last executing test programs: 5.551401946s ago: executing program 0 (id=3206): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.096628506s ago: executing program 0 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) io_uring_enter(0xffffffffffffffff, 0x3518, 0xade1, 0x3, 0x0, 0x39) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f0000000040)=""/10, 0xa) r1 = socket(0xa, 0x3, 0x3a) sendfile(r1, r0, &(0x7f00000003c0), 0xfffffffffffffffe) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) connect$netlink(0xffffffffffffffff, &(0x7f00000004c0)=@unspec, 0xc) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r2, r3, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1e, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000800000000000000050000001520000000c6d5aa1944a6403600defffb6eb49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900aa84f73b35534a3a54b0240d0734f7afe4ca3cb509876f9092486b0ee3ade2f694003f098f4cad5bd8e336629ff6b7b91e57a8894d9665163b31578cf9cebc68b2d5e54ffe773002c22d1b0a00"/167], 0x0, 0x100000, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.851745497s ago: executing program 0 (id=3212): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40000001, 0x0) 3.985094025s ago: executing program 0 (id=3220): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38b5860f3903a31e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x2, 0x0, 0x7, 0x48614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e, 0x3ff}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xbe, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x8) r1 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x190) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000380)=""/157) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r6, 0x5) accept4(r6, &(0x7f0000000240)=@x25, 0x0, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x18) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) 3.207750329s ago: executing program 1 (id=3227): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.17687824s ago: executing program 1 (id=3228): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x4, 0x6, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x7000}, {r0, 0x2000}], 0x2, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xe9d, 0x7baf376b, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001edced21a1ae8ad7cc4a50630a58bcf0696654a478730ba12f3d25e401684dd5fa4eb8f23cf522b7b8231a3a3d88f0eb2403d64919cdda59b603c54399f0bf883c4890ed28180510af2694e9c48fb568973430e0600db14333f949e73e8f774bf4a11e6f35cb7d603b53bd3a8aa1571a74f6f15fea1cb48a8fcb2c5f3de5e1316c025baa030eccd292", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x3, 0x5, 0x1ff, 0x2, r1, 0x958, '\x00', 0x0, r2, 0x5, 0x1, 0x2, 0xc}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@acl}, {@resuid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x3}, 0x18) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 3.051214106s ago: executing program 0 (id=3230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1144c360}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25010000000500290000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40400d5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000", @ANYRESHEX], 0x1, 0x6fd, &(0x7f0000000c40)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.781321128s ago: executing program 0 (id=3235): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1b96, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = gettid() timer_create(0x6, &(0x7f0000000180)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001f40)={0x5, &(0x7f0000001d80)=[{0x400, 0x8, 0xc, 0x7fff}, {0x3ae, 0x3, 0x6, 0x5}, {0x2, 0x7, 0x29, 0x6}, {0x5, 0x8, 0x2, 0x8}, {0x1, 0x8d, 0x1, 0xec}]}) iopl(0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001d00)=ANY=[@ANYBLOB="180b000000000000000000000000000018110000d55de4449e231dcc3da3b268676336c2ec6ae69b4edb31826ba89885c9880233850d44860fdbcca53c9fbd5a70a4ce87fb948a418aa2786e1d", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x7f}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000"], 0x110}}, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000002"], 0x50) r8 = epoll_create1(0x80000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000000)) 2.198618733s ago: executing program 1 (id=3243): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x4, 0x6, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x7000}, {r0, 0x2000}], 0x2, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xe9d, 0x7baf376b, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001edced21a1ae8ad7cc4a50630a58bcf0696654a478730ba12f3d25e401684dd5fa4eb8f23cf522b7b8231a3a3d88f0eb2403d64919cdda59b603c54399f0bf883c4890ed28180510af2694e9c48fb568973430e0600db14333f949e73e8f774bf4a11e6f35cb7d603b53bd3a8aa1571a74f6f15fea1cb48a8fcb2c5f3de5e1316c025baa030eccd292", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x3, 0x5, 0x1ff, 0x2, r1, 0x958, '\x00', 0x0, r2, 0x5, 0x1, 0x2, 0xc}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, 0x0) ptrace(0x8, 0x0) 1.407010928s ago: executing program 4 (id=3256): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38b5860f3903a31e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x2, 0x0, 0x7, 0x48614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e, 0x3ff}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xbe, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x8) r1 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x190) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000380)=""/157) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r6, 0x5) accept4(r6, &(0x7f0000000240)=@x25, 0x0, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x18) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) 1.199193307s ago: executing program 1 (id=3257): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x2, 0x0, 0x7, 0x48614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e, 0x3ff}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xbe, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x8) r0 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x190) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000380)=""/157) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r5, 0x5) accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x80800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 980.391586ms ago: executing program 3 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000001010000fb7f0000cc"], 0x48) r2 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x100) mount(&(0x7f0000000400)=@filename='.\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') inotify_init1(0x1000) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000040001400048010000180070001006374000004000280090002"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRES8, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000c80)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x26) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000003000032250018110040000000000000000000000000003f46a550f6924c704e8991356b6bc06ff13a53272cb3b960bb2973ae57ec4fe029eaba568d88f462410577ab34e807d3bed11c0f0174156179dec8bc4801a84cfe7233d645058221c21482efe78b2409eea9c237c0fc61b59c83ba7803cdf8afae7cecf67f36f1b9c6abf2af0ced84064455819ddaa352d2733a8d0c5ddf92a128c702e4af6c0724109c7d1a803f5c5058b67a50033aa4801ec71a937aef01800000986dd530695a47a8a11aca67c304d232d5c6b996cf57b8d2ac35b4d86565cc3f1e", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) 928.196339ms ago: executing program 3 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1144c360}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25010000000500290000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40400d5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x6fd, &(0x7f0000000c40)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 862.319512ms ago: executing program 3 (id=3260): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x404}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 768.172686ms ago: executing program 3 (id=3262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000885"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 732.670857ms ago: executing program 3 (id=3263): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syslog(0x2, &(0x7f0000000040)=""/10, 0xa) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) connect$netlink(0xffffffffffffffff, &(0x7f00000004c0)=@unspec, 0xc) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r0, r1, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1e, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000800000000000000050000001520000000c6d5aa1944a6403600defffb6eb49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900aa84f73b35534a3a54b0240d0734f7afe4ca3cb509876f9092486b0ee3ade2f694003f098f4cad5bd8e336629ff6b7b91e57a8894d9665163b31578cf9cebc68b2d5e54ffe773002c22d1b0a00"/167], 0x0, 0x100000, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 629.533212ms ago: executing program 2 (id=3264): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x404}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 594.477204ms ago: executing program 3 (id=3265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x67, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x64042, 0x1e9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c69"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) 581.195034ms ago: executing program 4 (id=3266): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 479.794368ms ago: executing program 2 (id=3267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 438.53835ms ago: executing program 4 (id=3268): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x404}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 420.615781ms ago: executing program 2 (id=3269): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$kcm(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r4}, 0x18) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000010500018007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f00000000c0), 0x4) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) 329.200305ms ago: executing program 1 (id=3270): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x4003, 0x40}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@resuid}, {@mblk_io_submit}, {@noload}, {@nobarrier}, {@grpquota}, {@acl}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@grpjquota}, {@quota}, {@data_err_ignore}]}, 0xfd, 0x485, &(0x7f0000000800)="$eJzs3MtvVNUfAPDvnU5Ly+PX/hAfIGgVjcRHS8tDFm40mrjQaKILjKvaFoIM1NCaCCGKLjDGhSG6Ny5N/Atc6caoKxO3ujckxrABXY05M/eW6TADbZlhwPl8kgvn3HuHc7733DNz7jkzBNC3xtMfWcTmiPgtIkYjotx8wnj9ryuXzs7+fensbBbV6mt/ZellcfnS2dn8n6htyab6jmo1z29oUe75NyNmKpX5U3l+cunEO5OLp888dezEzNH5o/Mnpw8d2r9v19DB6QMdiTPFdXnH+ws7t7/4xoWXZw9feOunb1J9N+fHizg6abx+dVt6tNOF9diWhnRW7mFFWJMteX8frPX/0RiIkeVjo/HCRz2tHNBV1Wq12urzOXeuCvyHZdHrGgC9UXzQp+ffYrtFQ4/bwp/P1h+AUtxX8q1+pByl/JzBpufbThqOiMPn/vkybdGleQgAgEbfpfHPk63Gf6W4p+G8/+VrKGMR8f+I2BoRd0XEtoi4O6J27r0RcV+bcrI2+5tXSK4d/5Qurju4VUjjv2fyta2V479i9BdjA3luSy3+wezIscr83vya7InBDSk/teIlK33//K+fNe/7NJ9mH28Y/6UtlV+MBfN6XCw3TdDNzSzNdCT4FP+HETvKreLPltcBU9ttj4gd6yzj2ONf72x37Nr40zVujP86OrDOVP0q4rF6+5+LpvgLWdv1yamnD04fmByOyvzeyeKuuNbPv5x/tV35N27/7krtv7Hl/V+PPz0jZsMRi6fPHK+t1y6uvYzzv388267/b1vn/T+UvV5LD+X73ptZWjo1FTGUvZSyIyv2T199bZEvzk/x79nduv9vrT+e1a7E/RGRbuJdEfFARDyYt91DEfFwROy+Tvw/PvfI2+2OtW//68zKd1CKf65V+48st9hYSl1t/7UnBo7/8G278qurav/9tdSefM9q3v9WW8GbungAAABwhyjVvgOflSaW06XSxET9O/zbYmOpsrC49MSRhXdPztW/Kz8Wg6Vipmu0YT50Kp8bLvLTTfl9+bzxFwMjtfzE7EJlrtfBQ5/b1Kb/J38M9Lp2QNf5vRb0L/0f+pf+D/1L/4f+pf9DnxpqvfuDW10PoCfW/vk/3JV6ALee8T/0L/0f+pf+D32p7W/jSzf1k/87NVG+ParRMjFye1SjSESp60Vsihuf8/lgpwp95ZN6l+hE5Yvu1YmKlVf9n1msM7Gh5aEevikBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00L8BAAD//4hb4Hg=") bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0xffff}, 0x18) rename(&(0x7f0000000240)='./file2\x00', &(0x7f0000000280)='./file0/file0\x00') 328.412925ms ago: executing program 2 (id=3271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1144c360}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25010000000500290000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40400d5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x6fd, &(0x7f0000000c40)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, 0x0, 0x40) 190.524531ms ago: executing program 1 (id=3272): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38b5860f3903a31e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x2, 0x0, 0x7, 0x48614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e, 0x3ff}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xbe, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x8) r2 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = msgget$private(0x0, 0x190) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x24000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000380)=""/157) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r8, 0x5) accept4(r8, &(0x7f0000000240)=@x25, 0x0, 0x80800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, 0x0, 0x0) connect$inet(r10, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 175.403992ms ago: executing program 4 (id=3274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000885"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 153.831353ms ago: executing program 2 (id=3275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='sys_enter\x00', r0, 0x0, 0xb}, 0x18) listxattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000001040)=""/147, 0x93) 124.512674ms ago: executing program 2 (id=3276): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x404}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 56.871407ms ago: executing program 4 (id=3277): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x67, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}]}]}}}}}}}, 0x0) 0s ago: executing program 4 (id=3278): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="0e", 0x1}, {0x0, 0x500}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x40c0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000f00)={[{@nolazytime}, {@abort}, {@dioread_nolock}, {@mblk_io_submit}, {@noauto_da_alloc}], [{@uid_gt}, {@fowner_gt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0xde, 0x53b, &(0x7f00000014c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xf0c, 0x1, 0x1, {0x22, 0x256}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x86}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x8, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x2, 0x9, 0x20, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}]}) fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bind$bt_hci(r3, &(0x7f00000000c0)={0x27, 0xffff, 0x3}, 0x6) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x31, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0443}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d}}, @exit, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x6e9ec9078a74df}}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xf3, &(0x7f00000006c0)=""/243, 0x40f00, 0x44, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000007c0)=[{0x4, 0x2, 0xd, 0x7}, {0x1, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x10, 0x8}, {0x2, 0x2, 0x9, 0x5}, {0x5, 0x2, 0x3, 0x844697cbb36a2304}, {0x5, 0x3}, {0x2, 0x5, 0x2, 0x4}, {0x4, 0x3, 0x10}, {0x2, 0x3, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='rxrpc_rtt_tx\x00', r8, 0x0, 0x1}, 0x18) mmap(&(0x7f0000aee000/0x8000)=nil, 0x8000, 0x3, 0x8031, 0xffffffffffffffff, 0xb3694000) kernel console output (not intermixed with test programs): [T11013] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 154.007764][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 154.010891][T11013] bond1: entered promiscuous mode [ 154.021799][T11013] bond1: entered allmulticast mode [ 154.027222][T11013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.039356][T11013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2625'. [ 154.053263][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 154.064918][T11013] bond1 (unregistering): Released all slaves [ 154.126369][T11024] loop0: detected capacity change from 0 to 512 [ 154.143211][T11026] netlink: 'syz.4.2628': attribute type 39 has an invalid length. [ 154.159912][T11024] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2629: EA inode hash validation failed [ 154.174145][T11024] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2629: corrupted inode contents [ 154.196637][T11024] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.2629: mark_inode_dirty error [ 154.208423][T11024] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2629: corrupted inode contents [ 154.220707][T11024] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.2629: mark_inode_dirty error [ 154.233014][T11024] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.2629: mark inode dirty (error -117) [ 154.253810][T11024] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 154.262956][T11024] EXT4-fs (loop0): 1 orphan inode deleted [ 154.274766][T11030] loop4: detected capacity change from 0 to 7 [ 154.284979][ T3540] loop4: unable to read partition table [ 154.291886][T11030] loop4: unable to read partition table [ 154.300325][T11030] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 154.389406][T11042] loop0: detected capacity change from 0 to 512 [ 154.407373][T11042] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.425682][T11042] EXT4-fs (loop0): 1 truncate cleaned up [ 154.619030][T11056] loop1: detected capacity change from 0 to 512 [ 154.639767][T11056] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 154.668878][T11064] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.702076][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.710700][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.835303][ T29] kauditd_printk_skb: 855 callbacks suppressed [ 154.835317][ T29] audit: type=1400 audit(1764983473.450:16930): avc: denied { setopt } for pid=11079 comm="syz.2.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.917508][T11086] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 154.930553][T11086] bond1: entered promiscuous mode [ 154.935600][T11086] bond1: entered allmulticast mode [ 154.941248][T11086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.994316][T11093] loop0: detected capacity change from 0 to 512 [ 155.001562][T11093] EXT4-fs: Ignoring removed oldalloc option [ 155.030199][T11093] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.056521][ T29] audit: type=1326 audit(1764983473.670:16931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.081667][ T29] audit: type=1326 audit(1764983473.680:16932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.105416][ T29] audit: type=1326 audit(1764983473.680:16933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.129111][ T29] audit: type=1326 audit(1764983473.680:16934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.152753][ T29] audit: type=1326 audit(1764983473.680:16935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.176400][ T29] audit: type=1326 audit(1764983473.680:16936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.200070][ T29] audit: type=1326 audit(1764983473.680:16937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.213545][T11093] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2643: bg 0: block 217: padding at end of block bitmap is not set [ 155.223726][ T29] audit: type=1326 audit(1764983473.680:16938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.238692][T11093] EXT4-fs (loop0): Remounting filesystem read-only [ 155.261574][ T29] audit: type=1326 audit(1764983473.680:16939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 155.273314][T11098] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2644: EA inode hash validation failed [ 155.304567][T11098] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2644: corrupted inode contents [ 155.317109][T11098] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.2644: mark_inode_dirty error [ 155.328909][T11098] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2644: corrupted inode contents [ 155.340936][T11098] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.2644: mark_inode_dirty error [ 155.354006][T11098] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.2644: mark inode dirty (error -117) [ 155.367770][T11098] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 155.377335][T11098] EXT4-fs (loop3): 1 orphan inode deleted [ 155.401870][T11103] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2645: EA inode hash validation failed [ 155.414661][T11103] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2645: corrupted inode contents [ 155.426963][T11103] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2645: mark_inode_dirty error [ 155.438794][T11103] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2645: corrupted inode contents [ 155.451138][T11103] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2645: mark_inode_dirty error [ 155.463323][T11103] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2645: mark inode dirty (error -117) [ 155.476637][T11103] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 155.485789][T11103] EXT4-fs (loop1): 1 orphan inode deleted [ 155.509287][T11107] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.541614][T11107] EXT4-fs (loop4): 1 truncate cleaned up [ 155.569442][T11113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.580704][T11113] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 155.590556][T11113] EXT4-fs (loop0): group descriptors corrupted! [ 155.679918][T11123] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 155.693509][T11123] bond2: entered promiscuous mode [ 155.698717][T11123] bond2: entered allmulticast mode [ 155.704135][T11123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.758569][T11130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.781708][T11130] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.859068][ T3324] EXT4-fs unmount: 32 callbacks suppressed [ 155.859085][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.030595][T11170] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 156.251863][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.312414][T11181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.365249][T11181] EXT4-fs (loop1): 1 truncate cleaned up [ 156.386790][T11181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.471910][T11186] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.485440][T11186] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.492890][T11189] bond1: entered promiscuous mode [ 156.500766][T11189] bond1: entered allmulticast mode [ 156.506296][T11189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.525677][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.562677][T11192] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.576683][T11192] ext4 filesystem being mounted at /587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.600702][T11186] lo speed is unknown, defaulting to 1000 [ 156.617259][T11186] lo speed is unknown, defaulting to 1000 [ 156.687969][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.787639][T11201] lo speed is unknown, defaulting to 1000 [ 156.796824][T11201] lo speed is unknown, defaulting to 1000 [ 157.294413][T11217] rock: directory entry would overflow storage [ 157.300721][T11217] rock: sig=0x4f50, size=4, remaining=3 [ 157.306279][T11217] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 157.396142][T11221] validate_nla: 2 callbacks suppressed [ 157.396193][T11221] netlink: 'syz.0.2673': attribute type 39 has an invalid length. [ 157.412529][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.439625][T11225] set_capacity_and_notify: 9 callbacks suppressed [ 157.439691][T11225] loop1: detected capacity change from 0 to 1024 [ 157.453468][T11225] EXT4-fs: Ignoring removed bh option [ 157.456551][T11223] loop0: detected capacity change from 0 to 512 [ 157.458945][T11225] EXT4-fs: Ignoring removed nobh option [ 157.470769][T11225] EXT4-fs: Ignoring removed bh option [ 157.480480][T11227] loop2: detected capacity change from 0 to 512 [ 157.488012][T11227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.499833][T11225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.505115][T11223] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2675: EA inode hash validation failed [ 157.519329][T11227] EXT4-fs (loop2): 1 truncate cleaned up [ 157.525074][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2675: corrupted inode contents [ 157.542683][T11223] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.2675: mark_inode_dirty error [ 157.548509][T11225] EXT4-fs (loop1): pa ffff888106dd58c0: logic 1, phys. 129, len 4 [ 157.561969][T11225] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 157.572289][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2675: corrupted inode contents [ 157.584562][T11227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.596740][T11223] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.2675: mark_inode_dirty error [ 157.612432][T11223] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.2675: mark inode dirty (error -117) [ 157.625307][T11223] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 157.634445][T11223] EXT4-fs (loop0): 1 orphan inode deleted [ 157.640663][T11223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.683903][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.704950][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.840810][T11264] loop0: detected capacity change from 0 to 512 [ 157.857096][T11267] loop2: detected capacity change from 0 to 512 [ 157.863979][T11267] EXT4-fs: Ignoring removed oldalloc option [ 157.870719][T11264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.900669][T11267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.913311][T11267] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.927998][T11264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.952672][T11264] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.018033][T11267] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2683: bg 0: block 217: padding at end of block bitmap is not set [ 158.038395][T11267] EXT4-fs (loop2): Remounting filesystem read-only [ 158.048364][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.075203][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.201400][T11289] netlink: 'syz.0.2686': attribute type 39 has an invalid length. [ 158.259108][T11299] loop2: detected capacity change from 0 to 512 [ 158.269213][T11299] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2689: EA inode hash validation failed [ 158.318342][T11299] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2689: corrupted inode contents [ 158.330470][T11299] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.2689: mark_inode_dirty error [ 158.343498][T11299] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2689: corrupted inode contents [ 158.356216][T11299] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.2689: mark_inode_dirty error [ 158.368506][T11299] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.2689: mark inode dirty (error -117) [ 158.384209][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.393308][T11299] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 158.402974][T11299] EXT4-fs (loop2): 1 orphan inode deleted [ 158.409278][T11299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.443730][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.485051][T11306] loop2: detected capacity change from 0 to 512 [ 158.499579][T11306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.609319][T11312] loop0: detected capacity change from 0 to 128 [ 158.630938][T11313] loop3: detected capacity change from 0 to 128 [ 158.659072][T11306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.672927][T11313] FAULT_INJECTION: forcing a failure. [ 158.672927][T11313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.686014][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.3.2695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.686046][T11313] Tainted: [W]=WARN [ 158.686102][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.686113][T11313] Call Trace: [ 158.686120][T11313] [ 158.686128][T11313] __dump_stack+0x1d/0x30 [ 158.686152][T11313] dump_stack_lvl+0xe8/0x140 [ 158.686173][T11313] dump_stack+0x15/0x1b [ 158.686190][T11313] should_fail_ex+0x265/0x280 [ 158.686324][T11313] should_fail+0xb/0x20 [ 158.686355][T11313] should_fail_usercopy+0x1a/0x20 [ 158.686396][T11313] strncpy_from_user+0x27/0x260 [ 158.686424][T11313] ? kmem_cache_alloc_noprof+0x23f/0x4a0 [ 158.686484][T11313] getname_flags+0xae/0x3b0 [ 158.686537][T11313] __x64_sys_mkdirat+0x40/0x60 [ 158.686566][T11313] x64_sys_call+0x30c/0x3000 [ 158.686589][T11313] do_syscall_64+0xd8/0x2a0 [ 158.686623][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.686675][T11313] RIP: 0033:0x7ffba461f749 [ 158.686692][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.686718][T11313] RSP: 002b:00007ffba3087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 158.686739][T11313] RAX: ffffffffffffffda RBX: 00007ffba4875fa0 RCX: 00007ffba461f749 [ 158.686771][T11313] RDX: 0000000000000080 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 158.686850][T11313] RBP: 00007ffba3087090 R08: 0000000000000000 R09: 0000000000000000 [ 158.686863][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.686876][T11313] R13: 00007ffba4876038 R14: 00007ffba4875fa0 R15: 00007ffd9d793048 [ 158.686894][T11313] [ 158.699622][T11306] ext4 filesystem being mounted at /596/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.810877][T11317] __nla_validate_parse: 31 callbacks suppressed [ 158.810892][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 158.883351][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 158.892313][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 158.918280][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 158.927279][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 158.936233][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 158.959274][T11325] loop0: detected capacity change from 0 to 128 [ 158.981591][T11322] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2697: EA inode hash validation failed [ 159.047837][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 159.056935][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 159.066031][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'. [ 159.105490][T11322] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2697: corrupted inode contents [ 159.181201][T11322] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.2697: mark_inode_dirty error [ 159.194183][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.222713][T11322] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2697: corrupted inode contents [ 159.236833][T11332] netlink: 'syz.0.2699': attribute type 39 has an invalid length. [ 159.261304][T11322] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.2697: mark_inode_dirty error [ 159.338486][T11322] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.2697: mark inode dirty (error -117) [ 159.338839][T11336] EXT4-fs: Ignoring removed oldalloc option [ 159.368377][T11322] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 159.398010][T11322] EXT4-fs (loop3): 1 orphan inode deleted [ 159.405543][T11336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.432295][T11322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.455673][T11336] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.551036][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.561205][T11341] msdos: Bad value for 'gid' [ 159.565820][T11341] msdos: Bad value for 'gid' [ 159.643579][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 159.709675][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.751779][T11354] netlink: 'syz.2.2708': attribute type 21 has an invalid length. [ 159.828645][T11367] buffer_io_error: 28 callbacks suppressed [ 159.828660][T11367] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.842442][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 159.842455][ T29] audit: type=1400 audit(1764983478.440:17494): avc: denied { ioctl } for pid=11352 comm="syz.0.2709" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.874869][T11367] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.882739][T11367] loop4: unable to read partition table [ 159.889411][T11367] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 159.903744][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.915609][ T29] audit: type=1326 audit(1764983478.470:17495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 159.918007][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.939214][ T29] audit: type=1326 audit(1764983478.470:17496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.0.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 159.947601][T11371] tipc: Started in network mode [ 159.970525][ T29] audit: type=1400 audit(1764983478.470:17497): avc: denied { map_create } for pid=11370 comm="syz.3.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.975430][T11371] tipc: Node identity ac14140f, cluster identity 4711 [ 159.994701][ T29] audit: type=1400 audit(1764983478.470:17498): avc: denied { bpf } for pid=11370 comm="syz.3.2714" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.002850][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.022126][ T29] audit: type=1400 audit(1764983478.470:17499): avc: denied { map_read map_write } for pid=11370 comm="syz.3.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.038388][T11371] tipc: New replicast peer: 255.255.255.255 [ 160.049935][ T29] audit: type=1400 audit(1764983478.470:17500): avc: denied { prog_load } for pid=11370 comm="syz.3.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.055948][T11371] tipc: Enabled bearer , priority 10 [ 160.074957][ T29] audit: type=1400 audit(1764983478.470:17501): avc: denied { perfmon } for pid=11370 comm="syz.3.2714" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.102220][ T29] audit: type=1400 audit(1764983478.470:17502): avc: denied { prog_run } for pid=11370 comm="syz.3.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.119425][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.121372][ T29] audit: type=1400 audit(1764983478.500:17503): avc: denied { open } for pid=11353 comm="syz.2.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 160.129526][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.148843][T11377] FAULT_INJECTION: forcing a failure. [ 160.148843][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 160.156514][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.168904][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.3.2714 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.168937][T11377] Tainted: [W]=WARN [ 160.168944][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.169061][T11377] Call Trace: [ 160.169069][T11377] [ 160.169078][T11377] __dump_stack+0x1d/0x30 [ 160.169103][T11377] dump_stack_lvl+0xe8/0x140 [ 160.169126][T11377] dump_stack+0x15/0x1b [ 160.169145][T11377] should_fail_ex+0x265/0x280 [ 160.169238][T11377] should_failslab+0x8c/0xb0 [ 160.169283][T11377] __kmalloc_noprof+0xa5/0x590 [ 160.169304][T11377] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 160.169340][T11377] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 160.169441][T11377] genl_family_rcv_msg_doit+0x48/0x1b0 [ 160.169474][T11377] ? genl_get_cmd+0x639/0x660 [ 160.169507][T11377] genl_rcv_msg+0x422/0x460 [ 160.169610][T11377] ? __pfx_tipc_nl_bearer_disable+0x10/0x10 [ 160.169645][T11377] netlink_rcv_skb+0x123/0x220 [ 160.169674][T11377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.169774][T11377] genl_rcv+0x28/0x40 [ 160.169802][T11377] netlink_unicast+0x5c0/0x690 [ 160.169826][T11377] netlink_sendmsg+0x58b/0x6b0 [ 160.169854][T11377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.169902][T11377] __sock_sendmsg+0x145/0x180 [ 160.169931][T11377] ____sys_sendmsg+0x31e/0x4a0 [ 160.170014][T11377] ___sys_sendmsg+0x17b/0x1d0 [ 160.170066][T11377] __x64_sys_sendmsg+0xd4/0x160 [ 160.170092][T11377] x64_sys_call+0x17ba/0x3000 [ 160.170117][T11377] do_syscall_64+0xd8/0x2a0 [ 160.170146][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.170240][T11377] RIP: 0033:0x7ffba461f749 [ 160.170256][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.170274][T11377] RSP: 002b:00007ffba3066038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.170294][T11377] RAX: ffffffffffffffda RBX: 00007ffba4876090 RCX: 00007ffba461f749 [ 160.170308][T11377] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 160.170321][T11377] RBP: 00007ffba3066090 R08: 0000000000000000 R09: 0000000000000000 [ 160.170411][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.170424][T11377] R13: 00007ffba4876128 R14: 00007ffba4876090 R15: 00007ffd9d793048 [ 160.170443][T11377] [ 160.192700][T11379] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.292843][T11382] lo speed is unknown, defaulting to 1000 [ 160.308419][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.318785][T11382] lo speed is unknown, defaulting to 1000 [ 160.321472][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.476667][T11385] EXT4-fs: Ignoring removed oldalloc option [ 160.494623][T11388] FAULT_INJECTION: forcing a failure. [ 160.494623][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.507770][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.0.2717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.507804][T11388] Tainted: [W]=WARN [ 160.507812][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.507835][T11388] Call Trace: [ 160.507840][T11388] [ 160.507847][T11388] __dump_stack+0x1d/0x30 [ 160.507869][T11388] dump_stack_lvl+0xe8/0x140 [ 160.507936][T11388] dump_stack+0x15/0x1b [ 160.507953][T11388] should_fail_ex+0x265/0x280 [ 160.507982][T11388] should_fail+0xb/0x20 [ 160.508064][T11388] should_fail_usercopy+0x1a/0x20 [ 160.508082][T11388] strncpy_from_user+0x27/0x260 [ 160.508112][T11388] ? bpf_trace_run2+0x124/0x1d0 [ 160.508139][T11388] __se_sys_add_key+0x86/0x350 [ 160.508190][T11388] __x64_sys_add_key+0x67/0x80 [ 160.508216][T11388] x64_sys_call+0x2ea3/0x3000 [ 160.508238][T11388] do_syscall_64+0xd8/0x2a0 [ 160.508312][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.508331][T11388] RIP: 0033:0x7f767871f749 [ 160.508345][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.508360][T11388] RSP: 002b:00007f767717f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 160.508377][T11388] RAX: ffffffffffffffda RBX: 00007f7678975fa0 RCX: 00007f767871f749 [ 160.508388][T11388] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000200000000000 [ 160.508399][T11388] RBP: 00007f767717f090 R08: 000000002d974719 R09: 0000000000000000 [ 160.508442][T11388] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 160.508453][T11388] R13: 00007f7678976038 R14: 00007f7678975fa0 R15: 00007fff81bc99a8 [ 160.508469][T11388] [ 160.710123][T11385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.754661][T11385] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.885410][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.913906][T11413] netem: incorrect ge model size [ 160.918900][T11413] netem: change failed [ 161.100405][ T3412] tipc: Node number set to 2886997007 [ 161.367463][T11420] siw: device registration error -23 [ 161.442500][T11426] msdos: Bad value for 'gid' [ 161.447137][T11426] msdos: Bad value for 'gid' [ 161.638589][T11436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.660594][T11436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.692368][T11436] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.789596][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.881563][T11469] netlink: 'syz.1.2744': attribute type 39 has an invalid length. [ 161.916903][T11471] rock: directory entry would overflow storage [ 161.923098][T11471] rock: sig=0x4f50, size=4, remaining=3 [ 161.928656][T11471] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.181670][T11496] netlink: 'syz.1.2756': attribute type 39 has an invalid length. [ 162.351146][T11500] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.358584][T11500] vhci_hcd: invalid port number 96 [ 162.363720][T11500] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 162.661977][T11524] set_capacity_and_notify: 9 callbacks suppressed [ 162.662028][T11524] loop0: detected capacity change from 0 to 512 [ 162.675479][T11524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.696036][T11524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.709096][T11524] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.736190][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.881529][T11534] lo speed is unknown, defaulting to 1000 [ 162.887641][T11534] lo speed is unknown, defaulting to 1000 [ 162.959664][T11534] chnl_net:caif_netlink_parms(): no params data found [ 162.993572][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.000728][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.007857][T11534] bridge_slave_0: entered allmulticast mode [ 163.014158][T11534] bridge_slave_0: entered promiscuous mode [ 163.023278][T11315] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.033973][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.041109][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.048265][T11534] bridge_slave_1: entered allmulticast mode [ 163.054676][T11534] bridge_slave_1: entered promiscuous mode [ 163.070818][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.080826][T11315] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.092298][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.111028][T11534] team0: Port device team_slave_0 added [ 163.117591][T11534] team0: Port device team_slave_1 added [ 163.132852][T11315] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.143974][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.150993][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.176932][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.188061][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.195013][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.220915][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.245031][T11315] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.257346][T11534] hsr_slave_0: entered promiscuous mode [ 163.263376][T11534] hsr_slave_1: entered promiscuous mode [ 163.328506][T11315] gretap0: left allmulticast mode [ 163.333618][T11315] gretap0: left promiscuous mode [ 163.338649][T11315] bridge0: port 1(gretap0) entered disabled state [ 163.459600][T11315] bond0 (unregistering): Released all slaves [ 163.467920][T11315] bond1 (unregistering): Released all slaves [ 163.560953][T11315] hsr_slave_0: left promiscuous mode [ 163.569878][T11315] hsr_slave_1: left promiscuous mode [ 163.587926][T11315] veth1_macvtap: left promiscuous mode [ 163.597020][T11315] veth0_macvtap: left promiscuous mode [ 163.612030][T11315] veth1_vlan: left promiscuous mode [ 163.622124][T11315] veth0_vlan: left promiscuous mode [ 163.823646][T11599] __nla_validate_parse: 14 callbacks suppressed [ 163.823665][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 163.848424][T11599] loop4: detected capacity change from 0 to 7 [ 163.854978][ T3540] loop4: unable to read partition table [ 163.861021][T11599] loop4: unable to read partition table [ 163.866866][T11599] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 163.942680][ T3007] loop4: unable to read partition table [ 164.039175][T11534] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.068893][T11534] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.085711][T11534] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.106238][T11534] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.163421][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.175001][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.194598][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.201727][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.219361][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.226422][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.291805][T11651] loop0: detected capacity change from 0 to 128 [ 164.308744][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.316109][T11651] FAT-fs (loop0): Directory bread(block 524322) failed [ 164.328708][T11651] FAT-fs (loop0): Directory bread(block 524323) failed [ 164.335847][T11651] FAT-fs (loop0): Directory bread(block 524324) failed [ 164.348220][T11651] FAT-fs (loop0): Directory bread(block 524325) failed [ 164.356135][T11651] FAT-fs (loop0): Directory bread(block 524326) failed [ 164.389790][T11651] FAT-fs (loop0): Directory bread(block 524327) failed [ 164.396697][T11651] FAT-fs (loop0): Directory bread(block 524328) failed [ 164.403747][T11651] FAT-fs (loop0): Directory bread(block 524329) failed [ 164.432180][T11651] FAT-fs (loop0): Directory bread(block 524322) failed [ 164.439290][T11651] FAT-fs (loop0): Directory bread(block 524323) failed [ 164.447051][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2787'. [ 164.447882][T11534] veth0_vlan: entered promiscuous mode [ 164.477334][T11534] veth1_vlan: entered promiscuous mode [ 164.489574][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 164.507271][T11534] veth0_macvtap: entered promiscuous mode [ 164.524523][T11534] veth1_macvtap: entered promiscuous mode [ 164.526779][T11651] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.558901][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.596958][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.617632][ T319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.629090][T11681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2798'. [ 164.644629][T11682] loop0: detected capacity change from 0 to 512 [ 164.651775][ T319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.673706][ T319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.697524][T11682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.710875][ T319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.738878][T11691] loop2: detected capacity change from 0 to 164 [ 164.738935][T11682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.750096][T11691] rock: directory entry would overflow storage [ 164.764337][T11691] rock: sig=0x4f50, size=4, remaining=3 [ 164.769913][T11691] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 164.782711][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 164.791868][T11691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.799335][T11691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.807269][T11691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.814112][T11682] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.814732][T11691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.846667][T11699] SELinux: Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped). [ 164.856337][ T29] kauditd_printk_skb: 1317 callbacks suppressed [ 164.856349][ T29] audit: type=1400 audit(1764983483.480:18821): avc: denied { relabelto } for pid=11698 comm="syz.4.2804" name=E91F7189591E9233614B dev="tmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:crack_exec_t:s0" [ 164.891747][ T29] audit: type=1400 audit(1764983483.480:18822): avc: denied { associate } for pid=11698 comm="syz.4.2804" name=E91F7189591E9233614B dev="tmpfs" ino=3219 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crack_exec_t:s0" [ 164.920390][ T29] audit: type=1400 audit(1764983483.490:18823): avc: denied { unlink } for pid=3324 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:crack_exec_t:s0" [ 164.950146][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.980220][ T29] audit: type=1326 audit(1764983483.590:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.003880][ T29] audit: type=1326 audit(1764983483.590:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.027429][ T29] audit: type=1326 audit(1764983483.590:18826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.050998][ T29] audit: type=1326 audit(1764983483.590:18827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.074550][ T29] audit: type=1326 audit(1764983483.590:18828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.098201][ T29] audit: type=1326 audit(1764983483.590:18829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.121769][ T29] audit: type=1326 audit(1764983483.590:18830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767871f749 code=0x7ffc0000 [ 165.364225][T11713] lo speed is unknown, defaulting to 1000 [ 165.370421][T11713] lo speed is unknown, defaulting to 1000 [ 165.465982][T11713] chnl_net:caif_netlink_parms(): no params data found [ 165.493539][T11727] loop1: detected capacity change from 0 to 512 [ 165.500494][T11727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.514113][T11727] EXT4-fs (loop1): 1 truncate cleaned up [ 165.521032][T11727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.535535][T11727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2811'. [ 165.544994][T11727] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2811'. [ 165.556688][T11713] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.563881][T11713] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.571133][T11713] bridge_slave_0: entered allmulticast mode [ 165.577539][T11713] bridge_slave_0: entered promiscuous mode [ 165.587440][T11713] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.594571][T11713] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.601836][T11713] bridge_slave_1: entered allmulticast mode [ 165.608268][T11713] bridge_slave_1: entered promiscuous mode [ 165.627777][T11713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.638653][T11713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.661088][T11713] team0: Port device team_slave_0 added [ 165.668155][T11713] team0: Port device team_slave_1 added [ 165.685235][T11713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.692190][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.718096][T11713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.729476][T11713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.736405][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.762346][T11713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.782994][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.806855][T11713] hsr_slave_0: entered promiscuous mode [ 165.813685][T11713] hsr_slave_1: entered promiscuous mode [ 165.819812][T11713] debugfs: 'hsr0' already exists in 'hsr' [ 165.825549][T11713] Cannot create hsr debugfs directory [ 165.888049][T11738] loop0: detected capacity change from 0 to 256 [ 165.895846][T11738] msdos: Bad value for 'gid' [ 165.900551][T11738] msdos: Bad value for 'gid' [ 165.951187][T11713] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.005325][T11713] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.050162][T11713] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.169605][T11713] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.232267][T11713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.240803][T11713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.249468][T11713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.257927][T11713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.295471][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.306904][T11713] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.316023][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.323087][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.334056][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.341201][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.395468][T11713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.479965][T11713] veth0_vlan: entered promiscuous mode [ 166.487692][T11713] veth1_vlan: entered promiscuous mode [ 166.502485][T11713] veth0_macvtap: entered promiscuous mode [ 166.510460][T11713] veth1_macvtap: entered promiscuous mode [ 166.520840][T11713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.531798][T11713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.542105][ T2200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.553046][ T2200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.562154][ T2200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.572349][ T2200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.799300][T11794] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.843374][T11796] loop2: detected capacity change from 0 to 256 [ 166.850860][T11796] msdos: Bad value for 'gid' [ 166.855543][T11796] msdos: Bad value for 'gid' [ 166.861565][T11794] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.900334][T11798] loop2: detected capacity change from 0 to 128 [ 166.907365][T11798] FAT-fs (loop2): Directory bread(block 524322) failed [ 166.914572][T11798] FAT-fs (loop2): Directory bread(block 524323) failed [ 166.922086][T11798] FAT-fs (loop2): Directory bread(block 524324) failed [ 166.922969][T11794] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.930068][T11798] FAT-fs (loop2): Directory bread(block 524325) failed [ 166.945594][T11798] FAT-fs (loop2): Directory bread(block 524326) failed [ 166.952472][T11798] FAT-fs (loop2): Directory bread(block 524327) failed [ 166.966451][T11798] FAT-fs (loop2): Directory bread(block 524328) failed [ 166.973505][T11798] FAT-fs (loop2): Directory bread(block 524329) failed [ 166.984523][T11798] FAT-fs (loop2): Directory bread(block 524322) failed [ 166.991448][T11798] FAT-fs (loop2): Directory bread(block 524323) failed [ 167.000492][T11794] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.059571][T11808] loop4: detected capacity change from 0 to 128 [ 167.067617][ T898] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.080820][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.119220][T11808] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.129701][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.139592][T11808] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.170013][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.205949][T11820] rock: directory entry would overflow storage [ 167.212168][T11820] rock: sig=0x4f50, size=4, remaining=3 [ 167.217697][T11820] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 167.315253][T11826] lo speed is unknown, defaulting to 1000 [ 167.321399][T11826] lo speed is unknown, defaulting to 1000 [ 167.328856][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 167.338835][T11829] FAT-fs (loop2): Directory bread(block 524322) failed [ 167.345803][T11829] FAT-fs (loop2): Directory bread(block 524323) failed [ 167.356967][T11829] FAT-fs (loop2): Directory bread(block 524324) failed [ 167.364082][T11829] FAT-fs (loop2): Directory bread(block 524325) failed [ 167.371030][T11829] FAT-fs (loop2): Directory bread(block 524326) failed [ 167.377941][T11829] FAT-fs (loop2): Directory bread(block 524327) failed [ 167.384953][T11829] FAT-fs (loop2): Directory bread(block 524328) failed [ 167.393182][T11829] FAT-fs (loop2): Directory bread(block 524329) failed [ 167.401738][T11829] FAT-fs (loop2): Directory bread(block 524322) failed [ 167.408673][T11829] FAT-fs (loop2): Directory bread(block 524323) failed [ 167.495020][T11713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.642050][T11825] siw: device registration error -23 [ 167.745799][T11847] Invalid logical block size (7) [ 167.766256][T11851] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.951261][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2839'. [ 167.960334][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2839'. [ 167.977063][T11861] FAULT_INJECTION: forcing a failure. [ 167.977063][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.990309][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.3.2849 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.990343][T11861] Tainted: [W]=WARN [ 167.990351][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.990439][T11861] Call Trace: [ 167.990445][T11861] [ 167.990453][T11861] __dump_stack+0x1d/0x30 [ 167.990478][T11861] dump_stack_lvl+0xe8/0x140 [ 167.990502][T11861] dump_stack+0x15/0x1b [ 167.990589][T11861] should_fail_ex+0x265/0x280 [ 167.990624][T11861] should_fail+0xb/0x20 [ 167.990656][T11861] should_fail_usercopy+0x1a/0x20 [ 167.990793][T11861] _copy_from_iter+0xcf/0xe70 [ 167.990812][T11861] ? __alloc_skb+0x3bb/0x4d0 [ 167.990849][T11861] ? __alloc_skb+0x24d/0x4d0 [ 167.990904][T11861] netlink_sendmsg+0x471/0x6b0 [ 167.990931][T11861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.990959][T11861] __sock_sendmsg+0x145/0x180 [ 167.991012][T11861] ____sys_sendmsg+0x31e/0x4a0 [ 167.991034][T11861] ___sys_sendmsg+0x17b/0x1d0 [ 167.991065][T11861] __x64_sys_sendmsg+0xd4/0x160 [ 167.991156][T11861] x64_sys_call+0x17ba/0x3000 [ 167.991233][T11861] do_syscall_64+0xd8/0x2a0 [ 167.991264][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.991344][T11861] RIP: 0033:0x7ffba461f749 [ 167.991374][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.991446][T11861] RSP: 002b:00007ffba3087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.991464][T11861] RAX: ffffffffffffffda RBX: 00007ffba4875fa0 RCX: 00007ffba461f749 [ 167.991478][T11861] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000003 [ 167.991492][T11861] RBP: 00007ffba3087090 R08: 0000000000000000 R09: 0000000000000000 [ 167.991583][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.991597][T11861] R13: 00007ffba4876038 R14: 00007ffba4875fa0 R15: 00007ffd9d793048 [ 167.991617][T11861] [ 168.331569][T11865] cgroup: noprefix used incorrectly [ 168.423473][T11873] set_capacity_and_notify: 2 callbacks suppressed [ 168.423487][T11873] loop3: detected capacity change from 0 to 128 [ 168.442801][T11875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.469882][T11873] FAT-fs (loop3): Directory bread(block 524322) failed [ 168.510208][T11873] FAT-fs (loop3): Directory bread(block 524323) failed [ 168.527235][T11873] FAT-fs (loop3): Directory bread(block 524324) failed [ 168.535183][T11873] FAT-fs (loop3): Directory bread(block 524325) failed [ 168.558224][T11873] FAT-fs (loop3): Directory bread(block 524326) failed [ 168.608471][T11873] FAT-fs (loop3): Directory bread(block 524327) failed [ 168.618354][T11873] FAT-fs (loop3): Directory bread(block 524328) failed [ 168.625209][T11873] FAT-fs (loop3): Directory bread(block 524329) failed [ 168.649514][T11873] FAT-fs (loop3): Directory bread(block 524322) failed [ 168.669981][T11873] FAT-fs (loop3): Directory bread(block 524323) failed [ 168.718472][T11890] capability: warning: `syz.3.2856' uses deprecated v2 capabilities in a way that may be insecure [ 168.743289][T11890] loop3: detected capacity change from 0 to 512 [ 168.753526][T11890] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.779506][T11890] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2856: Invalid inode bitmap blk 4 in block_group 0 [ 168.795205][T11843] syz.4.2844 (11843) used greatest stack depth: 7480 bytes left [ 168.803851][T11890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.847832][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.873034][T11903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.019817][T11917] loop2: detected capacity change from 0 to 128 [ 169.027208][T11917] FAT-fs (loop2): Directory bread(block 524322) failed [ 169.034302][T11917] FAT-fs (loop2): Directory bread(block 524323) failed [ 169.041617][T11917] FAT-fs (loop2): Directory bread(block 524324) failed [ 169.048565][T11917] FAT-fs (loop2): Directory bread(block 524325) failed [ 169.055418][T11917] FAT-fs (loop2): Directory bread(block 524326) failed [ 169.062440][T11917] FAT-fs (loop2): Directory bread(block 524327) failed [ 169.069384][T11917] FAT-fs (loop2): Directory bread(block 524328) failed [ 169.076211][T11917] FAT-fs (loop2): Directory bread(block 524329) failed [ 169.084265][T11917] FAT-fs (loop2): Directory bread(block 524322) failed [ 169.091234][T11917] FAT-fs (loop2): Directory bread(block 524323) failed [ 169.119299][T11919] loop2: detected capacity change from 0 to 164 [ 169.126367][T11919] iso9660: Unknown parameter 'over' [ 169.167641][T11923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.211422][T11923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.261236][T11923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.311069][T11923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.364699][ T42] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.375747][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.386017][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.397369][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.537441][T11925] lo speed is unknown, defaulting to 1000 [ 169.543915][T11925] lo speed is unknown, defaulting to 1000 [ 169.649047][T11925] chnl_net:caif_netlink_parms(): no params data found [ 169.697175][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.704312][T11925] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.712365][T11925] bridge_slave_0: entered allmulticast mode [ 169.718918][T11925] bridge_slave_0: entered promiscuous mode [ 169.725739][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.732854][T11925] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.740499][T11925] bridge_slave_1: entered allmulticast mode [ 169.747017][T11925] bridge_slave_1: entered promiscuous mode [ 169.774460][T11925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.791681][T11925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.813802][T11952] bridge0: port 1(gretap0) entered disabled state [ 169.824037][T11925] team0: Port device team_slave_0 added [ 169.831503][T11925] team0: Port device team_slave_1 added [ 169.850672][T11956] loop2: detected capacity change from 0 to 512 [ 169.864510][T11925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.871506][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.883854][T11956] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 169.897454][T11925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.917726][T11960] FAULT_INJECTION: forcing a failure. [ 169.917726][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 169.922095][T11925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.930422][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz.3.2880 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 169.930454][T11960] Tainted: [W]=WARN [ 169.930462][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.930475][T11960] Call Trace: [ 169.930481][T11960] [ 169.930489][T11960] __dump_stack+0x1d/0x30 [ 169.930610][T11960] dump_stack_lvl+0xe8/0x140 [ 169.930633][T11960] dump_stack+0x15/0x1b [ 169.930653][T11960] should_fail_ex+0x265/0x280 [ 169.930728][T11960] should_failslab+0x8c/0xb0 [ 169.930748][T11960] kmem_cache_alloc_node_noprof+0x57/0x4c0 [ 169.930771][T11960] ? __alloc_skb+0x324/0x4d0 [ 169.930851][T11960] __alloc_skb+0x324/0x4d0 [ 169.930881][T11960] ? __alloc_skb+0x24d/0x4d0 [ 169.930913][T11960] netlink_alloc_large_skb+0xbf/0xf0 [ 169.930953][T11960] netlink_sendmsg+0x3cf/0x6b0 [ 169.930980][T11960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.931006][T11960] __sock_sendmsg+0x145/0x180 [ 169.931035][T11960] ____sys_sendmsg+0x31e/0x4a0 [ 169.931110][T11960] ___sys_sendmsg+0x17b/0x1d0 [ 169.931144][T11960] __x64_sys_sendmsg+0xd4/0x160 [ 169.931170][T11960] x64_sys_call+0x17ba/0x3000 [ 169.931218][T11960] do_syscall_64+0xd8/0x2a0 [ 169.931292][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.931314][T11960] RIP: 0033:0x7ffba461f749 [ 169.931329][T11960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.931347][T11960] RSP: 002b:00007ffba3087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.931367][T11960] RAX: ffffffffffffffda RBX: 00007ffba4875fa0 RCX: 00007ffba461f749 [ 169.931380][T11960] RDX: 00000000040040c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 169.931470][T11960] RBP: 00007ffba3087090 R08: 0000000000000000 R09: 0000000000000000 [ 169.931483][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.931496][T11960] R13: 00007ffba4876038 R14: 00007ffba4875fa0 R15: 00007ffd9d793048 [ 169.931515][T11960] [ 169.998281][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 169.998294][ T29] audit: type=1326 audit(1764983488.620:19365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.001825][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.006219][ T29] audit: type=1326 audit(1764983488.620:19366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.010788][T11925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.016049][ T29] audit: type=1326 audit(1764983488.620:19367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.016119][ T29] audit: type=1326 audit(1764983488.620:19368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.016144][ T29] audit: type=1326 audit(1764983488.620:19369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.016209][ T29] audit: type=1326 audit(1764983488.620:19370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.068035][T11956] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 170.108628][ T29] audit: type=1326 audit(1764983488.650:19371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.123187][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.125124][ T29] audit: type=1326 audit(1764983488.650:19372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.133629][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.136076][ T29] audit: type=1326 audit(1764983488.710:19373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.413041][ T29] audit: type=1326 audit(1764983488.710:19374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.3.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 170.463354][T11925] hsr_slave_0: entered promiscuous mode [ 170.469249][T11925] hsr_slave_1: entered promiscuous mode [ 170.475085][T11925] debugfs: 'hsr0' already exists in 'hsr' [ 170.480851][T11925] Cannot create hsr debugfs directory [ 170.527211][T11925] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.569734][T11925] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.629912][T11925] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.689809][T11925] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.890743][T11903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.914728][T11984] loop4: detected capacity change from 0 to 7 [ 170.921117][T11984] buffer_io_error: 28 callbacks suppressed [ 170.921132][T11984] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.934897][T11984] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.942757][T11984] loop4: unable to read partition table [ 170.948730][T11984] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 170.951697][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.971697][T11903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.983641][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.996124][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 171.004429][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 171.012291][T11986] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.012756][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 171.031077][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 171.039009][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 171.046905][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 171.059198][T11903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.115700][ T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.133726][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.152136][ T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.171334][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.190552][T11925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.206509][T11925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.215954][T11925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.224956][T11925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.291132][T11925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.306022][T11925] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.345743][ T1902] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.352823][ T1902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.366540][ T1902] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.373707][ T1902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.400097][T12014] loop4: detected capacity change from 0 to 7 [ 171.417695][ T3540] loop4: unable to read partition table [ 171.419094][T11925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.436674][T12014] loop4: unable to read partition table [ 171.445816][T12014] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 171.527542][T11925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.542913][T12025] netlink: 'syz.4.2904': attribute type 10 has an invalid length. [ 171.553075][T12025] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.560316][T12025] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.570834][T12025] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.577958][T12025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.585299][T12025] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.592344][T12025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.603836][T12025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.617749][T12023] bridge0: port 3(gretap0) entered blocking state [ 171.624338][T12023] bridge0: port 3(gretap0) entered disabled state [ 171.635436][T12023] gretap0: entered allmulticast mode [ 171.641350][T12023] gretap0: entered promiscuous mode [ 171.647043][T12023] bridge0: port 3(gretap0) entered blocking state [ 171.653505][T12023] bridge0: port 3(gretap0) entered forwarding state [ 171.671379][T12033] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.715652][T11925] veth0_vlan: entered promiscuous mode [ 171.722766][T12033] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.735694][T11925] veth1_vlan: entered promiscuous mode [ 171.751365][T11925] veth0_macvtap: entered promiscuous mode [ 171.762827][T12033] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.774178][T11925] veth1_macvtap: entered promiscuous mode [ 171.784673][T11925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.796244][T11925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.806865][ T2950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.815994][ T2950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.825099][ T2950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.835857][ T2950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.848712][T12033] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.909209][T12047] loop0: detected capacity change from 0 to 512 [ 171.916259][T12047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.927080][T12047] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 171.936869][T12047] EXT4-fs (loop0): group descriptors corrupted! [ 172.131908][T12063] loop2: detected capacity change from 0 to 512 [ 172.160570][T12063] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.174517][T12063] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2914: Invalid inode bitmap blk 4 in block_group 0 [ 172.188756][T12063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.225130][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.255615][T12073] loop4: detected capacity change from 0 to 7 [ 172.267129][ T3540] loop4: unable to read partition table [ 172.274631][T12073] loop4: unable to read partition table [ 172.280434][T12073] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 172.353800][T12081] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.391020][ T3007] loop4: unable to read partition table [ 172.490221][T12074] __nla_validate_parse: 8 callbacks suppressed [ 172.490238][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.505547][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.514563][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.578620][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.587602][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.596661][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.662174][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.671303][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.680504][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 172.755644][T12100] EXT4-fs: Ignoring removed i_version option [ 172.770377][T12100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.871302][T12100] EXT4-fs (loop2): 1 truncate cleaned up [ 172.889417][T12100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.950216][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.986249][T12115] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2932'. [ 173.083185][T12125] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.207590][T12137] SELinux: failed to load policy [ 173.365446][T12151] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.557776][T12165] SELinux: failed to load policy [ 173.576189][T12167] set_capacity_and_notify: 1 callbacks suppressed [ 173.576199][T12167] loop2: detected capacity change from 0 to 512 [ 173.589616][T12167] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.597623][T12167] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2955: Invalid inode bitmap blk 4 in block_group 0 [ 173.610813][T12167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.633084][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.703526][T12174] netlink: 'syz.3.2958': attribute type 21 has an invalid length. [ 173.779290][T12177] loop2: detected capacity change from 0 to 256 [ 173.785960][T12177] msdos: Bad value for 'gid' [ 173.790640][T12177] msdos: Bad value for 'gid' [ 174.076901][T12203] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 174.107057][T12200] bridge0: port 3(gretap0) entered blocking state [ 174.113623][T12200] bridge0: port 3(gretap0) entered disabled state [ 174.126638][T12200] gretap0: entered allmulticast mode [ 174.138044][T12200] gretap0: entered promiscuous mode [ 174.143537][T12200] bridge0: port 3(gretap0) entered blocking state [ 174.149970][T12200] bridge0: port 3(gretap0) entered forwarding state [ 174.357956][T12230] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 174.448381][T12238] loop4: detected capacity change from 0 to 7 [ 174.457634][ T3540] loop4: unable to read partition table [ 174.463742][T12238] loop4: unable to read partition table [ 174.471694][T12238] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 174.685852][T12262] FAULT_INJECTION: forcing a failure. [ 174.685852][T12262] name failslab, interval 1, probability 0, space 0, times 0 [ 174.698528][T12262] CPU: 0 UID: 0 PID: 12262 Comm: syz.1.2997 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.698635][T12262] Tainted: [W]=WARN [ 174.698641][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.698651][T12262] Call Trace: [ 174.698657][T12262] [ 174.698699][T12262] __dump_stack+0x1d/0x30 [ 174.698720][T12262] dump_stack_lvl+0xe8/0x140 [ 174.698779][T12262] dump_stack+0x15/0x1b [ 174.698796][T12262] should_fail_ex+0x265/0x280 [ 174.698894][T12262] ? __pfx_sock_alloc_inode+0x10/0x10 [ 174.698919][T12262] should_failslab+0x8c/0xb0 [ 174.698936][T12262] kmem_cache_alloc_lru_noprof+0x55/0x4b0 [ 174.698953][T12262] ? sock_alloc_inode+0x34/0xa0 [ 174.699012][T12262] ? __pfx_sock_alloc_inode+0x10/0x10 [ 174.699067][T12262] sock_alloc_inode+0x34/0xa0 [ 174.699111][T12262] alloc_inode+0x40/0x170 [ 174.699140][T12262] do_accept+0xa0/0x3a0 [ 174.699234][T12262] ? _raw_spin_lock+0x52/0xa0 [ 174.699294][T12262] __sys_accept4+0xbe/0x170 [ 174.699366][T12262] __x64_sys_accept4+0x51/0x60 [ 174.699396][T12262] x64_sys_call+0x2b3e/0x3000 [ 174.699419][T12262] do_syscall_64+0xd8/0x2a0 [ 174.699450][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.699475][T12262] RIP: 0033:0x7f32750cf749 [ 174.699490][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.699508][T12262] RSP: 002b:00007f3273b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 174.699530][T12262] RAX: ffffffffffffffda RBX: 00007f3275325fa0 RCX: 00007f32750cf749 [ 174.699543][T12262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 174.699592][T12262] RBP: 00007f3273b37090 R08: 0000000000000000 R09: 0000000000000000 [ 174.699639][T12262] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 174.699652][T12262] R13: 00007f3275326038 R14: 00007f3275325fa0 R15: 00007fff487c5e18 [ 174.699671][T12262] [ 174.706279][T12260] loop2: detected capacity change from 0 to 256 [ 174.908664][T12260] msdos: Bad value for 'gid' [ 174.913256][T12260] msdos: Bad value for 'gid' [ 174.969514][T12277] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 174.979238][T12277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.987806][T12277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.005272][ T29] kauditd_printk_skb: 1271 callbacks suppressed [ 175.005294][ T29] audit: type=1400 audit(1764983493.620:20646): avc: denied { bind } for pid=12276 comm="syz.1.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.062763][ T29] audit: type=1400 audit(1764983493.680:20647): avc: denied { read } for pid=12282 comm="syz.2.3005" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.086353][ T29] audit: type=1400 audit(1764983493.680:20648): avc: denied { open } for pid=12282 comm="syz.2.3005" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.383560][ T29] audit: type=1400 audit(1764983494.000:20649): avc: denied { create } for pid=12291 comm="syz.0.3008" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.405514][ T29] audit: type=1400 audit(1764983494.000:20650): avc: denied { map } for pid=12291 comm="syz.0.3008" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.429997][ T29] audit: type=1400 audit(1764983494.000:20651): avc: denied { read write } for pid=12291 comm="syz.0.3008" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.506118][ T29] audit: type=1400 audit(1764983494.120:20652): avc: denied { write } for pid=12286 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.600897][ T29] audit: type=1326 audit(1764983494.180:20653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 175.624498][ T29] audit: type=1326 audit(1764983494.180:20654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 175.648210][ T29] audit: type=1326 audit(1764983494.180:20655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 175.789720][ T1902] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.830910][ T947] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.849242][T12302] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.854410][ T947] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.873371][T12297] siw: device registration error -23 [ 175.888961][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.925632][T12306] loop4: detected capacity change from 0 to 128 [ 175.951240][T12306] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.970772][T12308] loop1: detected capacity change from 0 to 256 [ 175.977409][T12308] msdos: Bad value for 'gid' [ 175.982050][T12308] msdos: Bad value for 'gid' [ 176.013865][T12306] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.074189][T12313] loop1: detected capacity change from 0 to 512 [ 176.114437][T12316] lo speed is unknown, defaulting to 1000 [ 176.120835][T12316] lo speed is unknown, defaulting to 1000 [ 176.131787][T12313] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 176.178544][T12313] EXT4-fs (loop1): mount failed [ 176.245406][T12313] loop1: detected capacity change from 0 to 1024 [ 176.278544][T12330] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.286099][T12313] EXT4-fs: inline encryption not supported [ 176.306463][T11713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.317230][T12313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.340971][T12330] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.390167][T12330] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.413905][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.450677][T12330] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.464772][T12335] siw: device registration error -23 [ 176.503184][T12340] loop1: detected capacity change from 0 to 256 [ 176.520147][ T947] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.528535][T12340] msdos: Bad value for 'gid' [ 176.533156][T12340] msdos: Bad value for 'gid' [ 176.544710][ T947] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.556676][T12344] netlink: 'syz.4.3027': attribute type 9 has an invalid length. [ 176.578811][ T947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.601261][ T947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.733885][T12367] loop4: detected capacity change from 0 to 512 [ 176.754180][T12367] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 176.783148][T12367] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3033: attempt to clear invalid blocks 2 len 1 [ 176.904301][T12367] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 177.074776][T12367] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3033: invalid indirect mapped block 1819239214 (level 0) [ 177.175612][T12367] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3033: invalid indirect mapped block 1819239214 (level 1) [ 177.221571][T12367] EXT4-fs (loop4): 1 truncate cleaned up [ 177.243181][T12367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.352874][T12367] serio: Serial port ttyS3 [ 177.377261][T12388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.393202][T12385] msdos: Bad value for 'gid' [ 177.397811][T12385] msdos: Bad value for 'gid' [ 177.422315][T12388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.490349][T12398] FAULT_INJECTION: forcing a failure. [ 177.490349][T12398] name failslab, interval 1, probability 0, space 0, times 0 [ 177.503045][T12398] CPU: 1 UID: 0 PID: 12398 Comm: syz.3.3046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.503116][T12398] Tainted: [W]=WARN [ 177.503124][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.503138][T12398] Call Trace: [ 177.503145][T12398] [ 177.503153][T12398] __dump_stack+0x1d/0x30 [ 177.503176][T12398] dump_stack_lvl+0xe8/0x140 [ 177.503238][T12398] dump_stack+0x15/0x1b [ 177.503258][T12398] should_fail_ex+0x265/0x280 [ 177.503323][T12398] should_failslab+0x8c/0xb0 [ 177.503343][T12398] __kvmalloc_node_noprof+0x12e/0x690 [ 177.503375][T12398] ? alloc_netdev_mqs+0xa5/0xa40 [ 177.503408][T12398] ? __pfx_sl_setup+0x10/0x10 [ 177.503494][T12398] alloc_netdev_mqs+0xa5/0xa40 [ 177.503518][T12398] slip_open+0x2d1/0x920 [ 177.503546][T12398] ? vfree+0x295/0x3a0 [ 177.503568][T12398] ? up_write+0x18/0x60 [ 177.503590][T12398] tty_ldisc_open+0x5d/0xb0 [ 177.503645][T12398] tty_set_ldisc+0x1db/0x380 [ 177.503667][T12398] tiocsetd+0x51/0x60 [ 177.503690][T12398] tty_ioctl+0xa79/0xb80 [ 177.503770][T12398] ? __pfx_tty_ioctl+0x10/0x10 [ 177.503793][T12398] __se_sys_ioctl+0xce/0x140 [ 177.503819][T12398] __x64_sys_ioctl+0x43/0x50 [ 177.503907][T12398] x64_sys_call+0x14b0/0x3000 [ 177.503933][T12398] do_syscall_64+0xd8/0x2a0 [ 177.503966][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.504032][T12398] RIP: 0033:0x7ffba461f749 [ 177.504049][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.504067][T12398] RSP: 002b:00007ffba3087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.504085][T12398] RAX: ffffffffffffffda RBX: 00007ffba4875fa0 RCX: 00007ffba461f749 [ 177.504097][T12398] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000007 [ 177.504109][T12398] RBP: 00007ffba3087090 R08: 0000000000000000 R09: 0000000000000000 [ 177.504187][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.504198][T12398] R13: 00007ffba4876038 R14: 00007ffba4875fa0 R15: 00007ffd9d793048 [ 177.504218][T12398] [ 177.507715][T12388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.612587][T12401] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 177.671968][T12402] netlink: 'syz.2.3047': attribute type 21 has an invalid length. [ 177.744765][T12402] __nla_validate_parse: 32 callbacks suppressed [ 177.744788][T12402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3047'. [ 177.746918][T12401] syz!: rxe_newlink: already configured on team_slave_0 [ 177.771322][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.780794][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.780859][T12388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.826866][T11713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.846027][ T947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.861387][ T947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.872418][ T947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.883386][ T947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.892480][T12406] usb usb8: usbfs: process 12406 (syz.4.3049) did not claim interface 0 before use [ 178.007953][T12428] netlink: 'syz.4.3053': attribute type 21 has an invalid length. [ 178.018247][T12428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3053'. [ 178.314375][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 178.332889][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'. [ 178.648623][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 178.657580][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 178.666555][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 178.688242][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 178.697228][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 178.706177][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 178.789498][T12468] serio: Serial port ttyS3 [ 178.953940][T12473] sctp: [Deprecated]: syz.0.3063 (pid 12473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.953940][T12473] Use struct sctp_sack_info instead [ 179.141987][T12479] set_capacity_and_notify: 2 callbacks suppressed [ 179.142008][T12479] loop4: detected capacity change from 0 to 7 [ 179.155099][T12479] buffer_io_error: 46 callbacks suppressed [ 179.155111][T12479] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.168900][T12479] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.176707][T12479] loop4: unable to read partition table [ 179.182504][T12479] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 179.186020][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.203990][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.212037][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.228409][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.236880][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.247084][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.254962][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.265834][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.342348][T12489] rdma_op ffff8881387c5580 conn xmit_rdma 0000000000000000 [ 179.394397][T12497] serio: Serial port ttyS3 [ 179.668924][T12509] loop4: detected capacity change from 0 to 7 [ 179.675317][T12509] loop4: unable to read partition table [ 179.681568][T12509] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 180.384877][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 180.384892][ T29] audit: type=1400 audit(1764983499.000:21065): avc: denied { read } for pid=11925 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.415035][ T29] audit: type=1400 audit(1764983499.000:21066): avc: denied { open } for pid=11925 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.460910][T12518] loop3: detected capacity change from 0 to 512 [ 180.467492][ T29] audit: type=1400 audit(1764983499.070:21067): avc: denied { create } for pid=12515 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.487473][ T29] audit: type=1400 audit(1764983499.070:21068): avc: denied { create } for pid=12515 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.508077][ T29] audit: type=1400 audit(1764983499.070:21069): avc: denied { ioctl } for pid=12515 comm="syz.0.3079" path="socket:[40230]" dev="sockfs" ino=40230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.524009][T12518] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.534105][ T29] audit: type=1400 audit(1764983499.070:21070): avc: denied { prog_run } for pid=12515 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.534194][ T29] audit: type=1400 audit(1764983499.080:21071): avc: denied { bind } for pid=12515 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.548931][ T29] audit: type=1400 audit(1764983499.080:21072): avc: denied { setopt } for pid=12515 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.599364][ T29] audit: type=1400 audit(1764983499.080:21073): avc: denied { write } for pid=12515 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.619220][ T29] audit: type=1400 audit(1764983499.140:21074): avc: denied { mounton } for pid=12517 comm="syz.3.3080" path="/542/file0" dev="tmpfs" ino=2937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.653723][T12518] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3080: Invalid inode bitmap blk 4 in block_group 0 [ 180.672646][T12518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.678089][T12524] loop2: detected capacity change from 0 to 128 [ 180.698277][T12520] SELinux: policydb version 0 does not match my version range 15-35 [ 180.707320][T12524] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.712497][T12520] SELinux: failed to load policy [ 180.719868][T12524] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.746569][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.771106][T12527] loop0: detected capacity change from 0 to 128 [ 180.803761][T12527] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.820400][T12524] lo speed is unknown, defaulting to 1000 [ 180.826797][T12524] lo speed is unknown, defaulting to 1000 [ 180.827302][T12527] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.869590][T12534] serio: Serial port ttyS3 [ 180.906648][T11534] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.974229][T12527] lo speed is unknown, defaulting to 1000 [ 180.980561][T12527] lo speed is unknown, defaulting to 1000 [ 180.998408][T12543] loop3: detected capacity change from 0 to 164 [ 181.007346][T12543] rock: directory entry would overflow storage [ 181.013575][T12543] rock: sig=0x4f50, size=4, remaining=3 [ 181.019148][T12543] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 181.504817][T12557] netlink: 'syz.1.3092': attribute type 21 has an invalid length. [ 181.690859][T11925] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.973389][T12576] loop2: detected capacity change from 0 to 128 [ 181.993529][T12576] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.009150][T12578] usb usb8: usbfs: process 12578 (syz.0.3098) did not claim interface 0 before use [ 182.019874][T12576] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.083761][T12576] lo speed is unknown, defaulting to 1000 [ 182.090010][T12576] lo speed is unknown, defaulting to 1000 [ 182.162674][T12590] loop0: detected capacity change from 0 to 164 [ 182.174214][T12590] rock: directory entry would overflow storage [ 182.180419][T12590] rock: sig=0x4f50, size=4, remaining=3 [ 182.185972][T12590] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 182.191680][T11534] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.194057][T12590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.209775][T12590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.217890][T12590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.225323][T12590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.863418][T12607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.930297][T12607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.980564][T12607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.042917][T12607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.136306][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.154034][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.166238][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.174497][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.199190][T12616] loop0: detected capacity change from 0 to 512 [ 183.205724][T12616] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 183.221471][T12616] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.230034][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.239256][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.309825][T12614] __nla_validate_parse: 35 callbacks suppressed [ 183.309840][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.325064][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.334058][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.351537][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.360526][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.369475][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.392485][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.401565][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.410628][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 183.856696][T12626] loop0: detected capacity change from 0 to 128 [ 183.877324][T12626] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.889991][T12626] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.951710][T12626] lo speed is unknown, defaulting to 1000 [ 183.957772][T12626] lo speed is unknown, defaulting to 1000 [ 184.022070][T11925] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.546625][T12650] loop1: detected capacity change from 0 to 512 [ 184.555200][T12650] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 184.563943][T12650] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3120: attempt to clear invalid blocks 2 len 1 [ 184.576998][T12650] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 184.592258][T12650] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3120: invalid indirect mapped block 1819239214 (level 0) [ 184.606413][T12650] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3120: invalid indirect mapped block 1819239214 (level 1) [ 184.620943][T12650] EXT4-fs (loop1): 1 truncate cleaned up [ 184.626776][T12650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.650125][T12650] serio: Serial port ttyS3 [ 185.033901][T12666] loop4: detected capacity change from 0 to 512 [ 185.041161][T12666] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 185.127582][T12666] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.143167][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.153488][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.250108][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3124'. [ 185.379818][T12677] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 185.472709][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.503914][T12679] loop1: detected capacity change from 0 to 128 [ 185.529736][T12679] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.641982][T12679] lo speed is unknown, defaulting to 1000 [ 185.666710][T12679] lo speed is unknown, defaulting to 1000 [ 185.730785][ T29] kauditd_printk_skb: 740 callbacks suppressed [ 185.730808][ T29] audit: type=1326 audit(1764983504.350:21815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.768014][ T29] audit: type=1326 audit(1764983504.390:21816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.791743][ T29] audit: type=1326 audit(1764983504.390:21817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.796802][T12686] rdma_op ffff88810dc77580 conn xmit_rdma 0000000000000000 [ 185.815395][ T29] audit: type=1326 audit(1764983504.390:21818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.846219][ T29] audit: type=1326 audit(1764983504.390:21819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.870148][ T29] audit: type=1326 audit(1764983504.390:21820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.893957][ T29] audit: type=1326 audit(1764983504.390:21821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.917632][ T29] audit: type=1326 audit(1764983504.390:21822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.941565][ T29] audit: type=1326 audit(1764983504.390:21823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 185.965277][ T29] audit: type=1326 audit(1764983504.390:21824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.2.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ecaf749 code=0x7ffc0000 [ 186.042762][ T3321] EXT4-fs unmount: 1 callbacks suppressed [ 186.042778][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.115562][T12694] SELinux: policydb version 0 does not match my version range 15-35 [ 186.124201][T12694] SELinux: failed to load policy [ 186.202958][T12696] loop1: detected capacity change from 0 to 256 [ 186.215444][T12696] msdos: Bad value for 'gid' [ 186.220188][T12696] msdos: Bad value for 'gid' [ 186.382740][T12715] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 186.582762][T12722] siw: device registration error -23 [ 186.734362][T12735] loop0: detected capacity change from 0 to 256 [ 186.741181][T12735] msdos: Bad value for 'gid' [ 186.745793][T12735] msdos: Bad value for 'gid' [ 186.788773][T12745] loop4: detected capacity change from 0 to 512 [ 186.795330][T12745] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 186.807043][T12745] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 186.814904][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.824063][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.242786][T12751] siw: device registration error -23 [ 187.380135][T12769] loop4: detected capacity change from 0 to 512 [ 187.386799][T12769] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 187.409955][T12769] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.426067][T12769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.436458][T12769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.540668][T12776] loop2: detected capacity change from 0 to 256 [ 187.551456][T12776] msdos: Bad value for 'gid' [ 187.556104][T12776] msdos: Bad value for 'gid' [ 187.641610][T12780] loop2: detected capacity change from 0 to 164 [ 187.652290][T12780] rock: directory entry would overflow storage [ 187.658518][T12780] rock: sig=0x4f50, size=4, remaining=3 [ 187.664086][T12780] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 187.703738][T12784] loop0: detected capacity change from 0 to 512 [ 187.713755][T12784] EXT4-fs: Ignoring removed oldalloc option [ 187.743405][T12784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.756773][T12784] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.788294][T12795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.800612][T12795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.813627][T12795] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.856500][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.967032][T12804] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.978472][T12791] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 187.993210][T12791] EXT4-fs (loop0): Remounting filesystem read-only [ 188.013155][T12804] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.019020][T12806] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 188.038044][T12806] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.045627][T12806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.054495][T12806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.063504][T12804] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.120213][T12804] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.173876][ T2200] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.184927][ T2200] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.196242][ T2200] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.206645][ T2200] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.540900][T11925] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.570644][T12821] __nla_validate_parse: 19 callbacks suppressed [ 188.570704][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.585940][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.594997][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.611898][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.620940][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.629911][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.658696][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.667673][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.676653][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 188.745994][T12834] SELinux: policydb version 0 does not match my version range 15-35 [ 188.754712][T12834] SELinux: failed to load policy [ 189.081521][T12855] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3188'. [ 189.161206][T12859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.185621][T12859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.198415][T12859] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.247632][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.313578][T12872] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.323584][T12872] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3194: Invalid inode bitmap blk 4 in block_group 0 [ 189.337442][T12872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.362803][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.402661][T12884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.416126][T12884] EXT4-fs (loop3): 1 truncate cleaned up [ 189.423029][T12884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.496705][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.537333][T12894] macvtap0: refused to change device tx_queue_len [ 189.606975][T12897] set_capacity_and_notify: 5 callbacks suppressed [ 189.607005][T12897] loop3: detected capacity change from 0 to 512 [ 189.637479][T12897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.678298][T12897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.691215][T12897] ext4 filesystem being mounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.736205][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.775317][T12908] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.860623][T12908] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.920222][T12908] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.001099][T12908] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.043839][T12920] loop3: detected capacity change from 0 to 256 [ 190.053928][T12920] msdos: Bad value for 'gid' [ 190.058563][T12920] msdos: Bad value for 'gid' [ 190.116362][ T947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.125955][ T947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.141564][ T947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.149868][ T947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.244211][T12925] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 190.275689][T12924] loop4: detected capacity change from 0 to 7 [ 190.283521][T12924] buffer_io_error: 14 callbacks suppressed [ 190.283534][T12924] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.301165][T12924] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.309050][T12924] loop4: unable to read partition table [ 190.314990][T12924] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 190.353372][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.362600][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.372551][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.391215][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.399621][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.407586][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.416241][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.424350][ T3540] Buffer I/O error on dev loop4, logical block 0, async page read [ 190.521291][T12939] loop3: detected capacity change from 0 to 512 [ 190.529951][T12941] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.531866][T12939] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 190.566160][T12939] syz!: rxe_newlink: already configured on team_slave_0 [ 190.574475][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.583105][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.599854][T12941] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.639486][T12941] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.689981][T12941] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.123966][ T29] kauditd_printk_skb: 1113 callbacks suppressed [ 191.123979][ T29] audit: type=1326 audit(1764983509.740:22936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.154666][ T29] audit: type=1326 audit(1764983509.740:22937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.178313][ T29] audit: type=1326 audit(1764983509.740:22938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.201926][ T29] audit: type=1326 audit(1764983509.740:22939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.225802][ T29] audit: type=1326 audit(1764983509.750:22940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.249419][ T29] audit: type=1326 audit(1764983509.750:22941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.273154][ T29] audit: type=1326 audit(1764983509.750:22942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.296730][ T29] audit: type=1326 audit(1764983509.750:22943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.320650][ T29] audit: type=1326 audit(1764983509.750:22944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.344231][ T29] audit: type=1326 audit(1764983509.750:22945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba461f749 code=0x7ffc0000 [ 191.371201][T12951] loop3: detected capacity change from 0 to 256 [ 191.383400][T12951] msdos: Bad value for 'gid' [ 191.388000][T12951] msdos: Bad value for 'gid' [ 192.143430][T12984] loop4: detected capacity change from 0 to 512 [ 192.150539][T12984] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 192.162774][T12984] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.170508][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.179214][ T947] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.179698][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.203837][ T947] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.210164][T12985] loop1: detected capacity change from 0 to 512 [ 192.242693][ T947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.256444][ T947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.264966][T12985] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 192.273970][T12985] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3228: attempt to clear invalid blocks 2 len 1 [ 192.288615][T12985] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 192.312166][T12985] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3228: invalid indirect mapped block 1819239214 (level 0) [ 192.332212][T12992] loop0: detected capacity change from 0 to 164 [ 192.347159][T12985] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3228: invalid indirect mapped block 1819239214 (level 1) [ 192.380907][T12985] EXT4-fs (loop1): 1 truncate cleaned up [ 192.381092][T12994] loop4: detected capacity change from 0 to 7 [ 192.387069][T12985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.422649][ T3540] loop4: unable to read partition table [ 192.443599][T12992] rock: directory entry would overflow storage [ 192.449826][T12992] rock: sig=0x4f50, size=4, remaining=3 [ 192.455380][T12992] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 192.463287][T12994] loop4: unable to read partition table [ 192.473216][T12994] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 192.524066][ T3007] loop4: unable to read partition table [ 192.634484][T13010] loop2: detected capacity change from 0 to 256 [ 192.647086][T13010] msdos: Bad value for 'gid' [ 192.651819][T13010] msdos: Bad value for 'gid' [ 192.753609][T13019] macvtap0: refused to change device tx_queue_len [ 193.106582][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.546026][T13031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.561095][T13031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.577807][T13031] ext4 filesystem being mounted at /586/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.600203][T13035] rock: directory entry would overflow storage [ 193.606380][T13035] rock: sig=0x4f50, size=4, remaining=3 [ 193.612032][T13035] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 193.634398][T13035] __nla_validate_parse: 23 callbacks suppressed [ 193.634414][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 193.678724][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.750197][T13052] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 193.776513][T13052] syz!: rxe_newlink: already configured on team_slave_0 [ 193.787453][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.799465][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.352823][T13072] msdos: Bad value for 'gid' [ 194.357442][T13072] msdos: Bad value for 'gid' [ 194.387185][T13074] rock: directory entry would overflow storage [ 194.393468][T13074] rock: sig=0x4f50, size=4, remaining=3 [ 194.399033][T13074] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 194.424644][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 194.452854][T13078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.479547][T13078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.492340][T13078] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.542245][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.583141][T13088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.599921][T13088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.612716][T13088] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.630561][T13086] set_capacity_and_notify: 7 callbacks suppressed [ 194.630573][T13086] loop4: detected capacity change from 0 to 7 [ 194.643753][T13086] loop4: unable to read partition table [ 194.653079][T13086] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 194.678388][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.702969][T13092] loop2: detected capacity change from 0 to 512 [ 194.711293][T13092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.742885][T13092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.755863][T13092] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.826727][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.903540][T13109] loop4: detected capacity change from 0 to 512 [ 194.912289][T13109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.952227][T13109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.991917][T13116] loop1: detected capacity change from 0 to 512 [ 194.999537][T13109] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.012596][T13116] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.024613][T13115] loop2: detected capacity change from 0 to 164 [ 195.042248][T13116] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3270: Invalid inode bitmap blk 4 in block_group 0 [ 195.056621][T13115] rock: directory entry would overflow storage [ 195.062830][T13115] rock: sig=0x4f50, size=4, remaining=3 [ 195.068410][T13115] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 195.077751][T13116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.100301][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 195.131153][T11713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.140777][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.161595][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.170579][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.179547][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.229998][T13128] loop2: detected capacity change from 0 to 512 [ 195.256949][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.266044][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.275140][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.284808][T13128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.306021][T13128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.313074][T13136] loop4: detected capacity change from 0 to 512 [ 195.325582][T13128] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.344625][T13136] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 195.353613][ T3007] ================================================================== [ 195.361702][ T3007] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 195.369681][ T3007] [ 195.371989][ T3007] write to 0xffff888106ec7030 of 8 bytes by task 3540 on cpu 0: [ 195.379601][ T3007] dentry_unlink_inode+0x65/0x260 [ 195.384620][ T3007] d_delete+0x164/0x180 [ 195.388763][ T3007] d_delete_notify+0x32/0x100 [ 195.393436][ T3007] vfs_unlink+0x32c/0x440 [ 195.397758][ T3007] do_unlinkat+0x1cd/0x4b0 [ 195.402171][ T3007] __x64_sys_unlink+0x2e/0x40 [ 195.406840][ T3007] x64_sys_call+0x2f48/0x3000 [ 195.411504][ T3007] do_syscall_64+0xd8/0x2a0 [ 195.415995][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.421876][ T3007] [ 195.424183][ T3007] read to 0xffff888106ec7030 of 8 bytes by task 3007 on cpu 1: [ 195.431705][ T3007] step_into_slowpath+0x113/0x480 [ 195.436719][ T3007] path_lookupat+0x330/0x500 [ 195.441293][ T3007] filename_lookup+0x147/0x340 [ 195.446040][ T3007] do_readlinkat+0x7d/0x320 [ 195.450530][ T3007] __x64_sys_readlink+0x47/0x60 [ 195.455367][ T3007] x64_sys_call+0x2af1/0x3000 [ 195.460031][ T3007] do_syscall_64+0xd8/0x2a0 [ 195.464521][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.470396][ T3007] [ 195.472699][ T3007] value changed: 0xffff88811e40b7b8 -> 0x0000000000000000 [ 195.479783][ T3007] [ 195.482084][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 195.488216][ T3007] CPU: 1 UID: 0 PID: 3007 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.499049][ T3007] Tainted: [W]=WARN [ 195.502833][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.512867][ T3007] ================================================================== [ 195.530715][T13136] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.540220][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.579556][T11534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.591534][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 195.593475][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16