last executing test programs: 4.562493115s ago: executing program 0 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000280)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = semget(0x1, 0x4, 0x39c) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 4.37412241s ago: executing program 2 (id=1893): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000440), &(0x7f0000000080)='%pB \x00'}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x2000, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r8, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) 3.971001001s ago: executing program 2 (id=1900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r6 = gettid() sched_getaffinity(r6, 0x8, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x3c, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfe}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r6, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = signalfd4(r8, &(0x7f0000000500)={[0xc]}, 0x8, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x8, r9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000001600)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@bh}], [{@obj_role={'obj_role', 0x3d, '\'/'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0xb2}}]}, 0x0, 0x55a, &(0x7f0000001980)="$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") utimes(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd700000000000010000000000000c410000000c000e73797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) 3.458249802s ago: executing program 0 (id=1903): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x68) r3 = io_uring_setup(0x36, &(0x7f0000000340)={0x0, 0x94f9, 0x407, 0x0, 0x253}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) getpgrp(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES64=r3], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0xffffff86, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0x4000007}, 0x180, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.202620782s ago: executing program 2 (id=1904): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) io_uring_setup(0x7cb8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xffffffff}) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 2.100195777s ago: executing program 3 (id=1916): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 2.072322599s ago: executing program 3 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 2.032613752s ago: executing program 3 (id=1919): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r4, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="1000000002000000091aa5448b245c4de7000000020000006bfd0e166d15d47c0f939e51684f67d823da72f52270521c8339a00718e037671b45b387dea8e738da03ff487f8482db3720c21f60ab4920261499143ffbd76367490ef0bed1a9fedae184d49a8f954863e2b09cc0"], &(0x7f00000002c0), 0x400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r6}, 0x18) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r7) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x200}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r8], 0x9) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x4, 0x8001, 0x9, 0x2}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 1.914585221s ago: executing program 4 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2$9p(0x0, 0x80080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x6a031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r3) 1.634114313s ago: executing program 4 (id=1922): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x1843}, 0x18) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x200048c0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.393302112s ago: executing program 0 (id=1924): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x480, 0xfff, 0x8, 0x1, 0x400000010000, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x5191, &(0x7f0000000240)={0x0, 0x3ad3, 0x100, 0x3, 0x341}) io_uring_setup(0x34d, &(0x7f00000002c0)={0x0, 0x9408, 0x8000, 0x2, 0x38d, 0x0, r1}) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2000, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@noextend}], [{@hash}, {@measure}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '-{-#-\''}}]}}) 1.266196392s ago: executing program 0 (id=1925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x6a031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)) 977.996504ms ago: executing program 3 (id=1926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 832.991025ms ago: executing program 3 (id=1927): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 782.030939ms ago: executing program 3 (id=1928): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r3, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="1000000002000000091aa5448b245c4de7000000020000006bfd0e166d15d47c0f939e51684f67d823da72f52270521c8339a00718e037671b45b387dea8e738da03ff487f8482db3720c21f60ab4920261499143ffbd76367490ef0bed1a9fedae184d49a8f954863e2b09cc083b919bbef6fac"], &(0x7f00000002c0), 0x400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r6) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x200}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x9) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r7, 0x4, 0x8001, 0x9, 0x2}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 775.26669ms ago: executing program 4 (id=1929): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 734.164453ms ago: executing program 4 (id=1930): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x20050800) 614.793282ms ago: executing program 4 (id=1931): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private2}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000700)=0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r4, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000380), &(0x7f00000002c0)=r7}, 0x20) syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf") 427.686717ms ago: executing program 4 (id=1934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 332.815374ms ago: executing program 1 (id=1936): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000840)="a106397352b5ac83ae85bf6fc0c4098113e837b53a32fd5068887cf73d67ee24a912fd534db57837800754b71500e623dd44428fa5cce33a7db2dfcbff802c6e07ff07000000000000a9986bd756c5efd001a6d5261cc9e997999c098bd240000455b8f457c1", 0x66}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}, {{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000700)="5ad0bad040cc67e40705585db47046435f4f74f224ef1e11016e3655348981f39b925f710c15c695123eeb12468734a46990d7f791284ccf46a34665cc08afdf9b72041c4281287013aaeb61c1094025421597222559b8a86c35d9fa993654fdf88d748f7bf161b26e9c628b647d400295d597493c353d742e2553b0bf2c9f8e7a735be0586fa8749fe38d0e5bc925ca10ef9c03b23a0e4fceee7253714fc82d43c82fdde8718d0c40d66bfd465df8e7b46ad3b673db7231d3a42f508ba44716d6d7f0f1f7d59c7b2168dc82784e97476d1cd2468096466cf113ad93157342d205fa57f118cad22eafbdd9741e929492502a52c687010a", 0xf7}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cc28000000000000000100000001000000df8ea52ac48e2ab7ada655c6429f97e870ec24b2fa4a8184c7bf1e854e44a91918a9acf88c8db58354fc1f229de5fbf5374a983349f22d4b4209e862d68f8ba0cee5ff10e6e8d7cbe3c0d3725dae8779bf46069fe474444cc229e2a661136ca0c0b73c3efc5b00e086cdbe5a81f1319eeb7e11b8596587c85f58ac12d3109db9235fd5cdf8a99fd9bab7ec00e4e544cc8f006059fa40477b18d8cea63bb1c1c2e2b467630c988a006064216b048d300025c4e3feb7b0041f63ef964dfb7b00f9320908182e18040effb7edd28fd0998f4915c05fb1e8033fff2bf1456ae95b67cd195b08f5a18728114bf3257c166b2435ff", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32, @ANYRES32], 0xf0, 0x4000080}}, {{&(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001000)="287089b38f5f240052dff85340be4464feb30de9199dd44743a5a433653ec90419f57aea71537933dee6fffd7366c2808841f3dde4f8fd2731fc45575a0a99b22809fb811eb82dd802dc3ea08b93778a1dad76c8fa31aa8a9709517d6da9", 0x5e}, {&(0x7f0000001080)="9235bdcd16f4aceab76035d6d996a54ccdefb3764409ccea5087b5dcf6dc94e576ce515daee4185404093937", 0x2c}, {&(0x7f00000010c0)="04c99a2adff57f90afe9001c6ba0756bd86a6de490575a01f43d8ec4c82f06fee4932a9b0e8ceddc4f7bdaafc2018cfc3e8c1162371188b70890eea79d9e3f80dfe373101bb330c1f3cc30e5c5b73a9537c60280e4bd0ff860675958a835a18e26432c26cd1985905fa4b8c5fecda7ebafb077de673bc2116366ab0f89887b4099dd88f7c0a351fc6a11df171024a5f805eda542bd0ca9f237bf94646244f33af4", 0xa1}, {&(0x7f0000001180)="8890accc73ce9ec2ee6c447440a30b7d6b35c1b1be14c7311112de384f0d9e8050df2f1abd1bf54572b403b277971322598726571e806dada41155bcb38d51adb97eb8628e1af5705164a6f78649aa2e01ce6871245895aaaa5dc3ee801d0f43a7e1c7a0edacaba0bcb7d600191ff0381e413ad21394a0612d671437f770f42890672c51ddc83b907a527b8c2b10b30096442d12fb4bd59e08a99d9530837d4c4c74aeeab555a264b46805b7a7e7ded5b41a6f6f3272e3b01e59d271c38356961e264045151a47671a6cf913c73ab3f606cef3bf140f826b4e5d91da2106076bedeee4731a2ed5098cec6b19ee7dadef9dcd15", 0xf3}], 0x4, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x80, 0x810}}, {{&(0x7f0000001380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000002480)}, {&(0x7f0000001400)="84d7a0ca9d26c9426fd02801152e4db12e1c4a221daa65e1b5addfaf07ad59d5f5234d10fd66ba88d2502de1851db8a5a0238ba206e82ee4dc5d0b4732c48e53dd0617ce17296246119bc1d115fd560c7b1ae5982ff89cbb8ad55234ad29e3b8491fc313b87d7db65e414a02adbd7001921b34eb1c81a600701f24b1b2e144fc317145bcaef8044bd33776890c3eae627b0962ace319b5fb2d91f9ff0f76c025", 0xa0}, {&(0x7f0000001500)="144d40b7084023473a9eaa2e8136d0f51d2903eee13e3f9348dcd9baf4e5e24385c8759d08998734f6ecf1f3eb870459a74b414553d31736a73e081af4f0074ca79fd308fd2783f8c3d67d7b0f6ee0cf2424fc10c0daac54fd5a6492db28b01c6a1ec9e3672626d93cb17060d5a9d644a36a68f1f4489d7a78084542766667df03130b28688fbfc3076b93733f448d1f48393b0e677ef0aeb633745527463c5041b29b7421418569728bd7462c64ff92d48f6a861747586218f6cd2381b894f8892391d6375a0dccb95f6658fc79", 0xce}, {&(0x7f0000000a00)="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", 0x107}], 0x4, &(0x7f0000001700)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8, 0x40cc080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x5, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xa85, 0x4) 317.679765ms ago: executing program 1 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095", @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000280)={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000000), &(0x7f0000000200)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x2) readv(r9, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r12 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r12, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) socket(0xa, 0x5, 0x0) 291.293777ms ago: executing program 0 (id=1938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 275.094249ms ago: executing program 0 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x1843}, 0x18) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x200048c0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 170.734987ms ago: executing program 2 (id=1940): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setns(r2, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000fccba7f40ddc314f1100ffff2abd706b", @ANYRES32=0x0, @ANYBLOB="00040000230800003c0012800b000100697036746e6c00002c00028014000300fec0ffffffffffff000000000000000114000200fc010000000000000000000000000001"], 0x5c}}, 0x24000800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) fchdir(r6) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x9, 0x7ffc0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x20000000) shutdown(r0, 0x1) 95.200933ms ago: executing program 1 (id=1941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private2}}, {{@in=@private}, 0x0, @in=@broadcast}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r3, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000380), &(0x7f00000002c0)}, 0x20) 57.169096ms ago: executing program 2 (id=1942): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0xd}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2f, 0x1, 0x9}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 50.848016ms ago: executing program 1 (id=1943): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000010000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0x98}, 0x1, 0x7}, 0x8890) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000249f45c58f686ed7e49dd3a472514aee11298290af8ea14a7885d08cad2b04bdad16822f4b68534ebacab916deccf43aa7b64a7c454608cb0c9f8447ef17a76af90e7354af173a6e843b6e184bbe55c4a0019e8ae65176e3fa0e12ab587a66e71e89046894243ae586bee5cdb53b653964de3899285b38ebd10d2f0eb06f1a0d4fcda93fbf8c14f90e77b884ae2de29557e82af1025314d1412264869ad6f9324c8aec6cd1fbea282ed5b68f4f635bc1ebff7b31506848c20e79814fcf0aa5e64bf3717d39672a56c353159fd8c67e3c"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='workqueue_queue_work\x00', r4}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x20050800) socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300)) syz_clone3(&(0x7f0000000ec0)={0x200000400, &(0x7f0000000c00), &(0x7f0000000c40), 0x0, {0x13}, &(0x7f0000000cc0)=""/231, 0xe7, &(0x7f0000000dc0)=""/165, &(0x7f0000000e80)=[0x0], 0x1}, 0x58) pipe(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x3, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x12, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x6, 0x9, 0x8, 0xfffffffffffffed4, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x16, r5, 0x8, &(0x7f0000000900)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) getpid() getgroups(0x0, 0x0) 38.289427ms ago: executing program 2 (id=1944): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0x28}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000003280)="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", 0xdd1}, {&(0x7f0000000280)="9dc097cf93bd", 0x6}, {&(0x7f0000004280)="ba0d30d2b7446905ab4d4b1f48c08d1aff8ca5c8dbbb22c82ddcc84902ea92db872e56757a83128c2534e4c04c59f9bbd8b9a35c1c45fdfcb25fc1291db1ce741707569f2e", 0x45}], 0x3}}], 0x2, 0x4000800) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x122) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 26.451378ms ago: executing program 1 (id=1945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) 0s ago: executing program 1 (id=1946): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x115}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) kernel console output (not intermixed with test programs): error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1232: missing EA_INODE flag [ 157.376193][ T7826] EXT4-fs (loop1): Remounting filesystem read-only [ 157.414929][ T7841] loop1: detected capacity change from 0 to 512 [ 157.429511][ T7841] EXT4-fs (loop1): too many log groups per flexible block group [ 157.437525][ T7841] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 157.444741][ T7841] EXT4-fs (loop1): mount failed [ 157.455008][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'. [ 157.490409][ T7845] serio: Serial port ttyS3 [ 157.497129][ T7818] loop2: detected capacity change from 0 to 512 [ 157.506880][ T7818] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.513800][ T7818] EXT4-fs: Ignoring removed bh option [ 157.519540][ T7818] ext4: Unknown parameter 'obj_role' [ 157.586446][ T7835] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1236: corrupted inode contents [ 157.605043][ T7835] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1236: mark_inode_dirty error [ 157.622729][ T7835] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1236: corrupted inode contents [ 157.662626][ T7856] loop2: detected capacity change from 0 to 2048 [ 157.720583][ T7856] Alternate GPT is invalid, using primary GPT. [ 157.726892][ T7856] loop2: p1 p2 p3 [ 157.730667][ T7856] loop2: partition table partially beyond EOD, truncated [ 157.836715][ T7859] loop1: detected capacity change from 0 to 2048 [ 157.846263][ T7872] FAULT_INJECTION: forcing a failure. [ 157.846263][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 157.859145][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.2.1248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.859181][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.859265][ T7872] Call Trace: [ 157.859275][ T7872] [ 157.859285][ T7872] __dump_stack+0x1d/0x30 [ 157.859315][ T7872] dump_stack_lvl+0xe8/0x140 [ 157.859454][ T7872] dump_stack+0x15/0x1b [ 157.859526][ T7872] should_fail_ex+0x265/0x280 [ 157.859559][ T7872] should_failslab+0x8c/0xb0 [ 157.859613][ T7872] __kvmalloc_node_noprof+0x149/0x6b0 [ 157.859650][ T7872] ? snd_seq_pool_init+0x55/0x210 [ 157.859691][ T7872] snd_seq_pool_init+0x55/0x210 [ 157.859773][ T7872] snd_seq_ioctl_set_client_pool+0x17f/0x310 [ 157.859812][ T7872] snd_seq_ioctl+0x177/0x300 [ 157.859862][ T7872] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 157.859990][ T7872] __se_sys_ioctl+0xce/0x140 [ 157.860026][ T7872] __x64_sys_ioctl+0x43/0x50 [ 157.860058][ T7872] x64_sys_call+0x14b0/0x3000 [ 157.860124][ T7872] do_syscall_64+0xd8/0x2c0 [ 157.860222][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.860264][ T7872] RIP: 0033:0x7f8e7bd1f749 [ 157.860285][ T7872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.860310][ T7872] RSP: 002b:00007f8e7a77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.860336][ T7872] RAX: ffffffffffffffda RBX: 00007f8e7bf75fa0 RCX: 00007f8e7bd1f749 [ 157.860430][ T7872] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000006 [ 157.860522][ T7872] RBP: 00007f8e7a77f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.860540][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.860552][ T7872] R13: 00007f8e7bf76038 R14: 00007f8e7bf75fa0 R15: 00007ffe1016b078 [ 157.860588][ T7872] [ 157.861229][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 158.079873][ T7859] Alternate GPT is invalid, using primary GPT. [ 158.086290][ T7859] loop1: p2 p3 p7 [ 158.103389][ T7866] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 158.248640][ T7893] loop0: detected capacity change from 0 to 1024 [ 158.255561][ T7893] EXT4-fs: Ignoring removed bh option [ 158.261625][ T7889] x_tables: ip_tables: osf match: only valid for protocol 6 [ 158.269830][ T7893] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 158.326792][ T7874] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.336682][ T7874] EXT4-fs: Ignoring removed bh option [ 158.344134][ T7874] ext4: Unknown parameter 'obj_role' [ 158.357756][ T7896] Alternate GPT is invalid, using primary GPT. [ 158.364169][ T7896] loop1: p1 p2 p3 [ 158.364183][ T7896] loop1: partition table partially beyond EOD, truncated [ 158.396537][ T7904] ext4 filesystem being mounted at /244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.490760][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 158.637149][ T7904] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1257: corrupted inode contents [ 158.656304][ T7930] Alternate GPT is invalid, using primary GPT. [ 158.662645][ T7930] loop3: p1 p2 p3 [ 158.666551][ T7930] loop3: partition table partially beyond EOD, truncated [ 158.674699][ T7904] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1257: mark_inode_dirty error [ 158.696239][ T7904] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1257: corrupted inode contents [ 158.713234][ T7942] .`: (slave dummy0): Releasing backup interface [ 158.723115][ T7942] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.733939][ T7942] team0: Failed to send options change via netlink (err -105) [ 158.741608][ T7942] team0: Port device dummy0 added [ 158.812384][ T7945] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.824967][ T7945] EXT4-fs error (device loop0): __ext4_iget:5426: inode #11: block 2: comm syz.0.1272: invalid block [ 158.837969][ T7945] EXT4-fs (loop0): Remounting filesystem read-only [ 158.856026][ T7945] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.081236][ T7947] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.090205][ T7947] EXT4-fs: Ignoring removed bh option [ 159.097157][ T7947] ext4: Unknown parameter 'obj_role' [ 159.177422][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 159.214952][ T7963] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1278'. [ 159.430528][ T7973] Alternate GPT is invalid, using primary GPT. [ 159.437102][ T7973] loop4: p1 p2 p3 [ 159.440928][ T7973] loop4: partition table partially beyond EOD, truncated [ 159.514452][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 159.660835][ T7996] FAULT_INJECTION: forcing a failure. [ 159.660835][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 159.673815][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: syz.0.1291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.673852][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.673931][ T7996] Call Trace: [ 159.673940][ T7996] [ 159.673951][ T7996] __dump_stack+0x1d/0x30 [ 159.673985][ T7996] dump_stack_lvl+0xe8/0x140 [ 159.674024][ T7996] dump_stack+0x15/0x1b [ 159.674053][ T7996] should_fail_ex+0x265/0x280 [ 159.674113][ T7996] should_failslab+0x8c/0xb0 [ 159.674144][ T7996] __kmalloc_cache_noprof+0x65/0x4c0 [ 159.674180][ T7996] ? tls_set_sw_offload+0x139/0xb20 [ 159.674311][ T7996] tls_set_sw_offload+0x139/0xb20 [ 159.674368][ T7996] ? tls_set_device_offload+0x19c/0x640 [ 159.674407][ T7996] ? _copy_from_user+0x89/0xb0 [ 159.674510][ T7996] tls_setsockopt+0xb42/0xe70 [ 159.674553][ T7996] sock_common_setsockopt+0x69/0x80 [ 159.674579][ T7996] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 159.674610][ T7996] __sys_setsockopt+0x184/0x200 [ 159.674689][ T7996] __x64_sys_setsockopt+0x64/0x80 [ 159.674726][ T7996] x64_sys_call+0x21d5/0x3000 [ 159.674840][ T7996] do_syscall_64+0xd8/0x2c0 [ 159.674888][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.674924][ T7996] RIP: 0033:0x7f7db435f749 [ 159.674945][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.674970][ T7996] RSP: 002b:00007f7db2dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.675031][ T7996] RAX: ffffffffffffffda RBX: 00007f7db45b5fa0 RCX: 00007f7db435f749 [ 159.675106][ T7996] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 159.675123][ T7996] RBP: 00007f7db2dc7090 R08: 0000000000000028 R09: 0000000000000000 [ 159.675141][ T7996] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 159.675158][ T7996] R13: 00007f7db45b6038 R14: 00007f7db45b5fa0 R15: 00007ffcaf751048 [ 159.675231][ T7996] [ 160.066662][ T7979] Set syz1 is full, maxelem 65536 reached [ 160.247886][ T7981] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.256198][ T7981] EXT4-fs: Ignoring removed bh option [ 160.263651][ T7981] ext4: Unknown parameter 'obj_role' [ 160.283305][ T8014] Alternate GPT is invalid, using primary GPT. [ 160.283428][ T8014] loop3: p1 p2 p3 [ 160.283452][ T8014] loop3: partition table partially beyond EOD, truncated [ 161.336321][ T8034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1304'. [ 161.353461][ T8035] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.416823][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 161.416845][ T29] audit: type=1326 audit(1765962319.169:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.446614][ T29] audit: type=1326 audit(1765962319.169:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.470200][ T29] audit: type=1326 audit(1765962319.179:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.490799][ T8035] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1303: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 161.493765][ T29] audit: type=1326 audit(1765962319.179:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.536911][ T29] audit: type=1326 audit(1765962319.179:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.560453][ T29] audit: type=1326 audit(1765962319.179:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.583893][ T29] audit: type=1326 audit(1765962319.189:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.607430][ T29] audit: type=1326 audit(1765962319.189:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.631148][ T29] audit: type=1326 audit(1765962319.189:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 161.649986][ T8035] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.1303: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 161.667321][ T8041] validate_nla: 10 callbacks suppressed [ 161.667341][ T8041] netlink: 'syz.1.1305': attribute type 4 has an invalid length. [ 161.683290][ T8027] Alternate GPT is invalid, using primary GPT. [ 161.692269][ T8041] serio: Serial port ttyS3 [ 161.694997][ T8027] loop0: p2 p3 p7 [ 161.704018][ T8035] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1303: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 161.726166][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.734696][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.743783][ T29] audit: type=1400 audit(1765962319.519:3957): avc: denied { read write } for pid=8017 comm="+}[@" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.876606][ T8048] set_capacity_and_notify: 14 callbacks suppressed [ 161.876698][ T8048] loop2: detected capacity change from 0 to 512 [ 161.895318][ T8050] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 161.932732][ T8050] SELinux: failed to load policy [ 161.945043][ T8035] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1303: corrupted inode contents [ 161.968993][ T8035] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1303: mark_inode_dirty error [ 161.980654][ T8048] EXT4-fs (loop2): too many log groups per flexible block group [ 161.991157][ T8048] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 161.998635][ T8035] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1303: corrupted inode contents [ 162.032742][ T8048] EXT4-fs (loop2): mount failed [ 162.041173][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1308'. [ 162.181341][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 162.231859][ T8063] loop3: detected capacity change from 0 to 2048 [ 162.312669][ T8063] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.387393][ T8067] loop2: detected capacity change from 0 to 512 [ 162.397546][ T8067] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.404826][ T8067] EXT4-fs: Ignoring removed bh option [ 162.411010][ T8067] ext4: Unknown parameter 'obj_role' [ 162.469304][ T8075] FAULT_INJECTION: forcing a failure. [ 162.469304][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.482677][ T8075] CPU: 1 UID: 0 PID: 8075 Comm: syz.1.1317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.482710][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.482723][ T8075] Call Trace: [ 162.482731][ T8075] [ 162.482740][ T8075] __dump_stack+0x1d/0x30 [ 162.482773][ T8075] dump_stack_lvl+0xe8/0x140 [ 162.482797][ T8075] dump_stack+0x15/0x1b [ 162.482855][ T8075] should_fail_ex+0x265/0x280 [ 162.482896][ T8075] should_fail+0xb/0x20 [ 162.482924][ T8075] should_fail_usercopy+0x1a/0x20 [ 162.482953][ T8075] strncpy_from_user+0x27/0x260 [ 162.483136][ T8075] getname_flags+0xae/0x3b0 [ 162.483170][ T8075] user_path_at+0x28/0x130 [ 162.483238][ T8075] __se_sys_mount+0x25b/0x2e0 [ 162.483319][ T8075] ? fput+0x8f/0xc0 [ 162.483359][ T8075] __x64_sys_mount+0x67/0x80 [ 162.483389][ T8075] x64_sys_call+0x2cca/0x3000 [ 162.483455][ T8075] do_syscall_64+0xd8/0x2c0 [ 162.483501][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.483531][ T8075] RIP: 0033:0x7fed4346f749 [ 162.483550][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.483622][ T8075] RSP: 002b:00007fed41ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.483642][ T8075] RAX: ffffffffffffffda RBX: 00007fed436c5fa0 RCX: 00007fed4346f749 [ 162.483654][ T8075] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 162.483667][ T8075] RBP: 00007fed41ed7090 R08: 0000200000000400 R09: 0000000000000000 [ 162.483683][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.483699][ T8075] R13: 00007fed436c6038 R14: 00007fed436c5fa0 R15: 00007ffd7742f018 [ 162.483789][ T8075] [ 162.700396][ T8081] loop4: detected capacity change from 0 to 1024 [ 162.723013][ T8081] EXT4-fs mount: 89 callbacks suppressed [ 162.723117][ T8081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.843153][ T8091] loop1: detected capacity change from 0 to 512 [ 162.861008][ T8091] EXT4-fs (loop1): too many log groups per flexible block group [ 162.874503][ T8091] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 162.901661][ T8091] EXT4-fs (loop1): mount failed [ 162.910354][ T8091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1323'. [ 162.936179][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 162.989819][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 163.021629][ T8100] loop3: detected capacity change from 0 to 128 [ 163.066568][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.101081][ T8106] Invalid argument reading file caps for ./file0 [ 163.176095][ T8111] xt_hashlimit: max too large, truncated to 1048576 [ 163.186424][ T8111] loop9: detected capacity change from 0 to 7 [ 163.381839][ T8115] loop2: detected capacity change from 0 to 164 [ 163.444874][ T8115] loop2: detected capacity change from 0 to 2048 [ 163.555740][ T8115] Alternate GPT is invalid, using primary GPT. [ 163.562315][ T8115] loop2: p2 p3 p7 [ 163.581255][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.589747][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.900175][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1334'. [ 163.909446][ T8131] netem: change failed [ 163.916696][ T8131] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 163.941119][ T8131] bond0: (slave dummy0): Releasing backup interface [ 163.951995][ T8131] team0: Port device dummy0 added [ 163.959273][ T8131] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 163.998529][ T8131] team0: Port device dummy0 removed [ 164.026032][ T8131] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.037538][ T8134] loop0: detected capacity change from 0 to 1024 [ 164.065456][ T8134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.150148][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 164.173477][ T8131] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1334: missing EA_INODE flag [ 164.212951][ T8102] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.214672][ T8131] EXT4-fs (loop0): Remounting filesystem read-only [ 164.221709][ T8102] EXT4-fs: Ignoring removed bh option [ 164.234622][ T8102] ext4: Unknown parameter 'obj_role' [ 164.311719][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.313314][ T8145] netlink: 'syz.1.1339': attribute type 4 has an invalid length. [ 164.352277][ T8148] Invalid argument reading file caps for ./file0 [ 164.394039][ T8154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.402979][ T8154] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.480683][ T8154] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1343: Allocating blocks 41-42 which overlap fs metadata [ 164.496330][ T8158] Alternate GPT is invalid, using primary GPT. [ 164.502732][ T8158] loop4: p2 p3 p7 [ 164.512903][ T8154] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1343: Allocating blocks 41-42 which overlap fs metadata [ 164.531137][ T8154] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1343: Failed to acquire dquot type 1 [ 164.543035][ T8154] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 164.558182][ T8154] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1343: corrupted inode contents [ 164.573997][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.595749][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.605920][ T8154] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.1343: mark_inode_dirty error [ 164.618434][ T8154] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1343: corrupted inode contents [ 164.631249][ T8154] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1343: mark_inode_dirty error [ 164.683953][ T8154] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1343: corrupted inode contents [ 164.705323][ T8154] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 164.714325][ T8154] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1343: corrupted inode contents [ 164.722996][ T8170] Invalid argument reading file caps for ./file0 [ 164.726678][ T8154] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.1343: mark_inode_dirty error [ 164.744415][ T8154] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 164.762702][ T8154] EXT4-fs (loop1): 1 truncate cleaned up [ 164.769062][ T8154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.809157][ T8154] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.877996][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.899742][ T8179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.970144][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.142233][ T8187] netlink: 'syz.0.1352': attribute type 4 has an invalid length. [ 165.152402][ T8187] serio: Serial port ttyS3 [ 165.224476][ T8175] Set syz1 is full, maxelem 65536 reached [ 165.326604][ T8197] xt_hashlimit: max too large, truncated to 1048576 [ 165.573287][ T8204] Invalid argument reading file caps for ./file0 [ 165.707384][ T8227] x_tables: ip_tables: osf match: only valid for protocol 6 [ 165.714769][ T8225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.749578][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.781533][ T8234] xt_hashlimit: max too large, truncated to 1048576 [ 165.861180][ T8236] Alternate GPT is invalid, using primary GPT. [ 165.867505][ T8236] loop3: p1 p2 p3 [ 165.871279][ T8236] loop3: partition table partially beyond EOD, truncated [ 166.084779][ T8261] 9pnet_fd: Insufficient options for proto=fd [ 166.104617][ T8265] x_tables: ip_tables: osf match: only valid for protocol 6 [ 166.135648][ T8269] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 166.186625][ T8272] xt_hashlimit: max too large, truncated to 1048576 [ 166.475376][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 166.475394][ T29] audit: type=1326 audit(1765962324.269:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 166.518667][ T29] audit: type=1326 audit(1765962324.309:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 166.563746][ T29] audit: type=1400 audit(1765962324.359:4060): avc: denied { create } for pid=8282 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.566044][ T8288] netlink: '+}[@': attribute type 10 has an invalid length. [ 166.595699][ T8285] Alternate GPT is invalid, using primary GPT. [ 166.602305][ T8285] loop2: p2 p3 p7 [ 166.626156][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.635039][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.054218][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 167.199868][ T8314] netlink: 'syz.0.1393': attribute type 4 has an invalid length. [ 167.345329][ T29] audit: type=1326 audit(1765962325.139:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.434721][ T29] audit: type=1326 audit(1765962325.179:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.458161][ T29] audit: type=1326 audit(1765962325.179:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.481703][ T29] audit: type=1326 audit(1765962325.179:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.505270][ T29] audit: type=1326 audit(1765962325.179:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.529357][ T29] audit: type=1326 audit(1765962325.179:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.557742][ T29] audit: type=1326 audit(1765962325.179:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.0.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 167.701189][ T8303] set_capacity_and_notify: 11 callbacks suppressed [ 167.701222][ T8303] loop1: detected capacity change from 0 to 512 [ 167.756216][ T8303] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.767894][ T8303] EXT4-fs: Ignoring removed bh option [ 167.774796][ T8303] ext4: Unknown parameter 'obj_role' [ 167.846111][ T8335] loop3: detected capacity change from 0 to 2048 [ 167.902937][ T8335] Alternate GPT is invalid, using primary GPT. [ 167.909369][ T8335] loop3: p1 p2 p3 [ 167.913102][ T8335] loop3: partition table partially beyond EOD, truncated [ 167.994455][ T8337] FAULT_INJECTION: forcing a failure. [ 167.994455][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 168.007331][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: syz.1.1401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.007364][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.007439][ T8337] Call Trace: [ 168.007448][ T8337] [ 168.007495][ T8337] __dump_stack+0x1d/0x30 [ 168.007528][ T8337] dump_stack_lvl+0xe8/0x140 [ 168.007627][ T8337] dump_stack+0x15/0x1b [ 168.007715][ T8337] should_fail_ex+0x265/0x280 [ 168.007748][ T8337] should_failslab+0x8c/0xb0 [ 168.007849][ T8337] kmem_cache_alloc_noprof+0x69/0x4b0 [ 168.007881][ T8337] ? getname_flags+0x80/0x3b0 [ 168.007960][ T8337] getname_flags+0x80/0x3b0 [ 168.007989][ T8337] do_sys_openat2+0x60/0x150 [ 168.008028][ T8337] __x64_sys_openat+0xf2/0x120 [ 168.008144][ T8337] x64_sys_call+0x2b07/0x3000 [ 168.008175][ T8337] do_syscall_64+0xd8/0x2c0 [ 168.008211][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.008302][ T8337] RIP: 0033:0x7fed4346df90 [ 168.008318][ T8337] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 168.008338][ T8337] RSP: 002b:00007fed41ed6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 168.008363][ T8337] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fed4346df90 [ 168.008380][ T8337] RDX: 0000000000000002 RSI: 00007fed41ed6fa0 RDI: 00000000ffffff9c [ 168.008394][ T8337] RBP: 00007fed41ed6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 168.008410][ T8337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 168.008463][ T8337] R13: 00007fed436c6038 R14: 00007fed436c5fa0 R15: 00007ffd7742f018 [ 168.008497][ T8337] [ 168.240807][ T8342] tipc: Started in network mode [ 168.242367][ T8344] loop1: detected capacity change from 0 to 512 [ 168.245775][ T8342] tipc: Node identity 26a526123d05, cluster identity 4711 [ 168.259663][ T8342] tipc: Enabled bearer , priority 0 [ 168.282535][ T8310] loop4: detected capacity change from 0 to 512 [ 168.307572][ T8310] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.316462][ T8310] EXT4-fs: Ignoring removed bh option [ 168.329491][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.338554][ T8310] ext4: Unknown parameter 'obj_role' [ 168.350191][ T8342] tipc: Disabling bearer [ 168.367720][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.427131][ T8344] EXT4-fs (loop1): too many log groups per flexible block group [ 168.447849][ T8344] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 168.470111][ T8350] FAULT_INJECTION: forcing a failure. [ 168.470111][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 168.482901][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.3.1405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.482928][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.482944][ T8350] Call Trace: [ 168.482952][ T8350] [ 168.482962][ T8350] __dump_stack+0x1d/0x30 [ 168.482995][ T8350] dump_stack_lvl+0xe8/0x140 [ 168.483038][ T8350] dump_stack+0x15/0x1b [ 168.483141][ T8350] should_fail_ex+0x265/0x280 [ 168.483168][ T8350] should_failslab+0x8c/0xb0 [ 168.483192][ T8350] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 168.483249][ T8350] ? __alloc_skb+0x324/0x4d0 [ 168.483283][ T8350] __alloc_skb+0x324/0x4d0 [ 168.483309][ T8350] ? __alloc_skb+0x24d/0x4d0 [ 168.483391][ T8350] netlink_alloc_large_skb+0xbf/0xf0 [ 168.483438][ T8350] netlink_sendmsg+0x3cf/0x6b0 [ 168.483479][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.483523][ T8350] __sock_sendmsg+0x145/0x180 [ 168.483545][ T8350] ____sys_sendmsg+0x31e/0x4a0 [ 168.483586][ T8350] ___sys_sendmsg+0x17b/0x1d0 [ 168.483635][ T8350] __x64_sys_sendmsg+0xd4/0x160 [ 168.483723][ T8350] x64_sys_call+0x17ba/0x3000 [ 168.483748][ T8350] do_syscall_64+0xd8/0x2c0 [ 168.483807][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.483836][ T8350] RIP: 0033:0x7f370400f749 [ 168.483856][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.483956][ T8350] RSP: 002b:00007f3702a6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.483980][ T8350] RAX: ffffffffffffffda RBX: 00007f3704265fa0 RCX: 00007f370400f749 [ 168.484019][ T8350] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 168.484032][ T8350] RBP: 00007f3702a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.484052][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.484065][ T8350] R13: 00007f3704266038 R14: 00007f3704265fa0 R15: 00007ffcb73fb468 [ 168.484091][ T8350] [ 168.681181][ T8344] EXT4-fs (loop1): mount failed [ 168.698133][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 168.792915][ T8357] netlink: '+}[@': attribute type 10 has an invalid length. [ 168.851686][ T8366] loop1: detected capacity change from 0 to 512 [ 168.881469][ T8366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.898819][ T8366] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.973539][ T8376] loop4: detected capacity change from 0 to 1024 [ 168.990301][ T8376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.019432][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.084260][ T8384] loop4: detected capacity change from 0 to 1024 [ 169.100159][ T8384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.130929][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.141695][ T8366] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1411: corrupted inode contents [ 169.153937][ T8366] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1411: mark_inode_dirty error [ 169.162165][ T8388] loop4: detected capacity change from 0 to 1024 [ 169.166328][ T8366] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1411: corrupted inode contents [ 169.189934][ T8388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.225654][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.298564][ T8396] Invalid argument reading file caps for ./file0 [ 169.308987][ T8394] loop4: detected capacity change from 0 to 8192 [ 169.329930][ T8398] Invalid argument reading file caps for ./file0 [ 169.374021][ T8402] x_tables: ip_tables: osf match: only valid for protocol 6 [ 169.427257][ T8406] xt_hashlimit: max too large, truncated to 1048576 [ 169.445403][ T8406] loop9: detected capacity change from 0 to 7 [ 169.607147][ T8417] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 169.617222][ T8417] serio: Serial port ttyS3 [ 169.617763][ T8418] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 169.697389][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.834133][ T8438] EXT4-fs: Ignoring removed orlov option [ 169.865033][ T8438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.870145][ T8441] x_tables: ip_tables: osf match: only valid for protocol 6 [ 169.963532][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1438'. [ 169.972936][ T8448] netem: change failed [ 169.981068][ T8448] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 169.992473][ T8448] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 170.002397][ T8448] team0: Port device dummy0 removed [ 170.010513][ T8448] .`: (slave dummy0): Enslaving as an active interface with an up link [ 170.050574][ T8448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.085812][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.097538][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.121866][ T8454] SELinux: failed to load policy [ 170.170649][ T8460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.276876][ T8467] netlink: 'syz.1.1446': attribute type 4 has an invalid length. [ 170.438119][ T8423] serio: Serial port ttyS3 [ 170.467257][ T8474] x_tables: ip_tables: osf match: only valid for protocol 6 [ 170.495976][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 170.538166][ T8480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.546978][ T8480] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.559600][ T8482] EXT4-fs: Ignoring removed orlov option [ 170.567441][ T8482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.580739][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1452'. [ 170.595600][ T8487] netem: change failed [ 170.603473][ T8487] netlink: 'syz.2.1452': attribute type 10 has an invalid length. [ 170.612663][ T8487] .`: (slave dummy0): Releasing backup interface [ 170.619883][ T8480] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1450: Allocating blocks 41-42 which overlap fs metadata [ 170.637526][ T8487] team0: Port device dummy0 added [ 170.642753][ T8480] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1450: Allocating blocks 41-42 which overlap fs metadata [ 170.657124][ T8491] netlink: 'syz.2.1452': attribute type 10 has an invalid length. [ 170.670942][ T8480] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1450: Failed to acquire dquot type 1 [ 170.683465][ T8491] team0: Port device dummy0 removed [ 170.691237][ T8480] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 170.695375][ T8491] .`: (slave dummy0): Enslaving as an active interface with an up link [ 170.706549][ T8480] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1450: corrupted inode contents [ 170.727190][ T8480] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1450: mark_inode_dirty error [ 170.739525][ T8480] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1450: corrupted inode contents [ 170.752132][ T8480] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1450: mark_inode_dirty error [ 170.765345][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.777970][ T8480] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1450: corrupted inode contents [ 170.790253][ T8480] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 170.801595][ T8480] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1450: corrupted inode contents [ 170.814184][ T8480] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1450: mark_inode_dirty error [ 170.831831][ T8480] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 170.844202][ T8480] EXT4-fs (loop3): 1 truncate cleaned up [ 170.845004][ T8487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.850802][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.866904][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.904468][ T8480] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 170.918013][ T8487] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1452: missing EA_INODE flag [ 170.941997][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.952174][ T8500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.957608][ T8487] EXT4-fs (loop2): Remounting filesystem read-only [ 170.966506][ T8500] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.003625][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.056509][ T8507] EXT4-fs: Ignoring removed bh option [ 171.062539][ T8507] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.090742][ T8511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.139372][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.161721][ T8507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.205088][ T8520] netlink: 'syz.2.1460': attribute type 4 has an invalid length. [ 171.219167][ T8520] serio: Serial port ttyS3 [ 171.226288][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.251176][ T8509] Alternate GPT is invalid, using primary GPT. [ 171.257641][ T8509] loop3: p2 p3 p7 [ 171.267479][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.276121][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.296571][ T8528] xt_hashlimit: max too large, truncated to 1048576 [ 171.319126][ T8526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.398796][ T8500] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1455: corrupted inode contents [ 171.432748][ T8500] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1455: mark_inode_dirty error [ 171.487420][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.527304][ T8500] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1455: corrupted inode contents [ 171.540012][ T8538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.548869][ T8538] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.566948][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 171.566963][ T8542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.566966][ T29] audit: type=1400 audit(1765962329.359:4370): avc: denied { create } for pid=8541 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.604877][ T29] audit: type=1400 audit(1765962329.369:4371): avc: denied { ioctl } for pid=8541 comm="syz.0.1469" path="socket:[20535]" dev="sockfs" ino=20535 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.629828][ T29] audit: type=1400 audit(1765962329.369:4372): avc: denied { create } for pid=8541 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.630494][ T8544] EXT4-fs: Ignoring removed orlov option [ 171.649333][ T29] audit: type=1400 audit(1765962329.369:4373): avc: denied { ioctl } for pid=8541 comm="syz.0.1469" path="socket:[20542]" dev="sockfs" ino=20542 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.679696][ T29] audit: type=1400 audit(1765962329.369:4374): avc: denied { getopt } for pid=8541 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.699177][ T29] audit: type=1400 audit(1765962329.369:4375): avc: denied { ioctl } for pid=8541 comm="syz.0.1469" path="socket:[20546]" dev="sockfs" ino=20546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.704079][ T8538] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1467: Allocating blocks 41-42 which overlap fs metadata [ 171.723950][ T29] audit: type=1400 audit(1765962329.369:4376): avc: denied { listen } for pid=8541 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.723987][ T29] audit: type=1400 audit(1765962329.369:4377): avc: denied { create } for pid=8541 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.727415][ T8544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.791266][ T8538] Quota error (device loop2): write_blk: dquota write failed [ 171.798896][ T8538] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 171.808857][ T8538] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1467: Failed to acquire dquot type 1 [ 171.821055][ T8538] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 171.837500][ T8538] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1467: corrupted inode contents [ 171.850264][ T8538] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.1467: mark_inode_dirty error [ 171.865490][ T8538] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1467: corrupted inode contents [ 171.882398][ T8538] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.1467: mark_inode_dirty error [ 171.910867][ T8538] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1467: corrupted inode contents [ 172.022241][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.030831][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.305954][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 172.329438][ T8538] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 172.361409][ T8555] netem: change failed [ 172.370704][ T8538] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1467: corrupted inode contents [ 172.382936][ T8538] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.1467: mark_inode_dirty error [ 172.389815][ T8555] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 172.395248][ T8538] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 172.417365][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.418542][ T8555] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 172.430232][ T8538] EXT4-fs (loop2): 1 truncate cleaned up [ 172.440545][ T8538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.451317][ T8555] dummy0: left promiscuous mode [ 172.458463][ T8555] dummy0: left allmulticast mode [ 172.460310][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.479248][ T8538] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 172.498422][ T8555] team0: Port device dummy0 removed [ 172.519022][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.529941][ T8555] dummy0: entered promiscuous mode [ 172.535292][ T8555] dummy0: entered allmulticast mode [ 172.541519][ T8555] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.550265][ T8562] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1473'. [ 172.560220][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 172.570804][ T8564] Alternate GPT is invalid, using primary GPT. [ 172.571279][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.577272][ T8564] loop4: p1 p2 p3 [ 172.584675][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.588353][ T8564] loop4: partition table partially beyond EOD, truncated [ 172.604463][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.612022][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.616755][ T8556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.651458][ T8555] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1471: missing EA_INODE flag [ 172.664393][ T8555] EXT4-fs (loop3): Remounting filesystem read-only [ 172.672373][ T8570] netlink: 'syz.2.1477': attribute type 4 has an invalid length. [ 172.688865][ T8570] serio: Serial port ttyS3 [ 172.701918][ T8572] xt_hashlimit: max too large, truncated to 1048576 [ 172.711281][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.728214][ T8572] set_capacity_and_notify: 16 callbacks suppressed [ 172.736849][ T8572] loop9: detected capacity change from 0 to 7 [ 172.801618][ T8579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.922644][ T8583] loop3: detected capacity change from 0 to 512 [ 172.954815][ T8583] EXT4-fs (loop3): too many log groups per flexible block group [ 172.964054][ T8583] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 172.971329][ T8583] EXT4-fs (loop3): mount failed [ 172.991351][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 173.019061][ T8589] netlink: 'syz.1.1483': attribute type 4 has an invalid length. [ 173.075796][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 173.094380][ T8601] netem: change failed [ 173.099714][ T8600] loop3: detected capacity change from 0 to 2048 [ 173.104922][ T8601] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 173.115045][ T8601] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 173.123942][ T8601] team0: Port device dummy0 removed [ 173.132003][ T8601] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.139642][ T8600] Alternate GPT is invalid, using primary GPT. [ 173.146907][ T8600] loop3: p1 p2 p3 [ 173.147931][ T8601] loop4: detected capacity change from 0 to 1024 [ 173.150716][ T8600] loop3: partition table partially beyond EOD, truncated [ 173.170411][ T8601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.185301][ T8601] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1489: missing EA_INODE flag [ 173.197347][ T8601] EXT4-fs (loop4): Remounting filesystem read-only [ 173.227712][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.260820][ T8617] blktrace: Concurrent blktraces are not allowed on loop6 [ 173.276283][ T8623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.383807][ T8633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.421403][ T8637] netlink: '+}[@': attribute type 10 has an invalid length. [ 173.439493][ T8637] bond0: (slave dummy0): Releasing backup interface [ 173.471569][ T8637] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.480619][ T8637] team0: Failed to send options change via netlink (err -105) [ 173.488115][ T8637] team0: Port device dummy0 added [ 173.495861][ T8641] netlink: 'syz.3.1501': attribute type 4 has an invalid length. [ 173.510046][ T8641] serio: Serial port ttyS3 [ 173.526967][ T8643] loop1: detected capacity change from 0 to 2048 [ 173.569807][ T8643] Alternate GPT is invalid, using primary GPT. [ 173.576279][ T8643] loop1: p1 p2 p3 [ 173.580048][ T8643] loop1: partition table partially beyond EOD, truncated [ 173.627776][ T8648] loop1: detected capacity change from 0 to 164 [ 173.681011][ T8648] loop1: detected capacity change from 0 to 2048 [ 173.711496][ T8648] Alternate GPT is invalid, using primary GPT. [ 173.717921][ T8648] loop1: p2 p3 p7 [ 173.726614][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.735156][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.151424][ T8654] loop2: detected capacity change from 0 to 2048 [ 174.191072][ T8654] Alternate GPT is invalid, using primary GPT. [ 174.197570][ T8654] loop2: p2 p3 p7 [ 174.205820][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.214455][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.262049][ T8656] xt_hashlimit: max too large, truncated to 1048576 [ 174.284007][ T8656] loop9: detected capacity change from 0 to 7 [ 174.454164][ T8661] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.521030][ T8664] loop1: detected capacity change from 0 to 1024 [ 174.543480][ T8664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.593578][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.635198][ T8677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.702773][ T8679] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 174.726354][ T8679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 174.740698][ T8681] Alternate GPT is invalid, using primary GPT. [ 174.747041][ T8681] loop4: p1 p2 p3 [ 174.751005][ T8681] loop4: partition table partially beyond EOD, truncated [ 174.761115][ T8679] EXT4-fs (loop3): failed to initialize system zone (-117) [ 174.768688][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1514'. [ 174.777971][ T8684] netem: change failed [ 174.782884][ T8679] EXT4-fs (loop3): mount failed [ 174.798972][ T8684] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 174.832285][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.839605][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.849465][ T8692] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 174.858596][ T8689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.907590][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.918090][ T8696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.919415][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.932089][ T8696] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.972813][ T8697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.987630][ T8697] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1514: missing EA_INODE flag [ 174.999973][ T8697] EXT4-fs (loop1): Remounting filesystem read-only [ 175.009822][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.036202][ T8684] bond0: (slave dummy0): Releasing backup interface [ 175.054786][ T8684] dummy0: left promiscuous mode [ 175.060893][ T8684] dummy0: left allmulticast mode [ 175.086100][ T8684] dummy0: entered promiscuous mode [ 175.110246][ T8684] dummy0: entered allmulticast mode [ 175.120169][ T8684] team0: Port device dummy0 added [ 175.128151][ T8692] dummy0: left promiscuous mode [ 175.135736][ T8692] dummy0: left allmulticast mode [ 175.141505][ T8692] team0: Port device dummy0 removed [ 175.149992][ T8692] dummy0: entered promiscuous mode [ 175.155377][ T8692] dummy0: entered allmulticast mode [ 175.161887][ T8692] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.170760][ T1886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.179725][ T1886] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.196179][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 175.203007][ T8696] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1518: corrupted inode contents [ 175.218927][ T1886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.220007][ T8696] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1518: mark_inode_dirty error [ 175.227885][ T1886] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.228988][ T1886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.241132][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.248383][ T1886] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.258859][ T1886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.284803][ T1886] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.285989][ T8696] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1518: corrupted inode contents [ 175.351492][ T8720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.390556][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.450307][ T8726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.583160][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.602001][ T8719] Set syz1 is full, maxelem 65536 reached [ 175.650192][ T8733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.683845][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.799839][ T8737] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.806719][ T8737] EXT4-fs: Ignoring removed bh option [ 175.812680][ T8737] ext4: Unknown parameter 'obj_role' [ 175.859799][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.862351][ T8745] SELinux: failed to load policy [ 176.072630][ T8747] Set syz1 is full, maxelem 65536 reached [ 176.145847][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1543'. [ 176.174376][ T8764] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.220145][ T8764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.254895][ T8764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1544: path /335/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 176.277431][ T8764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.1544: path /335/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 176.280207][ T8766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.301375][ T8764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.1544: path /335/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 176.348730][ T8764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.1544: path /335/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 176.370254][ T8764] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.1544: lblock 23 mapped to illegal pblock 18 (length 1) [ 176.396999][ T8774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.488192][ T8759] Set syz1 is full, maxelem 65536 reached [ 176.582179][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 176.582195][ T29] audit: type=1400 audit(1765962334.379:4730): avc: denied { mount } for pid=8784 comm="syz.3.1549" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 176.584460][ T8786] SELinux: failed to load policy [ 176.615646][ T29] audit: type=1400 audit(1765962334.409:4731): avc: denied { connect } for pid=8783 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.635646][ T29] audit: type=1400 audit(1765962334.409:4732): avc: denied { name_connect } for pid=8783 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 176.656077][ T29] audit: type=1400 audit(1765962334.409:4733): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 176.710268][ T8787] xt_hashlimit: max too large, truncated to 1048576 [ 176.732587][ T29] audit: type=1326 audit(1765962334.519:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44caf749 code=0x7ffc0000 [ 176.756401][ T29] audit: type=1326 audit(1765962334.519:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f5d44caf749 code=0x7ffc0000 [ 176.780337][ T29] audit: type=1326 audit(1765962334.519:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44caf749 code=0x7ffc0000 [ 176.853871][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 176.920257][ T8799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.977362][ T29] audit: type=1326 audit(1765962334.769:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 177.030888][ T8805] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.054752][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.102896][ T29] audit: type=1326 audit(1765962334.809:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 177.126724][ T29] audit: type=1326 audit(1765962334.809:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 177.216512][ T3315] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.222076][ T8814] SELinux: failed to load policy [ 177.271724][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.282162][ T8817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.329188][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 177.348375][ T8817] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.452502][ T8817] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1564: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 177.473616][ T8817] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.1564: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 177.500886][ T8817] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.1564: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 177.596714][ T8849] x_tables: ip_tables: osf match: only valid for protocol 6 [ 177.608739][ T8851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.630824][ T8853] EXT4-fs: Ignoring removed orlov option [ 177.659824][ T8855] netlink: 'syz.4.1578': attribute type 4 has an invalid length. [ 177.682992][ T8855] serio: Serial port ttyS3 [ 177.734222][ T8817] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1564: corrupted inode contents [ 177.753929][ T8817] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1564: mark_inode_dirty error [ 177.783830][ T8817] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1564: corrupted inode contents [ 177.989240][ T8881] x_tables: ip_tables: osf match: only valid for protocol 6 [ 178.038362][ T8885] set_capacity_and_notify: 17 callbacks suppressed [ 178.038442][ T8885] loop1: detected capacity change from 0 to 512 [ 178.052606][ T8885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.061344][ T8885] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.079784][ T8885] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1592: Allocating blocks 41-42 which overlap fs metadata [ 178.079926][ T8889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1593'. [ 178.094846][ T8885] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1592: Allocating blocks 41-42 which overlap fs metadata [ 178.103024][ T8889] netem: change failed [ 178.117086][ T8885] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1592: Failed to acquire dquot type 1 [ 178.133391][ T8885] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 178.133853][ T8889] netlink: 'syz.4.1593': attribute type 10 has an invalid length. [ 178.148770][ T8885] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1592: corrupted inode contents [ 178.171355][ T8889] netlink: 'syz.4.1593': attribute type 10 has an invalid length. [ 178.180307][ T8885] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.1592: mark_inode_dirty error [ 178.195911][ T8885] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1592: corrupted inode contents [ 178.196139][ T8889] team0: Port device dummy0 removed [ 178.213328][ T8885] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1592: mark_inode_dirty error [ 178.225219][ T8885] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1592: corrupted inode contents [ 178.239070][ T8885] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 178.247984][ T8885] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1592: corrupted inode contents [ 178.250963][ T8889] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.260877][ T8885] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.1592: mark_inode_dirty error [ 178.274576][ T8896] loop4: detected capacity change from 0 to 128 [ 178.283128][ T8885] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 178.286376][ T8895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.295776][ T8896] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.317521][ T8885] EXT4-fs (loop1): 1 truncate cleaned up [ 178.324946][ T8896] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.335593][ T8885] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 178.410142][ T8903] loop3: detected capacity change from 0 to 1024 [ 178.488566][ T8919] x_tables: ip_tables: osf match: only valid for protocol 6 [ 178.505973][ T8924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.515747][ T8922] loop1: detected capacity change from 0 to 1024 [ 178.528573][ T8922] EXT4-fs: Ignoring removed orlov option [ 178.570091][ T8931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.597291][ T8933] loop4: detected capacity change from 0 to 512 [ 178.611108][ T8933] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.644559][ T8933] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1607: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 178.666728][ T8940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'. [ 178.667141][ T8933] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.1607: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 178.675775][ T8940] netem: change failed [ 178.700291][ T8933] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1607: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 178.728505][ T8940] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 178.738169][ T8940] .`: (slave dummy0): Releasing backup interface [ 178.748843][ T8940] team0: Port device dummy0 added [ 178.755730][ T8940] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 178.766865][ T8940] team0: Port device dummy0 removed [ 178.775122][ T8940] .`: (slave dummy0): Enslaving as an active interface with an up link [ 178.788092][ T8940] loop2: detected capacity change from 0 to 128 [ 178.795320][ T8940] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.807657][ T8940] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.894932][ T8950] FAULT_INJECTION: forcing a failure. [ 178.894932][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.908279][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.0.1612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.908307][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.908320][ T8950] Call Trace: [ 178.908327][ T8950] [ 178.908335][ T8950] __dump_stack+0x1d/0x30 [ 178.908386][ T8950] dump_stack_lvl+0xe8/0x140 [ 178.908416][ T8950] dump_stack+0x15/0x1b [ 178.908443][ T8950] should_fail_ex+0x265/0x280 [ 178.908474][ T8950] should_fail+0xb/0x20 [ 178.908575][ T8950] should_fail_usercopy+0x1a/0x20 [ 178.908609][ T8950] _copy_from_user+0x1c/0xb0 [ 178.908648][ T8950] ___sys_sendmsg+0xc1/0x1d0 [ 178.908768][ T8950] __x64_sys_sendmsg+0xd4/0x160 [ 178.908805][ T8950] x64_sys_call+0x17ba/0x3000 [ 178.908877][ T8950] do_syscall_64+0xd8/0x2c0 [ 178.908932][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.908954][ T8950] RIP: 0033:0x7f7db435f749 [ 178.908969][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.908993][ T8950] RSP: 002b:00007f7db2dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.909018][ T8950] RAX: ffffffffffffffda RBX: 00007f7db45b5fa0 RCX: 00007f7db435f749 [ 178.909035][ T8950] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 178.909085][ T8950] RBP: 00007f7db2dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.909099][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.909111][ T8950] R13: 00007f7db45b6038 R14: 00007f7db45b5fa0 R15: 00007ffcaf751048 [ 178.909270][ T8950] [ 178.918561][ T8952] loop2: detected capacity change from 0 to 1024 [ 178.944897][ T8933] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1607: corrupted inode contents [ 179.037550][ T8960] x_tables: ip_tables: osf match: only valid for protocol 6 [ 179.065347][ T8933] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1607: mark_inode_dirty error [ 179.098020][ T8964] SELinux: failed to load policy [ 179.149626][ T8933] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1607: corrupted inode contents [ 179.167282][ T8971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.201908][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1621'. [ 179.211084][ T8976] netem: change failed [ 179.219190][ T8976] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 179.245566][ T8976] .`: (slave dummy0): Releasing backup interface [ 179.266330][ T8976] team0: Port device dummy0 added [ 179.284252][ T8981] loop2: detected capacity change from 0 to 1024 [ 179.305023][ T8976] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1621: missing EA_INODE flag [ 179.317131][ T8976] EXT4-fs (loop2): Remounting filesystem read-only [ 179.395040][ T8987] netlink: '+}[@': attribute type 10 has an invalid length. [ 179.404608][ T8987] bond0: (slave dummy0): Releasing backup interface [ 179.409773][ T8991] loop2: detected capacity change from 0 to 1024 [ 179.418908][ T8987] dummy0: left promiscuous mode [ 179.424001][ T8987] dummy0: left allmulticast mode [ 179.432714][ T8987] dummy0: entered promiscuous mode [ 179.439871][ T8987] dummy0: entered allmulticast mode [ 179.441454][ T8993] x_tables: ip_tables: osf match: only valid for protocol 6 [ 179.446128][ T8987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.467949][ T8987] team0: Failed to send options change via netlink (err -105) [ 179.475517][ T8987] team0: Port device dummy0 added [ 179.513721][ T8997] SELinux: failed to load policy [ 179.770482][ T9013] netlink: 'syz.3.1634': attribute type 4 has an invalid length. [ 179.783560][ T9013] serio: Serial port ttyS3 [ 180.119279][ T9023] loop4: detected capacity change from 0 to 512 [ 180.163142][ T9025] SELinux: failed to load policy [ 180.221547][ T9023] EXT4-fs (loop4): too many log groups per flexible block group [ 180.237502][ T9023] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 180.243761][ T9036] netlink: 'syz.0.1644': attribute type 4 has an invalid length. [ 180.253317][ T9023] EXT4-fs (loop4): mount failed [ 180.275372][ T9037] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.309461][ T9037] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1643: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 180.330512][ T9037] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.1643: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 180.446204][ T9037] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.1643: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 180.575183][ T9042] serio: Serial port ttyS3 [ 180.634698][ T9057] EXT4-fs: Ignoring removed orlov option [ 180.760489][ T9037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1643: corrupted inode contents [ 180.772667][ T9037] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1643: mark_inode_dirty error [ 180.821375][ T9037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1643: corrupted inode contents [ 180.932987][ T9065] SELinux: failed to load policy [ 181.456210][ T9074] EXT4-fs (loop3): too many log groups per flexible block group [ 181.472493][ T9074] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 181.492480][ T9074] EXT4-fs (loop3): mount failed [ 181.530577][ T9084] x_tables: ip_tables: osf match: only valid for protocol 6 [ 181.543213][ T9080] Alternate GPT is invalid, using primary GPT. [ 181.549651][ T9080] loop1: p1 p2 p3 [ 181.553461][ T9080] loop1: partition table partially beyond EOD, truncated [ 181.610731][ T9092] SELinux: failed to load policy [ 181.684833][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 181.684849][ T29] audit: type=1326 audit(1765962339.479:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.714607][ T29] audit: type=1326 audit(1765962339.479:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.775552][ T9095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.827003][ T29] audit: type=1326 audit(1765962339.569:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.850595][ T29] audit: type=1400 audit(1765962339.569:5324): avc: denied { tracepoint } for pid=9093 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.870437][ T29] audit: type=1326 audit(1765962339.569:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.894255][ T29] audit: type=1326 audit(1765962339.569:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.917719][ T29] audit: type=1326 audit(1765962339.569:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.941253][ T29] audit: type=1326 audit(1765962339.569:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.964746][ T29] audit: type=1326 audit(1765962339.569:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 181.988051][ T29] audit: type=1326 audit(1765962339.609:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 182.034438][ T9101] netlink: 'syz.2.1667': attribute type 4 has an invalid length. [ 182.045075][ T9087] Set syz1 is full, maxelem 65536 reached [ 182.050502][ T9101] serio: Serial port ttyS3 [ 182.202337][ T9120] SELinux: failed to load policy [ 182.273120][ T9127] bond0: (slave dummy0): Releasing backup interface [ 182.283400][ T9127] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.294905][ T9127] team0: Failed to send options change via netlink (err -105) [ 182.302489][ T9127] team0: Port device dummy0 added [ 182.311661][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 182.360764][ T9134] EXT4-fs (loop3): too many log groups per flexible block group [ 182.369188][ T9134] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 182.377852][ T9134] EXT4-fs (loop3): mount failed [ 182.401728][ T9140] Invalid argument reading file caps for ./file0 [ 182.433603][ T9146] SELinux: failed to load policy [ 182.512800][ T9158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.567243][ T9160] EXT4-fs: Ignoring removed orlov option [ 182.676553][ T9171] validate_nla: 2 callbacks suppressed [ 182.676570][ T9171] netlink: '+}[@': attribute type 10 has an invalid length. [ 182.734433][ T9172] EXT4-fs (loop3): too many log groups per flexible block group [ 182.749014][ T9181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.787224][ T9172] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 182.837670][ T9172] EXT4-fs (loop3): mount failed [ 182.949899][ T9184] Alternate GPT is invalid, using primary GPT. [ 182.956277][ T9184] loop1: p1 p2 p3 [ 182.960098][ T9184] loop1: partition table partially beyond EOD, truncated [ 182.983907][ T9186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.992894][ T9186] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.043716][ T9175] Set syz1 is full, maxelem 65536 reached [ 183.045110][ T9186] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1703: Allocating blocks 41-42 which overlap fs metadata [ 183.100974][ T9186] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1703: Failed to acquire dquot type 1 [ 183.125226][ T9186] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 183.145638][ T9196] Invalid argument reading file caps for ./file0 [ 183.187920][ T9186] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1703: corrupted inode contents [ 183.218887][ T9186] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.1703: mark_inode_dirty error [ 183.240661][ T9186] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1703: corrupted inode contents [ 183.256265][ T9186] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.1703: mark_inode_dirty error [ 183.270210][ T9211] netlink: 'syz.1.1714': attribute type 4 has an invalid length. [ 183.272037][ T9213] set_capacity_and_notify: 11 callbacks suppressed [ 183.272059][ T9213] loop3: detected capacity change from 0 to 512 [ 183.280949][ T9211] serio: Serial port ttyS3 [ 183.296265][ T9186] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1703: corrupted inode contents [ 183.308513][ T9186] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 183.317364][ T9186] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1703: corrupted inode contents [ 183.331746][ T9186] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.1703: mark_inode_dirty error [ 183.343771][ T9186] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 183.375860][ T9213] EXT4-fs (loop3): too many log groups per flexible block group [ 183.387336][ T9213] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 183.411023][ T9213] EXT4-fs (loop3): mount failed [ 183.415954][ T9186] EXT4-fs (loop2): 1 truncate cleaned up [ 183.453815][ T9222] x_tables: ip_tables: osf match: only valid for protocol 6 [ 183.487261][ T9224] Invalid argument reading file caps for ./file0 [ 183.511854][ T9186] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 183.523916][ T9225] xt_hashlimit: max too large, truncated to 1048576 [ 183.528025][ T9229] loop1: detected capacity change from 0 to 1024 [ 183.671650][ T9243] netlink: 'syz.2.1725': attribute type 4 has an invalid length. [ 183.684923][ T9245] loop4: detected capacity change from 0 to 512 [ 183.697416][ T9243] serio: Serial port ttyS3 [ 183.704900][ T9245] EXT4-fs (loop4): too many log groups per flexible block group [ 183.713024][ T9245] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 183.720124][ T9245] EXT4-fs (loop4): mount failed [ 183.884773][ T9255] netlink: '+}[@': attribute type 10 has an invalid length. [ 183.894113][ T9255] bond0: (slave dummy0): Releasing backup interface [ 183.904009][ T9255] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.918451][ T9255] team0: Failed to send options change via netlink (err -105) [ 183.926029][ T9255] team0: Port device dummy0 added [ 183.954810][ T9257] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 183.966535][ T9257] serio: Serial port ttyS3 [ 184.009898][ T9263] Invalid argument reading file caps for ./file0 [ 184.194235][ T9274] loop2: detected capacity change from 0 to 1024 [ 184.320662][ T9290] Invalid argument reading file caps for ./file0 [ 184.434522][ T9300] loop3: detected capacity change from 0 to 512 [ 184.461192][ T9300] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.679118][ T9304] loop4: detected capacity change from 0 to 512 [ 184.699605][ T9304] EXT4-fs (loop4): too many log groups per flexible block group [ 184.704736][ T9300] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1748: corrupted inode contents [ 184.707508][ T9304] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 184.722265][ T9300] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1748: mark_inode_dirty error [ 184.726441][ T9304] EXT4-fs (loop4): mount failed [ 184.742528][ T9300] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1748: corrupted inode contents [ 184.812925][ T9311] netlink: '+}[@': attribute type 10 has an invalid length. [ 184.823884][ T9315] loop4: detected capacity change from 0 to 1024 [ 184.868501][ T9322] Invalid argument reading file caps for ./file0 [ 185.027005][ T9331] xt_hashlimit: max too large, truncated to 1048576 [ 185.450609][ T9342] SELinux: failed to load policy [ 185.641810][ T9347] loop3: detected capacity change from 0 to 1024 [ 185.679891][ T9349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.857511][ T9359] Invalid argument reading file caps for ./file0 [ 185.891992][ T1886] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.930402][ T9367] loop4: detected capacity change from 0 to 512 [ 185.950633][ T9369] loop2: detected capacity change from 0 to 512 [ 185.950919][ T9367] EXT4-fs (loop4): too many log groups per flexible block group [ 185.966598][ T9367] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 185.978199][ T9367] EXT4-fs (loop4): mount failed [ 185.991060][ T1666] Bluetooth: hci1: Frame reassembly failed (-84) [ 185.992324][ T9369] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.055753][ T9369] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1773: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 186.077418][ T9369] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.1773: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 186.098574][ T9369] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.1773: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 186.258654][ T9398] Invalid argument reading file caps for ./file0 [ 186.346199][ T9369] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1773: corrupted inode contents [ 186.358688][ T9369] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1773: mark_inode_dirty error [ 186.371031][ T9369] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1773: corrupted inode contents [ 186.693161][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 186.693180][ T29] audit: type=1326 audit(1765962344.489:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 186.723660][ T29] audit: type=1326 audit(1765962344.489:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 186.728930][ T9412] netlink: '+}[@': attribute type 10 has an invalid length. [ 186.747407][ T29] audit: type=1326 audit(1765962344.489:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 186.775525][ T9411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.778097][ T29] audit: type=1326 audit(1765962344.519:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 186.811408][ T29] audit: type=1400 audit(1765962344.519:5907): avc: denied { create } for pid=9408 comm="syz.4.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.831232][ T29] audit: type=1400 audit(1765962344.519:5908): avc: denied { bind } for pid=9408 comm="syz.4.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.851579][ T29] audit: type=1400 audit(1765962344.519:5909): avc: denied { setopt } for pid=9408 comm="syz.4.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.872102][ T29] audit: type=1326 audit(1765962344.549:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 186.895602][ T29] audit: type=1326 audit(1765962344.549:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 186.919128][ T29] audit: type=1326 audit(1765962344.549:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370400f749 code=0x7ffc0000 [ 187.011501][ T9422] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.046732][ T9422] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1793: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 187.067841][ T9422] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.1793: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 187.088896][ T9422] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.1793: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 187.176400][ T9427] netlink: 'syz.2.1794': attribute type 4 has an invalid length. [ 187.187195][ T9427] serio: Serial port ttyS3 [ 187.227143][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1796'. [ 187.316739][ T9422] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1793: corrupted inode contents [ 187.328828][ T9422] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1793: mark_inode_dirty error [ 187.340612][ T9422] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1793: corrupted inode contents [ 187.520126][ T9440] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.552708][ T9440] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1799: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 187.573277][ T9440] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.1799: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 187.594093][ T9440] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1799: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 187.819988][ T9440] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1799: corrupted inode contents [ 187.832207][ T9440] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1799: mark_inode_dirty error [ 187.844045][ T9440] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1799: corrupted inode contents [ 187.896261][ T9447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.905077][ T9447] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.920000][ T9447] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1801: Allocating blocks 41-42 which overlap fs metadata [ 187.934183][ T9447] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1801: Allocating blocks 41-42 which overlap fs metadata [ 187.948106][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.954264][ T9375] Bluetooth: hci0: command 0x1003 tx timeout [ 187.954766][ T9447] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1801: Failed to acquire dquot type 1 [ 187.972193][ T9447] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 187.986965][ T9447] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1801: corrupted inode contents [ 187.999142][ T9447] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1801: mark_inode_dirty error [ 188.018628][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 188.024910][ T3620] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 188.032348][ T9447] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1801: corrupted inode contents [ 188.045785][ T9447] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1801: mark_inode_dirty error [ 188.057881][ T9447] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1801: corrupted inode contents [ 188.066622][ T9451] EXT4-fs: Ignoring removed orlov option [ 188.070632][ T9447] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 188.084578][ T9447] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1801: corrupted inode contents [ 188.097043][ T9447] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1801: mark_inode_dirty error [ 188.108464][ T9447] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 188.117864][ T9447] EXT4-fs (loop3): 1 truncate cleaned up [ 188.182391][ T9447] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 188.327447][ T9463] set_capacity_and_notify: 5 callbacks suppressed [ 188.327467][ T9463] loop1: detected capacity change from 0 to 512 [ 188.359702][ T9465] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 188.368027][ T9463] EXT4-fs (loop1): too many log groups per flexible block group [ 188.370510][ T9465] serio: Serial port ttyS3 [ 188.376456][ T9463] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 188.388285][ T9463] EXT4-fs (loop1): mount failed [ 188.471748][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1807'. [ 188.511785][ T9481] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 188.555399][ T9481] serio: Serial port ttyS3 [ 188.795636][ T9471] Set syz1 is full, maxelem 65536 reached [ 188.994147][ T9501] loop3: detected capacity change from 0 to 2048 [ 189.051173][ T9501] Alternate GPT is invalid, using primary GPT. [ 189.057498][ T9501] loop3: p1 p2 p3 [ 189.061371][ T9501] loop3: partition table partially beyond EOD, truncated [ 189.133724][ T9491] loop4: detected capacity change from 0 to 512 [ 189.153331][ T9491] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.156098][ T9513] loop3: detected capacity change from 0 to 512 [ 189.161699][ T9491] EXT4-fs: Ignoring removed bh option [ 189.174511][ T9491] ext4: Unknown parameter 'obj_role' [ 189.181802][ T9513] EXT4-fs (loop3): too many log groups per flexible block group [ 189.189841][ T9513] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 189.196776][ T9513] EXT4-fs (loop3): mount failed [ 189.205714][ T9513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1824'. [ 189.235937][ T9517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.275651][ T9519] loop4: detected capacity change from 0 to 512 [ 189.287781][ T9521] netlink: 'syz.3.1827': attribute type 4 has an invalid length. [ 189.298598][ T9519] ext4 filesystem being mounted at /358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.332051][ T9519] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1826: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 189.353023][ T9521] serio: Serial port ttyS3 [ 189.355450][ T9519] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.1826: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 189.378128][ T9519] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1826: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 189.411943][ T9527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1828'. [ 189.421268][ T9527] netem: change failed [ 189.427255][ T9527] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 189.439527][ T9527] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 189.448297][ T9527] team0: Port device dummy0 removed [ 189.456389][ T9527] .`: (slave dummy0): Enslaving as an active interface with an up link [ 189.470769][ T9527] loop2: detected capacity change from 0 to 1024 [ 189.485274][ T9534] loop1: detected capacity change from 0 to 1024 [ 189.498926][ T9527] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1828: missing EA_INODE flag [ 189.532921][ T9527] EXT4-fs (loop2): Remounting filesystem read-only [ 189.613120][ T9548] loop3: detected capacity change from 0 to 512 [ 189.614533][ T9519] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1826: corrupted inode contents [ 189.633104][ T9519] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1826: mark_inode_dirty error [ 189.644956][ T9519] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1826: corrupted inode contents [ 189.660426][ T9548] EXT4-fs (loop3): too many log groups per flexible block group [ 189.671359][ T9548] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 189.678189][ T9548] EXT4-fs (loop3): mount failed [ 189.686711][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1835'. [ 189.718235][ T9557] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.885310][ T9550] loop2: detected capacity change from 0 to 512 [ 189.904871][ T9550] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.913806][ T9550] EXT4-fs: Ignoring removed bh option [ 189.921086][ T9550] ext4: Unknown parameter 'obj_role' [ 190.054035][ T9569] loop2: detected capacity change from 0 to 512 [ 190.061690][ T9569] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.062663][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1843'. [ 190.080172][ T9571] netem: change failed [ 190.087239][ T9571] netlink: 'syz.3.1843': attribute type 10 has an invalid length. [ 190.097772][ T9571] bond0: (slave dummy0): Releasing backup interface [ 190.105723][ T9571] dummy0: left promiscuous mode [ 190.111182][ T9571] dummy0: left allmulticast mode [ 190.118392][ T9571] dummy0: entered promiscuous mode [ 190.123684][ T9571] dummy0: entered allmulticast mode [ 190.129908][ T9571] team0: Port device dummy0 added [ 190.136590][ T9571] netlink: 'syz.3.1843': attribute type 10 has an invalid length. [ 190.147024][ T9571] dummy0: left promiscuous mode [ 190.152019][ T9571] dummy0: left allmulticast mode [ 190.157828][ T9571] team0: Port device dummy0 removed [ 190.164832][ T9571] dummy0: entered promiscuous mode [ 190.170352][ T9571] dummy0: entered allmulticast mode [ 190.176502][ T9571] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.213023][ T9571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1843: missing EA_INODE flag [ 190.229175][ T9585] netlink: 'syz.4.1846': attribute type 4 has an invalid length. [ 190.240140][ T9585] serio: Serial port ttyS3 [ 190.245402][ T9571] EXT4-fs (loop3): Remounting filesystem read-only [ 190.290370][ T9587] EXT4-fs (loop2): too many log groups per flexible block group [ 190.298336][ T9587] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 190.305700][ T9587] EXT4-fs (loop2): mount failed [ 190.313997][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1847'. [ 190.374591][ T9595] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.410518][ T9595] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1849: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 190.449034][ T9595] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.1849: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 190.472616][ T9595] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.1849: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 190.641748][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.650758][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.703290][ T9595] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1849: corrupted inode contents [ 190.729522][ T9595] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1849: mark_inode_dirty error [ 190.764556][ T9595] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1849: corrupted inode contents [ 190.976696][ T9606] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.985601][ T9606] EXT4-fs: Ignoring removed bh option [ 190.995944][ T9606] ext4: Unknown parameter 'obj_role' [ 191.193653][ T9635] xt_hashlimit: max too large, truncated to 1048576 [ 191.371760][ T9639] netlink: 'syz.2.1863': attribute type 4 has an invalid length. [ 191.415813][ T9639] serio: Serial port ttyS3 [ 191.717330][ T9654] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.731099][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 191.731124][ T29] audit: type=1400 audit(1765962349.529:6079): avc: denied { mount } for pid=9653 comm="syz.4.1869" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.782429][ T9654] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1869: path /366/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 191.803177][ T9654] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.1869: path /366/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 191.824353][ T29] audit: type=1400 audit(1765962349.619:6080): avc: denied { read } for pid=9662 comm="syz.0.1872" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.829443][ T9654] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1869: path /366/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 191.845617][ T29] audit: type=1400 audit(1765962349.619:6081): avc: denied { open } for pid=9662 comm="syz.0.1872" path="net:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.879051][ T9654] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.1869: path /366/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 191.889635][ T29] audit: type=1400 audit(1765962349.619:6082): avc: denied { create } for pid=9662 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.911432][ T9654] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.1869: lblock 23 mapped to illegal pblock 18 (length 1) [ 191.930793][ T29] audit: type=1400 audit(1765962349.619:6083): avc: denied { read } for pid=9662 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.930830][ T29] audit: type=1400 audit(1765962349.619:6084): avc: denied { ioctl } for pid=9662 comm="syz.0.1872" path="socket:[23787]" dev="sockfs" ino=23787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.990995][ T29] audit: type=1400 audit(1765962349.619:6085): avc: denied { module_request } for pid=9662 comm="syz.0.1872" kmod="netdev-wpan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 192.014997][ T29] audit: type=1400 audit(1765962349.739:6086): avc: denied { create } for pid=9662 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.035669][ T29] audit: type=1400 audit(1765962349.739:6087): avc: denied { write } for pid=9662 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.056127][ T29] audit: type=1400 audit(1765962349.739:6088): avc: denied { read } for pid=9662 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.140938][ T9671] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.173955][ T9671] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1873: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 192.219530][ T9671] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.1873: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 192.262073][ T9671] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.1873: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 192.520520][ T9671] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1873: corrupted inode contents [ 192.532668][ T9671] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1873: mark_inode_dirty error [ 192.544838][ T9671] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1873: corrupted inode contents [ 192.605553][ T9685] netlink: 'syz.2.1878': attribute type 4 has an invalid length. [ 192.620959][ T3320] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 192.639726][ T9685] serio: Serial port ttyS3 [ 193.070991][ T3315] EXT4-fs unmount: 68 callbacks suppressed [ 193.071011][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.144518][ T9702] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.145533][ T9715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.161944][ T9702] EXT4-fs: Ignoring removed bh option [ 193.167347][ T9715] ext4 filesystem being mounted at /397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.199762][ T9702] ext4: Unknown parameter 'obj_role' [ 193.288096][ T9720] serio: Serial port ttyS3 [ 193.426956][ T9715] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1889: corrupted inode contents [ 193.444539][ T9715] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1889: mark_inode_dirty error [ 193.467578][ T9715] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1889: corrupted inode contents [ 193.573968][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 193.583288][ T9731] netem: change failed [ 193.600140][ T9731] validate_nla: 1 callbacks suppressed [ 193.600158][ T9731] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 193.635107][ T9731] .`: (slave dummy0): Releasing backup interface [ 193.645958][ T9731] team0: Port device dummy0 added [ 193.653485][ T9735] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 193.664848][ T9735] team0: Port device dummy0 removed [ 193.673043][ T9735] .`: (slave dummy0): Enslaving as an active interface with an up link [ 193.700032][ T9731] set_capacity_and_notify: 10 callbacks suppressed [ 193.700052][ T9731] loop2: detected capacity change from 0 to 1024 [ 193.733178][ T9731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.789981][ T9731] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1893: missing EA_INODE flag [ 193.802161][ T9731] EXT4-fs (loop2): Remounting filesystem read-only [ 193.850337][ T9750] loop4: detected capacity change from 0 to 512 [ 193.889379][ T9750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.910124][ T9750] ext4 filesystem being mounted at /371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.945244][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.971855][ T9755] netlink: '+}[@': attribute type 10 has an invalid length. [ 194.005937][ T9755] bond0: (slave dummy0): Releasing backup interface [ 194.014412][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.025117][ T9750] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1898: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 194.170719][ T9750] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.1898: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 194.199598][ T9755] dummy0: left promiscuous mode [ 194.220321][ T9755] dummy0: left allmulticast mode [ 194.237932][ T9762] loop1: detected capacity change from 0 to 1024 [ 194.246222][ T9755] dummy0: entered promiscuous mode [ 194.254760][ T9750] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1898: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 194.278317][ T9755] dummy0: entered allmulticast mode [ 194.287180][ T9755] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 194.300089][ T9762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.306364][ T9755] team0: Failed to send options change via netlink (err -105) [ 194.319753][ T9755] team0: Port device dummy0 added [ 194.359677][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.382874][ T9750] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1898: corrupted inode contents [ 194.395207][ T9750] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1898: mark_inode_dirty error [ 194.417702][ T9750] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1898: corrupted inode contents [ 194.472361][ T1666] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.496418][ T9770] xt_hashlimit: max too large, truncated to 1048576 [ 194.505637][ T9770] loop9: detected capacity change from 0 to 7 [ 194.577556][ T9757] loop2: detected capacity change from 0 to 512 [ 194.597710][ T9757] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.606150][ T9757] EXT4-fs: Ignoring removed bh option [ 194.613612][ T9757] ext4: Unknown parameter 'obj_role' [ 194.817896][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.827269][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.973915][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.019088][ T9791] loop4: detected capacity change from 0 to 512 [ 195.030869][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.044419][ T9791] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.285822][ T9791] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1910: corrupted inode contents [ 195.299358][ T9791] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.1910: mark_inode_dirty error [ 195.311352][ T9791] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1910: corrupted inode contents [ 195.670086][ T9799] Invalid argument reading file caps for ./file0 [ 195.850275][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.895613][ T9811] loop3: detected capacity change from 0 to 512 [ 195.913209][ T9811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.935628][ T9811] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.970532][ T9811] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1919: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 196.007182][ T9811] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.1919: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 196.043264][ T9811] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.1919: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 196.073787][ T9803] loop1: detected capacity change from 0 to 512 [ 196.083216][ T9803] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.090476][ T9803] EXT4-fs: Ignoring removed bh option [ 196.096786][ T9803] ext4: Unknown parameter 'obj_role' [ 196.270194][ T9811] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1919: corrupted inode contents [ 196.283161][ T9811] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1919: mark_inode_dirty error [ 196.296886][ T9811] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1919: corrupted inode contents [ 196.429293][ T9823] Set syz1 is full, maxelem 65536 reached [ 196.473913][ T9828] loop1: detected capacity change from 0 to 512 [ 196.481302][ T9828] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.498302][ T3620] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.498758][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 196.506873][ T9828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.531068][ T9828] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1923: path /404/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 196.552419][ T9828] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.1923: path /404/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 196.573452][ T9828] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.1923: path /404/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 196.594681][ T9828] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.1923: path /404/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 196.615925][ T9828] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.1923: lblock 23 mapped to illegal pblock 18 (length 1) [ 196.749580][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 196.749600][ T29] audit: type=1326 audit(1765962354.549:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.779344][ T29] audit: type=1326 audit(1765962354.549:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.803420][ T29] audit: type=1326 audit(1765962354.559:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.827026][ T29] audit: type=1326 audit(1765962354.559:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.850746][ T29] audit: type=1326 audit(1765962354.559:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.874095][ T29] audit: type=1326 audit(1765962354.559:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.897628][ T29] audit: type=1326 audit(1765962354.559:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.921115][ T29] audit: type=1326 audit(1765962354.559:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.944845][ T29] audit: type=1326 audit(1765962354.559:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db435f749 code=0x7ffc0000 [ 196.969810][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.055411][ T29] audit: type=1400 audit(1765962354.709:6391): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 197.150154][ T9842] loop3: detected capacity change from 0 to 512 [ 197.187799][ T9842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.200794][ T9842] ext4 filesystem being mounted at /382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.335556][ T3315] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 197.359952][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.405044][ T9850] Alternate GPT is invalid, using primary GPT. [ 197.411428][ T9850] loop4: p1 p2 p3 [ 197.415189][ T9850] loop4: partition table partially beyond EOD, truncated [ 197.463092][ T9842] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1928: corrupted inode contents [ 197.475806][ T9842] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1928: mark_inode_dirty error [ 197.508566][ T9842] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1928: corrupted inode contents [ 197.605811][ T9866] netlink: 'syz.1.1937': attribute type 4 has an invalid length. [ 197.617130][ T9866] serio: Serial port ttyS3 [ 197.757054][ T9876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52220 sclass=netlink_route_socket pid=9876 comm=syz.2.1940 [ 197.921255][ T9889] ================================================================== [ 197.929388][ T9889] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 197.936698][ T9889] [ 197.939026][ T9889] write to 0xffff88810015bd00 of 8 bytes by task 9888 on cpu 0: [ 197.946661][ T9889] mas_wmb_replace+0xd74/0xfa0 [ 197.951438][ T9889] mas_wr_store_entry+0x13e3/0x2750 [ 197.956653][ T9889] mas_store_prealloc+0x760/0xa90 [ 197.961699][ T9889] vma_iter_store_new+0x1c5/0x200 [ 197.966735][ T9889] vma_complete+0x125/0x580 [ 197.971275][ T9889] __split_vma+0x59b/0x660 [ 197.975698][ T9889] vma_modify+0xb53/0xd50 [ 197.980048][ T9889] vma_modify_flags+0x10c/0x190 [ 197.984921][ T9889] mprotect_fixup+0x30f/0x5e0 [ 197.989610][ T9889] do_mprotect_pkey+0x6d6/0x980 [ 197.994495][ T9889] __x64_sys_mprotect+0x48/0x60 [ 197.999465][ T9889] x64_sys_call+0x2c3b/0x3000 [ 198.004352][ T9889] do_syscall_64+0xd8/0x2c0 [ 198.008895][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.014819][ T9889] [ 198.017154][ T9889] read to 0xffff88810015bd00 of 8 bytes by task 9889 on cpu 1: [ 198.024703][ T9889] mas_state_walk+0x485/0x650 [ 198.029410][ T9889] mas_walk+0x60/0x150 [ 198.033509][ T9889] lock_vma_under_rcu+0x95/0x1b0 [ 198.038466][ T9889] do_user_addr_fault+0x233/0x1080 [ 198.043612][ T9889] exc_page_fault+0x62/0xa0 [ 198.048240][ T9889] asm_exc_page_fault+0x26/0x30 [ 198.053104][ T9889] [ 198.055428][ T9889] value changed: 0xffff888104eb4c0e -> 0xffff88810015bd00 [ 198.062537][ T9889] [ 198.064864][ T9889] Reported by Kernel Concurrency Sanitizer on: [ 198.071040][ T9889] CPU: 1 UID: 0 PID: 9889 Comm: syz.1.1946 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.080766][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.090833][ T9889] ================================================================== [ 198.111355][ T9889] lo speed is unknown, defaulting to 1000 [ 198.118155][ T9889] lo speed is unknown, defaulting to 1000 [ 198.124679][ T9889] lo speed is unknown, defaulting to 1000 [ 198.159347][ T9889] infiniband syz1: set active [ 198.164153][ T9889] infiniband syz1: added lo [ 198.168772][ T3490] lo speed is unknown, defaulting to 1000 [ 198.177429][ T9889] RDS/IB: syz1: added [ 198.181550][ T9889] smc: adding ib device syz1 with port count 1 [ 198.187848][ T9889] smc: ib device syz1 port 1 has no pnetid [ 198.194043][ T3425] lo speed is unknown, defaulting to 1000 [ 198.199878][ T9889] lo speed is unknown, defaulting to 1000 [ 198.226917][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.242096][ T9889] lo speed is unknown, defaulting to 1000 [ 198.275714][ T9889] lo speed is unknown, defaulting to 1000 [ 198.310015][ T9889] lo speed is unknown, defaulting to 1000 [ 198.344432][ T9889] lo speed is unknown, defaulting to 1000 [ 199.538316][ T3620] Bluetooth: hci0: command 0x1003 tx timeout [ 199.543461][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110