891067][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.891079][ T9766] R13: 00007f20fc8c6038 R14: 00007f20fc8c5fa0 R15: 00007ffd31309968 [ 160.891096][ T9766] [ 161.116848][ T9719] shmem 0 [ 161.119948][ T9719] mapped_file 0 [ 161.123429][ T9719] dirty 0 [ 161.126557][ T9719] writeback 0 [ 161.129854][ T9719] workingset_refault_anon 405 [ 161.134520][ T9719] workingset_refault_file 3257 [ 161.139516][ T9719] swap 778240 [ 161.143040][ T9719] swapcached 0 [ 161.146394][ T9719] pgpgin 170429 [ 161.149954][ T9719] pgpgout 169216 [ 161.153738][ T9719] pgfault 167506 [ 161.157449][ T9719] pgmajfault 240 [ 161.161245][ T9719] inactive_anon 0 [ 161.164969][ T9719] active_anon 0 [ 161.168521][ T9719] inactive_file 4956160 [ 161.172916][ T9719] active_file 12288 [ 161.176750][ T9719] unevictable 0 [ 161.180340][ T9719] hierarchical_memory_limit 314572800 [ 161.185915][ T9719] hierarchical_memsw_limit 9223372036854771712 [ 161.192197][ T9719] total_cache 12288 [ 161.196019][ T9719] total_rss 4956160 [ 161.200079][ T9719] total_shmem 0 [ 161.203620][ T9719] total_mapped_file 0 [ 161.207874][ T9719] total_dirty 0 [ 161.211325][ T9719] total_writeback 0 [ 161.215150][ T9719] total_workingset_refault_anon 405 [ 161.220737][ T9719] total_workingset_refault_file 3257 [ 161.226666][ T9719] total_swap 778240 [ 161.230637][ T9719] total_swapcached 0 [ 161.234642][ T9719] total_pgpgin 170429 [ 161.238700][ T9719] total_pgpgout 169216 [ 161.242880][ T9719] total_pgfault 167506 [ 161.246996][ T9719] total_pgmajfault 240 [ 161.251765][ T9719] total_inactive_anon 0 [ 161.256171][ T9719] total_active_anon 0 [ 161.260411][ T9719] total_inactive_file 4956160 [ 161.265169][ T9719] total_active_file 12288 [ 161.269635][ T9719] total_unevictable 0 [ 161.273705][ T9719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2126,pid=9718,uid=0 [ 161.288744][ T9719] Memory cgroup out of memory: Killed process 9718 (syz.2.2126) total-vm:95944kB, anon-rss:5808kB, file-rss:22508kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 161.438672][ T9771] loop0: detected capacity change from 0 to 512 [ 161.462400][ T9771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.478444][ T9771] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.512622][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.547413][ T9777] loop0: detected capacity change from 0 to 1024 [ 161.556520][ T9777] EXT4-fs: Ignoring removed nobh option [ 161.565842][ T9777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.576474][ T9777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.593623][ T9775] macvtap0: refused to change device tx_queue_len [ 161.611362][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.710966][ T9782] 9pnet_fd: Insufficient options for proto=fd [ 161.776871][ T9788] netlink: 'syz.3.2147': attribute type 11 has an invalid length. [ 161.785293][ T9788] __nla_validate_parse: 22 callbacks suppressed [ 161.785308][ T9788] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2147'. [ 161.803099][ T9788] loop3: detected capacity change from 0 to 164 [ 161.819677][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2147'. [ 161.889318][ T9791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2148'. [ 161.919848][ T9793] loop0: detected capacity change from 0 to 512 [ 161.935729][ T9791] loop3: detected capacity change from 0 to 1024 [ 161.948494][ T9793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.962423][ T9793] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.980850][ T9791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.993678][ T9791] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.032640][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.105949][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.143947][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.165713][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.198435][ T9808] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2155'. [ 162.218394][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 162.218410][ T29] audit: type=1326 audit(1756398168.873:13949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.272553][ T9813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2156'. [ 162.286071][ T9813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2156'. [ 162.321404][ T9815] 9pnet_fd: Insufficient options for proto=fd [ 162.370457][ T29] audit: type=1326 audit(1756398168.873:13950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.394832][ T29] audit: type=1326 audit(1756398168.903:13951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.419126][ T29] audit: type=1326 audit(1756398168.903:13952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.442902][ T29] audit: type=1326 audit(1756398168.913:13953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.467266][ T29] audit: type=1326 audit(1756398168.913:13954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.492066][ T29] audit: type=1326 audit(1756398168.923:13955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.517214][ T29] audit: type=1326 audit(1756398168.923:13956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.541792][ T29] audit: type=1326 audit(1756398168.933:13957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.565982][ T29] audit: type=1326 audit(1756398168.933:13958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 162.581958][ T9830] FAULT_INJECTION: forcing a failure. [ 162.581958][ T9830] name failslab, interval 1, probability 0, space 0, times 0 [ 162.591127][ T9824] loop4: detected capacity change from 0 to 512 [ 162.602985][ T9830] CPU: 1 UID: 0 PID: 9830 Comm: syz.2.2163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.603010][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.603066][ T9830] Call Trace: [ 162.603073][ T9830] [ 162.603081][ T9830] __dump_stack+0x1d/0x30 [ 162.603103][ T9830] dump_stack_lvl+0xe8/0x140 [ 162.603121][ T9830] dump_stack+0x15/0x1b [ 162.603136][ T9830] should_fail_ex+0x265/0x280 [ 162.603231][ T9830] should_failslab+0x8c/0xb0 [ 162.603259][ T9830] __kvmalloc_node_noprof+0x123/0x4e0 [ 162.603286][ T9830] ? simple_xattr_set+0x6e/0x2b0 [ 162.603375][ T9830] ? avc_has_perm_noaudit+0x1b1/0x200 [ 162.603399][ T9830] simple_xattr_set+0x6e/0x2b0 [ 162.603423][ T9830] ? strlen+0x19/0x40 [ 162.603487][ T9830] shmem_xattr_handler_set+0x12b/0x220 [ 162.603517][ T9830] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 162.603539][ T9830] __vfs_setxattr+0x2e3/0x310 [ 162.603562][ T9830] __vfs_setxattr_noperm+0xe8/0x410 [ 162.603589][ T9830] __vfs_setxattr_locked+0x1af/0x1d0 [ 162.603662][ T9830] vfs_setxattr+0x132/0x270 [ 162.603684][ T9830] file_setxattr+0x139/0x1b0 [ 162.603705][ T9830] path_setxattrat+0x290/0x310 [ 162.603742][ T9830] __x64_sys_fsetxattr+0x6b/0x80 [ 162.603813][ T9830] x64_sys_call+0x1ced/0x2ff0 [ 162.603832][ T9830] do_syscall_64+0xd2/0x200 [ 162.603858][ T9830] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.603894][ T9830] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.603915][ T9830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.603995][ T9830] RIP: 0033:0x7ff85c5aebe9 [ 162.604011][ T9830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.604027][ T9830] RSP: 002b:00007ff85b00f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 162.604046][ T9830] RAX: ffffffffffffffda RBX: 00007ff85c7d5fa0 RCX: 00007ff85c5aebe9 [ 162.604058][ T9830] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 162.604070][ T9830] RBP: 00007ff85b00f090 R08: 0000000000000002 R09: 0000000000000000 [ 162.604109][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.604120][ T9830] R13: 00007ff85c7d6038 R14: 00007ff85c7d5fa0 R15: 00007ffd9c69cdf8 [ 162.604139][ T9830] [ 162.766308][ T9835] loop3: detected capacity change from 0 to 512 [ 162.854245][ T9833] block device autoloading is deprecated and will be removed. [ 162.915124][ T9835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.930412][ T9824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.943319][ T9833] loop0: detected capacity change from 0 to 512 [ 162.943340][ T9824] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.950348][ T9835] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.971730][ T9833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.998703][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.009044][ T9833] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.017051][ T9833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 163.025342][ T9833] System zones: 0-1, 15-15, 18-18, 34-34 [ 163.031503][ T9833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.038000][ T9833] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 163.053314][ T9833] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 163.060682][ T9833] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2164: bad orphan inode 16 [ 163.071515][ T9833] ext4_test_bit(bit=15, block=18) = 0 [ 163.077352][ T9833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.100346][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.122949][ T9849] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2167'. [ 163.133020][ T9848] sg_write: data in/out 1701604413/8 bytes for SCSI command 0x7f-- guessing data in; [ 163.133020][ T9848] program syz.0.2168 not setting count and/or reply_len properly [ 163.162148][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.163953][ T9840] loop2: detected capacity change from 0 to 512 [ 163.200979][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 163.210290][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 163.219454][ T9853] tc_dump_action: action bad kind [ 163.228132][ T9851] geneve0: entered promiscuous mode [ 163.233673][ T9850] geneve0: entered allmulticast mode [ 163.248112][ T9840] EXT4-fs: Ignoring removed nobh option [ 163.314386][ T9840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2165: corrupted inode contents [ 163.337430][ T9846] geneve0: left allmulticast mode [ 163.342654][ T9846] geneve0: left promiscuous mode [ 163.412072][ T9840] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.2165: mark_inode_dirty error [ 163.463260][ T9840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2165: corrupted inode contents [ 163.502729][ T9840] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2165: mark_inode_dirty error [ 163.535542][ T9840] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2165: Failed to acquire dquot type 0 [ 163.561283][ T9840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2165: corrupted inode contents [ 163.575170][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'. [ 163.613370][ T9840] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2165: mark_inode_dirty error [ 163.632043][ T9881] netlink: 'syz.4.2179': attribute type 7 has an invalid length. [ 163.645523][ T9881] loop9: detected capacity change from 0 to 7 [ 163.652286][ T9881] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.661299][ T9881] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.669383][ T9881] loop9: unable to read partition table [ 163.675378][ T9881] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 163.675378][ T9881] ) failed (rc=-5) [ 163.689915][ T9840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2165: corrupted inode contents [ 163.702813][ T9840] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2165: mark_inode_dirty error [ 163.716538][ T9840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2165: corrupted inode contents [ 163.746578][ T9840] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 163.773574][ T9883] netlink: 'syz.3.2180': attribute type 7 has an invalid length. [ 163.776161][ T9840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2165: corrupted inode contents [ 163.790424][ T9883] loop9: detected capacity change from 0 to 7 [ 163.800239][ T9883] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.808938][ T9883] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.816739][ T9840] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2165: mark_inode_dirty error [ 163.817053][ T9883] loop9: unable to read partition table [ 163.844924][ T9840] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 163.870477][ T9883] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 163.870477][ T9883] ) failed (rc=-5) [ 163.875747][ T9840] EXT4-fs (loop2): 1 truncate cleaned up [ 163.955230][ T9840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.028177][ T9840] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.151712][ T9901] macvtap0: refused to change device tx_queue_len [ 164.158415][ T9901] FAULT_INJECTION: forcing a failure. [ 164.158415][ T9901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.172000][ T9901] CPU: 0 UID: 0 PID: 9901 Comm: syz.3.2188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.172026][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.172037][ T9901] Call Trace: [ 164.172043][ T9901] [ 164.172050][ T9901] __dump_stack+0x1d/0x30 [ 164.172071][ T9901] dump_stack_lvl+0xe8/0x140 [ 164.172088][ T9901] dump_stack+0x15/0x1b [ 164.172150][ T9901] should_fail_ex+0x265/0x280 [ 164.172168][ T9901] should_fail+0xb/0x20 [ 164.172181][ T9901] should_fail_usercopy+0x1a/0x20 [ 164.172209][ T9901] _copy_to_user+0x20/0xa0 [ 164.172261][ T9901] simple_read_from_buffer+0xb5/0x130 [ 164.172280][ T9901] proc_fail_nth_read+0x10e/0x150 [ 164.172302][ T9901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.172336][ T9901] vfs_read+0x1a8/0x770 [ 164.172380][ T9901] ? __rcu_read_unlock+0x4f/0x70 [ 164.172398][ T9901] ? __fget_files+0x184/0x1c0 [ 164.172417][ T9901] ? finish_task_switch+0xad/0x2b0 [ 164.172439][ T9901] ksys_read+0xda/0x1a0 [ 164.172459][ T9901] __x64_sys_read+0x40/0x50 [ 164.172551][ T9901] x64_sys_call+0x27bc/0x2ff0 [ 164.172570][ T9901] do_syscall_64+0xd2/0x200 [ 164.172600][ T9901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.172621][ T9901] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 164.172660][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.172681][ T9901] RIP: 0033:0x7f20fc69d5fc [ 164.172765][ T9901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.172780][ T9901] RSP: 002b:00007f20fb0ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.172798][ T9901] RAX: ffffffffffffffda RBX: 00007f20fc8c5fa0 RCX: 00007f20fc69d5fc [ 164.172810][ T9901] RDX: 000000000000000f RSI: 00007f20fb0ff0a0 RDI: 0000000000000008 [ 164.172821][ T9901] RBP: 00007f20fb0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 164.172904][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.172915][ T9901] R13: 00007f20fc8c6038 R14: 00007f20fc8c5fa0 R15: 00007ffd31309968 [ 164.172932][ T9901] [ 164.427524][ T9905] SELinux: policydb magic number 0x7cff8c does not match expected magic number 0xf97cff8c [ 164.453394][ T9905] SELinux: failed to load policy [ 164.898889][ T9926] serio: Serial port ptm0 [ 164.988154][ T9928] netlink: 'syz.4.2197': attribute type 21 has an invalid length. [ 165.391753][ T9945] SELinux: failed to load policy [ 165.673786][ T9837] syz.2.2165 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 165.688289][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.2.2165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.688350][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.688393][ T9837] Call Trace: [ 165.688398][ T9837] [ 165.688405][ T9837] __dump_stack+0x1d/0x30 [ 165.688427][ T9837] dump_stack_lvl+0xe8/0x140 [ 165.688522][ T9837] dump_stack+0x15/0x1b [ 165.688538][ T9837] dump_header+0x81/0x220 [ 165.688639][ T9837] oom_kill_process+0x342/0x400 [ 165.688670][ T9837] out_of_memory+0x979/0xb80 [ 165.688721][ T9837] try_charge_memcg+0x5e6/0x9e0 [ 165.688753][ T9837] obj_cgroup_charge_pages+0xa6/0x150 [ 165.688781][ T9837] __memcg_kmem_charge_page+0x9f/0x170 [ 165.688818][ T9837] __alloc_frozen_pages_noprof+0x188/0x360 [ 165.688854][ T9837] alloc_pages_mpol+0xb3/0x250 [ 165.688886][ T9837] alloc_pages_noprof+0x90/0x130 [ 165.688965][ T9837] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 165.689001][ T9837] __kvmalloc_node_noprof+0x30f/0x4e0 [ 165.689094][ T9837] ? ip_set_alloc+0x1f/0x30 [ 165.689123][ T9837] ? ip_set_alloc+0x1f/0x30 [ 165.689168][ T9837] ? __kmalloc_cache_noprof+0x189/0x320 [ 165.689197][ T9837] ip_set_alloc+0x1f/0x30 [ 165.689304][ T9837] hash_netiface_create+0x282/0x740 [ 165.689444][ T9837] ? __pfx_hash_netiface_create+0x10/0x10 [ 165.689478][ T9837] ip_set_create+0x3c9/0x960 [ 165.689506][ T9837] ? __nla_parse+0x40/0x60 [ 165.689526][ T9837] nfnetlink_rcv_msg+0x4c3/0x590 [ 165.689628][ T9837] netlink_rcv_skb+0x123/0x220 [ 165.689650][ T9837] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 165.689685][ T9837] nfnetlink_rcv+0x16b/0x1690 [ 165.689766][ T9837] ? free_frozen_page_commit+0x6f/0x2a0 [ 165.689814][ T9837] ? _raw_spin_unlock+0x26/0x50 [ 165.689840][ T9837] ? __free_frozen_pages+0x25a/0x4e0 [ 165.689962][ T9837] ? xas_load+0x413/0x430 [ 165.689987][ T9837] ? __rcu_read_unlock+0x4f/0x70 [ 165.690005][ T9837] ? xa_load+0xb1/0xe0 [ 165.690109][ T9837] ? __account_obj_stock+0x211/0x350 [ 165.690135][ T9837] ? strnchr+0x1e/0x40 [ 165.690160][ T9837] ? bpf_bprintf_prepare+0xc70/0xd90 [ 165.690315][ T9837] ? should_fail_ex+0x30/0x280 [ 165.690342][ T9837] ? selinux_nlmsg_lookup+0x99/0x890 [ 165.690373][ T9837] ? __rcu_read_unlock+0x34/0x70 [ 165.690394][ T9837] ? __netlink_lookup+0x266/0x2a0 [ 165.690518][ T9837] netlink_unicast+0x5bd/0x690 [ 165.690552][ T9837] netlink_sendmsg+0x58b/0x6b0 [ 165.690593][ T9837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.690613][ T9837] __sock_sendmsg+0x145/0x180 [ 165.690636][ T9837] ____sys_sendmsg+0x31e/0x4e0 [ 165.690661][ T9837] ___sys_sendmsg+0x17b/0x1d0 [ 165.690704][ T9837] __x64_sys_sendmsg+0xd4/0x160 [ 165.690733][ T9837] x64_sys_call+0x191e/0x2ff0 [ 165.690919][ T9837] do_syscall_64+0xd2/0x200 [ 165.690999][ T9837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.691022][ T9837] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.691115][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.691149][ T9837] RIP: 0033:0x7ff85c5aebe9 [ 165.691166][ T9837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.691186][ T9837] RSP: 002b:00007ff85b00f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.691206][ T9837] RAX: ffffffffffffffda RBX: 00007ff85c7d5fa0 RCX: 00007ff85c5aebe9 [ 165.691219][ T9837] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 165.691246][ T9837] RBP: 00007ff85c631e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.691271][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.691282][ T9837] R13: 00007ff85c7d6038 R14: 00007ff85c7d5fa0 R15: 00007ffd9c69cdf8 [ 165.691360][ T9837] [ 165.691367][ T9837] memory: usage 307200kB, limit 307200kB, failcnt 1776 [ 166.060863][ T9837] memory+swap: usage 307964kB, limit 9007199254740988kB, failcnt 0 [ 166.069342][ T9837] kmem: usage 295704kB, limit 9007199254740988kB, failcnt 0 [ 166.076830][ T9837] Memory cgroup stats for /syz2: [ 166.077275][ T9837] cache 16384 [ 166.085625][ T9837] rss 11755520 [ 166.089037][ T9837] shmem 0 [ 166.092213][ T9837] mapped_file 0 [ 166.095744][ T9837] dirty 0 [ 166.098782][ T9837] writeback 0 [ 166.102198][ T9837] workingset_refault_anon 491 [ 166.107099][ T9837] workingset_refault_file 3442 [ 166.111873][ T9837] swap 782336 [ 166.115157][ T9837] swapcached 0 [ 166.118636][ T9837] pgpgin 176738 [ 166.122267][ T9837] pgpgout 173864 [ 166.125817][ T9837] pgfault 173896 [ 166.129510][ T9837] pgmajfault 296 [ 166.133224][ T9837] inactive_anon 0 [ 166.136883][ T9837] active_anon 0 [ 166.140422][ T9837] inactive_file 11767808 [ 166.144668][ T9837] active_file 4096 [ 166.148478][ T9837] unevictable 0 [ 166.151954][ T9837] hierarchical_memory_limit 314572800 [ 166.157468][ T9837] hierarchical_memsw_limit 9223372036854771712 [ 166.163751][ T9837] total_cache 16384 [ 166.167574][ T9837] total_rss 11755520 [ 166.171468][ T9837] total_shmem 0 [ 166.174929][ T9837] total_mapped_file 0 [ 166.178934][ T9837] total_dirty 0 [ 166.182409][ T9837] total_writeback 0 [ 166.186648][ T9837] total_workingset_refault_anon 491 [ 166.191834][ T9837] total_workingset_refault_file 3442 [ 166.197309][ T9837] total_swap 782336 [ 166.201112][ T9837] total_swapcached 0 [ 166.205086][ T9837] total_pgpgin 176738 [ 166.209115][ T9837] total_pgpgout 173864 [ 166.213366][ T9837] total_pgfault 173896 [ 166.217465][ T9837] total_pgmajfault 296 [ 166.221688][ T9837] total_inactive_anon 0 [ 166.226028][ T9837] total_active_anon 0 [ 166.230078][ T9837] total_inactive_file 11767808 [ 166.234833][ T9837] total_active_file 4096 [ 166.239154][ T9837] total_unevictable 0 [ 166.243251][ T9837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2165,pid=9831,uid=0 [ 166.258040][ T9837] Memory cgroup out of memory: Killed process 9831 (syz.2.2165) total-vm:93896kB, anon-rss:12464kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 166.369869][ T9974] loop1: detected capacity change from 0 to 1024 [ 166.382211][ T9976] loop3: detected capacity change from 0 to 1024 [ 166.401036][ T9974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.416082][ T9976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.425471][ T9974] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.448477][ T9976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.482469][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.549371][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.614322][ T9994] loop0: detected capacity change from 0 to 512 [ 166.623777][ T9994] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 166.637407][ T9994] EXT4-fs (loop0): orphan cleanup on readonly fs [ 166.655105][ T9994] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2218: Failed to acquire dquot type 1 [ 166.668589][ T9994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2218: bg 0: block 40: padding at end of block bitmap is not set [ 166.717786][ T9994] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 166.782136][ T9994] EXT4-fs (loop0): 1 truncate cleaned up [ 166.792092][T10008] __nla_validate_parse: 17 callbacks suppressed [ 166.792109][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 166.833911][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.834185][ T9994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.873115][T10012] smc: net device bond0 applied user defined pnetid AYZ2 [ 166.893225][T10012] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2223'. [ 166.904386][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.917914][T10012] smc: removing net device bond0 with user defined pnetid AYZ2 [ 166.951731][T10012] bond0 (unregistering): Released all slaves [ 167.110338][T10024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2227'. [ 167.175670][T10028] loop0: detected capacity change from 0 to 512 [ 167.187333][T10024] loop1: detected capacity change from 0 to 1024 [ 167.207371][T10028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.222070][T10024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.234504][T10024] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.236704][T10028] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.290134][T10036] loop4: detected capacity change from 0 to 764 [ 167.307682][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 167.307695][ T29] audit: type=1326 audit(1756398173.963:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74e2cdd550 code=0x7ffc0000 [ 167.338116][ T29] audit: type=1326 audit(1756398173.963:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f74e2cdd937 code=0x7ffc0000 [ 167.362188][ T29] audit: type=1326 audit(1756398173.963:14097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74e2cdd550 code=0x7ffc0000 [ 167.386228][ T29] audit: type=1326 audit(1756398173.963:14098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.410813][ T29] audit: type=1326 audit(1756398173.963:14099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.435114][ T29] audit: type=1326 audit(1756398173.963:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.459530][ T29] audit: type=1326 audit(1756398173.963:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.484070][ T29] audit: type=1326 audit(1756398173.963:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.508195][ T29] audit: type=1326 audit(1756398173.963:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.532289][ T29] audit: type=1326 audit(1756398173.963:14104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.0.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 167.569621][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.579985][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.625870][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 167.656816][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'. [ 167.666148][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 167.680632][T10046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2234'. [ 167.689499][T10047] vlan2: entered allmulticast mode [ 167.695262][T10047] bridge_slave_0: entered allmulticast mode [ 167.730194][T10038] bridge0: port 1(macsec1) entered blocking state [ 167.736787][T10038] bridge0: port 1(macsec1) entered disabled state [ 167.763286][T10038] macsec1: entered allmulticast mode [ 167.775242][T10038] macsec1: left allmulticast mode [ 168.011222][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2240'. [ 168.020354][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2240'. [ 168.074857][T10069] loop1: detected capacity change from 0 to 164 [ 168.089555][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2241'. [ 168.345949][T10079] loop0: detected capacity change from 0 to 1024 [ 168.368273][T10079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.400255][T10079] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.517973][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.630746][T10098] loop4: detected capacity change from 0 to 512 [ 168.679585][T10098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.695748][T10098] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.766978][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.810072][T10111] netlink: 'syz.4.2254': attribute type 7 has an invalid length. [ 168.827317][T10111] loop9: detected capacity change from 0 to 7 [ 168.833700][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.842186][T10109] loop0: detected capacity change from 0 to 2048 [ 168.856504][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.864707][T10111] loop9: unable to read partition table [ 168.884279][T10109] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.897215][T10111] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 168.897215][T10111] ) failed (rc=-5) [ 169.003888][ T3305] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 169.033250][T10126] loop4: detected capacity change from 0 to 1024 [ 169.080278][T10126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.107430][T10126] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.162055][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.248022][T10146] loop1: detected capacity change from 0 to 164 [ 169.463866][T10159] netlink: 'syz.0.2268': attribute type 7 has an invalid length. [ 169.481005][T10159] loop9: detected capacity change from 0 to 7 [ 169.488225][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.497851][T10159] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.506053][T10159] loop9: unable to read partition table [ 169.511911][T10159] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 169.511911][T10159] ) failed (rc=-5) [ 169.651007][T10170] loop3: detected capacity change from 0 to 1024 [ 169.713350][T10170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.725668][T10170] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.786547][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.918952][T10160] loop4: detected capacity change from 0 to 512 [ 169.925686][T10160] EXT4-fs: Ignoring removed nobh option [ 170.017673][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2265: corrupted inode contents [ 170.030290][T10160] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2265: mark_inode_dirty error [ 170.043300][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2265: corrupted inode contents [ 170.055578][T10160] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2265: mark_inode_dirty error [ 170.068100][T10160] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2265: Failed to acquire dquot type 0 [ 170.080032][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2265: corrupted inode contents [ 170.093250][T10160] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2265: mark_inode_dirty error [ 170.105228][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2265: corrupted inode contents [ 170.118777][T10160] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2265: mark_inode_dirty error [ 170.130919][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2265: corrupted inode contents [ 170.143799][T10160] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 170.152866][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2265: corrupted inode contents [ 170.166657][T10160] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2265: mark_inode_dirty error [ 170.186881][T10195] loop0: detected capacity change from 0 to 512 [ 170.194554][T10160] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 170.205614][T10160] EXT4-fs (loop4): 1 truncate cleaned up [ 170.212766][T10195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.226614][T10195] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.237992][T10160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.253508][T10198] netlink: 'syz.1.2281': attribute type 7 has an invalid length. [ 170.265731][T10160] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.266138][T10198] loop9: detected capacity change from 0 to 7 [ 170.283554][T10198] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.294045][T10196] loop3: detected capacity change from 0 to 512 [ 170.310094][T10198] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.318058][T10198] loop9: unable to read partition table [ 170.324068][T10198] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 170.324068][T10198] ) failed (rc=-5) [ 170.339795][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.350453][T10196] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.379500][T10210] FAULT_INJECTION: forcing a failure. [ 170.379500][T10210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.392877][T10210] CPU: 0 UID: 0 PID: 10210 Comm: syz.2.2283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.392903][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.392912][T10210] Call Trace: [ 170.392918][T10210] [ 170.392924][T10210] __dump_stack+0x1d/0x30 [ 170.392942][T10210] dump_stack_lvl+0xe8/0x140 [ 170.392996][T10210] dump_stack+0x15/0x1b [ 170.393070][T10210] should_fail_ex+0x265/0x280 [ 170.393086][T10210] should_fail+0xb/0x20 [ 170.393100][T10210] should_fail_usercopy+0x1a/0x20 [ 170.393116][T10210] _copy_to_user+0x20/0xa0 [ 170.393180][T10210] ethtool_get_perm_addr+0x102/0x170 [ 170.393243][T10210] dev_ethtool+0x10c3/0x1660 [ 170.393259][T10210] ? full_name_hash+0x92/0xe0 [ 170.393284][T10210] dev_ioctl+0x2e0/0x960 [ 170.393301][T10210] sock_do_ioctl+0x197/0x220 [ 170.393323][T10210] sock_ioctl+0x41b/0x610 [ 170.393422][T10210] ? __pfx_sock_ioctl+0x10/0x10 [ 170.393441][T10210] __se_sys_ioctl+0xce/0x140 [ 170.393476][T10210] __x64_sys_ioctl+0x43/0x50 [ 170.393499][T10210] x64_sys_call+0x1816/0x2ff0 [ 170.393515][T10210] do_syscall_64+0xd2/0x200 [ 170.393594][T10210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.393613][T10210] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.393632][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.393697][T10210] RIP: 0033:0x7ff85c5aebe9 [ 170.393710][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.393723][T10210] RSP: 002b:00007ff85b00f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.393739][T10210] RAX: ffffffffffffffda RBX: 00007ff85c7d5fa0 RCX: 00007ff85c5aebe9 [ 170.393749][T10210] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 170.393766][T10210] RBP: 00007ff85b00f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.393776][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.393785][T10210] R13: 00007ff85c7d6038 R14: 00007ff85c7d5fa0 R15: 00007ffd9c69cdf8 [ 170.393800][T10210] [ 170.624839][T10213] loop1: detected capacity change from 0 to 1024 [ 170.645141][T10213] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.813914][T10233] loop1: detected capacity change from 0 to 512 [ 170.933198][T10236] loop0: detected capacity change from 0 to 164 [ 170.940417][T10236] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.996885][T10240] loop2: detected capacity change from 0 to 512 [ 171.008953][T10240] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.040472][T10249] FAULT_INJECTION: forcing a failure. [ 171.040472][T10249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.053743][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.3.2297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.053784][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.053794][T10249] Call Trace: [ 171.053800][T10249] [ 171.053807][T10249] __dump_stack+0x1d/0x30 [ 171.053857][T10249] dump_stack_lvl+0xe8/0x140 [ 171.053872][T10249] dump_stack+0x15/0x1b [ 171.053886][T10249] should_fail_ex+0x265/0x280 [ 171.053904][T10249] should_fail+0xb/0x20 [ 171.053919][T10249] should_fail_usercopy+0x1a/0x20 [ 171.054017][T10249] _copy_from_user+0x1c/0xb0 [ 171.054050][T10249] ___sys_sendmsg+0xc1/0x1d0 [ 171.054079][T10249] __x64_sys_sendmsg+0xd4/0x160 [ 171.054099][T10249] x64_sys_call+0x191e/0x2ff0 [ 171.054128][T10249] do_syscall_64+0xd2/0x200 [ 171.054159][T10249] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.054184][T10249] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.054205][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.054223][T10249] RIP: 0033:0x7f20fc69ebe9 [ 171.054237][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.054258][T10249] RSP: 002b:00007f20fb0ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.054275][T10249] RAX: ffffffffffffffda RBX: 00007f20fc8c5fa0 RCX: 00007f20fc69ebe9 [ 171.054285][T10249] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 171.054295][T10249] RBP: 00007f20fb0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 171.054305][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.054316][T10249] R13: 00007f20fc8c6038 R14: 00007f20fc8c5fa0 R15: 00007ffd31309968 [ 171.054370][T10249] [ 171.065712][T10236] syzkaller0: entered promiscuous mode [ 171.125517][T10253] loop3: detected capacity change from 0 to 512 [ 171.126363][T10236] syzkaller0: entered allmulticast mode [ 171.143556][T10253] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.272856][T10260] loop4: detected capacity change from 0 to 1024 [ 171.299377][T10260] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.367499][T10271] netlink: 'syz.0.2303': attribute type 13 has an invalid length. [ 171.392488][T10271] loop0: detected capacity change from 0 to 512 [ 171.426168][T10271] EXT4-fs (loop0): too many log groups per flexible block group [ 171.434574][T10271] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 171.441875][T10271] EXT4-fs (loop0): mount failed [ 171.734357][T10293] loop3: detected capacity change from 0 to 512 [ 171.752589][T10293] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.813920][T10302] __nla_validate_parse: 32 callbacks suppressed [ 171.813991][T10302] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2312'. [ 171.846613][T10302] loop3: detected capacity change from 0 to 1024 [ 171.859015][T10305] loop1: detected capacity change from 0 to 164 [ 171.874624][T10302] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.875330][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2313'. [ 171.952243][T10313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2315'. [ 172.195022][T10326] FAULT_INJECTION: forcing a failure. [ 172.195022][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.208501][T10326] CPU: 0 UID: 0 PID: 10326 Comm: syz.1.2320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.208529][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.208542][T10326] Call Trace: [ 172.208549][T10326] [ 172.208591][T10326] __dump_stack+0x1d/0x30 [ 172.208613][T10326] dump_stack_lvl+0xe8/0x140 [ 172.208705][T10326] dump_stack+0x15/0x1b [ 172.208722][T10326] should_fail_ex+0x265/0x280 [ 172.208822][T10326] should_fail+0xb/0x20 [ 172.208839][T10326] should_fail_usercopy+0x1a/0x20 [ 172.208862][T10326] strncpy_from_user+0x25/0x230 [ 172.208890][T10326] ? kmem_cache_alloc_noprof+0x186/0x310 [ 172.208989][T10326] ? getname_flags+0x80/0x3b0 [ 172.209080][T10326] getname_flags+0xae/0x3b0 [ 172.209107][T10326] user_path_at+0x28/0x130 [ 172.209137][T10326] __se_sys_mount+0x25b/0x2e0 [ 172.209183][T10326] __x64_sys_mount+0x67/0x80 [ 172.209202][T10326] x64_sys_call+0x2b4d/0x2ff0 [ 172.209224][T10326] do_syscall_64+0xd2/0x200 [ 172.209257][T10326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.209356][T10326] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.209382][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.209457][T10326] RIP: 0033:0x7f92909debe9 [ 172.209473][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.209490][T10326] RSP: 002b:00007f928f447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.209510][T10326] RAX: ffffffffffffffda RBX: 00007f9290c05fa0 RCX: 00007f92909debe9 [ 172.209523][T10326] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 172.209598][T10326] RBP: 00007f928f447090 R08: 0000200000000240 R09: 0000000000000000 [ 172.209611][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.209624][T10326] R13: 00007f9290c06038 R14: 00007f9290c05fa0 R15: 00007fff1deb72c8 [ 172.209643][T10326] [ 173.827599][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 173.827612][ T29] audit: type=1326 audit(1756398180.483:14512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 173.830205][T10348] loop0: detected capacity change from 0 to 512 [ 173.834084][ T29] audit: type=1326 audit(1756398180.483:14513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 173.896763][T10351] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2327'. [ 173.908116][ T29] audit: type=1326 audit(1756398180.483:14514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 173.932349][ T29] audit: type=1326 audit(1756398180.483:14515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 173.956276][ T29] audit: type=1326 audit(1756398180.483:14516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74e2cdebe9 code=0x7ffc0000 [ 173.980209][ T29] audit: type=1326 audit(1756398180.483:14517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f74e2cdec23 code=0x7ffc0000 [ 174.004321][ T29] audit: type=1326 audit(1756398180.483:14518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74e2cdd69f code=0x7ffc0000 [ 174.028390][ T29] audit: type=1326 audit(1756398180.483:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74e2cdec77 code=0x7ffc0000 [ 174.052631][ T29] audit: type=1326 audit(1756398180.483:14520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74e2cdd550 code=0x7ffc0000 [ 174.067572][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 174.076935][ T29] audit: type=1326 audit(1756398180.483:14521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10347 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74e2cde7eb code=0x7ffc0000 [ 174.116705][T10351] loop4: detected capacity change from 0 to 1024 [ 174.135958][T10348] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.157941][T10351] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.209360][T10364] netlink: 'syz.3.2330': attribute type 7 has an invalid length. [ 174.217284][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 174.255326][T10373] tipc: Enabled bearer , priority 0 [ 174.261371][T10364] loop9: detected capacity change from 0 to 7 [ 174.263222][T10373] syzkaller0: entered promiscuous mode [ 174.268567][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.273915][T10373] syzkaller0: entered allmulticast mode [ 174.302523][T10373] tipc: Resetting bearer [ 174.311075][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.319067][T10364] loop9: unable to read partition table [ 174.325639][T10364] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 174.325639][T10364] ) failed (rc=-5) [ 174.340963][T10370] tipc: Resetting bearer [ 174.349097][T10370] tipc: Disabling bearer [ 174.531965][T10395] loop4: detected capacity change from 0 to 512 [ 174.587956][T10395] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.606297][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 174.693505][T10407] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2345'. [ 174.788804][T10416] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.820075][T10417] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 174.837665][T10416] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.888455][T10416] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.928161][T10416] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.939935][T10422] netlink: 'syz.1.2350': attribute type 7 has an invalid length. [ 174.947753][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 174.961600][T10422] loop9: detected capacity change from 0 to 7 [ 174.968057][T10422] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.976098][T10422] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.984221][T10422] loop9: unable to read partition table [ 174.990180][T10422] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 174.990180][T10422] ) failed (rc=-5) [ 175.021450][T10051] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.036026][T10051] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.048549][T10051] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.057998][T10051] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.080999][T10428] netlink: 'syz.1.2353': attribute type 7 has an invalid length. [ 175.089159][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 175.120511][T10430] hsr_slave_0: left promiscuous mode [ 175.126366][T10430] hsr_slave_1: left promiscuous mode [ 175.126373][T10428] loop9: detected capacity change from 0 to 7 [ 175.126607][T10428] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.146555][T10428] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.154639][T10428] loop9: unable to read partition table [ 175.160547][T10428] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 175.160547][T10428] ) failed (rc=-5) [ 175.190008][T10431] pim6reg: entered allmulticast mode [ 175.197959][T10431] pim6reg: left allmulticast mode [ 175.203533][T10433] loop0: detected capacity change from 0 to 512 [ 175.221245][T10433] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.279298][T10430] loop3: detected capacity change from 0 to 512 [ 175.299315][T10430] EXT4-fs: Ignoring removed bh option [ 175.314249][T10430] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.371511][T10448] loop3: detected capacity change from 0 to 512 [ 175.401755][T10448] FAULT_INJECTION: forcing a failure. [ 175.401755][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 175.414527][T10448] CPU: 0 UID: 0 PID: 10448 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.414630][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.414642][T10448] Call Trace: [ 175.414649][T10448] [ 175.414657][T10448] __dump_stack+0x1d/0x30 [ 175.414680][T10448] dump_stack_lvl+0xe8/0x140 [ 175.414700][T10448] dump_stack+0x15/0x1b [ 175.414716][T10448] should_fail_ex+0x265/0x280 [ 175.414786][T10448] ? audit_log_d_path+0x8d/0x150 [ 175.414815][T10448] should_failslab+0x8c/0xb0 [ 175.414845][T10448] __kmalloc_cache_noprof+0x4c/0x320 [ 175.414885][T10448] audit_log_d_path+0x8d/0x150 [ 175.414908][T10448] audit_log_d_path_exe+0x42/0x70 [ 175.414931][T10448] audit_log_task+0x1e9/0x250 [ 175.414993][T10448] audit_seccomp+0x61/0x100 [ 175.415016][T10448] ? __seccomp_filter+0x68c/0x10d0 [ 175.415036][T10448] __seccomp_filter+0x69d/0x10d0 [ 175.415053][T10448] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.415084][T10448] ? vfs_write+0x7e8/0x960 [ 175.415112][T10448] __secure_computing+0x82/0x150 [ 175.415192][T10448] syscall_trace_enter+0xcf/0x1e0 [ 175.415212][T10448] do_syscall_64+0xac/0x200 [ 175.415235][T10448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.415310][T10448] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.415330][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.415393][T10448] RIP: 0033:0x7f20fc69ebe9 [ 175.415409][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.415426][T10448] RSP: 002b:00007f20fb0ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.415447][T10448] RAX: ffffffffffffffda RBX: 00007f20fc8c5fa0 RCX: 00007f20fc69ebe9 [ 175.415461][T10448] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000b [ 175.415538][T10448] RBP: 00007f20fb0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 175.415551][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.415564][T10448] R13: 00007f20fc8c6038 R14: 00007f20fc8c5fa0 R15: 00007ffd31309968 [ 175.415584][T10448] [ 175.527555][T10452] FAULT_INJECTION: forcing a failure. [ 175.527555][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.639244][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.0.2362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.639273][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.639287][T10452] Call Trace: [ 175.639294][T10452] [ 175.639303][T10452] __dump_stack+0x1d/0x30 [ 175.639325][T10452] dump_stack_lvl+0xe8/0x140 [ 175.639341][T10452] dump_stack+0x15/0x1b [ 175.639362][T10452] should_fail_ex+0x265/0x280 [ 175.639380][T10452] should_fail+0xb/0x20 [ 175.639444][T10452] should_fail_usercopy+0x1a/0x20 [ 175.639466][T10452] _copy_from_user+0x1c/0xb0 [ 175.639491][T10452] ___sys_sendmsg+0xc1/0x1d0 [ 175.639521][T10452] __x64_sys_sendmsg+0xd4/0x160 [ 175.639542][T10452] x64_sys_call+0x191e/0x2ff0 [ 175.639594][T10452] do_syscall_64+0xd2/0x200 [ 175.639620][T10452] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.639686][T10452] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.639710][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.639808][T10452] RIP: 0033:0x7f74e2cdebe9 [ 175.639821][T10452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.639836][T10452] RSP: 002b:00007f74e173f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.639935][T10452] RAX: ffffffffffffffda RBX: 00007f74e2f05fa0 RCX: 00007f74e2cdebe9 [ 175.639946][T10452] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 175.639966][T10452] RBP: 00007f74e173f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.639978][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.639989][T10452] R13: 00007f74e2f06038 R14: 00007f74e2f05fa0 R15: 00007ffe2a5065c8 [ 175.640005][T10452] [ 175.823469][T10472] netlink: 'syz.1.2364': attribute type 7 has an invalid length. [ 175.843307][T10472] loop9: detected capacity change from 0 to 7 [ 175.852120][T10478] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 175.856779][T10472] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.867903][T10472] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.875762][T10472] loop9: unable to read partition table [ 175.881859][T10472] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 175.881859][T10472] ) failed (rc=-5) [ 175.919495][T10478] lo speed is unknown, defaulting to 1000 [ 175.928708][T10484] loop0: detected capacity change from 0 to 164 [ 176.011129][T10493] loop0: detected capacity change from 0 to 2048 [ 176.056875][T10493] EXT4-fs: dax option not supported [ 176.066406][T10499] 9pnet_fd: Insufficient options for proto=fd [ 176.240455][T10513] smc: net device bond0 applied user defined pnetid AYZ2 [ 176.253565][T10513] smc: removing net device bond0 with user defined pnetid AYZ2 [ 176.265391][T10513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.314495][T10513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.343380][T10513] bond0 (unregistering): Released all slaves [ 176.788677][T10577] netlink: 'syz.3.2382': attribute type 7 has an invalid length. [ 176.823769][T10577] loop9: detected capacity change from 0 to 7 [ 176.849165][T10577] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.884534][T10577] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.892897][T10577] loop9: unable to read partition table [ 176.922853][T10583] loop1: detected capacity change from 0 to 164 [ 176.939591][T10577] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 176.939591][T10577] ) failed (rc=-5) [ 176.964294][T10583] __nla_validate_parse: 12 callbacks suppressed [ 176.964313][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'. [ 177.121404][T10598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2385'. [ 177.165151][T10603] loop4: detected capacity change from 0 to 512 [ 177.182638][T10606] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2388'. [ 177.212857][T10603] EXT4-fs: Ignoring removed nobh option [ 177.275391][T10615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2391'. [ 177.369325][T10603] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2378: corrupted inode contents [ 177.426091][T10603] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2378: mark_inode_dirty error [ 177.444987][T10626] loop3: detected capacity change from 0 to 164 [ 177.464543][T10626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2395'. [ 177.488179][T10603] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2378: corrupted inode contents [ 177.512447][T10630] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2397'. [ 177.532766][T10603] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2378: mark_inode_dirty error [ 177.552011][T10630] loop0: detected capacity change from 0 to 1024 [ 177.567666][T10603] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2378: Failed to acquire dquot type 0 [ 177.599304][T10630] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.627623][T10603] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2378: corrupted inode contents [ 177.701348][T10603] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2378: mark_inode_dirty error [ 177.728531][T10603] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2378: corrupted inode contents [ 177.741092][T10603] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2378: mark_inode_dirty error [ 177.754081][T10603] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2378: corrupted inode contents [ 177.786521][T10603] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 177.796541][T10603] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2378: corrupted inode contents [ 177.811301][T10603] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2378: mark_inode_dirty error [ 177.823196][T10603] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 177.837679][T10603] EXT4-fs (loop4): 1 truncate cleaned up [ 177.844163][T10603] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.910415][T10648] veth0_to_bond: entered allmulticast mode [ 177.957136][T10650] loop3: detected capacity change from 0 to 512 [ 177.976254][T10647] loop0: detected capacity change from 0 to 1024 [ 177.983462][T10647] EXT4-fs: Ignoring removed bh option [ 177.992102][T10647] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.004033][T10647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 178.012401][T10647] System zones: 0-1, 3-12 [ 178.018719][T10647] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.2403: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.033335][T10647] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2403: Failed to acquire dquot type 0 [ 178.045891][T10647] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2403: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.062348][T10650] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.073084][T10647] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2403: Invalid inode bitmap blk 0 in block_group 0 [ 178.096497][ T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.115304][T10647] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 178.127737][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 178.142818][T10647] EXT4-fs (loop0): 1 orphan inode deleted [ 178.173011][T10647] EXT4-fs: Ignoring removed bh option [ 178.207722][T10647] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 178.268756][T10659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2408'. [ 178.298256][T10665] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2410'. [ 178.316857][T10665] loop3: detected capacity change from 0 to 1024 [ 178.337961][T10663] netlink: 'syz.0.2407': attribute type 7 has an invalid length. [ 178.345969][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 178.357408][T10665] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.373784][T10663] loop9: detected capacity change from 0 to 7 [ 178.380061][T10663] loop9: unable to read partition table [ 178.385723][T10663] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.385723][T10663] ) failed (rc=-5) [ 178.470845][T10675] netlink: 'syz.3.2413': attribute type 7 has an invalid length. [ 178.478728][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2413'. [ 178.500229][T10675] loop9: detected capacity change from 0 to 7 [ 178.506961][T10675] loop9: unable to read partition table [ 178.512867][T10675] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.512867][T10675] ) failed (rc=-5) [ 178.537383][T10679] loop0: detected capacity change from 0 to 512 [ 178.551178][T10679] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.719815][T10700] loop3: detected capacity change from 0 to 1024 [ 178.749664][T10700] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.812230][T10715] loop1: detected capacity change from 0 to 512 [ 178.897732][T10715] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.090530][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 179.097293][ T29] audit: type=1326 audit(1756398185.743:14866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.247419][ T29] audit: type=1326 audit(1756398185.743:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.271579][ T29] audit: type=1326 audit(1756398185.773:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.295651][ T29] audit: type=1326 audit(1756398185.773:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.320087][ T29] audit: type=1326 audit(1756398185.773:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.345228][ T29] audit: type=1326 audit(1756398185.773:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.369688][ T29] audit: type=1326 audit(1756398185.813:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.394216][ T29] audit: type=1326 audit(1756398185.813:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.418946][ T29] audit: type=1326 audit(1756398185.823:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.443445][ T29] audit: type=1326 audit(1756398185.823:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.3.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 179.709409][T10729] loop3: detected capacity change from 0 to 512 [ 179.817991][T10733] loop1: detected capacity change from 0 to 164 [ 180.676997][T10729] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.812519][T10753] siw: device registration error -23 [ 180.831633][T10751] loop1: detected capacity change from 0 to 1024 [ 180.879373][T10751] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.131190][T10781] loop3: detected capacity change from 0 to 164 [ 181.368169][T10804] netlink: 'syz.1.2460': attribute type 62 has an invalid length. [ 181.740177][T10818] loop1: detected capacity change from 0 to 164 [ 182.295405][T10832] __nla_validate_parse: 9 callbacks suppressed [ 182.295421][T10832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2469'. [ 182.314074][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 182.559193][T10842] loop1: detected capacity change from 0 to 164 [ 182.583025][T10842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2474'. [ 182.772757][T10851] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2478'. [ 182.864882][T10856] loop4: detected capacity change from 0 to 512 [ 182.873049][T10857] loop1: detected capacity change from 0 to 512 [ 182.898360][T10857] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.911566][T10856] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.076908][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2486'. [ 183.093976][T10876] loop0: detected capacity change from 0 to 512 [ 183.112182][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'. [ 183.141062][T10876] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.141826][T10882] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2490'. [ 183.170351][T10886] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2491'. [ 183.210034][T10874] loop3: detected capacity change from 0 to 1024 [ 183.239941][T10874] EXT4-fs: Ignoring removed nobh option [ 183.245608][T10874] EXT4-fs: Ignoring removed bh option [ 183.263620][T10893] loop0: detected capacity change from 0 to 512 [ 183.305290][T10874] netlink: 'syz.3.2486': attribute type 4 has an invalid length. [ 183.316397][T10893] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.329526][T10906] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2498'. [ 183.543092][T10925] loop0: detected capacity change from 0 to 164 [ 183.557959][T10927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2505'. [ 183.576226][T10931] siw: device registration error -23 [ 183.661405][T10942] loop0: detected capacity change from 0 to 1024 [ 183.789637][T10942] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.890814][T10964] siw: device registration error -23 [ 183.952834][T10972] loop0: detected capacity change from 0 to 164 [ 184.087865][T10988] siw: device registration error -23 [ 184.130045][T10992] serio: Serial port ptm1 [ 184.251360][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 184.251396][ T29] audit: type=1326 audit(1756398190.903:15239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.289242][T11000] loop0: detected capacity change from 0 to 164 [ 184.305979][ T29] audit: type=1326 audit(1756398190.933:15240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.330848][ T29] audit: type=1326 audit(1756398190.933:15241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.355386][ T29] audit: type=1326 audit(1756398190.943:15242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.380160][ T29] audit: type=1326 audit(1756398190.943:15243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.431303][T11013] netlink: 'syz.4.2541': attribute type 7 has an invalid length. [ 184.447657][T11013] loop9: detected capacity change from 0 to 7 [ 184.453893][T11013] buffer_io_error: 4 callbacks suppressed [ 184.453907][T11013] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.476505][T11013] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.484705][T11013] loop9: unable to read partition table [ 184.491432][T11013] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 184.491432][T11013] ) failed (rc=-5) [ 184.498377][T11019] netlink: 'syz.3.2545': attribute type 7 has an invalid length. [ 184.654253][ T29] audit: type=1326 audit(1756398191.293:15244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.678245][ T29] audit: type=1326 audit(1756398191.293:15245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.702548][ T29] audit: type=1326 audit(1756398191.293:15246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.726852][ T29] audit: type=1326 audit(1756398191.293:15247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.751036][ T29] audit: type=1326 audit(1756398191.293:15248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fc69ebe9 code=0x7ffc0000 [ 184.780999][T11032] loop3: detected capacity change from 0 to 1024 [ 184.799995][T11032] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.861005][T11044] loop3: detected capacity change from 0 to 164 [ 184.978697][T11052] netlink: 'syz.1.2558': attribute type 7 has an invalid length. [ 184.991500][T11052] loop9: detected capacity change from 0 to 7 [ 184.997896][T11052] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.005859][T11052] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.013789][T11052] loop9: unable to read partition table [ 185.019801][T11052] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.019801][T11052] ) failed (rc=-5) [ 185.248877][T11066] loop3: detected capacity change from 0 to 1024 [ 185.313501][T11066] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.422904][T11082] serio: Serial port ptm0 [ 185.456603][T11053] loop4: detected capacity change from 0 to 512 [ 185.459337][T11084] netlink: 'syz.1.2570': attribute type 7 has an invalid length. [ 185.471678][T11053] EXT4-fs: Ignoring removed nobh option [ 185.503616][T11084] loop9: detected capacity change from 0 to 7 [ 185.518583][T11084] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.538254][T11084] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.546617][T11084] loop9: unable to read partition table [ 185.558586][T11053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2554: corrupted inode contents [ 185.575407][T11084] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.575407][T11084] ) failed (rc=-5) [ 185.616702][T11053] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2554: mark_inode_dirty error [ 185.628491][T11091] loop0: detected capacity change from 0 to 512 [ 185.653644][T11091] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.680076][T11053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2554: corrupted inode contents [ 185.722958][T11097] netlink: 'syz.0.2572': attribute type 7 has an invalid length. [ 185.737378][T11053] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2554: mark_inode_dirty error [ 185.737408][T11097] loop9: detected capacity change from 0 to 7 [ 185.737564][T11097] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.781337][T11053] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2554: Failed to acquire dquot type 0 [ 185.805991][T11053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2554: corrupted inode contents [ 185.806537][T11097] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.827601][T11097] loop9: unable to read partition table [ 185.836722][T11097] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.836722][T11097] ) failed (rc=-5) [ 185.853868][T11053] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2554: mark_inode_dirty error [ 185.902791][T11053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2554: corrupted inode contents [ 185.947570][T11053] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2554: mark_inode_dirty error [ 185.978365][T11053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2554: corrupted inode contents [ 186.021227][T11053] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 186.058922][T11053] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2554: corrupted inode contents [ 186.099220][T11053] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2554: mark_inode_dirty error [ 186.141438][T11053] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 186.161590][T11053] EXT4-fs (loop4): 1 truncate cleaned up [ 186.177693][T11053] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.212407][T11114] loop0: detected capacity change from 0 to 164 [ 186.288201][T11118] loop3: detected capacity change from 0 to 512 [ 186.310018][T11118] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.399874][T11122] loop3: detected capacity change from 0 to 512 [ 186.437879][T11122] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.632611][T11137] loop0: detected capacity change from 0 to 512 [ 186.660188][T11137] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.677336][T11149] serio: Serial port ptm0 [ 186.709049][T11130] lo speed is unknown, defaulting to 1000 [ 186.806778][T10048] bond1 (unregistering): (slave gretap1): Releasing active interface [ 186.834044][T11169] loop0: detected capacity change from 0 to 1024 [ 186.841639][T11169] EXT4-fs: quotafile must be on filesystem root [ 187.388133][T10048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.398093][T10048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.407658][T10048] bond0 (unregistering): Released all slaves [ 187.415868][T10048] bond1 (unregistering): Released all slaves [ 187.431591][T11130] chnl_net:caif_netlink_parms(): no params data found [ 187.456680][T11181] lo speed is unknown, defaulting to 1000 [ 187.482353][T10048] hsr_slave_0: left promiscuous mode [ 187.490833][T10048] hsr_slave_1: left promiscuous mode [ 187.496946][T10048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.507392][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.551779][T10048] team0 (unregistering): Port device team_slave_1 removed [ 187.561758][T10048] team0 (unregistering): Port device team_slave_0 removed [ 187.621049][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.628464][T11130] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.647584][T11130] bridge_slave_0: entered allmulticast mode [ 187.660220][T11130] bridge_slave_0: entered promiscuous mode [ 187.669952][T11203] loop3: detected capacity change from 0 to 512 [ 187.683745][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.690876][T11130] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.699531][T11130] bridge_slave_1: entered allmulticast mode [ 187.706639][T11130] bridge_slave_1: entered promiscuous mode [ 187.710795][T11203] EXT4-fs mount: 71 callbacks suppressed [ 187.710823][T11203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.732143][T11203] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.761280][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.781792][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.795342][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.834368][T11130] team0: Port device team_slave_0 added [ 187.842428][T11130] team0: Port device team_slave_1 added [ 187.893920][T11130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.901058][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.927705][T11130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.940058][T11130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.947116][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.973784][T11130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.001313][T11221] __nla_validate_parse: 18 callbacks suppressed [ 188.001331][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2618'. [ 188.018045][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2618'. [ 188.034844][T11130] hsr_slave_0: entered promiscuous mode [ 188.041598][T11130] hsr_slave_1: entered promiscuous mode [ 188.080704][T11225] netlink: 'syz.3.2619': attribute type 7 has an invalid length. [ 188.088814][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 188.113501][T11225] loop9: detected capacity change from 0 to 7 [ 188.120967][T11225] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.128890][T11225] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.137195][T11225] loop9: unable to read partition table [ 188.143139][T11225] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 188.143139][T11225] ) failed (rc=-5) [ 188.172192][T11130] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.188328][T11130] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.221541][T11130] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.231150][T11130] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.248657][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.255840][T11130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.263552][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.270797][T11130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.307795][T11130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.321093][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.330206][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.353558][T11130] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.376446][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.383721][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.393239][T11244] loop3: detected capacity change from 0 to 512 [ 188.401400][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.409021][T10054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.439688][T11244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.473179][T11253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2628'. [ 188.483181][T11244] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.498177][T11253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2628'. [ 188.531964][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.571170][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.702003][T11275] netlink: 'syz.1.2631': attribute type 7 has an invalid length. [ 188.710263][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 188.737836][T11130] veth0_vlan: entered promiscuous mode [ 188.753299][T11130] veth1_vlan: entered promiscuous mode [ 188.753403][T11275] ================================================================== [ 188.767702][T11275] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 188.773763][T11130] veth0_macvtap: entered promiscuous mode [ 188.774663][T11275] [ 188.774671][T11275] write to 0xffffffff8686aac8 of 8 bytes by task 11130 on cpu 1: [ 188.774686][T11275] data_alloc+0x27d/0x2b0 [ 188.774713][T11275] prb_reserve+0x808/0xaf0 [ 188.774735][T11275] vprintk_store+0x56d/0x860 [ 188.774760][T11275] vprintk_emit+0x178/0x650 [ 188.774774][T11275] vprintk_default+0x26/0x30 [ 188.813922][T11275] vprintk+0x1d/0x30 [ 188.817993][T11275] _printk+0x79/0xa0 [ 188.822015][T11275] __netdev_printk+0x321/0x3e0 [ 188.827121][T11275] netdev_info+0x9b/0xd0 [ 188.831532][T11275] __dev_set_promiscuity+0x233/0x450 [ 188.837251][T11275] __dev_set_rx_mode+0x113/0x160 [ 188.842192][T11275] dev_uc_add+0x8d/0xb0 [ 188.846334][T11275] macvlan_open+0x2f1/0x590 [ 188.851090][T11275] __dev_open+0x2d5/0x530 [ 188.855499][T11275] __dev_change_flags+0x163/0x400 [ 188.860612][T11275] netif_change_flags+0x5a/0xd0 [ 188.865634][T11275] do_setlink+0x9d2/0x2810 [ 188.870050][T11275] rtnl_newlink+0xe75/0x12d0 [ 188.874634][T11275] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 188.879910][T11275] netlink_rcv_skb+0x123/0x220 [ 188.884757][T11275] rtnetlink_rcv+0x1c/0x30 [ 188.889430][T11275] netlink_unicast+0x5bd/0x690 [ 188.894304][T11275] netlink_sendmsg+0x58b/0x6b0 [ 188.899929][T11275] __sock_sendmsg+0x145/0x180 [ 188.904688][T11275] __sys_sendto+0x268/0x330 [ 188.909268][T11275] __x64_sys_sendto+0x76/0x90 [ 188.914342][T11275] x64_sys_call+0x2d05/0x2ff0 [ 188.919199][T11275] do_syscall_64+0xd2/0x200 [ 188.924044][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.930114][T11275] [ 188.932602][T11275] read to 0xffffffff8686aac8 of 8 bytes by task 11275 on cpu 0: [ 188.940305][T11275] prb_reserve+0x221/0xaf0 [ 188.944987][T11275] vprintk_store+0x56d/0x860 [ 188.949755][T11275] vprintk_emit+0x178/0x650 [ 188.954337][T11275] vprintk_default+0x26/0x30 [ 188.958999][T11275] vprintk+0x1d/0x30 [ 188.962999][T11275] _printk+0x79/0xa0 [ 188.966885][T11275] set_capacity_and_notify+0x14c/0x1f0 [ 188.972510][T11275] loop_set_size+0x2e/0x70 [ 188.977030][T11275] loop_configure+0x825/0x9c0 [ 188.981915][T11275] lo_ioctl+0x5aa/0x1240 [ 188.986499][T11275] blkdev_ioctl+0x34f/0x440 [ 188.991287][T11275] __se_sys_ioctl+0xce/0x140 [ 188.996124][T11275] __x64_sys_ioctl+0x43/0x50 [ 189.000714][T11275] x64_sys_call+0x1816/0x2ff0 [ 189.005467][T11275] do_syscall_64+0xd2/0x200 [ 189.010053][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.016124][T11275] [ 189.018520][T11275] value changed: 0xfffffffffffc8500 -> 0x00000000000687c8 [ 189.025696][T11275] [ 189.028173][T11275] Reported by Kernel Concurrency Sanitizer on: [ 189.034303][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.1.2631 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.044419][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.054636][T11275] ================================================================== [ 188.753294][T11275] loop9: detected capacity change from 0 to 7 [ 189.071111][T11130] veth1_macvtap: entered promiscuous mode [ 189.081822][T11130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.102330][T11130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.116393][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.125515][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.145765][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.154722][T11275] loop9: unable to read partition table [ 189.160661][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.169693][T11275] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 189.169693][T11275] ) failed (rc=-5) [ 189.219215][T11255] loop4: detected capacity change from 0 to 512 [ 189.227417][T11255] EXT4-fs: Ignoring removed nobh option [ 189.260395][T11255] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2626: corrupted inode contents [ 189.273655][T11255] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2626: mark_inode_dirty error [ 189.287786][T11255] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2626: corrupted inode contents [ 189.301527][T11255] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2626: mark_inode_dirty error [ 189.313550][T11255] __quota_error: 293 callbacks suppressed [ 189.313564][T11255] Quota error (device loop4): write_blk: dquota write failed [ 189.330289][T11255] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 189.345142][T11255] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2626: Failed to acquire dquot type 0 [ 189.359937][T11255] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2626: corrupted inode contents [ 189.372233][T11255] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2626: mark_inode_dirty error [ 189.385058][T11255] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2626: corrupted inode contents [ 189.398533][T11255] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2626: mark_inode_dirty error [ 189.413313][T11255] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2626: corrupted inode contents [ 189.427457][T11255] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 189.437669][T11255] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2626: corrupted inode contents [ 189.451766][T11255] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2626: mark_inode_dirty error [ 189.463354][T11255] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 189.473442][T11255] EXT4-fs (loop4): 1 truncate cleaned up [ 189.479607][T11255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.494532][T11255] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.772060][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.