last executing test programs: 15.897411003s ago: executing program 2 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 15.854433504s ago: executing program 2 (id=203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) 15.815049785s ago: executing program 2 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x20006}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, 0x0, 0x0) 15.699297777s ago: executing program 2 (id=208): bpf$PROG_LOAD(0x5, 0x0, 0x66dc0467c67b668d) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00') timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0) 15.699157477s ago: executing program 2 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setresuid(0xee01, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x500, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.698890267s ago: executing program 2 (id=210): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000"], 0xa8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x3c87, 0xffbb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r2, &(0x7f0000000780)='syz1\x00', 0x1ff) 15.696307397s ago: executing program 32 (id=210): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000"], 0xa8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x3c87, 0xffbb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r2, &(0x7f0000000780)='syz1\x00', 0x1ff) 2.821503776s ago: executing program 5 (id=467): unshare(0x22020600) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfffffffffffffffa}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c0fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445634147700565f4cab17c0e618b4a3d4bea681cf45b9a75a65260c3f", @ANYRES16=r1, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$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") rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 2.720463087s ago: executing program 3 (id=470): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0xff, 0x7ffc1ffd}]}) getrusage(0xffffffffffffffff, &(0x7f0000000100)) 2.684451579s ago: executing program 3 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000600)=r1, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)="cd", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000380), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000b00)="591e471fde", 0x5, r4) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000780)='xprtrdma_prepsend_failed\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2000000008000300ec0f243b2b4966fb33bac2dd90aa7f63e311b90e590cf5b0ac", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2000c043}, 0x200000c4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) read(r9, 0x0, 0x47) r10 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r10, 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) statfs(&(0x7f0000000040)='./file0\x00', 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) 2.0709296s ago: executing program 4 (id=477): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000007c0)={0x0, 0x6000, [0xa, 0x9, 0x2a39b5a2, 0x5, 0x7ff, 0x7d0d]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f00004f6000/0x3000)=nil, 0x3000, 0x2000003) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x26e1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) lremovexattr(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg2\x00'}) signalfd(0xffffffffffffffff, 0x0, 0x0) 1.877271704s ago: executing program 5 (id=480): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000800000000100000000f603850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.775395606s ago: executing program 3 (id=481): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@lazytime}, {@nomblk_io_submit}]}, 0x1, 0x4c3, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x10ba40, 0xdb) 1.348575425s ago: executing program 0 (id=486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e39352c696f636861727365743d757466382c646973636172642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c6e6f636173652c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c008cecc803abc0d6e523a56166e79428d9d45f8737ac6ecdf66d90baf6d6e90f4cee6110c1f125e92808e29c273e454e72ea6211a586c5805518e8940c5eb20aeba5fc4f3c1456917a3b86c7f3ae103c4a92db3fb7f6c9a848552c3901fb628e77a74a"], 0x1, 0x39d, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (fail_nth: 3) 1.348134875s ago: executing program 5 (id=487): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) connect$phonet_pipe(r0, &(0x7f0000000540)={0x23, 0x2, 0x8, 0x6}, 0x10) 1.312305295s ago: executing program 3 (id=488): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r11}, 0x18) r12 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r12, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r12, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r15 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r16, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r15, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) 1.278866966s ago: executing program 5 (id=491): unshare(0x22020600) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfffffffffffffffa}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$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") rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000000)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 1.176874117s ago: executing program 0 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001400)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) write$selinux_load(r1, &(0x7f0000000200)={0xf97cff8c, 0x8}, 0x10) 1.098117009s ago: executing program 4 (id=494): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 814.353085ms ago: executing program 1 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000bc", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x94}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x3b, '\x00', r1, @fallback=0x4, r9, 0x8, &(0x7f0000000500)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x81, 0x2}, 0x10, 0x0, r6, 0x0, &(0x7f0000000780)=[r6, r3, r4, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) 814.144655ms ago: executing program 0 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (fail_nth: 5) 813.728524ms ago: executing program 4 (id=497): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0x2, r0, 'id1\x00'}) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x3, 0x0, 0x41, @dev={0xfe, 0x80, '\x00', 0x10}, @local, 0x40, 0x0, 0x6, 0x8}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000006c0)={@mcast2, 0x0}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8, 0x5, 0x9, {{0xd, 0x4, 0x0, 0x6, 0x34, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0x3, [{@private=0xa010100, 0xc0}, {@multicast1, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x67, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000005000200050000000500030006000000050003005500000005000500fb0000002400018008000300020000000800030000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="40000180080003000200000008000100", @ANYRES32=r6, @ANYBLOB="0800030003000000080003000100000008000300020000001400020073797a6b616c6c65723100000000000005000500020000004c00018008000100", @ANYRES32=r7, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6261746164760008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="05000300070000000500052008000000"], 0xfc}, 0x1, 0x0, 0x0, 0x62000004}, 0x4008001) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(r10, &(0x7f0000000580)={[0x3]}, 0x8, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(0x0, 0x0) 514.19263ms ago: executing program 0 (id=498): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 513.87401ms ago: executing program 4 (id=499): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64", 0x7, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 460.106321ms ago: executing program 0 (id=501): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000800000000100000000f603850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 450.173782ms ago: executing program 1 (id=502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x40}}], 0x2, 0x2400c040) 411.137393ms ago: executing program 1 (id=503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x40}}], 0x2, 0x2400c040) 375.682543ms ago: executing program 5 (id=504): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 375.510383ms ago: executing program 4 (id=505): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910680000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) (async) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 365.397783ms ago: executing program 1 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461"], 0x118}}, 0x0) (fail_nth: 5) 348.136114ms ago: executing program 3 (id=507): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 299.318724ms ago: executing program 4 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 152.750797ms ago: executing program 3 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (fail_nth: 2) 112.225228ms ago: executing program 5 (id=510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x1a, &(0x7f00000001c0)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000d0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x40040c0) (async) r3 = memfd_secret(0x80000) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0x6, 0x0, 0x6}, 0x6) 50.406289ms ago: executing program 1 (id=511): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff6400020047", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 0s ago: executing program 1 (id=512): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000180), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18fdffffff1811000001c10000f8b18e39000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r11, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r11, 0x80044940, &(0x7f0000000080)=0x14) close(r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='devlink_hwmsg\x00', r9, 0x0, 0x7fff}, 0x18) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 28.497363][ T3303] veth0_vlan: entered promiscuous mode [ 28.512004][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.519579][ T3301] veth0_vlan: entered promiscuous mode [ 28.527254][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.538688][ T3303] veth1_vlan: entered promiscuous mode [ 28.548008][ T3301] veth1_vlan: entered promiscuous mode [ 28.566017][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.588390][ T3301] veth0_macvtap: entered promiscuous mode [ 28.596806][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.615206][ T3301] veth1_macvtap: entered promiscuous mode [ 28.629951][ T3303] veth0_macvtap: entered promiscuous mode [ 28.639225][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.654159][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.667139][ T3302] veth0_vlan: entered promiscuous mode [ 28.674885][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.683897][ T3303] veth1_macvtap: entered promiscuous mode [ 28.692317][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.695535][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.717984][ T3302] veth1_vlan: entered promiscuous mode [ 28.736198][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.761027][ T3466] loop2: detected capacity change from 0 to 512 [ 28.763145][ T3302] veth0_macvtap: entered promiscuous mode [ 28.774884][ T3302] veth1_macvtap: entered promiscuous mode [ 28.787579][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.795795][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.804264][ T3466] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.819333][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.827247][ T3466] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3: Failed to acquire dquot type 1 [ 28.840534][ T3466] EXT4-fs (loop2): 1 truncate cleaned up [ 28.846546][ T3466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.849122][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.866352][ T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.896532][ T87] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.911049][ T3306] veth0_vlan: entered promiscuous mode [ 28.938854][ T3306] veth1_vlan: entered promiscuous mode [ 28.949546][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.965062][ T3306] veth0_macvtap: entered promiscuous mode [ 28.976257][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.001293][ T3306] veth1_macvtap: entered promiscuous mode [ 29.016253][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.025116][ T3481] loop0: detected capacity change from 0 to 1024 [ 29.046707][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.051512][ T3481] ext2: Unknown parameter 'smackfsfloor' [ 29.067402][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.081618][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.088680][ T3484] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3: Failed to acquire dquot type 1 [ 29.107128][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.135675][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.187322][ T3485] loop3: detected capacity change from 0 to 2048 [ 29.207522][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.220459][ T3487] loop1: detected capacity change from 0 to 512 [ 29.247528][ T3489] loop0: detected capacity change from 0 to 8192 [ 29.254683][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.269611][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.282913][ T3487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.294326][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.310270][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321232][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 29.321305][ T29] audit: type=1400 audit(1757045708.771:165): avc: denied { mount } for pid=3488 comm="syz.0.6" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.326199][ T3485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.353735][ T29] audit: type=1326 audit(1757045708.801:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3992ebe9 code=0x7ffc0000 [ 29.385708][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.395100][ T3487] EXT4-fs (loop1): 1 truncate cleaned up [ 29.403653][ T29] audit: type=1400 audit(1757045708.851:167): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.424466][ T3487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.474282][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 29.499063][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.519312][ T29] audit: type=1326 audit(1757045708.871:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3992ebe9 code=0x7ffc0000 [ 29.527054][ T3498] loop0: detected capacity change from 0 to 1764 [ 29.544207][ T29] audit: type=1400 audit(1757045708.891:169): avc: denied { mount } for pid=3483 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.552424][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.572143][ T29] audit: type=1400 audit(1757045708.911:170): avc: denied { write open } for pid=3483 comm="syz.3.4" path="/0/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.603601][ T29] audit: type=1400 audit(1757045708.911:171): avc: denied { mounton } for pid=3483 comm="syz.3.4" path="/0/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.604086][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.636420][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8'. [ 29.636764][ T29] audit: type=1400 audit(1757045709.081:172): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.667329][ T29] audit: type=1400 audit(1757045709.121:173): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.690587][ T29] audit: type=1400 audit(1757045709.121:174): avc: denied { rmdir } for pid=3303 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.701255][ T3482] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.2: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 29.715139][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 29.743725][ T3482] EXT4-fs (loop1): Remounting filesystem read-only [ 29.757166][ T3482] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.2: Deleting old file: nlink 5, error=-117 [ 29.759545][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 29.816125][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.820923][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.884890][ T3500] loop4: detected capacity change from 0 to 1024 [ 29.896746][ T3511] loop0: detected capacity change from 0 to 2048 [ 29.901268][ T3506] loop2: detected capacity change from 0 to 2048 [ 29.910663][ T3500] ======================================================= [ 29.910663][ T3500] WARNING: The mand mount option has been deprecated and [ 29.910663][ T3500] and is ignored by this kernel. Remove the mand [ 29.910663][ T3500] option from the mount to silence this warning. [ 29.910663][ T3500] ======================================================= [ 29.946523][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.978285][ T3513] loop3: detected capacity change from 0 to 2048 [ 29.980921][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.004347][ T3506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.015176][ T3523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'. [ 30.034594][ T3500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.083208][ T3513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.098557][ T3513] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.098582][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 30.133838][ T3500] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.8: Allocating blocks 449-513 which overlap fs metadata [ 30.149680][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 30.160059][ T3513] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15: bg 0: block 345: padding at end of block bitmap is not set [ 30.176207][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.201509][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.211673][ T3500] EXT4-fs (loop4): pa ffff88810986a070: logic 48, phys. 177, len 21 [ 30.219821][ T3500] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 30.255825][ T3513] syz.3.15 (3513) used greatest stack depth: 10296 bytes left [ 30.264132][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.279243][ T3533] loop1: detected capacity change from 0 to 1764 [ 30.290242][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 30.302577][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.302577][ T12] [ 30.312320][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 30.318299][ T12] EXT4-fs (loop3): Free/Dirty block details [ 30.323939][ T3536] loop2: detected capacity change from 0 to 8192 [ 30.324282][ T12] EXT4-fs (loop3): free_blocks=0 [ 30.335589][ T12] EXT4-fs (loop3): dirty_blocks=16 [ 30.340735][ T12] EXT4-fs (loop3): Block reservation details [ 30.346720][ T12] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 30.356551][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.402443][ T3534] loop0: detected capacity change from 0 to 512 [ 30.416670][ T3534] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.434990][ T3540] loop3: detected capacity change from 0 to 512 [ 30.446279][ T3540] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.495270][ T3545] loop4: detected capacity change from 0 to 512 [ 30.501699][ T3542] loop1: detected capacity change from 0 to 8192 [ 30.507100][ T3540] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.20: Failed to acquire dquot type 1 [ 30.510674][ T3534] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.16: Failed to acquire dquot type 1 [ 30.539327][ T3534] EXT4-fs (loop0): 1 truncate cleaned up [ 30.545960][ T3545] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.555713][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.574743][ T3540] EXT4-fs (loop3): 1 truncate cleaned up [ 30.580981][ T3540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.583821][ T3545] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.23: Failed to acquire dquot type 1 [ 30.642179][ T3554] loop1: detected capacity change from 0 to 1764 [ 30.651572][ T3545] EXT4-fs (loop4): 1 truncate cleaned up [ 30.657547][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.682184][ T3550] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 30.724093][ T3550] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 30.770069][ T3558] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.20: Failed to acquire dquot type 1 [ 30.790530][ T3559] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.16: Failed to acquire dquot type 1 [ 30.812280][ T3562] loop1: detected capacity change from 0 to 512 [ 30.848741][ T3562] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.903840][ T3562] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.25: Failed to acquire dquot type 1 [ 30.925636][ T3562] EXT4-fs (loop1): 1 truncate cleaned up [ 30.935813][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.974093][ T3568] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.001466][ T3545] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.23: Failed to acquire dquot type 1 [ 31.057345][ T3568] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 31.142955][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.156046][ T3571] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.25: Failed to acquire dquot type 1 [ 31.190577][ T3573] loop2: detected capacity change from 0 to 512 [ 31.204407][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.209252][ T3575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 31.232629][ T3573] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.285455][ T3573] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.27: Failed to acquire dquot type 1 [ 31.326504][ T3582] loop3: detected capacity change from 0 to 2048 [ 31.333534][ T3580] loop4: detected capacity change from 0 to 2048 [ 31.341459][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.377941][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.391578][ T3573] EXT4-fs (loop2): 1 truncate cleaned up [ 31.405768][ T3573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.405910][ T3582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.431087][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.474040][ T3588] loop0: detected capacity change from 0 to 512 [ 31.479445][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.517415][ T3588] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.532951][ T3590] loop4: detected capacity change from 0 to 8192 [ 31.550716][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.562041][ T3588] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.30: Failed to acquire dquot type 1 [ 31.612444][ T3594] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.27: Failed to acquire dquot type 1 [ 31.639681][ T3596] loop3: detected capacity change from 0 to 1764 [ 31.645650][ T3588] EXT4-fs (loop0): 1 truncate cleaned up [ 31.658766][ T3600] loop4: detected capacity change from 0 to 1764 [ 31.667044][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.702398][ T3599] loop1: detected capacity change from 0 to 8192 [ 31.737607][ T3602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.833831][ T3602] loop3: detected capacity change from 0 to 512 [ 31.859706][ T3609] loop1: detected capacity change from 0 to 1764 [ 31.867003][ T3602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.875670][ T3604] loop4: detected capacity change from 0 to 8192 [ 31.889588][ T3610] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.30: Failed to acquire dquot type 1 [ 31.932320][ T3602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.010990][ T3602] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.047252][ T3614] loop1: detected capacity change from 0 to 8192 [ 32.122597][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.150262][ T3619] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 32.157938][ T3619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42'. [ 32.168415][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.171671][ T3619] dummy0: entered promiscuous mode [ 32.183334][ T3619] bridge0: port 3(dummy0) entered blocking state [ 32.189902][ T3619] bridge0: port 3(dummy0) entered disabled state [ 32.203858][ T3619] dummy0: entered allmulticast mode [ 32.222152][ T3619] bridge0: port 3(dummy0) entered blocking state [ 32.228571][ T3619] bridge0: port 3(dummy0) entered forwarding state [ 32.242348][ T3625] loop2: detected capacity change from 0 to 128 [ 32.255032][ T3623] loop3: detected capacity change from 0 to 512 [ 32.263496][ T3625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 32.282502][ T3625] System zones: 1-3, 19-19, 35-36 [ 32.291298][ T3623] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.301319][ T3625] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 32.314222][ T3628] loop1: detected capacity change from 0 to 1764 [ 32.314346][ T3625] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.368322][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.387770][ T3623] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.41: Failed to acquire dquot type 1 [ 32.434778][ T3623] EXT4-fs (loop3): 1 truncate cleaned up [ 32.458815][ T3623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.484699][ T3632] loop1: detected capacity change from 0 to 8192 [ 32.512260][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.592341][ T3645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 32.610278][ T3646] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.41: Failed to acquire dquot type 1 [ 32.701771][ T3649] loop2: detected capacity change from 0 to 8192 [ 32.711787][ T3650] loop1: detected capacity change from 0 to 8192 [ 32.780496][ T3652] loop2: detected capacity change from 0 to 8192 [ 32.807316][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.869283][ T3660] loop4: detected capacity change from 0 to 1764 [ 32.878936][ T3654] loop2: detected capacity change from 0 to 8192 [ 32.902713][ T3657] loop3: detected capacity change from 0 to 512 [ 32.925788][ T3657] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.970171][ T3664] loop4: detected capacity change from 0 to 2048 [ 32.970863][ T3657] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.58: Failed to acquire dquot type 1 [ 33.012283][ T3657] EXT4-fs (loop3): 1 truncate cleaned up [ 33.018475][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.050726][ T3670] loop2: detected capacity change from 0 to 8192 [ 33.057839][ T3664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.119180][ T3657] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.58: Failed to acquire dquot type 1 [ 33.152498][ T3306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 33.167272][ T3676] loop2: detected capacity change from 0 to 1764 [ 33.174100][ T3306] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 33.204535][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.219050][ T3680] loop1: detected capacity change from 0 to 764 [ 33.219457][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.254355][ T3680] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20003 [ 33.289422][ T3688] loop0: detected capacity change from 0 to 512 [ 33.322760][ T3688] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.343036][ T3684] syz.4.65 (3684) used greatest stack depth: 10104 bytes left [ 33.379655][ T3688] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.69: Failed to acquire dquot type 1 [ 33.382777][ C1] hrtimer: interrupt took 43347 ns [ 33.396370][ T3682] loop2: detected capacity change from 0 to 8192 [ 33.411480][ T3694] loop4: detected capacity change from 0 to 1764 [ 33.429837][ T3688] EXT4-fs (loop0): 1 truncate cleaned up [ 33.450274][ T3688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.505897][ T3698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 33.566015][ T3703] loop1: detected capacity change from 0 to 1764 [ 33.576162][ T3704] loop3: detected capacity change from 0 to 2048 [ 33.625265][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.661665][ T3713] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.69: Failed to acquire dquot type 1 [ 33.690088][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 33.709436][ T3716] loop1: detected capacity change from 0 to 2048 [ 33.715290][ T3712] loop4: detected capacity change from 0 to 8192 [ 33.738627][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 33.770728][ T3716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.794605][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.887209][ T3724] loop3: detected capacity change from 0 to 512 [ 33.917014][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.935935][ T3724] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.963742][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.985219][ T3724] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.81: Failed to acquire dquot type 1 [ 34.005651][ T3730] loop2: detected capacity change from 0 to 8192 [ 34.015188][ T3724] EXT4-fs (loop3): 1 truncate cleaned up [ 34.023926][ T3738] siw: device registration error -23 [ 34.032929][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 34.055555][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.081058][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 34.107669][ T3744] loop4: detected capacity change from 0 to 1764 [ 34.121726][ T3746] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.129739][ T3746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.136970][ T3746] IPv6: NLM_F_CREATE should be set when creating new route [ 34.136983][ T2993] udevd[2993]: worker [3520] terminated by signal 33 (Unknown signal 33) [ 34.139586][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 34.229578][ T3753] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.81: Failed to acquire dquot type 1 [ 34.284720][ T3742] loop0: detected capacity change from 0 to 1024 [ 34.301291][ T3742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.330199][ T3742] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.93: Allocating blocks 449-513 which overlap fs metadata [ 34.346750][ T3769] vhci_hcd: invalid port number 96 [ 34.352026][ T3769] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 34.368010][ T3770] siw: device registration error -23 [ 34.383537][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.407928][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 34.407942][ T29] audit: type=1400 audit(1757045713.851:356): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 34.440273][ T3774] loop3: detected capacity change from 0 to 128 [ 34.447793][ T3774] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 34.474264][ T29] audit: type=1400 audit(1757045713.881:357): avc: denied { create } for pid=3773 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.493753][ T29] audit: type=1400 audit(1757045713.881:358): avc: denied { ioctl } for pid=3773 comm="syz.3.104" path="socket:[5497]" dev="sockfs" ino=5497 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.504853][ T3742] EXT4-fs (loop0): pa ffff88810986a0e0: logic 48, phys. 177, len 21 [ 34.518648][ T29] audit: type=1400 audit(1757045713.911:359): avc: denied { bind } for pid=3773 comm="syz.3.104" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.527020][ T3742] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 34.547922][ T29] audit: type=1400 audit(1757045713.911:360): avc: denied { node_bind } for pid=3773 comm="syz.3.104" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 34.579673][ T29] audit: type=1400 audit(1757045713.911:361): avc: denied { connect } for pid=3773 comm="syz.3.104" laddr=172.20.20.170 lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.619222][ T3782] __nla_validate_parse: 4 callbacks suppressed [ 34.619236][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 34.637631][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.647201][ T29] audit: type=1326 audit(1757045714.091:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3992ebe9 code=0x7ffc0000 [ 34.670557][ T29] audit: type=1326 audit(1757045714.091:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3992ebe9 code=0x7ffc0000 [ 34.722839][ T29] audit: type=1326 audit(1757045714.141:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f3992ebe9 code=0x7ffc0000 [ 34.746258][ T29] audit: type=1326 audit(1757045714.141:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3992ebe9 code=0x7ffc0000 [ 34.772091][ T3798] pim6reg1: entered promiscuous mode [ 34.777446][ T3798] pim6reg1: entered allmulticast mode [ 34.812087][ T3808] loop1: detected capacity change from 0 to 512 [ 34.823845][ T3808] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.849468][ T3808] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.115: Failed to acquire dquot type 1 [ 34.862441][ T3808] EXT4-fs (loop1): 1 truncate cleaned up [ 34.869542][ T3814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 34.904760][ T3808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.986529][ T3835] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.115: Failed to acquire dquot type 1 [ 35.073700][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.091864][ T3839] loop2: detected capacity change from 0 to 1764 [ 35.179702][ T3850] loop1: detected capacity change from 0 to 1764 [ 35.190897][ T3846] loop3: detected capacity change from 0 to 512 [ 35.197755][ T3846] EXT4-fs: test_dummy_encryption option not supported [ 35.287848][ T3865] loop2: detected capacity change from 0 to 512 [ 35.307752][ T3865] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.331011][ T3865] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.133: Failed to acquire dquot type 1 [ 35.365354][ T3874] loop4: detected capacity change from 0 to 1024 [ 35.386703][ T3865] EXT4-fs (loop2): 1 truncate cleaned up [ 35.406757][ T3874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.428673][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.484624][ T3874] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.136: Allocating blocks 449-513 which overlap fs metadata [ 35.507143][ T3884] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.133: Failed to acquire dquot type 1 [ 35.534712][ T3873] EXT4-fs (loop4): pa ffff88810986a0e0: logic 48, phys. 177, len 21 [ 35.542903][ T3873] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 35.585088][ T3894] loop1: detected capacity change from 0 to 764 [ 35.593087][ T3892] loop3: detected capacity change from 0 to 1764 [ 35.603830][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.613830][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.624186][ T3894] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20003 [ 35.712528][ T3907] Zero length message leads to an empty skb [ 35.741358][ T3909] loop4: detected capacity change from 0 to 2048 [ 35.762794][ T3915] loop0: detected capacity change from 0 to 1024 [ 35.771772][ T3909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.803858][ T3923] netlink: 'syz.2.154': attribute type 13 has an invalid length. [ 35.813576][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.830782][ T3915] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.842013][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.851155][ T3915] capability: warning: `syz.0.152' uses deprecated v2 capabilities in a way that may be insecure [ 35.872582][ T3915] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.152: lblock 0 mapped to illegal pblock 0 (length 6) [ 35.888216][ T3928] FAULT_INJECTION: forcing a failure. [ 35.888216][ T3928] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.894134][ T3926] loop1: detected capacity change from 0 to 512 [ 35.901554][ T3928] CPU: 1 UID: 0 PID: 3928 Comm: syz.4.155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.901582][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.901595][ T3928] Call Trace: [ 35.901602][ T3928] [ 35.901610][ T3928] __dump_stack+0x1d/0x30 [ 35.901632][ T3928] dump_stack_lvl+0xe8/0x140 [ 35.901651][ T3928] dump_stack+0x15/0x1b [ 35.901730][ T3928] should_fail_ex+0x265/0x280 [ 35.901756][ T3928] should_fail+0xb/0x20 [ 35.901774][ T3928] should_fail_usercopy+0x1a/0x20 [ 35.901801][ T3928] _copy_to_user+0x20/0xa0 [ 35.901897][ T3928] do_tcp_getsockopt+0x1426/0x1af0 [ 35.901921][ T3928] ? _parse_integer_limit+0x170/0x190 [ 35.901944][ T3928] ? _parse_integer+0x27/0x40 [ 35.901963][ T3928] ? __rcu_read_unlock+0x4f/0x70 [ 35.901984][ T3928] ? avc_has_perm_noaudit+0x1b1/0x200 [ 35.902045][ T3928] ? avc_has_perm+0xf7/0x180 [ 35.902078][ T3928] tcp_getsockopt+0x6e/0xe0 [ 35.902101][ T3928] sock_common_getsockopt+0x60/0x70 [ 35.902243][ T3928] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 35.902273][ T3928] do_sock_getsockopt+0x200/0x240 [ 35.902415][ T3928] __x64_sys_getsockopt+0x11e/0x1a0 [ 35.902439][ T3928] x64_sys_call+0x2bc6/0x2ff0 [ 35.902461][ T3928] do_syscall_64+0xd2/0x200 [ 35.902490][ T3928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.902523][ T3928] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.902549][ T3928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.902576][ T3928] RIP: 0033:0x7f28ac03ebe9 [ 35.902595][ T3928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.902613][ T3928] RSP: 002b:00007f28aaa9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 35.902685][ T3928] RAX: ffffffffffffffda RBX: 00007f28ac275fa0 RCX: 00007f28ac03ebe9 [ 35.902697][ T3928] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 35.902709][ T3928] RBP: 00007f28aaa9f090 R08: 0000200000000540 R09: 0000000000000000 [ 35.902721][ T3928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.902733][ T3928] R13: 00007f28ac276038 R14: 00007f28ac275fa0 R15: 00007ffcd42368e8 [ 35.902817][ T3928] [ 35.910375][ T3915] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.938072][ T3926] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.981995][ T3931] loop4: detected capacity change from 0 to 1764 [ 36.002683][ T3926] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.156: Failed to acquire dquot type 1 [ 36.027487][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.029464][ T3926] EXT4-fs (loop1): 1 truncate cleaned up [ 36.114152][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.0.158 [ 36.168915][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.210085][ T3923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.307015][ T3950] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.156: Failed to acquire dquot type 1 [ 36.313267][ T3952] FAULT_INJECTION: forcing a failure. [ 36.313267][ T3952] name failslab, interval 1, probability 0, space 0, times 0 [ 36.330922][ T3952] CPU: 1 UID: 0 PID: 3952 Comm: syz.4.164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.330985][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.330998][ T3952] Call Trace: [ 36.331003][ T3952] [ 36.331008][ T3952] __dump_stack+0x1d/0x30 [ 36.331087][ T3952] dump_stack_lvl+0xe8/0x140 [ 36.331108][ T3952] dump_stack+0x15/0x1b [ 36.331125][ T3952] should_fail_ex+0x265/0x280 [ 36.331149][ T3952] should_failslab+0x8c/0xb0 [ 36.331172][ T3952] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 36.331230][ T3952] ? sidtab_sid2str_get+0xa0/0x130 [ 36.331251][ T3952] kmemdup_noprof+0x2b/0x70 [ 36.331342][ T3952] sidtab_sid2str_get+0xa0/0x130 [ 36.331365][ T3952] security_sid_to_context_core+0x1eb/0x2e0 [ 36.331395][ T3952] security_sid_to_context+0x27/0x40 [ 36.331413][ T3952] selinux_lsmprop_to_secctx+0x67/0xf0 [ 36.331433][ T3952] security_lsmprop_to_secctx+0x43/0x80 [ 36.331458][ T3952] audit_log_task_context+0x77/0x190 [ 36.331538][ T3952] audit_log_task+0xf4/0x250 [ 36.331568][ T3952] audit_seccomp+0x61/0x100 [ 36.331593][ T3952] ? __seccomp_filter+0x68c/0x10d0 [ 36.331650][ T3952] __seccomp_filter+0x69d/0x10d0 [ 36.331673][ T3952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 36.331704][ T3952] ? vfs_write+0x7e8/0x960 [ 36.331742][ T3952] __secure_computing+0x82/0x150 [ 36.331831][ T3952] syscall_trace_enter+0xcf/0x1e0 [ 36.331858][ T3952] do_syscall_64+0xac/0x200 [ 36.331889][ T3952] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.331986][ T3952] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.332060][ T3952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.332084][ T3952] RIP: 0033:0x7f28ac03ebe9 [ 36.332100][ T3952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.332119][ T3952] RSP: 002b:00007f28aaa9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 36.332192][ T3952] RAX: ffffffffffffffda RBX: 00007f28ac275fa0 RCX: 00007f28ac03ebe9 [ 36.332206][ T3952] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 36.332219][ T3952] RBP: 00007f28aaa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.332233][ T3952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.332246][ T3952] R13: 00007f28ac276038 R14: 00007f28ac275fa0 R15: 00007ffcd42368e8 [ 36.332265][ T3952] [ 36.443476][ T3956] netlink: 104 bytes leftover after parsing attributes in process `syz.2.165'. [ 36.533166][ T3962] loop0: detected capacity change from 0 to 764 [ 36.602917][ T3963] loop4: detected capacity change from 0 to 128 [ 36.620577][ T3962] IPVS: set_ctl: invalid protocol: 50 172.30.1.1:20003 [ 36.639074][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.670028][ T3967] FAULT_INJECTION: forcing a failure. [ 36.670028][ T3967] name failslab, interval 1, probability 0, space 0, times 0 [ 36.682749][ T3967] CPU: 0 UID: 0 PID: 3967 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.682774][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.682785][ T3967] Call Trace: [ 36.682791][ T3967] [ 36.682798][ T3967] __dump_stack+0x1d/0x30 [ 36.682819][ T3967] dump_stack_lvl+0xe8/0x140 [ 36.682895][ T3967] dump_stack+0x15/0x1b [ 36.682910][ T3967] should_fail_ex+0x265/0x280 [ 36.683001][ T3967] ? audit_log_d_path+0x8d/0x150 [ 36.683027][ T3967] should_failslab+0x8c/0xb0 [ 36.683048][ T3967] __kmalloc_cache_noprof+0x4c/0x320 [ 36.683074][ T3967] audit_log_d_path+0x8d/0x150 [ 36.683170][ T3967] audit_log_d_path_exe+0x42/0x70 [ 36.683200][ T3967] audit_log_task+0x1e9/0x250 [ 36.683224][ T3967] audit_seccomp+0x61/0x100 [ 36.683249][ T3967] ? __seccomp_filter+0x68c/0x10d0 [ 36.683286][ T3967] __seccomp_filter+0x69d/0x10d0 [ 36.683326][ T3967] __secure_computing+0x82/0x150 [ 36.683344][ T3967] syscall_trace_enter+0xcf/0x1e0 [ 36.683365][ T3967] do_syscall_64+0xac/0x200 [ 36.683403][ T3967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.683424][ T3967] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.683446][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.683476][ T3967] RIP: 0033:0x7f2f3992d5fc [ 36.683489][ T3967] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 36.683503][ T3967] RSP: 002b:00007f2f3838f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.683520][ T3967] RAX: ffffffffffffffda RBX: 00007f2f39b65fa0 RCX: 00007f2f3992d5fc [ 36.683588][ T3967] RDX: 000000000000000f RSI: 00007f2f3838f0a0 RDI: 0000000000000005 [ 36.683598][ T3967] RBP: 00007f2f3838f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.683608][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.683659][ T3967] R13: 00007f2f39b66038 R14: 00007f2f39b65fa0 R15: 00007ffcb062d508 [ 36.683674][ T3967] [ 36.954919][ T3955] loop2: detected capacity change from 0 to 128 [ 37.085376][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 37.190811][ T3997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.182'. [ 37.202381][ T3989] loop3: detected capacity change from 0 to 2048 [ 37.225378][ T3995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 37.243762][ T3989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.355451][ T4000] syz.2.183 (4000) used greatest stack depth: 10016 bytes left [ 37.412128][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 37.442369][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 37.464528][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.643863][ T4029] loop3: detected capacity change from 0 to 128 [ 37.667643][ T4029] vfat: Unknown parameter '' [ 37.689967][ T4029] loop3: detected capacity change from 0 to 1024 [ 37.708820][ T4029] EXT4-fs: Ignoring removed bh option [ 37.717552][ T4029] EXT4-fs: Ignoring removed orlov option [ 37.723313][ T4029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.760069][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.915599][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 37.998715][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.021785][ T4042] loop3: detected capacity change from 0 to 1024 [ 38.040064][ T4042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.053438][ T4042] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.069568][ T4042] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.198: lblock 0 mapped to illegal pblock 0 (length 6) [ 38.083216][ T4042] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.198: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.127687][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.141254][ T4051] loop0: detected capacity change from 0 to 128 [ 38.218111][ T4059] loop3: detected capacity change from 0 to 1764 [ 38.325874][ T4067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 38.417944][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 38.512293][ T4085] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 38.538645][ T4085] loop1: detected capacity change from 0 to 512 [ 38.557017][ T4068] chnl_net:caif_netlink_parms(): no params data found [ 38.597858][ T4091] FAULT_INJECTION: forcing a failure. [ 38.597858][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 38.610563][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.610588][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.610602][ T4091] Call Trace: [ 38.610608][ T4091] [ 38.610614][ T4091] __dump_stack+0x1d/0x30 [ 38.610637][ T4091] dump_stack_lvl+0xe8/0x140 [ 38.610656][ T4091] dump_stack+0x15/0x1b [ 38.610670][ T4091] should_fail_ex+0x265/0x280 [ 38.610688][ T4091] ? ftrace_profile_set_filter+0x96/0x1b0 [ 38.610723][ T4091] should_failslab+0x8c/0xb0 [ 38.610749][ T4091] __kmalloc_cache_noprof+0x4c/0x320 [ 38.610871][ T4091] ftrace_profile_set_filter+0x96/0x1b0 [ 38.610890][ T4091] perf_ioctl+0x7b3/0x12e0 [ 38.610916][ T4091] ? ioctl_has_perm+0x289/0x2a0 [ 38.611004][ T4091] ? do_vfs_ioctl+0x866/0xe10 [ 38.611024][ T4091] ? selinux_file_ioctl+0x308/0x3a0 [ 38.611047][ T4091] ? __fget_files+0x184/0x1c0 [ 38.611124][ T4091] ? __pfx_perf_ioctl+0x10/0x10 [ 38.611198][ T4091] __se_sys_ioctl+0xce/0x140 [ 38.611267][ T4091] __x64_sys_ioctl+0x43/0x50 [ 38.611298][ T4091] x64_sys_call+0x1816/0x2ff0 [ 38.611382][ T4091] do_syscall_64+0xd2/0x200 [ 38.611407][ T4091] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.611441][ T4091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.611469][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.611498][ T4091] RIP: 0033:0x7f2f3992ebe9 [ 38.611521][ T4091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.611544][ T4091] RSP: 002b:00007f2f3838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.611561][ T4091] RAX: ffffffffffffffda RBX: 00007f2f39b65fa0 RCX: 00007f2f3992ebe9 [ 38.611572][ T4091] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000006 [ 38.611585][ T4091] RBP: 00007f2f3838f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.611597][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.611609][ T4091] R13: 00007f2f39b66038 R14: 00007f2f39b65fa0 R15: 00007ffcb062d508 [ 38.611627][ T4091] [ 38.844566][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.851913][ T4068] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.859419][ T4068] bridge_slave_0: entered allmulticast mode [ 38.865877][ T4068] bridge_slave_0: entered promiscuous mode [ 38.873392][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.880453][ T4068] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.887914][ T4068] bridge_slave_1: entered allmulticast mode [ 38.894705][ T4068] bridge_slave_1: entered promiscuous mode [ 38.914046][ T4068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.924999][ T4068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.975017][ T4068] team0: Port device team_slave_0 added [ 38.982055][ T4068] team0: Port device team_slave_1 added [ 38.996824][ T4096] loop3: detected capacity change from 0 to 1764 [ 39.012564][ T4068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.019546][ T4068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.045721][ T4068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.066653][ T4068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.073654][ T4068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.099743][ T4068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.136339][ T4068] hsr_slave_0: entered promiscuous mode [ 39.142641][ T4068] hsr_slave_1: entered promiscuous mode [ 39.149958][ T4068] debugfs: 'hsr0' already exists in 'hsr' [ 39.155690][ T4068] Cannot create hsr debugfs directory [ 39.168452][ T4107] FAULT_INJECTION: forcing a failure. [ 39.168452][ T4107] name failslab, interval 1, probability 0, space 0, times 0 [ 39.181161][ T4107] CPU: 0 UID: 0 PID: 4107 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.181187][ T4107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.181197][ T4107] Call Trace: [ 39.181203][ T4107] [ 39.181242][ T4107] __dump_stack+0x1d/0x30 [ 39.181261][ T4107] dump_stack_lvl+0xe8/0x140 [ 39.181278][ T4107] dump_stack+0x15/0x1b [ 39.181295][ T4107] should_fail_ex+0x265/0x280 [ 39.181362][ T4107] should_failslab+0x8c/0xb0 [ 39.181384][ T4107] __kmalloc_node_noprof+0xa9/0x410 [ 39.181460][ T4107] ? alloc_slab_obj_exts+0x31/0x80 [ 39.181483][ T4107] ? freeze_slab+0x5c/0x80 [ 39.181573][ T4107] alloc_slab_obj_exts+0x31/0x80 [ 39.181599][ T4107] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 39.181638][ T4107] __kvmalloc_node_noprof+0x398/0x4e0 [ 39.181694][ T4107] ? alloc_netdev_mqs+0x553/0xa30 [ 39.181777][ T4107] alloc_netdev_mqs+0x553/0xa30 [ 39.181803][ T4107] ip6_tnl_locate+0x37e/0x4a0 [ 39.181835][ T4107] ip6_tnl_siocdevprivate+0x550/0x920 [ 39.181866][ T4107] dev_ifsioc+0x8f5/0xaa0 [ 39.181916][ T4107] dev_ioctl+0x78d/0x960 [ 39.181938][ T4107] sock_ioctl+0x593/0x610 [ 39.181962][ T4107] ? __pfx_sock_ioctl+0x10/0x10 [ 39.181986][ T4107] __se_sys_ioctl+0xce/0x140 [ 39.182024][ T4107] __x64_sys_ioctl+0x43/0x50 [ 39.182040][ T4107] x64_sys_call+0x1816/0x2ff0 [ 39.182059][ T4107] do_syscall_64+0xd2/0x200 [ 39.182093][ T4107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.182117][ T4107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.182141][ T4107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.182161][ T4107] RIP: 0033:0x7f6ac943ebe9 [ 39.182209][ T4107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.182240][ T4107] RSP: 002b:00007f6ac7ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.182258][ T4107] RAX: ffffffffffffffda RBX: 00007f6ac9675fa0 RCX: 00007f6ac943ebe9 [ 39.182272][ T4107] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 39.182286][ T4107] RBP: 00007f6ac7ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.182300][ T4107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.182313][ T4107] R13: 00007f6ac9676038 R14: 00007f6ac9675fa0 R15: 00007fff0a5306c8 [ 39.182332][ T4107] [ 39.240420][ T4115] loop1: detected capacity change from 0 to 8192 [ 39.432076][ T4118] @: renamed from vlan0 (while UP) [ 39.461191][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 39.461255][ T29] audit: type=1326 audit(1757045718.911:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 39.490879][ T29] audit: type=1326 audit(1757045718.911:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 39.574486][ T4068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.585091][ T29] audit: type=1400 audit(1757045719.031:740): avc: denied { mount } for pid=4120 comm="syz.3.227" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.608969][ T4068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.615851][ T29] audit: type=1326 audit(1757045719.051:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.616369][ T4121] loop3: detected capacity change from 0 to 1024 [ 39.639327][ T29] audit: type=1326 audit(1757045719.051:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.668954][ T29] audit: type=1326 audit(1757045719.051:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.692304][ T29] audit: type=1326 audit(1757045719.051:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.715541][ T29] audit: type=1326 audit(1757045719.061:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.739300][ T29] audit: type=1326 audit(1757045719.061:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.762773][ T29] audit: type=1326 audit(1757045719.061:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ac943ebe9 code=0x7ffc0000 [ 39.793850][ T4068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.815971][ T4068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.840624][ T4121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.866842][ T4121] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.227: Allocating blocks 449-513 which overlap fs metadata [ 39.883915][ T4120] EXT4-fs (loop3): pa ffff88810986a000: logic 48, phys. 177, len 21 [ 39.891945][ T4120] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 39.916006][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.961454][ T4068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.979047][ T4068] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.000576][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.007687][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.017055][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.024191][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.088438][ T4068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.095622][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 40.121541][ T4147] loop0: detected capacity change from 0 to 1764 [ 40.237956][ T4068] veth0_vlan: entered promiscuous mode [ 40.250682][ T4167] loop3: detected capacity change from 0 to 128 [ 40.251502][ T4068] veth1_vlan: entered promiscuous mode [ 40.286774][ T4068] veth0_macvtap: entered promiscuous mode [ 40.295118][ T4068] veth1_macvtap: entered promiscuous mode [ 40.310850][ T4068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.322774][ T4068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.335716][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.345308][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.358162][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.377295][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.431703][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.491829][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.540918][ T4178] loop1: detected capacity change from 0 to 8192 [ 40.562040][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 40.579143][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.644527][ T4185] loop1: detected capacity change from 0 to 2048 [ 40.661708][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.718269][ T4190] loop0: detected capacity change from 0 to 1024 [ 40.749833][ T4190] EXT4-fs: Ignoring removed bh option [ 40.761368][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.778511][ T4190] EXT4-fs: inline encryption not supported [ 40.785191][ T12] bridge_slave_1: left allmulticast mode [ 40.790937][ T12] bridge_slave_1: left promiscuous mode [ 40.796688][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.804107][ T4190] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.806839][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 40.829257][ T4190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 40.829403][ T12] bridge_slave_0: left allmulticast mode [ 40.843029][ T12] bridge_slave_0: left promiscuous mode [ 40.847661][ T4190] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.241: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.848782][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.873631][ T4190] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.241: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.895513][ T4190] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.241: Failed to acquire dquot type 0 [ 40.896640][ T3301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 40.922205][ T4190] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 40.923864][ T3301] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 40.974344][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.978421][ T4190] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.241: mark_inode_dirty error [ 41.007031][ T4190] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 41.017602][ T4190] EXT4-fs (loop0): 1 orphan inode deleted [ 41.024716][ T4190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.040034][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.060100][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.070417][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 41.084165][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.094053][ T12] bond0 (unregistering): Released all slaves [ 41.103193][ T4190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.112570][ T4190] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.241: Invalid inode table block 1 in block_group 0 [ 41.128280][ T4190] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 41.139757][ T4190] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.241: mark_inode_dirty error [ 41.186793][ T4202] FAULT_INJECTION: forcing a failure. [ 41.186793][ T4202] name fail_futex, interval 1, probability 0, space 0, times 1 [ 41.200085][ T4202] CPU: 1 UID: 0 PID: 4202 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.200113][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.200126][ T4202] Call Trace: [ 41.200132][ T4202] [ 41.200139][ T4202] __dump_stack+0x1d/0x30 [ 41.200159][ T4202] dump_stack_lvl+0xe8/0x140 [ 41.200227][ T4202] dump_stack+0x15/0x1b [ 41.200245][ T4202] should_fail_ex+0x265/0x280 [ 41.200264][ T4202] should_fail+0xb/0x20 [ 41.200280][ T4202] get_futex_key+0x594/0xbd0 [ 41.200299][ T4202] ? perf_callchain_kernel+0x301/0x330 [ 41.200384][ T4202] futex_wait_requeue_pi+0x15c/0x640 [ 41.200473][ T4202] ? __pfx_futex_wake_mark+0x10/0x10 [ 41.200513][ T4202] do_futex+0x136/0x380 [ 41.200548][ T4202] __se_sys_futex+0x2ed/0x360 [ 41.200631][ T4202] __x64_sys_futex+0x78/0x90 [ 41.200658][ T4202] x64_sys_call+0x2e39/0x2ff0 [ 41.200681][ T4202] do_syscall_64+0xd2/0x200 [ 41.200733][ T4202] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.200755][ T4202] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.200778][ T4202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.200799][ T4202] RIP: 0033:0x7f2f3992ebe9 [ 41.200859][ T4202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.200875][ T4202] RSP: 002b:00007f2f3838f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 41.200891][ T4202] RAX: ffffffffffffffda RBX: 00007f2f39b65fa0 RCX: 00007f2f3992ebe9 [ 41.200902][ T4202] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 41.200913][ T4202] RBP: 00007f2f3838f090 R08: 0000200000048000 R09: 0000000000000300 [ 41.200924][ T4202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.200937][ T4202] R13: 00007f2f39b66038 R14: 00007f2f39b65fa0 R15: 00007ffcb062d508 [ 41.200991][ T4202] [ 41.435693][ T4205] loop4: detected capacity change from 0 to 512 [ 41.443365][ T4205] EXT4-fs: test_dummy_encryption option not supported [ 41.488312][ T12] hsr_slave_0: left promiscuous mode [ 41.507641][ T12] hsr_slave_1: left promiscuous mode [ 41.518904][ T4209] loop5: detected capacity change from 0 to 8192 [ 41.525487][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.533079][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.551743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.559189][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.559539][ T4216] loop0: detected capacity change from 0 to 8192 [ 41.607387][ T12] veth1_macvtap: left promiscuous mode [ 41.618769][ T12] veth0_macvtap: left promiscuous mode [ 41.630739][ T12] veth1_vlan: left promiscuous mode [ 41.636551][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 41.641402][ T12] veth0_vlan: left promiscuous mode [ 41.657001][ T4222] loop5: detected capacity change from 0 to 2048 [ 41.665696][ T4224] loop0: detected capacity change from 0 to 2048 [ 41.680786][ T4224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.700257][ T4222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.730740][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.767166][ T4068] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 41.796252][ T4068] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 41.810870][ T12] team0 (unregistering): Port device team_slave_1 removed [ 41.811698][ T4068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.831408][ T12] team0 (unregistering): Port device team_slave_0 removed [ 41.869296][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.255'. [ 41.898917][ T3361] infiniband syz1: ib_query_port failed (-19) [ 41.941923][ T4246] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.963272][ T4248] FAULT_INJECTION: forcing a failure. [ 41.963272][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.976400][ T4248] CPU: 1 UID: 0 PID: 4248 Comm: syz.4.261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.976427][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.976438][ T4248] Call Trace: [ 41.976445][ T4248] [ 41.976452][ T4248] __dump_stack+0x1d/0x30 [ 41.976543][ T4248] dump_stack_lvl+0xe8/0x140 [ 41.976607][ T4248] dump_stack+0x15/0x1b [ 41.976622][ T4248] should_fail_ex+0x265/0x280 [ 41.976641][ T4248] should_fail+0xb/0x20 [ 41.976658][ T4248] should_fail_usercopy+0x1a/0x20 [ 41.976740][ T4248] _copy_from_user+0x1c/0xb0 [ 41.976766][ T4248] ucma_write+0xd9/0x250 [ 41.976787][ T4248] ? __pfx_ucma_write+0x10/0x10 [ 41.976807][ T4248] vfs_write+0x266/0x960 [ 41.976884][ T4248] ? __rcu_read_unlock+0x4f/0x70 [ 41.976906][ T4248] ? __fget_files+0x184/0x1c0 [ 41.976930][ T4248] ksys_write+0xda/0x1a0 [ 41.976953][ T4248] __x64_sys_write+0x40/0x50 [ 41.976976][ T4248] x64_sys_call+0x27fe/0x2ff0 [ 41.977020][ T4248] do_syscall_64+0xd2/0x200 [ 41.977054][ T4248] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.977076][ T4248] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.977162][ T4248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.977234][ T4248] RIP: 0033:0x7f28ac03ebe9 [ 41.977251][ T4248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.977269][ T4248] RSP: 002b:00007f28aaa9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.977306][ T4248] RAX: ffffffffffffffda RBX: 00007f28ac275fa0 RCX: 00007f28ac03ebe9 [ 41.977318][ T4248] RDX: 0000000000000018 RSI: 0000200000000180 RDI: 0000000000000003 [ 41.977332][ T4248] RBP: 00007f28aaa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.977345][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.977358][ T4248] R13: 00007f28ac276038 R14: 00007f28ac275fa0 R15: 00007ffcd42368e8 [ 41.977390][ T4248] [ 42.223223][ T4257] 9pnet_fd: Insufficient options for proto=fd [ 42.299135][ T4261] loop4: detected capacity change from 0 to 512 [ 42.317784][ T4261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.332438][ T4261] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.345910][ T4261] EXT4-fs (loop4): 1 truncate cleaned up [ 42.354075][ T4261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.415896][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.485674][ T4281] loop0: detected capacity change from 0 to 512 [ 42.495153][ T4281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.513909][ T4279] loop4: detected capacity change from 0 to 512 [ 42.521095][ T4279] EXT4-fs: test_dummy_encryption option not supported [ 42.528352][ T4286] loop3: detected capacity change from 0 to 2048 [ 42.543138][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.558143][ T4281] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.571654][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.613319][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 42.642168][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.652635][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.687840][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.716933][ T4299] bridge1: entered promiscuous mode [ 42.722358][ T4299] bridge1: entered allmulticast mode [ 42.730393][ T4299] team0: Port device bridge1 added [ 42.735670][ T4295] loop4: detected capacity change from 0 to 8192 [ 42.762236][ T4303] 9pnet_fd: Insufficient options for proto=fd [ 42.857521][ T4315] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 42.868071][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.876518][ T4315] bond0: (slave team0): Enslaving as an active interface with an up link [ 42.887616][ T4315] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 42.900555][ T4311] loop3: detected capacity change from 0 to 512 [ 42.912164][ T4311] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.925655][ T4315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.940887][ T4311] EXT4-fs (loop3): 1 truncate cleaned up [ 42.949909][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.011133][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.031039][ T4320] loop4: detected capacity change from 0 to 8192 [ 43.040409][ T4322] loop0: detected capacity change from 0 to 8192 [ 43.111813][ T4331] siw: device registration error -23 [ 43.136332][ T4332] loop0: detected capacity change from 0 to 2048 [ 43.161907][ T4335] loop3: detected capacity change from 0 to 512 [ 43.176730][ T4335] EXT4-fs: test_dummy_encryption option not supported [ 43.242414][ T4332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.300833][ T4345] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 43.303464][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 43.323486][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 43.329812][ T4345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.347255][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 43.360736][ T4328] loop1: detected capacity change from 0 to 512 [ 43.369662][ T4345] bond2 (unregistering): Released all slaves [ 43.380100][ T4328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.404599][ T4328] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.423295][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.470624][ T4352] loop4: detected capacity change from 0 to 8192 [ 43.520868][ T4363] loop0: detected capacity change from 0 to 128 [ 43.545403][ T4363] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.558286][ T4363] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.579721][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.673638][ T4379] loop4: detected capacity change from 0 to 512 [ 43.681186][ T4379] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.710823][ T4379] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.309: Failed to acquire dquot type 1 [ 43.723462][ T4379] EXT4-fs (loop4): 1 truncate cleaned up [ 43.729613][ T4379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.795953][ T4383] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.309: Failed to acquire dquot type 1 [ 43.828767][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.883065][ T4385] loop4: detected capacity change from 0 to 512 [ 43.890023][ T4385] EXT4-fs: test_dummy_encryption option not supported [ 44.022515][ T4388] loop4: detected capacity change from 0 to 512 [ 44.034083][ T4388] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.043842][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.059893][ T4388] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.311: Failed to acquire dquot type 1 [ 44.071598][ T4388] EXT4-fs (loop4): 1 truncate cleaned up [ 44.077562][ T4388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.122497][ T4394] loop1: detected capacity change from 0 to 8192 [ 44.151191][ T4395] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.311: Failed to acquire dquot type 1 [ 44.203858][ T4399] loop1: detected capacity change from 0 to 512 [ 44.210983][ T4399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.231618][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.231768][ T4399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.253467][ T4399] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.307641][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.454070][ T4428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.323'. [ 44.471667][ T29] kauditd_printk_skb: 921 callbacks suppressed [ 44.471683][ T29] audit: type=1326 audit(1757045723.921:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.501397][ T29] audit: type=1326 audit(1757045723.921:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.525522][ T29] audit: type=1326 audit(1757045723.921:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.549401][ T29] audit: type=1326 audit(1757045723.921:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.572831][ T29] audit: type=1326 audit(1757045723.921:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.596355][ T29] audit: type=1326 audit(1757045723.921:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.619652][ T29] audit: type=1326 audit(1757045723.921:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.643216][ T29] audit: type=1326 audit(1757045723.921:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.666796][ T29] audit: type=1326 audit(1757045723.921:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.672741][ T4435] loop1: detected capacity change from 0 to 8192 [ 44.690800][ T29] audit: type=1326 audit(1757045723.921:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28ac03ebe9 code=0x7ffc0000 [ 44.725573][ T4439] loop0: detected capacity change from 0 to 764 [ 44.737553][ T4439] IPVS: set_ctl: invalid protocol: 50 172.30.1.1:20003 [ 44.811285][ T4450] loop4: detected capacity change from 0 to 512 [ 44.820371][ T4450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.843118][ T4450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.856115][ T4450] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.872279][ T4452] syz.1.334 (4452) used greatest stack depth: 9632 bytes left [ 44.906278][ T4460] syz.5.337 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.982135][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 45.008773][ T4476] loop5: detected capacity change from 0 to 764 [ 45.016902][ T4476] IPVS: set_ctl: invalid protocol: 50 172.30.1.6:20003 [ 45.051057][ T4480] siw: device registration error -23 [ 45.109009][ T4479] loop3: detected capacity change from 0 to 8192 [ 45.122520][ T4488] FAULT_INJECTION: forcing a failure. [ 45.122520][ T4488] name failslab, interval 1, probability 0, space 0, times 0 [ 45.135383][ T4488] CPU: 0 UID: 0 PID: 4488 Comm: syz.5.348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.135414][ T4488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.135427][ T4488] Call Trace: [ 45.135434][ T4488] [ 45.135442][ T4488] __dump_stack+0x1d/0x30 [ 45.135465][ T4488] dump_stack_lvl+0xe8/0x140 [ 45.135486][ T4488] dump_stack+0x15/0x1b [ 45.135578][ T4488] should_fail_ex+0x265/0x280 [ 45.135596][ T4488] ? __inet_diag_dump_start+0x53/0x790 [ 45.135686][ T4488] should_failslab+0x8c/0xb0 [ 45.135774][ T4488] __kmalloc_cache_noprof+0x4c/0x320 [ 45.135807][ T4488] __inet_diag_dump_start+0x53/0x790 [ 45.135832][ T4488] ? __netlink_lookup+0x266/0x2a0 [ 45.135860][ T4488] inet_diag_dump_start+0x1a/0x30 [ 45.135945][ T4488] __netlink_dump_start+0x331/0x520 [ 45.135969][ T4488] inet_diag_handler_cmd+0xf3/0x140 [ 45.135991][ T4488] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 45.136015][ T4488] ? __pfx_inet_diag_dump+0x10/0x10 [ 45.136045][ T4488] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 45.136065][ T4488] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 45.136147][ T4488] sock_diag_rcv_msg+0x285/0x2c0 [ 45.136174][ T4488] netlink_rcv_skb+0x120/0x220 [ 45.136216][ T4488] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 45.136243][ T4488] sock_diag_rcv+0x1c/0x30 [ 45.136266][ T4488] netlink_unicast+0x5c0/0x690 [ 45.136288][ T4488] netlink_sendmsg+0x58b/0x6b0 [ 45.136315][ T4488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.136360][ T4488] __sock_sendmsg+0x142/0x180 [ 45.136427][ T4488] sock_write_iter+0x165/0x1b0 [ 45.136492][ T4488] do_iter_readv_writev+0x499/0x540 [ 45.136519][ T4488] vfs_writev+0x2df/0x8b0 [ 45.136570][ T4488] do_writev+0xe7/0x210 [ 45.136675][ T4488] __x64_sys_writev+0x45/0x50 [ 45.136697][ T4488] x64_sys_call+0x1e9a/0x2ff0 [ 45.136717][ T4488] do_syscall_64+0xd2/0x200 [ 45.136757][ T4488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.136821][ T4488] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.136845][ T4488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.136929][ T4488] RIP: 0033:0x7f261399ebe9 [ 45.136946][ T4488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.136961][ T4488] RSP: 002b:00007f26123ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 45.136980][ T4488] RAX: ffffffffffffffda RBX: 00007f2613bd5fa0 RCX: 00007f261399ebe9 [ 45.136993][ T4488] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 45.137006][ T4488] RBP: 00007f26123ff090 R08: 0000000000000000 R09: 0000000000000000 [ 45.137039][ T4488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.137052][ T4488] R13: 00007f2613bd6038 R14: 00007f2613bd5fa0 R15: 00007ffd60b416a8 [ 45.137070][ T4488] [ 45.459321][ T4492] loop3: detected capacity change from 0 to 2048 [ 45.541520][ T4505] loop3: detected capacity change from 0 to 2048 [ 45.553704][ T4503] loop5: detected capacity change from 0 to 512 [ 45.576123][ T4503] EXT4-fs: test_dummy_encryption option not supported [ 45.587100][ T4497] loop1: detected capacity change from 0 to 512 [ 45.595150][ T4497] EXT4-fs: test_dummy_encryption option not supported [ 45.613260][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.623310][ T4505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.656681][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 45.687664][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.696644][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.745269][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.757302][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.792429][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.801365][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.810907][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.829305][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.859938][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.864685][ T4515] loop3: detected capacity change from 0 to 764 [ 45.868954][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 45.911439][ T4515] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20003 [ 45.915984][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 46.032695][ T4518] siw: device registration error -23 [ 46.261221][ T4526] loop1: detected capacity change from 0 to 8192 [ 46.287811][ T4541] loop4: detected capacity change from 0 to 512 [ 46.315856][ T4541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.334734][ T4544] FAULT_INJECTION: forcing a failure. [ 46.334734][ T4544] name failslab, interval 1, probability 0, space 0, times 0 [ 46.347606][ T4544] CPU: 0 UID: 0 PID: 4544 Comm: syz.1.368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.347630][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.347643][ T4544] Call Trace: [ 46.347650][ T4544] [ 46.347684][ T4544] __dump_stack+0x1d/0x30 [ 46.347711][ T4544] dump_stack_lvl+0xe8/0x140 [ 46.347730][ T4544] dump_stack+0x15/0x1b [ 46.347747][ T4544] should_fail_ex+0x265/0x280 [ 46.347770][ T4544] should_failslab+0x8c/0xb0 [ 46.347857][ T4544] kmem_cache_alloc_noprof+0x50/0x310 [ 46.347902][ T4544] ? audit_log_start+0x365/0x6c0 [ 46.347932][ T4544] audit_log_start+0x365/0x6c0 [ 46.347961][ T4544] ? __pfx_default_wake_function+0x10/0x10 [ 46.347993][ T4544] audit_seccomp+0x48/0x100 [ 46.348016][ T4544] ? __seccomp_filter+0x68c/0x10d0 [ 46.348093][ T4544] __seccomp_filter+0x69d/0x10d0 [ 46.348114][ T4544] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 46.348141][ T4544] ? vfs_write+0x7e8/0x960 [ 46.348163][ T4544] ? __rcu_read_unlock+0x4f/0x70 [ 46.348188][ T4544] ? __fget_files+0x184/0x1c0 [ 46.348213][ T4544] __secure_computing+0x82/0x150 [ 46.348252][ T4544] syscall_trace_enter+0xcf/0x1e0 [ 46.348284][ T4544] do_syscall_64+0xac/0x200 [ 46.348310][ T4544] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.348332][ T4544] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.348363][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.348398][ T4544] RIP: 0033:0x7f2f3992ebe9 [ 46.348414][ T4544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.348430][ T4544] RSP: 002b:00007f2f3838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.348449][ T4544] RAX: ffffffffffffffda RBX: 00007f2f39b65fa0 RCX: 00007f2f3992ebe9 [ 46.348516][ T4544] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000007 [ 46.348528][ T4544] RBP: 00007f2f3838f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.348538][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.348549][ T4544] R13: 00007f2f39b66038 R14: 00007f2f39b65fa0 R15: 00007ffcb062d508 [ 46.348591][ T4544] [ 46.583655][ T4541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.607652][ T4541] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.634396][ T4555] siw: device registration error -23 [ 46.690757][ T4561] loop5: detected capacity change from 0 to 764 [ 46.701160][ T4561] IPVS: set_ctl: invalid protocol: 50 172.30.1.6:20003 [ 46.759276][ T4568] loop1: detected capacity change from 0 to 512 [ 46.766340][ T4568] EXT4-fs: test_dummy_encryption option not supported [ 46.813731][ T4570] loop3: detected capacity change from 0 to 512 [ 46.850540][ T4570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.863753][ T4570] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.876123][ T4570] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 46.891199][ T4570] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 46.903066][ T4570] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 46.919565][ T4570] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 46.969953][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.028284][ T4581] FAULT_INJECTION: forcing a failure. [ 47.028284][ T4581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.041486][ T4581] CPU: 1 UID: 0 PID: 4581 Comm: syz.5.382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.041598][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.041610][ T4581] Call Trace: [ 47.041615][ T4581] [ 47.041621][ T4581] __dump_stack+0x1d/0x30 [ 47.041640][ T4581] dump_stack_lvl+0xe8/0x140 [ 47.041659][ T4581] dump_stack+0x15/0x1b [ 47.041675][ T4581] should_fail_ex+0x265/0x280 [ 47.041721][ T4581] should_fail+0xb/0x20 [ 47.041738][ T4581] should_fail_usercopy+0x1a/0x20 [ 47.041773][ T4581] _copy_to_user+0x20/0xa0 [ 47.041803][ T4581] __x64_sys_getrusage+0xaf/0x110 [ 47.041890][ T4581] x64_sys_call+0x15fc/0x2ff0 [ 47.041913][ T4581] do_syscall_64+0xd2/0x200 [ 47.041943][ T4581] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.041969][ T4581] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.042032][ T4581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.042051][ T4581] RIP: 0033:0x7f261399ebe9 [ 47.042064][ T4581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.042079][ T4581] RSP: 002b:00007f26123ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 47.042095][ T4581] RAX: ffffffffffffffda RBX: 00007f2613bd5fa0 RCX: 00007f261399ebe9 [ 47.042108][ T4581] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000001 [ 47.042123][ T4581] RBP: 00007f26123ff090 R08: 0000000000000000 R09: 0000000000000000 [ 47.042201][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.042213][ T4581] R13: 00007f2613bd6038 R14: 00007f2613bd5fa0 R15: 00007ffd60b416a8 [ 47.042231][ T4581] [ 47.228696][ T4585] loop1: detected capacity change from 0 to 2048 [ 47.260779][ T4585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.278718][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.300785][ T3301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 47.321325][ T3301] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 47.334505][ T4590] loop5: detected capacity change from 0 to 512 [ 47.345106][ T4590] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.384: bg 0: block 131: padding at end of block bitmap is not set [ 47.376612][ T4590] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 47.386946][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.398563][ T4590] EXT4-fs (loop5): 1 truncate cleaned up [ 47.399694][ T4593] syz.3.387 uses obsolete (PF_INET,SOCK_PACKET) [ 47.405299][ T4590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.454703][ T4597] siw: device registration error -23 [ 47.535798][ T4610] loop3: detected capacity change from 0 to 764 [ 47.544905][ T4610] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20003 [ 47.558259][ T4602] loop4: detected capacity change from 0 to 512 [ 47.566307][ T4602] EXT4-fs: test_dummy_encryption option not supported [ 47.582592][ T4614] siw: device registration error -23 [ 47.630135][ T4619] loop3: detected capacity change from 0 to 2048 [ 47.640413][ T4619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.663010][ T4623] loop4: detected capacity change from 0 to 512 [ 47.670253][ T4623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.681638][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 47.691814][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.696854][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 47.710089][ T4623] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.733823][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.809569][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 48.099976][ T4068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.113521][ T4632] siw: device registration error -23 [ 48.192235][ T4638] loop5: detected capacity change from 0 to 8192 [ 48.378769][ T4655] loop1: detected capacity change from 0 to 512 [ 48.385407][ T4654] loop3: detected capacity change from 0 to 2048 [ 48.393649][ T4655] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.405088][ T4654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.421364][ T4655] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.410: Failed to acquire dquot type 1 [ 48.440759][ T4655] EXT4-fs (loop1): 1 truncate cleaned up [ 48.446729][ T4655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.466667][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.494035][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 48.534863][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 48.558672][ T4669] loop4: detected capacity change from 0 to 2048 [ 48.567261][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.597524][ T4669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.644963][ T4677] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.410: Failed to acquire dquot type 1 [ 48.687291][ T4676] loop3: detected capacity change from 0 to 512 [ 48.743370][ T4676] EXT4-fs: test_dummy_encryption option not supported [ 48.748730][ T4688] loop0: detected capacity change from 0 to 512 [ 48.757420][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.766913][ T4688] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.793262][ T4686] siw: device registration error -23 [ 48.832276][ T4688] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.421: Failed to acquire dquot type 1 [ 48.847024][ T4688] EXT4-fs (loop0): 1 truncate cleaned up [ 48.853564][ T4694] loop5: detected capacity change from 0 to 1024 [ 48.863501][ T4688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.877107][ T4694] EXT4-fs: Ignoring removed bh option [ 48.886621][ T4694] EXT4-fs: inline encryption not supported [ 48.896962][ T4694] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.924259][ T4698] loop4: detected capacity change from 0 to 512 [ 48.939322][ T4698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.959963][ T4694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 48.984422][ T4701] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.421: Failed to acquire dquot type 1 [ 48.996636][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.009300][ T4694] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.422: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.027297][ T4698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.041513][ T4694] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.422: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.055889][ T4694] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.422: Failed to acquire dquot type 0 [ 49.056324][ T4698] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.080237][ T4694] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.091498][ T4694] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.422: mark_inode_dirty error [ 49.143495][ T4694] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.146321][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.184331][ T4694] EXT4-fs (loop5): 1 orphan inode deleted [ 49.190538][ T4694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.203607][ T1705] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.231543][ T4708] loop3: detected capacity change from 0 to 512 [ 49.240036][ T1705] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 49.255881][ T4708] EXT4-fs: test_dummy_encryption option not supported [ 49.273041][ T4694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.288205][ T4694] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.422: Invalid inode table block 1 in block_group 0 [ 49.302280][ T4717] loop0: detected capacity change from 0 to 2048 [ 49.309014][ T4721] loop3: detected capacity change from 0 to 512 [ 49.323356][ T4721] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.332136][ T4694] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.343038][ T4694] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.422: mark_inode_dirty error [ 49.356023][ T4721] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.431: Failed to acquire dquot type 1 [ 49.386656][ T4731] siw: device registration error -23 [ 49.401812][ T4721] EXT4-fs (loop3): 1 truncate cleaned up [ 49.481838][ T4737] __quota_error: 4971 callbacks suppressed [ 49.481851][ T4737] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 49.497811][ T4737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 49.507749][ T4737] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.431: Failed to acquire dquot type 1 [ 49.519557][ T29] audit: type=1326 audit(1757045728.971:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 49.558070][ T29] audit: type=1326 audit(1757045728.991:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 49.581365][ T29] audit: type=1326 audit(1757045728.991:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 49.587239][ T4742] loop5: detected capacity change from 0 to 512 [ 49.604956][ T29] audit: type=1326 audit(1757045728.991:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 49.634629][ T29] audit: type=1326 audit(1757045728.991:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0201fad550 code=0x7ffc0000 [ 49.658125][ T29] audit: type=1326 audit(1757045728.991:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 49.659461][ T4742] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.681684][ T29] audit: type=1326 audit(1757045728.991:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0201faebe9 code=0x7ffc0000 [ 49.711469][ T4742] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 49.724605][ T4742] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.437: Failed to acquire dquot type 1 [ 49.738553][ T4742] EXT4-fs (loop5): 1 truncate cleaned up [ 49.770038][ T4748] loop4: detected capacity change from 0 to 2048 [ 49.807153][ T4751] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.437: Failed to acquire dquot type 1 [ 49.833938][ T4748] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.863057][ T4748] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.438: bg 0: block 345: padding at end of block bitmap is not set [ 49.906720][ T4759] loop1: detected capacity change from 0 to 128 [ 49.915890][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 49.928419][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.928419][ T31] [ 49.938053][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 49.944187][ T31] EXT4-fs (loop4): Free/Dirty block details [ 49.950158][ T31] EXT4-fs (loop4): free_blocks=0 [ 49.955114][ T31] EXT4-fs (loop4): dirty_blocks=16 [ 49.960313][ T31] EXT4-fs (loop4): Block reservation details [ 49.966449][ T31] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 49.987388][ T4762] loop5: detected capacity change from 0 to 2048 [ 50.004314][ T4761] loop3: detected capacity change from 0 to 512 [ 50.011381][ T4761] EXT4-fs: test_dummy_encryption option not supported [ 50.042128][ T4765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 50.048842][ T4765] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.056371][ T4765] vhci_hcd vhci_hcd.0: Device attached [ 50.090329][ T4068] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 50.113280][ T4068] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 50.154512][ T4770] vhci_hcd: connection closed [ 50.159710][ T1705] vhci_hcd: stop threads [ 50.168867][ T1705] vhci_hcd: release socket [ 50.173273][ T1705] vhci_hcd: disconnect device [ 50.273511][ T4787] loop5: detected capacity change from 0 to 512 [ 50.281778][ T4787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.301048][ T4787] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.415954][ T4801] loop5: detected capacity change from 0 to 512 [ 50.424963][ T4801] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.451045][ T4801] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.453: Failed to acquire dquot type 1 [ 50.468417][ T4801] EXT4-fs (loop5): 1 truncate cleaned up [ 50.510956][ T4805] loop0: detected capacity change from 0 to 128 [ 50.550148][ T4806] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.453: Failed to acquire dquot type 1 [ 50.677516][ T4808] loop5: detected capacity change from 0 to 2048 [ 50.742016][ T4810] loop3: detected capacity change from 0 to 512 [ 50.752408][ T4810] EXT4-fs: test_dummy_encryption option not supported [ 50.775828][ T4068] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 50.797035][ T4068] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 50.845522][ T4820] capability: warning: `syz.3.461' uses 32-bit capabilities (legacy support in use) [ 50.893996][ T4824] loop5: detected capacity change from 0 to 512 [ 50.908914][ T4824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.926011][ T4824] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.946528][ T4833] loop3: detected capacity change from 0 to 2048 [ 50.975252][ T4836] FAULT_INJECTION: forcing a failure. [ 50.975252][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 50.988437][ T4836] CPU: 0 UID: 0 PID: 4836 Comm: syz.1.466 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.988479][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.988490][ T4836] Call Trace: [ 50.988496][ T4836] [ 50.988503][ T4836] __dump_stack+0x1d/0x30 [ 50.988522][ T4836] dump_stack_lvl+0xe8/0x140 [ 50.988593][ T4836] dump_stack+0x15/0x1b [ 50.988609][ T4836] should_fail_ex+0x265/0x280 [ 50.988633][ T4836] should_failslab+0x8c/0xb0 [ 50.988700][ T4836] kmem_cache_alloc_noprof+0x50/0x310 [ 50.988726][ T4836] ? inet_bind_bucket_create+0x2e/0x100 [ 50.988813][ T4836] inet_bind_bucket_create+0x2e/0x100 [ 50.988832][ T4836] inet_csk_get_port+0x95d/0x1070 [ 50.988866][ T4836] ? __pfx_inet_csk_get_port+0x10/0x10 [ 50.988930][ T4836] inet_csk_listen_start+0xca/0x1c0 [ 50.988955][ T4836] inet_listen+0x1b1/0x200 [ 50.989005][ T4836] __x64_sys_listen+0x10d/0x170 [ 50.989071][ T4836] x64_sys_call+0x206c/0x2ff0 [ 50.989093][ T4836] do_syscall_64+0xd2/0x200 [ 50.989123][ T4836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.989158][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.989223][ T4836] RIP: 0033:0x7f2f3992ebe9 [ 50.989239][ T4836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.989254][ T4836] RSP: 002b:00007f2f3838f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 50.989271][ T4836] RAX: ffffffffffffffda RBX: 00007f2f39b65fa0 RCX: 00007f2f3992ebe9 [ 50.989288][ T4836] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000006 [ 50.989302][ T4836] RBP: 00007f2f3838f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.989314][ T4836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.989327][ T4836] R13: 00007f2f39b66038 R14: 00007f2f39b65fa0 R15: 00007ffcb062d508 [ 50.989345][ T4836] [ 51.225222][ T4842] netlink: 'syz.3.468': attribute type 7 has an invalid length. [ 51.275400][ T4843] __nla_validate_parse: 10 callbacks suppressed [ 51.275416][ T4843] netlink: 104 bytes leftover after parsing attributes in process `syz.5.467'. [ 51.317679][ T4843] loop5: detected capacity change from 0 to 128 [ 51.371612][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 51.453369][ T4853] loop1: detected capacity change from 0 to 512 [ 51.466559][ T4853] EXT4-fs: test_dummy_encryption option not supported [ 51.498103][ T4855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 51.530689][ T4860] loop1: detected capacity change from 0 to 512 [ 51.546258][ T4860] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.590360][ T4860] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.475: Failed to acquire dquot type 1 [ 51.609361][ T4860] EXT4-fs (loop1): 1 truncate cleaned up [ 51.631065][ T4861] loop0: detected capacity change from 0 to 512 [ 51.638095][ T4861] EXT4-fs: test_dummy_encryption option not supported [ 51.706628][ T4867] FAULT_INJECTION: forcing a failure. [ 51.706628][ T4867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.719863][ T4867] CPU: 0 UID: 0 PID: 4867 Comm: syz.0.476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.719916][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.719927][ T4867] Call Trace: [ 51.719932][ T4867] [ 51.719938][ T4867] __dump_stack+0x1d/0x30 [ 51.719957][ T4867] dump_stack_lvl+0xe8/0x140 [ 51.720014][ T4867] dump_stack+0x15/0x1b [ 51.720053][ T4867] should_fail_ex+0x265/0x280 [ 51.720072][ T4867] should_fail+0xb/0x20 [ 51.720108][ T4867] should_fail_usercopy+0x1a/0x20 [ 51.720129][ T4867] _copy_to_user+0x20/0xa0 [ 51.720160][ T4867] simple_read_from_buffer+0xb5/0x130 [ 51.720215][ T4867] proc_fail_nth_read+0x10e/0x150 [ 51.720243][ T4867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.720271][ T4867] vfs_read+0x1a5/0x770 [ 51.720381][ T4867] ? __rcu_read_unlock+0x4f/0x70 [ 51.720542][ T4867] ? __fget_files+0x184/0x1c0 [ 51.720566][ T4867] ksys_read+0xda/0x1a0 [ 51.720701][ T4867] __x64_sys_read+0x40/0x50 [ 51.720723][ T4867] x64_sys_call+0x27bc/0x2ff0 [ 51.720782][ T4867] do_syscall_64+0xd2/0x200 [ 51.720807][ T4867] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.720828][ T4867] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.720857][ T4867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.720944][ T4867] RIP: 0033:0x7f0201fad5fc [ 51.721042][ T4867] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 51.721058][ T4867] RSP: 002b:00007f0200a0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.721078][ T4867] RAX: ffffffffffffffda RBX: 00007f02021e5fa0 RCX: 00007f0201fad5fc [ 51.721091][ T4867] RDX: 000000000000000f RSI: 00007f0200a0f0a0 RDI: 0000000000000007 [ 51.721101][ T4867] RBP: 00007f0200a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.721112][ T4867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.721122][ T4867] R13: 00007f02021e6038 R14: 00007f02021e5fa0 R15: 00007ffe416ef6c8 [ 51.721138][ T4867] [ 51.977755][ T4870] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.475: Failed to acquire dquot type 1 [ 52.061519][ T4872] loop0: detected capacity change from 0 to 2048 [ 52.102750][ T4875] loop4: detected capacity change from 0 to 512 [ 52.157255][ T4875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.202623][ T4875] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.205039][ T4884] loop3: detected capacity change from 0 to 512 [ 52.220296][ T4884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.229076][ T4884] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.481: corrupted xattr block 95: invalid header [ 52.257726][ T4884] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.481: bg 0: block 7: invalid block bitmap [ 52.277463][ T4884] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 52.296732][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'. [ 52.325311][ T4884] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.481: invalid indirect mapped block 69888 (level 2) [ 52.345105][ T4891] loop1: detected capacity change from 0 to 512 [ 52.352811][ T4891] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.367540][ T4884] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.481: corrupted xattr block 95: invalid header [ 52.368340][ T4893] FAULT_INJECTION: forcing a failure. [ 52.368340][ T4893] name failslab, interval 1, probability 0, space 0, times 0 [ 52.393499][ T4893] CPU: 1 UID: 0 PID: 4893 Comm: syz.0.483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.393582][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.393592][ T4893] Call Trace: [ 52.393598][ T4893] [ 52.393605][ T4893] __dump_stack+0x1d/0x30 [ 52.393623][ T4893] dump_stack_lvl+0xe8/0x140 [ 52.393712][ T4893] dump_stack+0x15/0x1b [ 52.393780][ T4893] should_fail_ex+0x265/0x280 [ 52.393850][ T4893] should_failslab+0x8c/0xb0 [ 52.393871][ T4893] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 52.393900][ T4893] ? sidtab_context_to_sid+0x1c5/0x5e0 [ 52.393917][ T4893] ? context_to_sid+0x2da/0x310 [ 52.393934][ T4893] kstrdup+0x3e/0xd0 [ 52.393955][ T4893] sidtab_context_to_sid+0x1c5/0x5e0 [ 52.394008][ T4893] security_context_to_sid_core+0x294/0x3b0 [ 52.394030][ T4893] security_context_to_sid_force+0x30/0x40 [ 52.394049][ T4893] selinux_inode_setxattr+0x4e8/0x6e0 [ 52.394095][ T4893] security_inode_setxattr+0x13a/0x1b0 [ 52.394122][ T4893] __vfs_setxattr_locked+0x83/0x1d0 [ 52.394144][ T4893] vfs_setxattr+0x132/0x270 [ 52.394192][ T4893] filename_setxattr+0x1ad/0x400 [ 52.394215][ T4893] path_setxattrat+0x2c9/0x310 [ 52.394253][ T4893] __x64_sys_lsetxattr+0x71/0x90 [ 52.394309][ T4893] x64_sys_call+0x2877/0x2ff0 [ 52.394397][ T4893] do_syscall_64+0xd2/0x200 [ 52.394422][ T4893] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.394480][ T4893] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.394503][ T4893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.394539][ T4893] RIP: 0033:0x7f0201faebe9 [ 52.394553][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.394568][ T4893] RSP: 002b:00007f0200a0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 52.394584][ T4893] RAX: ffffffffffffffda RBX: 00007f02021e5fa0 RCX: 00007f0201faebe9 [ 52.394594][ T4893] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400 [ 52.394637][ T4893] RBP: 00007f0200a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.394678][ T4893] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 52.394688][ T4893] R13: 00007f02021e6038 R14: 00007f02021e5fa0 R15: 00007ffe416ef6c8 [ 52.394702][ T4893] [ 52.621134][ T4884] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 52.635541][ T4884] EXT4-fs (loop3): 1 orphan inode deleted [ 52.643740][ T4884] EXT4-fs error (device loop3): __ext4_iget:5464: inode #15: block 1803188595: comm syz.3.481: invalid block [ 52.664512][ T4895] siw: device registration error -23 [ 52.676553][ T4897] loop0: detected capacity change from 0 to 512 [ 52.692841][ T4897] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.716364][ T4897] FAULT_INJECTION: forcing a failure. [ 52.716364][ T4897] name failslab, interval 1, probability 0, space 0, times 0 [ 52.729135][ T4897] CPU: 0 UID: 0 PID: 4897 Comm: syz.0.486 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.729162][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.729173][ T4897] Call Trace: [ 52.729178][ T4897] [ 52.729185][ T4897] __dump_stack+0x1d/0x30 [ 52.729206][ T4897] dump_stack_lvl+0xe8/0x140 [ 52.729280][ T4897] dump_stack+0x15/0x1b [ 52.729298][ T4897] should_fail_ex+0x265/0x280 [ 52.729321][ T4897] should_failslab+0x8c/0xb0 [ 52.729348][ T4897] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 52.729450][ T4897] ? __d_alloc+0x3d/0x340 [ 52.729480][ T4897] __d_alloc+0x3d/0x340 [ 52.729507][ T4897] d_alloc+0x2e/0x100 [ 52.729533][ T4897] lookup_one_qstr_excl+0x99/0x250 [ 52.729601][ T4897] do_unlinkat+0x176/0x480 [ 52.729684][ T4897] __x64_sys_unlinkat+0x97/0xb0 [ 52.729725][ T4897] x64_sys_call+0x2ede/0x2ff0 [ 52.729748][ T4897] do_syscall_64+0xd2/0x200 [ 52.729835][ T4897] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.729858][ T4897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.729882][ T4897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.729968][ T4897] RIP: 0033:0x7f0201faebe9 [ 52.729982][ T4897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.729997][ T4897] RSP: 002b:00007f0200a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 52.730014][ T4897] RAX: ffffffffffffffda RBX: 00007f02021e5fa0 RCX: 00007f0201faebe9 [ 52.730025][ T4897] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 52.730035][ T4897] RBP: 00007f0200a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.730052][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.730065][ T4897] R13: 00007f02021e6038 R14: 00007f02021e5fa0 R15: 00007ffe416ef6c8 [ 52.730084][ T4897] [ 52.761706][ T4908] bridge1: entered promiscuous mode [ 52.929100][ T4908] bridge1: entered allmulticast mode [ 52.937987][ T4908] team0: Port device bridge1 added [ 52.944002][ T4906] netlink: 96 bytes leftover after parsing attributes in process `syz.3.488'. [ 52.968083][ T4915] loop0: detected capacity change from 0 to 512 [ 52.979159][ T4910] netlink: 104 bytes leftover after parsing attributes in process `syz.5.491'. [ 52.988339][ T4915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.039756][ T4915] EXT4-fs (loop0): 1 truncate cleaned up [ 53.046313][ T4910] loop5: detected capacity change from 0 to 128 [ 53.170813][ T4915] SELinux: failed to load policy [ 53.215346][ T4927] FAULT_INJECTION: forcing a failure. [ 53.215346][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 53.228016][ T4927] CPU: 1 UID: 0 PID: 4927 Comm: syz.0.496 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.228041][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.228052][ T4927] Call Trace: [ 53.228057][ T4927] [ 53.228063][ T4927] __dump_stack+0x1d/0x30 [ 53.228115][ T4927] dump_stack_lvl+0xe8/0x140 [ 53.228192][ T4927] dump_stack+0x15/0x1b [ 53.228208][ T4927] should_fail_ex+0x265/0x280 [ 53.228226][ T4927] should_failslab+0x8c/0xb0 [ 53.228250][ T4927] kmem_cache_alloc_noprof+0x50/0x310 [ 53.228350][ T4927] ? skb_clone+0x151/0x1f0 [ 53.228378][ T4927] skb_clone+0x151/0x1f0 [ 53.228432][ T4927] __netlink_deliver_tap+0x2c9/0x500 [ 53.228459][ T4927] netlink_unicast+0x66b/0x690 [ 53.228479][ T4927] netlink_sendmsg+0x58b/0x6b0 [ 53.228584][ T4927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.228609][ T4927] __sock_sendmsg+0x142/0x180 [ 53.228641][ T4927] ____sys_sendmsg+0x31e/0x4e0 [ 53.228668][ T4927] ___sys_sendmsg+0x17b/0x1d0 [ 53.228740][ T4927] __x64_sys_sendmsg+0xd4/0x160 [ 53.228767][ T4927] x64_sys_call+0x191e/0x2ff0 [ 53.228790][ T4927] do_syscall_64+0xd2/0x200 [ 53.228850][ T4927] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.228876][ T4927] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.228899][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.228966][ T4927] RIP: 0033:0x7f0201faebe9 [ 53.228983][ T4927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.229002][ T4927] RSP: 002b:00007f0200a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.229068][ T4927] RAX: ffffffffffffffda RBX: 00007f02021e5fa0 RCX: 00007f0201faebe9 [ 53.229082][ T4927] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 53.229092][ T4927] RBP: 00007f0200a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.229103][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.229113][ T4927] R13: 00007f02021e6038 R14: 00007f02021e5fa0 R15: 00007ffe416ef6c8 [ 53.229129][ T4927] [ 53.247865][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 53.497842][ T4937] loop4: detected capacity change from 0 to 164 [ 53.514991][ T4937] process 'syz.4.499' launched '/dev/fd/3' with NULL argv: empty string added [ 53.525703][ T4937] syz.4.499: attempt to access beyond end of device [ 53.525703][ T4937] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.570119][ T4937] syz.4.499: attempt to access beyond end of device [ 53.570119][ T4937] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 53.570428][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 53.633578][ T4947] loop4: detected capacity change from 0 to 512 [ 53.641568][ T4947] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 53.662875][ T4951] loop5: detected capacity change from 0 to 2048 [ 53.677065][ T4955] FAULT_INJECTION: forcing a failure. [ 53.677065][ T4955] name failslab, interval 1, probability 0, space 0, times 0 [ 53.689960][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: syz.1.506 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.690039][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.690051][ T4955] Call Trace: [ 53.690056][ T4955] [ 53.690061][ T4955] __dump_stack+0x1d/0x30 [ 53.690083][ T4955] dump_stack_lvl+0xe8/0x140 [ 53.690102][ T4955] dump_stack+0x15/0x1b [ 53.690120][ T4955] should_fail_ex+0x265/0x280 [ 53.690143][ T4955] should_failslab+0x8c/0xb0 [ 53.690243][ T4955] kmem_cache_alloc_noprof+0x50/0x310 [ 53.690268][ T4955] ? skb_clone+0x151/0x1f0 [ 53.690291][ T4955] skb_clone+0x151/0x1f0 [ 53.690315][ T4955] __netlink_deliver_tap+0x2c9/0x500 [ 53.690390][ T4955] netlink_unicast+0x66b/0x690 [ 53.690411][ T4955] netlink_sendmsg+0x58b/0x6b0 [ 53.690437][ T4955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.690458][ T4955] __sock_sendmsg+0x142/0x180 [ 53.690614][ T4955] ____sys_sendmsg+0x31e/0x4e0 [ 53.690641][ T4955] ___sys_sendmsg+0x17b/0x1d0 [ 53.690677][ T4955] __x64_sys_sendmsg+0xd4/0x160 [ 53.690726][ T4955] x64_sys_call+0x191e/0x2ff0 [ 53.690746][ T4955] do_syscall_64+0xd2/0x200 [ 53.690854][ T4955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.690881][ T4955] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.690907][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.690927][ T4955] RIP: 0033:0x7f2f3992ebe9 [ 53.690940][ T4955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.691022][ T4955] RSP: 002b:00007f2f3838f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.691038][ T4955] RAX: ffffffffffffffda RBX: 00007f2f39b65fa0 RCX: 00007f2f3992ebe9 [ 53.691052][ T4955] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 53.691065][ T4955] RBP: 00007f2f3838f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.691079][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.691092][ T4955] R13: 00007f2f39b66038 R14: 00007f2f39b65fa0 R15: 00007ffcb062d508 [ 53.691110][ T4955] [ 53.696274][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'. [ 53.761497][ T4959] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 53.764416][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'. [ 53.873500][ T4964] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 53.880632][ T4959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.927153][ T4967] FAULT_INJECTION: forcing a failure. [ 53.927153][ T4967] name failslab, interval 1, probability 0, space 0, times 0 [ 53.953778][ T4967] CPU: 1 UID: 0 PID: 4967 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.953863][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.953876][ T4967] Call Trace: [ 53.953882][ T4967] [ 53.953889][ T4967] __dump_stack+0x1d/0x30 [ 53.953912][ T4967] dump_stack_lvl+0xe8/0x140 [ 53.953931][ T4967] dump_stack+0x15/0x1b [ 53.953949][ T4967] should_fail_ex+0x265/0x280 [ 53.954000][ T4967] should_failslab+0x8c/0xb0 [ 53.954026][ T4967] kmem_cache_alloc_node_noprof+0x57/0x320 [ 53.954057][ T4967] ? __alloc_skb+0x101/0x320 [ 53.954078][ T4967] __alloc_skb+0x101/0x320 [ 53.954098][ T4967] netlink_alloc_large_skb+0xba/0xf0 [ 53.954270][ T4967] netlink_sendmsg+0x3cf/0x6b0 [ 53.954297][ T4967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.954322][ T4967] __sock_sendmsg+0x142/0x180 [ 53.954431][ T4967] ____sys_sendmsg+0x31e/0x4e0 [ 53.954459][ T4967] ___sys_sendmsg+0x17b/0x1d0 [ 53.954496][ T4967] __x64_sys_sendmsg+0xd4/0x160 [ 53.954578][ T4967] x64_sys_call+0x191e/0x2ff0 [ 53.954601][ T4967] do_syscall_64+0xd2/0x200 [ 53.954631][ T4967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.954730][ T4967] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.954758][ T4967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.954819][ T4967] RIP: 0033:0x7f6ac943ebe9 [ 53.954862][ T4967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.954880][ T4967] RSP: 002b:00007f6ac7e86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.954900][ T4967] RAX: ffffffffffffffda RBX: 00007f6ac9676090 RCX: 00007f6ac943ebe9 [ 53.954913][ T4967] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 53.954926][ T4967] RBP: 00007f6ac7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 53.954939][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.954953][ T4967] R13: 00007f6ac9676128 R14: 00007f6ac9676090 R15: 00007fff0a5306c8 [ 53.955051][ T4967] [ 54.159754][ T4962] bond2 (unregistering): Released all slaves [ 54.177501][ T4964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.186544][ T4975] ================================================================== [ 54.194635][ T4975] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 54.201915][ T4975] [ 54.204219][ T4975] write to 0xffff888104b98e00 of 8 bytes by task 4972 on cpu 1: [ 54.211841][ T4975] mas_wmb_replace+0x20d/0x14a0 [ 54.216725][ T4975] mas_wr_store_entry+0x1773/0x2b50 [ 54.221914][ T4975] mas_store_prealloc+0x74d/0x9e0 [ 54.226931][ T4975] vma_iter_store_new+0x1c5/0x200 [ 54.231947][ T4975] vma_complete+0x125/0x580 [ 54.236445][ T4975] __split_vma+0x5d9/0x650 [ 54.240852][ T4975] vma_modify+0x3f2/0xc80 [ 54.245168][ T4975] vma_modify_flags+0x101/0x130 [ 54.250007][ T4975] mprotect_fixup+0x2cc/0x570 [ 54.254769][ T4975] do_mprotect_pkey+0x6d6/0x980 [ 54.259614][ T4975] __x64_sys_mprotect+0x48/0x60 [ 54.264455][ T4975] x64_sys_call+0x274e/0x2ff0 [ 54.269123][ T4975] do_syscall_64+0xd2/0x200 [ 54.273620][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.279509][ T4975] [ 54.281825][ T4975] read to 0xffff888104b98e00 of 8 bytes by task 4975 on cpu 0: [ 54.289449][ T4975] mas_state_walk+0x119/0x650 [ 54.294147][ T4975] mas_walk+0x60/0x150 [ 54.298211][ T4975] lock_vma_under_rcu+0x8d/0x160 [ 54.303146][ T4975] do_user_addr_fault+0x233/0x1090 [ 54.308255][ T4975] exc_page_fault+0x62/0xa0 [ 54.312751][ T4975] asm_exc_page_fault+0x26/0x30 [ 54.317594][ T4975] [ 54.319900][ T4975] value changed: 0xffff888118f7e7c1 -> 0xffff888104b98e00 [ 54.326997][ T4975] [ 54.329306][ T4975] Reported by Kernel Concurrency Sanitizer on: [ 54.335438][ T4975] CPU: 0 UID: 0 PID: 4975 Comm: syz.5.510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.345059][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.355098][ T4975] ==================================================================