last executing test programs: 30.023360885s ago: executing program 1 (id=94): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, @in6={0xa, 0x4e21, 0x3400000, @dev={0xfe, 0x80, '\x00', 0x10}, 0xfffffffe}], 0x54) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) 29.955807092s ago: executing program 1 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) 29.114760115s ago: executing program 1 (id=112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9d}, 0x18) r4 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000000100", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 28.25255152s ago: executing program 1 (id=131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x70, 0x0, &(0x7f0000001040)) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000440)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000009000000000000000600000d000000000600000002000000040600000000000000000000000000000200000000000000020000000200000003000000000000000000000000000006040000000a00000000000002030000000f00000000000007000000000f000000000000060400000000305f5f2ea1302e00091dea6cbe474c7b97ff8072239c3a86ca1db18e1c18de034b0f5d718c2b49029969f37f0eff495600e1ef3b7b6073d4799005a576a8b1f2c38779"], &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) unshare(0x2c040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000f00)={0x0, 0x10000e, 0x20000}, 0x20) io_uring_setup(0x5b55, &(0x7f0000000040)={0x0, 0xdf49, 0x40, 0x0, 0x2ae}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x7) 27.287917695s ago: executing program 1 (id=153): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 26.987956004s ago: executing program 1 (id=156): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x18000000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 26.975111276s ago: executing program 32 (id=156): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x18000000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 3.940576198s ago: executing program 3 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0x4}, 0x18) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 3.855687736s ago: executing program 3 (id=526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x7ff, 0x100, {{0x19, 0x4, 0x0, 0x8, 0x64, 0x66, 0x0, 0x7c, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x23, 0xd6, [@remote, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @loopback, @loopback]}, @end, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x9c, 0x3, 0x9, [{@rand_addr=0x64010101, 0xf}, {@broadcast, 0x9}, {@multicast1, 0x7}, {@empty, 0x8bcc}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0x100007, @private2, 0xffffffff}}, 0xfffd}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0x100007, @private2, 0xffffffff}}, 0xfffd}, 0x90) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r6, 0xfffffffb}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r6, 0xfffffffb}, 0x8) 3.767194625s ago: executing program 3 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3.652360976s ago: executing program 3 (id=533): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) read$msr(r1, &(0x7f0000001bc0)=""/4080, 0xff0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, 0x0, 0x40080) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 2.764768636s ago: executing program 3 (id=552): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x59, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.295506902s ago: executing program 0 (id=558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) unshare(0x62040200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2.153846686s ago: executing program 5 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004020000040000000180000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_usbip_server_init(0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000003c0)="a9850350d7241188", 0x8}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0xb3c}], 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x6, 0x200, 0x38b3, 0x2000, r2, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRESOCT=r1, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) setpgid(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.841571756s ago: executing program 0 (id=563): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.582248352s ago: executing program 0 (id=564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x7}], 0x1000000000000098) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) write$selinux_context(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:usbtty_device_t:s0\x00', 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) open(0x0, 0x161000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef0100"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 1.482844512s ago: executing program 0 (id=565): syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0xc0, 0xf7, 0xfffff020}, {0x6, 0x6, 0x0, 0x57e}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18008000000000000000000000000000181100fb", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 1.340381626s ago: executing program 0 (id=567): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.247911525s ago: executing program 2 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = inotify_init() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) inotify_add_watch(r4, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) close(0x3) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000100)={0x0, 0x8, 0x4, 0xd2, @vifc_lcl_ifindex=r3, @empty}, 0x10) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000140)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='cachefiles_unlink\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, 0x0, 0x0, 0x101, 0x0) 1.227006967s ago: executing program 2 (id=570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="91103d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3, 0x2}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x62, 0x3, 0x5, 0x60}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1000}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0xc6, "a6bbbca7d5a3e6a5d09f07504bec14760e0f18b21136ebb300caf396a918a86782f77830779858f52e0f83d2069bdcf576a62571ebf909ef325b22c53d31941be4f38cca6c6a7b751a772622073804d412298737a51ecabc15c0eacd3ce6aff1c7aa3bd27bf0e0e8c6035507a33b9ab040019c4a4871659b640f18f122092b9d1498edd338b7fc80dcabb6ab05093fa7fe7104baafa32fa55bc1c1f5d3bab7c003c9c909eae8ed2fe107188d5e44cd17515e4ccee774e48bf9b25f832bfb41504685a87b8fdf"}, &(0x7f0000000340)=0xce) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000380)={0x5, 0x6, 0x8000, 0x6, 0x40, 0x0, 0x6, 0x9, r5}, &(0x7f0000000500)=0x20) 1.141811925s ago: executing program 2 (id=571): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 1.117192368s ago: executing program 5 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004020000040000000180000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_usbip_server_init(0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000003c0)="a9850350d7241188", 0x8}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0xb3c}], 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x6, 0x200, 0x38b3, 0x2000, r2, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRESOCT=r1, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) setpgid(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.003553691s ago: executing program 2 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x13000000) 904.578772ms ago: executing program 2 (id=575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ac141400000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000090000000000000000000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00010100000000000000005f00120067636d286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080010000bed40c8022674b0ecf0153d786cfc67c1aa8a900"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x7}], 0x1000000000000098) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) write$selinux_context(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:usbtty_device_t:s0\x00', 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) open(0x0, 0x161000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef0100"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 903.903612ms ago: executing program 2 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010000000000ffffffff00000000", @ANYRES32, @ANYBLOB="40000000ab200200280012800e00010069657461700000001400028006210000060010004e24000000000000"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) eventfd2(0x8001, 0x80800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000014c0)={'veth0_to_hsr\x00', 0x84aebfbd634927d3}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r5, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/24, 0x18}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4c805, &(0x7f0000001580)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, 0x1c) r6 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x2814c00, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r6], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r7, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xfffffffffffffd6a, 0x0, 0x0, 0x0, 0x1a, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000015fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030"], 0xa0}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000eaffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', r9, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 739.886207ms ago: executing program 3 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) 479.404593ms ago: executing program 5 (id=581): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000002000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) bpf$MAP_CREATE(0x0, 0x0, 0xb25fea8196ea28cd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) msgget$private(0x0, 0x480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") truncate(&(0x7f0000000ac0)='./file1\x00', 0x40) (fail_nth: 1) 411.953419ms ago: executing program 4 (id=582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2}) 411.452329ms ago: executing program 0 (id=583): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) read$msr(r1, &(0x7f0000001bc0)=""/4080, 0xff0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, 0x0, 0x40080) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 358.051715ms ago: executing program 5 (id=584): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 357.723865ms ago: executing program 4 (id=585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chroot(0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 292.944651ms ago: executing program 4 (id=586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000c28f077be1", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) (async, rerun: 32) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000380)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000840)=""/186, 0xba}, {&(0x7f0000000900)=""/175, 0xaf}], 0x4, &(0x7f0000000140)=""/56, 0x38}, 0x12101) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x9, r7, 0x7, 0xffffffffffffffff) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) iopl(0x3) (async) unshare(0x2c000680) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) 114.805979ms ago: executing program 4 (id=587): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="84e1129a72cdf348c052fa3f63e8c1643bedb8b72246a01314dbe036c7a829ed3a04bfcda97efe862097787a5602c333f606053d1191778c6cf3f6410f4cb0959630085115df5baf96ad3d6a669938901285e36db8dc1352b238fe768bd311f5f11a9204e4348151bec965851b"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x658080) capset(&(0x7f0000000200)={0x19980330}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/108, 0x6c}], 0x4, 0x7, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffd}, 0x8) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r4 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000040)=0x3ff, 0x4) r5 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0x400df07, 0x40, 0x1, 0x8105}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) set_mempolicy(0x4000, &(0x7f0000000080)=0x8, 0x1) r6 = socket(0x22, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) 114.304258ms ago: executing program 5 (id=588): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() chroot(&(0x7f0000000000)='./file0\x00') bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) 56.475414ms ago: executing program 4 (id=589): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9, 0xffffffffffffffff) 56.115874ms ago: executing program 4 (id=590): dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4088e0ffffffffff17bdc075419eabd2000012800800010067beffd48aa0dc26bc8042341fb010f151d2518b1f4410045afa3a92901f33ccd27a5104234fae34c16c265a9da92807041a0d6dd96fabfbe079dae95e4f0537d17315b068622238518241e925b0fc12876e0d8f3f83994b6f12f8299d62e619fceaec308e0a89630d83945bebac3c7f0e236da2760a85102ed4ad338769964de2cc697ec5e657300b9fe24d7c1043cb33ed6b16e6b17008b365072109af4598d8891b8a53e5b1a29d3f397ba9a25e3fd05bc9734785f3858f41da1992859c6f0e2ace5fc083bed66d"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x804, 0xe, 0x10000, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x4e20, @remote}}}, 0x88) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) connect$vsock_stream(r6, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300f3c41f533b924d0100000005000000000000000500030001000000050003000500000005000300020000000800020002000000"], 0x50}}, 0x0) 0s ago: executing program 5 (id=591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x170589, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0xab15, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") kernel console output (not intermixed with test programs): 37.510380][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.517646][ T3313] bridge_slave_1: entered allmulticast mode [ 37.524358][ T3313] bridge_slave_1: entered promiscuous mode [ 37.536300][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.543408][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.569437][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.589926][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.597045][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.604372][ T3314] bridge_slave_0: entered allmulticast mode [ 37.610840][ T3314] bridge_slave_0: entered promiscuous mode [ 37.623068][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.630097][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.656440][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.677348][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.684616][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.692023][ T3314] bridge_slave_1: entered allmulticast mode [ 37.698669][ T3314] bridge_slave_1: entered promiscuous mode [ 37.706236][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.719127][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.731959][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.752059][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.774947][ T3319] team0: Port device team_slave_0 added [ 37.787648][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.804662][ T3319] team0: Port device team_slave_1 added [ 37.816142][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.826005][ T3313] team0: Port device team_slave_0 added [ 37.832571][ T3313] team0: Port device team_slave_1 added [ 37.872847][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.879963][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.887104][ T3315] bridge_slave_0: entered allmulticast mode [ 37.893589][ T3315] bridge_slave_0: entered promiscuous mode [ 37.906912][ T3318] hsr_slave_0: entered promiscuous mode [ 37.913103][ T3318] hsr_slave_1: entered promiscuous mode [ 37.924659][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.931783][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.957924][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.968921][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.976037][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.983390][ T3315] bridge_slave_1: entered allmulticast mode [ 37.990037][ T3315] bridge_slave_1: entered promiscuous mode [ 38.001893][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.008887][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.036422][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.047987][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.055055][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.081159][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.092611][ T3314] team0: Port device team_slave_0 added [ 38.098628][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.105719][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.131766][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.152418][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.165746][ T3314] team0: Port device team_slave_1 added [ 38.197073][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.220851][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.227876][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.254040][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.265961][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.273118][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.299168][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.336987][ T3315] team0: Port device team_slave_0 added [ 38.345118][ T3313] hsr_slave_0: entered promiscuous mode [ 38.351187][ T3313] hsr_slave_1: entered promiscuous mode [ 38.357148][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 38.362920][ T3313] Cannot create hsr debugfs directory [ 38.385254][ T3319] hsr_slave_0: entered promiscuous mode [ 38.391343][ T3319] hsr_slave_1: entered promiscuous mode [ 38.397328][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.403144][ T3319] Cannot create hsr debugfs directory [ 38.409492][ T3315] team0: Port device team_slave_1 added [ 38.433559][ T3314] hsr_slave_0: entered promiscuous mode [ 38.439701][ T3314] hsr_slave_1: entered promiscuous mode [ 38.445646][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.451424][ T3314] Cannot create hsr debugfs directory [ 38.481995][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.489013][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.514964][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.542652][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.549684][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.575749][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.666880][ T3315] hsr_slave_0: entered promiscuous mode [ 38.673192][ T3315] hsr_slave_1: entered promiscuous mode [ 38.679210][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.685016][ T3315] Cannot create hsr debugfs directory [ 38.774473][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.786149][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.800089][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.809182][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.834696][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.845086][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.854348][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.864854][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.902930][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.914435][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.924123][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.933874][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.976623][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.987517][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.996787][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.015757][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.023624][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.052759][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.064945][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.086543][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.096168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.103397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.123013][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.131049][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.140437][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.150625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.157705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.174881][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.185531][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.207382][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.233063][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.249420][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.256509][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.269823][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.276926][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.293220][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.324143][ T1687] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.331249][ T1687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.352772][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.359904][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.376793][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.392519][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.409756][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.422424][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.436339][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.467812][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.474939][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.485938][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.493119][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.513983][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.521117][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.548468][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.559208][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.574681][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.581877][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.603564][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.646400][ T3318] veth0_vlan: entered promiscuous mode [ 39.657922][ T3318] veth1_vlan: entered promiscuous mode [ 39.689751][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.714201][ T3318] veth0_macvtap: entered promiscuous mode [ 39.726053][ T3318] veth1_macvtap: entered promiscuous mode [ 39.734899][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.757418][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.773359][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.802146][ T3313] veth0_vlan: entered promiscuous mode [ 39.814813][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.824814][ T3313] veth1_vlan: entered promiscuous mode [ 39.845854][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.871402][ T3313] veth0_macvtap: entered promiscuous mode [ 39.890483][ T1687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910693][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.910727][ T29] audit: type=1400 audit(1760821304.739:81): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.jB0kPb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.944288][ T3313] veth1_macvtap: entered promiscuous mode [ 39.952200][ T29] audit: type=1400 audit(1760821304.779:82): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.968570][ T1687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.974668][ T29] audit: type=1400 audit(1760821304.779:83): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.jB0kPb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.993641][ T3319] veth0_vlan: entered promiscuous mode [ 40.008865][ T29] audit: type=1400 audit(1760821304.779:84): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.036368][ T29] audit: type=1400 audit(1760821304.779:85): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.jB0kPb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.036581][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.063194][ T29] audit: type=1400 audit(1760821304.779:86): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.jB0kPb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.078705][ T1687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.097880][ T29] audit: type=1400 audit(1760821304.779:87): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.115648][ T3319] veth1_vlan: entered promiscuous mode [ 40.126126][ T29] audit: type=1400 audit(1760821304.779:88): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.154367][ T29] audit: type=1400 audit(1760821304.779:89): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.174413][ T3315] veth0_vlan: entered promiscuous mode [ 40.187314][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.194215][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.220633][ T3315] veth1_vlan: entered promiscuous mode [ 40.241040][ T3315] veth0_macvtap: entered promiscuous mode [ 40.248384][ T3319] veth0_macvtap: entered promiscuous mode [ 40.259376][ T29] audit: type=1400 audit(1760821305.089:90): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.310341][ T3319] veth1_macvtap: entered promiscuous mode [ 40.318107][ T3315] veth1_macvtap: entered promiscuous mode [ 40.334985][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.354356][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.369887][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.382935][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.398977][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.406498][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.426996][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.434417][ T3314] veth0_vlan: entered promiscuous mode [ 40.445950][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.460365][ T1687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.487731][ T1687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.496867][ T3314] veth1_vlan: entered promiscuous mode [ 40.521631][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.535606][ T3491] syz.1.8 (3491) used greatest stack depth: 9160 bytes left [ 40.549327][ T3493] pim6reg: entered allmulticast mode [ 40.559263][ T3493] FAULT_INJECTION: forcing a failure. [ 40.559263][ T3493] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.572534][ T3493] CPU: 0 UID: 0 PID: 3493 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.572566][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.572631][ T3493] Call Trace: [ 40.572639][ T3493] [ 40.572649][ T3493] __dump_stack+0x1d/0x30 [ 40.572677][ T3493] dump_stack_lvl+0xe8/0x140 [ 40.572780][ T3493] dump_stack+0x15/0x1b [ 40.572803][ T3493] should_fail_ex+0x265/0x280 [ 40.572908][ T3493] should_fail+0xb/0x20 [ 40.572977][ T3493] should_fail_usercopy+0x1a/0x20 [ 40.573003][ T3493] _copy_from_user+0x1c/0xb0 [ 40.573034][ T3493] do_ipv6_setsockopt+0x124/0x2160 [ 40.573139][ T3493] ? _parse_integer+0x27/0x40 [ 40.573228][ T3493] ? kstrtoull+0x111/0x140 [ 40.573259][ T3493] ? __rcu_read_unlock+0x4f/0x70 [ 40.573288][ T3493] ? avc_has_perm_noaudit+0x1b1/0x200 [ 40.573394][ T3493] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 40.573424][ T3493] ipv6_setsockopt+0x59/0x130 [ 40.573447][ T3493] rawv6_setsockopt+0x1d2/0x420 [ 40.573479][ T3493] sock_common_setsockopt+0x69/0x80 [ 40.573508][ T3493] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 40.573614][ T3493] __sys_setsockopt+0x184/0x200 [ 40.573651][ T3493] __x64_sys_setsockopt+0x64/0x80 [ 40.573734][ T3493] x64_sys_call+0x20ec/0x3000 [ 40.573761][ T3493] do_syscall_64+0xd2/0x200 [ 40.573837][ T3493] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.573942][ T3493] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.573972][ T3493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.574089][ T3493] RIP: 0033:0x7fb995ccefc9 [ 40.574124][ T3493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.574147][ T3493] RSP: 002b:00007fb994737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 40.574261][ T3493] RAX: ffffffffffffffda RBX: 00007fb995f25fa0 RCX: 00007fb995ccefc9 [ 40.574278][ T3493] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003 [ 40.574294][ T3493] RBP: 00007fb994737090 R08: 000000000000005c R09: 0000000000000000 [ 40.574309][ T3493] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 40.574355][ T3493] R13: 00007fb995f26038 R14: 00007fb995f25fa0 R15: 00007ffe3376ba68 [ 40.574372][ T3493] [ 40.577797][ T3496] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10'. [ 40.580482][ T3314] veth0_macvtap: entered promiscuous mode [ 40.833145][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.844884][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.855283][ T3314] veth1_macvtap: entered promiscuous mode [ 40.862409][ T3501] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 40.866865][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.884271][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.891597][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.902084][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.959171][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.991274][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.000156][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.000222][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.008954][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.030523][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.046249][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.055230][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.068773][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.104936][ T3509] loop1: detected capacity change from 0 to 2048 [ 41.112706][ T3517] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 41.136520][ T3520] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 41.144155][ T3520] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.5'. [ 41.153658][ T3511] Zero length message leads to an empty skb [ 41.160076][ T3517] SELinux: failed to load policy [ 41.166504][ T3513] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.184820][ T3518] loop0: detected capacity change from 0 to 2048 [ 41.199225][ T3304] loop1: p2 p3 p7 [ 41.215409][ T3511] loop2: detected capacity change from 0 to 512 [ 41.227789][ T3511] ======================================================= [ 41.227789][ T3511] WARNING: The mand mount option has been deprecated and [ 41.227789][ T3511] and is ignored by this kernel. Remove the mand [ 41.227789][ T3511] option from the mount to silence this warning. [ 41.227789][ T3511] ======================================================= [ 41.270263][ T3525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 41.270297][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 41.300751][ T3511] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.14: EA inode hash validation failed [ 41.300867][ T3511] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.300959][ T3511] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.14: corrupted inode contents [ 41.301185][ T3511] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.14: mark_inode_dirty error [ 41.301324][ T3511] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.14: corrupted inode contents [ 41.301462][ T3511] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.14: mark_inode_dirty error [ 41.301588][ T3511] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.14: mark inode dirty (error -117) [ 41.301745][ T3511] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 41.301785][ T3511] EXT4-fs (loop2): 1 orphan inode deleted [ 41.302236][ T3511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.305894][ T3307] Alternate GPT is invalid, using primary GPT. [ 41.306051][ T3307] loop0: p1 p2 p3 [ 41.306061][ T3307] loop0: partition table partially beyond EOD, truncated [ 41.310951][ T3509] loop1: p2 p3 p7 [ 41.331636][ T3518] Alternate GPT is invalid, using primary GPT. [ 41.331834][ T3518] loop0: p1 p2 p3 [ 41.331844][ T3518] loop0: partition table partially beyond EOD, truncated [ 41.413829][ T3509] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 41.413851][ T3509] SELinux: failed to load policy [ 41.422024][ T3525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 41.427815][ T3525] loop3: detected capacity change from 0 to 512 [ 41.437804][ T3525] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.17: EA inode hash validation failed [ 41.437907][ T3525] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.17: corrupted inode contents [ 41.438053][ T3525] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.17: mark_inode_dirty error [ 41.438189][ T3525] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.17: corrupted inode contents [ 41.438297][ T3525] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.17: mark_inode_dirty error [ 41.438423][ T3525] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.17: mark inode dirty (error -117) [ 41.439179][ T3525] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 41.439212][ T3525] EXT4-fs (loop3): 1 orphan inode deleted [ 41.439768][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.457058][ T3002] loop1: p2 p3 p7 [ 41.622556][ T3536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3536 comm=syz.2.14 [ 41.717018][ T3534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3534 comm=syz.3.17 [ 41.790634][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.811163][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 41.850616][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.866698][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 41.868897][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 41.878985][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.967492][ T3551] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 41.998765][ T3551] SELinux: failed to load policy [ 42.086607][ T3553] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 42.127434][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.215671][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 42.227444][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 42.249127][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 42.265202][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.394378][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.467964][ T3564] loop2: detected capacity change from 0 to 2048 [ 42.489544][ T3566] syz.1.29 (3566) used greatest stack depth: 8400 bytes left [ 42.505295][ T3570] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 42.555671][ T3530] loop2: p2 p3 p7 [ 42.570788][ T3564] loop2: p2 p3 p7 [ 42.579561][ T3572] loop1: detected capacity change from 0 to 2048 [ 42.597931][ T3564] SELinux: ebitmap: truncated map [ 42.621477][ T3572] loop1: p2 p3 p7 [ 42.633528][ T3564] SELinux: failed to load policy [ 42.671815][ T3572] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 42.720857][ T3572] SELinux: failed to load policy [ 42.787156][ T3578] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.787187][ T3578] SELinux: failed to load policy [ 42.993117][ T3596] loop4: detected capacity change from 0 to 2048 [ 43.019136][ T3596] Alternate GPT is invalid, using primary GPT. [ 43.025605][ T3596] loop4: p1 p2 p3 [ 43.029512][ T3596] loop4: partition table partially beyond EOD, truncated [ 43.142246][ T3608] loop3: detected capacity change from 0 to 2048 [ 43.160310][ T3612] loop2: detected capacity change from 0 to 2048 [ 43.165633][ T3615] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.165656][ T3615] SELinux: failed to load policy [ 43.193790][ T3527] loop3: p2 p3 p7 [ 43.212361][ T3530] loop2: p2 p3 p7 [ 43.222979][ T3612] loop2: p2 p3 p7 [ 43.228684][ T3608] loop3: p2 p3 p7 [ 43.241153][ T3612] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 43.241175][ T3612] SELinux: failed to load policy [ 43.252781][ T3608] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 43.272280][ T3608] SELinux: failed to load policy [ 43.281743][ T3619] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 43.426665][ T3626] loop2: detected capacity change from 0 to 2048 [ 43.494950][ T3626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.547525][ T3635] loop3: detected capacity change from 0 to 512 [ 43.579943][ T3626] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.583561][ T3635] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.60: EA inode hash validation failed [ 43.618747][ T3635] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.60: corrupted inode contents [ 43.645701][ T3635] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.60: mark_inode_dirty error [ 43.661764][ T3643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.54: bg 0: block 345: padding at end of block bitmap is not set [ 43.676347][ T3643] EXT4-fs (loop2): Remounting filesystem read-only [ 43.683631][ T3635] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.60: corrupted inode contents [ 43.719767][ T3635] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.60: mark_inode_dirty error [ 43.744745][ T3635] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.60: mark inode dirty (error -117) [ 43.761854][ T3645] SELinux: failed to load policy [ 43.785003][ T3635] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 43.794515][ T3635] EXT4-fs (loop3): 1 orphan inode deleted [ 43.829735][ T3649] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 43.836807][ T3647] loop4: detected capacity change from 0 to 2048 [ 43.844138][ T3635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.910890][ T3527] Alternate GPT is invalid, using primary GPT. [ 43.917617][ T3527] loop4: p1 p2 p3 [ 43.921443][ T3527] loop4: partition table partially beyond EOD, truncated [ 43.986793][ T3655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3655 comm=syz.3.60 [ 44.003061][ T3647] Alternate GPT is invalid, using primary GPT. [ 44.009542][ T3647] loop4: p1 p2 p3 [ 44.010745][ T3654] loop1: detected capacity change from 0 to 2048 [ 44.013337][ T3647] loop4: partition table partially beyond EOD, truncated [ 44.067018][ T3304] loop1: p2 p3 p7 [ 44.123975][ T3654] loop1: p2 p3 p7 [ 44.154471][ T3654] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 44.553914][ T3674] lo speed is unknown, defaulting to 1000 [ 44.563403][ T3621] syz.2.54 (3621) used greatest stack depth: 6184 bytes left [ 44.578549][ T3674] lo speed is unknown, defaulting to 1000 [ 44.621246][ T3675] loop1: detected capacity change from 0 to 512 [ 44.629303][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.646044][ T3674] lo speed is unknown, defaulting to 1000 [ 44.662077][ T3675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.675289][ T3675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.698776][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.713455][ T3674] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.754471][ T3674] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 44.788271][ T3675] EXT4-fs (loop1): 1 truncate cleaned up [ 44.800280][ T3674] lo speed is unknown, defaulting to 1000 [ 44.837081][ T3685] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.854915][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.898995][ T3674] lo speed is unknown, defaulting to 1000 [ 44.905038][ T3674] lo speed is unknown, defaulting to 1000 [ 44.911355][ T3674] lo speed is unknown, defaulting to 1000 [ 44.917742][ T3674] lo speed is unknown, defaulting to 1000 [ 44.924370][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 44.924386][ T29] audit: type=1326 audit(1760821309.749:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 44.953993][ T29] audit: type=1326 audit(1760821309.749:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.023805][ T29] audit: type=1326 audit(1760821309.849:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.047369][ T29] audit: type=1326 audit(1760821309.849:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.071389][ T29] audit: type=1326 audit(1760821309.849:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.114191][ T3699] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 45.120814][ T3699] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.128332][ T3699] vhci_hcd vhci_hcd.0: Device attached [ 45.146529][ T29] audit: type=1326 audit(1760821309.909:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.170187][ T29] audit: type=1326 audit(1760821309.909:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.193891][ T29] audit: type=1326 audit(1760821309.909:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.217747][ T29] audit: type=1326 audit(1760821309.909:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.241050][ T29] audit: type=1326 audit(1760821309.909:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc49c65efc9 code=0x7ffc0000 [ 45.267227][ T3699] ªªªªªª: renamed from vlan0 (while UP) [ 45.295909][ T3700] vhci_hcd: connection closed [ 45.296136][ T55] vhci_hcd: stop threads [ 45.305266][ T55] vhci_hcd: release socket [ 45.310230][ T55] vhci_hcd: disconnect device [ 45.315157][ T9] vhci_hcd: vhci_device speed not set [ 45.368650][ T3711] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 45.445598][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.460781][ T3715] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 45.533645][ T3721] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 45.881037][ T3728] __nla_validate_parse: 13 callbacks suppressed [ 45.881055][ T3728] netlink: 68 bytes leftover after parsing attributes in process `syz.2.96'. [ 45.994329][ T3739] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 45.994346][ T3739] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.99'. [ 46.113741][ T3741] lo speed is unknown, defaulting to 1000 [ 46.255494][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.255875][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.304651][ T3760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 46.304709][ T3760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 46.304746][ T3760] vhci_hcd vhci_hcd.0: Device attached [ 46.308356][ T3762] usbip_core: unknown command [ 46.308367][ T3762] vhci_hcd: unknown pdu 2844066640 [ 46.308376][ T3762] usbip_core: unknown command [ 46.309721][ T3760] ªªªªªª: renamed from vlan0 (while UP) [ 46.309950][ T1687] vhci_hcd: stop threads [ 46.309957][ T1687] vhci_hcd: release socket [ 46.309966][ T1687] vhci_hcd: disconnect device [ 46.454837][ T3769] loop4: detected capacity change from 0 to 2048 [ 46.479475][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 46.491524][ T3777] loop0: detected capacity change from 0 to 512 [ 46.493969][ T3527] loop4: p2 p3 p7 [ 46.510323][ T3777] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.525036][ T3769] loop4: p2 p3 p7 [ 46.530607][ T3777] EXT4-fs (loop0): mount failed [ 46.536996][ T3769] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 46.553698][ T3769] sel_write_load: 5 callbacks suppressed [ 46.553714][ T3769] SELinux: failed to load policy [ 46.675260][ T3809] loop4: detected capacity change from 0 to 512 [ 46.712649][ T3809] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.115: Failed to acquire dquot type 1 [ 46.724760][ T3809] EXT4-fs (loop4): 1 truncate cleaned up [ 46.730987][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.743962][ T3809] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.793986][ T3817] loop2: detected capacity change from 0 to 512 [ 46.817075][ T3817] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.857050][ T3817] EXT4-fs (loop2): failed to initialize system zone (-117) [ 46.867312][ T3821] loop0: detected capacity change from 0 to 512 [ 46.875738][ T3817] EXT4-fs (loop2): mount failed [ 46.886562][ T3821] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.931367][ T3821] EXT4-fs (loop0): failed to initialize system zone (-117) [ 46.938877][ T3821] EXT4-fs (loop0): mount failed [ 46.990757][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.005331][ T3829] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 47.127699][ T3835] loop2: detected capacity change from 0 to 2048 [ 47.180313][ T3304] Alternate GPT is invalid, using primary GPT. [ 47.186824][ T3304] loop2: p1 p2 p3 [ 47.190795][ T3304] loop2: partition table partially beyond EOD, truncated [ 47.209580][ T3835] Alternate GPT is invalid, using primary GPT. [ 47.215910][ T3835] loop2: p1 p2 p3 [ 47.219694][ T3835] loop2: partition table partially beyond EOD, truncated [ 47.344077][ T3852] capability: warning: `syz.4.132' uses deprecated v2 capabilities in a way that may be insecure [ 47.350668][ T3854] loop1: detected capacity change from 0 to 1024 [ 47.362016][ T3854] EXT4-fs: inline encryption not supported [ 47.383452][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.396640][ T3852] loop4: detected capacity change from 0 to 2048 [ 47.432984][ T3852] GPT:first_usable_lbas don't match. [ 47.438370][ T3852] GPT:34 != 290 [ 47.442134][ T3852] GPT: Use GNU Parted to correct GPT errors. [ 47.448442][ T3852] loop4: p1 p2 p3 [ 47.535599][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.548780][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.572616][ T3865] loop4: detected capacity change from 0 to 2048 [ 47.643244][ T3865] loop4: p2 p3 p7 [ 47.657315][ T3865] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 47.667947][ T3865] SELinux: failed to load policy [ 47.705283][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.716567][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 47.731255][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.815892][ T3878] xt_policy: output policy not valid in PREROUTING and INPUT [ 47.847227][ T3880] loop4: detected capacity change from 0 to 256 [ 47.999076][ T3882] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.098286][ T3889] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 48.106084][ T3889] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.147'. [ 48.243209][ T3895] loop2: detected capacity change from 0 to 2048 [ 48.250411][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.250439][ T3899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.152'. [ 48.268371][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 48.285660][ T3899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.152'. [ 48.294840][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 48.310600][ T3899] loop0: detected capacity change from 0 to 512 [ 48.311826][ T3527] Alternate GPT is invalid, using primary GPT. [ 48.319955][ T3899] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.152: EA inode hash validation failed [ 48.323486][ T3527] loop2: p1 p2 p3 [ 48.335776][ T3899] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.152: corrupted inode contents [ 48.339356][ T3527] loop2: partition table partially beyond EOD, truncated [ 48.358421][ T3899] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.152: mark_inode_dirty error [ 48.370674][ T3899] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.152: corrupted inode contents [ 48.372820][ T3895] Alternate GPT is invalid, using primary GPT. [ 48.388828][ T3895] loop2: p1 p2 p3 [ 48.389557][ T3899] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.152: mark_inode_dirty error [ 48.392567][ T3895] loop2: partition table partially beyond EOD, truncated [ 48.423576][ T3899] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.152: mark inode dirty (error -117) [ 48.447725][ T3899] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 48.472363][ T3899] EXT4-fs (loop0): 1 orphan inode deleted [ 48.478955][ T3899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.479344][ T3902] netlink: 'syz.2.154': attribute type 4 has an invalid length. [ 48.537113][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.552407][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 48.553253][ T3805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.574245][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.637621][ T3805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.650177][ T3908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3908 comm=syz.0.152 [ 48.685902][ T3911] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 48.761147][ T3805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.780968][ T3924] netlink: 'syz.2.161': attribute type 3 has an invalid length. [ 48.792640][ T3924] loop2: detected capacity change from 0 to 512 [ 48.831105][ T3925] SELinux: ebitmap: truncated map [ 48.862260][ T3925] SELinux: failed to load policy [ 48.883329][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.901434][ T3924] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.902508][ T3805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.946722][ T3931] loop3: detected capacity change from 0 to 1024 [ 48.977899][ T3907] lo speed is unknown, defaulting to 1000 [ 49.069136][ T3931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.175609][ T3907] chnl_net:caif_netlink_parms(): no params data found [ 49.333641][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.344784][ T3805] bridge_slave_1: left allmulticast mode [ 49.350540][ T3805] bridge_slave_1: left promiscuous mode [ 49.356523][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.366307][ T3805] bridge_slave_0: left allmulticast mode [ 49.372045][ T3805] bridge_slave_0: left promiscuous mode [ 49.377733][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.404711][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.516337][ T3805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.525273][ T3954] loop0: detected capacity change from 0 to 2048 [ 49.540117][ T3805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.559606][ T3805] bond0 (unregistering): Released all slaves [ 49.604197][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.611378][ T3907] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.615988][ T3527] Alternate GPT is invalid, using primary GPT. [ 49.624781][ T3907] bridge_slave_0: entered allmulticast mode [ 49.624815][ T3527] loop0: p1 p2 p3 [ 49.634673][ T3527] loop0: partition table partially beyond EOD, truncated [ 49.639205][ T3907] bridge_slave_0: entered promiscuous mode [ 49.649128][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.656303][ T3907] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.663766][ T3907] bridge_slave_1: entered allmulticast mode [ 49.671825][ T3907] bridge_slave_1: entered promiscuous mode [ 49.683602][ T3805] hsr_slave_0: left promiscuous mode [ 49.690524][ T3805] hsr_slave_1: left promiscuous mode [ 49.705887][ T3954] Alternate GPT is invalid, using primary GPT. [ 49.709157][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.712404][ T3954] loop0: p1 p2 p3 [ 49.719574][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.723290][ T3954] loop0: partition table partially beyond EOD, truncated [ 49.738721][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.746133][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.767511][ T3805] veth1_macvtap: left promiscuous mode [ 49.812071][ T3805] veth0_macvtap: left promiscuous mode [ 49.828259][ T3805] veth1_vlan: left promiscuous mode [ 49.846955][ T3805] veth0_vlan: left promiscuous mode [ 49.880117][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.880783][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 49.923102][ C1] hrtimer: interrupt took 32544 ns [ 49.970165][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 49.970185][ T29] audit: type=1400 audit(1760821314.799:1171): avc: denied { write } for pid=3976 comm="syz.2.171" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.970893][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.976538][ T29] audit: type=1400 audit(1760821314.799:1172): avc: denied { ioctl } for pid=3976 comm="syz.2.171" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.000779][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.025740][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.041801][ T3977] xt_hashlimit: max too large, truncated to 1048576 [ 50.107088][ T3981] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.118670][ T3981] SELinux: failed to load policy [ 50.124155][ T3805] team0 (unregistering): Port device team_slave_1 removed [ 50.135567][ T3805] team0 (unregistering): Port device team_slave_0 removed [ 50.197710][ T3986] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 50.207347][ T29] audit: type=1326 audit(1760821315.029:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.231226][ T29] audit: type=1326 audit(1760821315.029:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.259390][ T29] audit: type=1326 audit(1760821315.089:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.282863][ T29] audit: type=1326 audit(1760821315.089:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.289109][ T3907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.306523][ T29] audit: type=1326 audit(1760821315.089:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.334842][ T3907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.357304][ T29] audit: type=1326 audit(1760821315.089:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.380842][ T29] audit: type=1326 audit(1760821315.089:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.404391][ T29] audit: type=1326 audit(1760821315.089:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f9b5aefc9 code=0x7ffc0000 [ 50.447786][ T3907] team0: Port device team_slave_0 added [ 50.455260][ T3907] team0: Port device team_slave_1 added [ 50.505937][ T3907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.513078][ T3907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.539019][ T3907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.552243][ T3907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.559280][ T3907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.585322][ T3907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.644112][ T3907] hsr_slave_0: entered promiscuous mode [ 50.665233][ T3907] hsr_slave_1: entered promiscuous mode [ 50.675280][ T3907] debugfs: 'hsr0' already exists in 'hsr' [ 50.681196][ T3907] Cannot create hsr debugfs directory [ 50.798590][ T4014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 50.805163][ T4014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.812729][ T4014] vhci_hcd vhci_hcd.0: Device attached [ 50.880859][ T4019] vhci_hcd: connection closed [ 50.991800][ T3805] vhci_hcd: stop threads [ 51.000968][ T3805] vhci_hcd: release socket [ 51.005398][ T3805] vhci_hcd: disconnect device [ 51.231212][ T4045] __nla_validate_parse: 4 callbacks suppressed [ 51.231230][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 51.284352][ T3907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.329551][ T3907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.336457][ T4051] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 51.350238][ T3907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.365910][ T3907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.393058][ T4049] SELinux: ebitmap: truncated map [ 51.424734][ T4049] SELinux: failed to load policy [ 51.438345][ T4060] loop2: detected capacity change from 0 to 512 [ 51.471613][ T3907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.489631][ T4060] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.187: bg 0: block 5: invalid block bitmap [ 51.513936][ T4060] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 51.522889][ T4060] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.187: invalid indirect mapped block 3 (level 2) [ 51.536465][ T4060] EXT4-fs (loop2): 1 orphan inode deleted [ 51.542248][ T4060] EXT4-fs (loop2): 1 truncate cleaned up [ 51.548676][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.571398][ T3907] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.581136][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.613890][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.621213][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.641301][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.648462][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.657303][ T4074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.189'. [ 51.810210][ T3907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.888549][ T4105] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 51.895111][ T4105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.902586][ T4105] vhci_hcd vhci_hcd.0: Device attached [ 51.908960][ T4108] usbip_core: unknown command [ 51.913675][ T4108] vhci_hcd: unknown pdu 2844066640 [ 51.919051][ T4108] usbip_core: unknown command [ 51.929056][ T4105] ªªªªªª: renamed from vlan0 (while UP) [ 51.937713][ T3805] vhci_hcd: stop threads [ 51.942103][ T3805] vhci_hcd: release socket [ 51.946642][ T3805] vhci_hcd: disconnect device [ 51.952125][ T4051] loop4: detected capacity change from 0 to 1764 [ 51.960052][ T4051] grow_buffers: requested out-of-range block 18446744071681881834 for device loop4 [ 51.969623][ T4051] isofs_fill_super: bread failed, dev=loop4, iso_blknum=1133648757, block=-2027669782 [ 52.002950][ T4051] loop4: detected capacity change from 0 to 128 [ 52.012735][ T4051] FAT-fs (loop4): bogus number of FAT sectors [ 52.019079][ T4051] FAT-fs (loop4): Can't find a valid FAT filesystem [ 52.056737][ T3907] veth0_vlan: entered promiscuous mode [ 52.065971][ T3907] veth1_vlan: entered promiscuous mode [ 52.083616][ T3907] veth0_macvtap: entered promiscuous mode [ 52.091963][ T3907] veth1_macvtap: entered promiscuous mode [ 52.103176][ T3907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.115411][ T3907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.127199][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.137816][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.148179][ T3800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.157539][ T3800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.246806][ T4131] netlink: 176 bytes leftover after parsing attributes in process `syz.5.200'. [ 52.273146][ T4129] loop4: detected capacity change from 0 to 512 [ 52.299330][ T4129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.313920][ T4129] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.317202][ T4134] SELinux: failed to load policy [ 52.381088][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.481865][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'. [ 52.490881][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 52.527897][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'. [ 52.536998][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 52.562946][ T4154] loop2: detected capacity change from 0 to 512 [ 52.620411][ T4154] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.208: EA inode hash validation failed [ 52.644500][ T4165] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 52.696438][ T4154] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.208: corrupted inode contents [ 52.710695][ T4156] netlink: 'syz.0.210': attribute type 58 has an invalid length. [ 52.718643][ T4156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'. [ 52.730893][ T4165] SELinux: failed to load policy [ 52.740969][ T4160] SELinux: ebitmap: truncated map [ 52.746847][ T4154] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.208: mark_inode_dirty error [ 52.752809][ T4160] SELinux: failed to load policy [ 52.777276][ T4154] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.208: corrupted inode contents [ 52.790876][ T4154] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.208: mark_inode_dirty error [ 52.857828][ T4154] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.208: mark inode dirty (error -117) [ 52.881471][ T4154] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 52.891297][ T4154] EXT4-fs (loop2): 1 orphan inode deleted [ 52.907392][ T4171] loop5: detected capacity change from 0 to 2048 [ 52.907926][ T4154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.942388][ T4180] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 52.949031][ T4180] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.957340][ T4180] vhci_hcd vhci_hcd.0: Device attached [ 52.973435][ T4181] usbip_core: unknown command [ 52.978212][ T4181] vhci_hcd: unknown pdu 2844066640 [ 52.983384][ T4181] usbip_core: unknown command [ 52.988296][ T4177] loop4: detected capacity change from 0 to 256 [ 52.990464][ T3527] Alternate GPT is invalid, using primary GPT. [ 53.000990][ T3527] loop5: p1 p2 p3 [ 53.004725][ T3527] loop5: partition table partially beyond EOD, truncated [ 53.023996][ T37] vhci_hcd: stop threads [ 53.028347][ T37] vhci_hcd: release socket [ 53.032881][ T37] vhci_hcd: disconnect device [ 53.044804][ T4171] Alternate GPT is invalid, using primary GPT. [ 53.051209][ T4171] loop5: p1 p2 p3 [ 53.055019][ T4171] loop5: partition table partially beyond EOD, truncated [ 53.101185][ T4190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 53.106430][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.111234][ T4190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 53.117591][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.128299][ T4190] netlink: 'syz.0.219': attribute type 21 has an invalid length. [ 53.142301][ T4193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4193 comm=syz.2.208 [ 53.157396][ T4192] bridge0: entered allmulticast mode [ 53.221726][ T4190] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 53.229558][ T4194] bridge_slave_1: left allmulticast mode [ 53.235290][ T4194] bridge_slave_1: left promiscuous mode [ 53.241080][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.250749][ T4194] bridge_slave_0: left allmulticast mode [ 53.256562][ T4194] bridge_slave_0: left promiscuous mode [ 53.262767][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.268417][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 53.272767][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 53.296535][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 53.306291][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 53.308406][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 53.310806][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 53.344235][ T4197] netem: incorrect ge model size [ 53.344256][ T4197] netem: change failed [ 53.505075][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.509829][ T4212] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 53.525510][ T4212] SELinux: failed to load policy [ 53.547391][ T4209] SELinux: failed to load policy [ 53.562749][ T4216] netlink: 'syz.2.228': attribute type 4 has an invalid length. [ 53.652603][ T4223] loop2: detected capacity change from 0 to 2048 [ 53.680927][ T4230] loop5: detected capacity change from 0 to 1024 [ 53.715737][ T4230] EXT4-fs: Ignoring removed nobh option [ 53.721564][ T4230] EXT4-fs: dax option not supported [ 53.729639][ T4223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.778927][ T4223] syz.2.232 uses obsolete (PF_INET,SOCK_PACKET) [ 53.958327][ T4240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.983710][ T3318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 54.000153][ T3318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 54.028554][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.075594][ T4244] loop2: detected capacity change from 0 to 512 [ 54.092439][ T4244] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.239: EA inode hash validation failed [ 54.115371][ T4244] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.239: corrupted inode contents [ 54.140276][ T4244] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.239: mark_inode_dirty error [ 54.157476][ T4244] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.239: corrupted inode contents [ 54.179303][ T4244] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.239: mark_inode_dirty error [ 54.200575][ T4244] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.239: mark inode dirty (error -117) [ 54.213875][ T4244] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 54.223172][ T4244] EXT4-fs (loop2): 1 orphan inode deleted [ 54.231105][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.350130][ T4247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4247 comm=syz.2.239 [ 54.572270][ T4250] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 54.685605][ T4254] netlink: 'syz.4.242': attribute type 4 has an invalid length. [ 54.779955][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.819866][ T4259] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 54.826533][ T4259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.834158][ T4259] vhci_hcd vhci_hcd.0: Device attached [ 54.873543][ T4266] batadv_slave_0: entered allmulticast mode [ 54.890624][ T4265] batadv_slave_0: left allmulticast mode [ 54.924115][ T4264] SELinux: failed to load policy [ 54.940129][ T4260] vhci_hcd: connection closed [ 54.943765][ T37] vhci_hcd: stop threads [ 54.953028][ T37] vhci_hcd: release socket [ 54.957461][ T37] vhci_hcd: disconnect device [ 55.025631][ T4273] loop3: detected capacity change from 0 to 2048 [ 55.080061][ T3527] Alternate GPT is invalid, using primary GPT. [ 55.086501][ T3527] loop3: p1 p2 p3 [ 55.090323][ T3527] loop3: partition table partially beyond EOD, truncated [ 55.105722][ T4273] Alternate GPT is invalid, using primary GPT. [ 55.112402][ T4273] loop3: p1 p2 p3 [ 55.116215][ T4273] loop3: partition table partially beyond EOD, truncated [ 55.207659][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.218408][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.219064][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 55.673261][ T4240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.754670][ T4240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.842328][ T4240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.017682][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.026268][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.034545][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.048651][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.378648][ T4302] FAULT_INJECTION: forcing a failure. [ 56.378648][ T4302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.392000][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.4.259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.392037][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.392055][ T4302] Call Trace: [ 56.392062][ T4302] [ 56.392073][ T4302] __dump_stack+0x1d/0x30 [ 56.392101][ T4302] dump_stack_lvl+0xe8/0x140 [ 56.392126][ T4302] dump_stack+0x15/0x1b [ 56.392167][ T4302] should_fail_ex+0x265/0x280 [ 56.392272][ T4302] should_fail+0xb/0x20 [ 56.392304][ T4302] should_fail_usercopy+0x1a/0x20 [ 56.392327][ T4302] _copy_to_user+0x20/0xa0 [ 56.392367][ T4302] simple_read_from_buffer+0xb5/0x130 [ 56.392399][ T4302] proc_fail_nth_read+0x10e/0x150 [ 56.392433][ T4302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.392491][ T4302] vfs_read+0x1a8/0x770 [ 56.392521][ T4302] ? __rcu_read_unlock+0x4f/0x70 [ 56.392546][ T4302] ? __fget_files+0x184/0x1c0 [ 56.392570][ T4302] ? finish_task_switch+0xad/0x2b0 [ 56.392604][ T4302] ksys_read+0xda/0x1a0 [ 56.392702][ T4302] __x64_sys_read+0x40/0x50 [ 56.392756][ T4302] x64_sys_call+0x27c0/0x3000 [ 56.392780][ T4302] do_syscall_64+0xd2/0x200 [ 56.392843][ T4302] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.392927][ T4302] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.392958][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.392987][ T4302] RIP: 0033:0x7f33db71d9dc [ 56.393008][ T4302] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.393029][ T4302] RSP: 002b:00007f33da13d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.393050][ T4302] RAX: ffffffffffffffda RBX: 00007f33db976180 RCX: 00007f33db71d9dc [ 56.393092][ T4302] RDX: 000000000000000f RSI: 00007f33da13d0a0 RDI: 000000000000000c [ 56.393109][ T4302] RBP: 00007f33da13d090 R08: 0000000000000000 R09: 0000000000000000 [ 56.393125][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.393142][ T4302] R13: 00007f33db976218 R14: 00007f33db976180 R15: 00007ffc6878f558 [ 56.393164][ T4302] [ 56.603615][ T4308] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.628584][ T4308] SELinux: failed to load policy [ 56.640315][ T4304] __nla_validate_parse: 6 callbacks suppressed [ 56.640334][ T4304] netlink: 388 bytes leftover after parsing attributes in process `syz.2.261'. [ 56.656381][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 56.656398][ T29] audit: type=1326 audit(1760821321.449:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.686066][ T29] audit: type=1326 audit(1760821321.449:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.709527][ T29] audit: type=1326 audit(1760821321.449:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.733334][ T29] audit: type=1326 audit(1760821321.449:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.756788][ T29] audit: type=1326 audit(1760821321.449:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.780207][ T29] audit: type=1326 audit(1760821321.449:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.803678][ T29] audit: type=1326 audit(1760821321.449:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.827561][ T29] audit: type=1326 audit(1760821321.449:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.851107][ T29] audit: type=1326 audit(1760821321.449:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.874638][ T29] audit: type=1326 audit(1760821321.449:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.5.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 56.983941][ T4317] loop5: detected capacity change from 0 to 2048 [ 57.055500][ T4313] loop4: detected capacity change from 0 to 32768 [ 57.062530][ T4317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.081846][ T4321] loop2: detected capacity change from 0 to 764 [ 57.106465][ T4321] rock: directory entry would overflow storage [ 57.112852][ T4321] rock: sig=0x4f50, size=4, remaining=3 [ 57.118735][ T4321] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 57.127882][ T3527] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 57.136950][ T3527] loop4: p1 start 460800 is beyond EOD, truncated [ 57.143742][ T3527] loop4: p2 size 83886080 extends beyond EOD, truncated [ 57.159224][ T3527] loop4: p5 start 460800 is beyond EOD, truncated [ 57.165730][ T3527] loop4: p6 size 83886080 extends beyond EOD, truncated [ 57.184347][ T4313] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 57.189947][ T4313] loop4: p1 start 460800 is beyond EOD, truncated [ 57.196406][ T4313] loop4: p2 size 83886080 extends beyond EOD, truncated [ 57.207251][ T4313] loop4: p5 start 460800 is beyond EOD, truncated [ 57.213816][ T4313] loop4: p6 size 83886080 extends beyond EOD, truncated [ 57.280631][ T4335] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 57.285898][ T4333] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 57.287323][ T4335] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.302586][ T4335] vhci_hcd vhci_hcd.0: Device attached [ 57.322610][ T4336] usbip_core: unknown command [ 57.327349][ T4336] vhci_hcd: unknown pdu 2844066640 [ 57.332695][ T4336] usbip_core: unknown command [ 57.346924][ T3907] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 57.374545][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 57.390777][ T3800] vhci_hcd: stop threads [ 57.395083][ T3800] vhci_hcd: release socket [ 57.399596][ T3800] vhci_hcd: disconnect device [ 57.415423][ T3907] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 57.458265][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 57.473989][ T3907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.581228][ T4354] netlink: 108 bytes leftover after parsing attributes in process `syz.3.277'. [ 57.590518][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 57.595878][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.276'. [ 57.610908][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 57.685914][ T4364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.005469][ T4399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'. [ 58.014548][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 58.047068][ T4403] bpf: Bad value for 'mode' [ 58.057832][ T4399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'. [ 58.072734][ T4399] loop2: detected capacity change from 0 to 512 [ 58.091150][ T4404] netlink: 'syz.0.291': attribute type 4 has an invalid length. [ 58.130692][ T4399] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.290: EA inode hash validation failed [ 58.143684][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.290: corrupted inode contents [ 58.158806][ T4399] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.290: mark_inode_dirty error [ 58.173577][ T4414] SELinux: failed to load policy [ 58.184259][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.290: corrupted inode contents [ 58.197353][ T4399] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.290: mark_inode_dirty error [ 58.223491][ T4399] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.290: mark inode dirty (error -117) [ 58.243038][ T4417] SELinux: ebitmap: truncated map [ 58.248770][ T4399] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 58.248883][ T4399] EXT4-fs (loop2): 1 orphan inode deleted [ 58.249907][ T4417] SELinux: failed to load policy [ 58.250518][ T4399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.400249][ T4437] SELinux: failed to load policy [ 58.417190][ T4434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4434 comm=syz.2.290 [ 58.900700][ T4445] loop3: detected capacity change from 0 to 2048 [ 58.940352][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.950834][ T3527] Alternate GPT is invalid, using primary GPT. [ 58.957222][ T3527] loop3: p1 p2 p3 [ 58.960994][ T3527] loop3: partition table partially beyond EOD, truncated [ 58.994391][ T4445] Alternate GPT is invalid, using primary GPT. [ 59.000855][ T4445] loop3: p1 p2 p3 [ 59.004618][ T4445] loop3: partition table partially beyond EOD, truncated [ 59.057938][ T4451] netlink: 'syz.2.303': attribute type 12 has an invalid length. [ 59.140419][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.143070][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.155180][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.167454][ T4458] netlink: 'syz.2.305': attribute type 4 has an invalid length. [ 59.190343][ T4462] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.190398][ T4462] SELinux: failed to load policy [ 59.192346][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.192631][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.194719][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.336727][ T4470] loop2: detected capacity change from 0 to 512 [ 59.339634][ T4470] EXT4-fs (loop2): first meta block group too large: 100663296 (group descriptor block count 1) [ 59.417933][ T4473] bpf: Bad value for 'mode' [ 60.053732][ T4479] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 60.137994][ T4486] loop0: detected capacity change from 0 to 512 [ 60.148026][ T4489] SELinux: failed to load policy [ 60.157208][ T4486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.189687][ T4486] EXT4-fs (loop0): 1 truncate cleaned up [ 60.199168][ T4486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.292955][ T4502] loop3: detected capacity change from 0 to 2048 [ 60.306030][ T4507] FAULT_INJECTION: forcing a failure. [ 60.306030][ T4507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.316065][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.319206][ T4507] CPU: 0 UID: 0 PID: 4507 Comm: syz.5.327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.319240][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.319302][ T4507] Call Trace: [ 60.319314][ T4507] [ 60.319325][ T4507] __dump_stack+0x1d/0x30 [ 60.319355][ T4507] dump_stack_lvl+0xe8/0x140 [ 60.319385][ T4507] dump_stack+0x15/0x1b [ 60.319408][ T4507] should_fail_ex+0x265/0x280 [ 60.319461][ T4507] should_fail+0xb/0x20 [ 60.319506][ T4507] should_fail_usercopy+0x1a/0x20 [ 60.319535][ T4507] _copy_from_iter+0xd2/0xe80 [ 60.319607][ T4507] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 60.319692][ T4507] hci_sock_sendmsg+0x36d/0x910 [ 60.319734][ T4507] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 60.319776][ T4507] __sock_sendmsg+0x145/0x180 [ 60.319844][ T4507] sock_write_iter+0x1a7/0x1f0 [ 60.319898][ T4507] aio_write+0x2e5/0x410 [ 60.319954][ T4507] io_submit_one+0xacd/0x11d0 [ 60.320067][ T4507] __se_sys_io_submit+0xfb/0x280 [ 60.320113][ T4507] __x64_sys_io_submit+0x43/0x50 [ 60.320184][ T4507] x64_sys_call+0x2d6c/0x3000 [ 60.320214][ T4507] do_syscall_64+0xd2/0x200 [ 60.320305][ T4507] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.320344][ T4507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.320377][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.320408][ T4507] RIP: 0033:0x7f4c5445efc9 [ 60.320431][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.320534][ T4507] RSP: 002b:00007f4c52ec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 60.320561][ T4507] RAX: ffffffffffffffda RBX: 00007f4c546b5fa0 RCX: 00007f4c5445efc9 [ 60.320578][ T4507] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f4c52e83000 [ 60.320595][ T4507] RBP: 00007f4c52ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.320721][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.320739][ T4507] R13: 00007f4c546b6038 R14: 00007f4c546b5fa0 R15: 00007ffd89592828 [ 60.320769][ T4507] [ 60.367684][ T4508] loop2: detected capacity change from 0 to 2048 [ 60.412841][ T3527] Alternate GPT is invalid, using primary GPT. [ 60.547576][ T3527] loop3: p1 p2 p3 [ 60.551348][ T3527] loop3: partition table partially beyond EOD, truncated [ 60.571075][ T3304] Alternate GPT is invalid, using primary GPT. [ 60.577592][ T3304] loop2: p2 p3 p7 [ 60.592351][ T4502] Alternate GPT is invalid, using primary GPT. [ 60.598917][ T4502] loop3: p1 p2 p3 [ 60.602692][ T4502] loop3: partition table partially beyond EOD, truncated [ 60.653261][ T4520] loop4: detected capacity change from 0 to 128 [ 60.659815][ T4517] loop5: detected capacity change from 0 to 1024 [ 60.703106][ T4508] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 60.737007][ T4517] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 60.759887][ T4522] SELinux: failed to load policy [ 60.763168][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 60.801285][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 60.816604][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 60.827951][ T3002] Alternate GPT is invalid, using primary GPT. [ 60.834720][ T3002] loop2: p2 p3 p7 [ 60.843732][ T4529] loop5: detected capacity change from 0 to 1024 [ 60.852366][ T4529] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.867579][ T4529] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 60.876150][ T4529] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.882974][ T4529] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 60.897796][ T4529] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 60.904806][ T4529] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.333: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.923268][ T4529] EXT4-fs (loop5): 1 orphan inode deleted [ 60.929658][ T4529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.943265][ T4529] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.333: iget: bad extended attribute block 6 [ 60.955854][ T4543] loop3: detected capacity change from 0 to 512 [ 61.004597][ T4543] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.341: EA inode hash validation failed [ 61.138748][ T4543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.341: corrupted inode contents [ 61.166149][ T4543] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.341: mark_inode_dirty error [ 61.208716][ T4543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.341: corrupted inode contents [ 61.236828][ T4543] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.341: mark_inode_dirty error [ 61.270248][ T4543] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.341: mark inode dirty (error -117) [ 61.298752][ T4543] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 61.316907][ T4543] EXT4-fs (loop3): 1 orphan inode deleted [ 61.331104][ T4543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.555717][ T4570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4570 comm=syz.3.341 [ 61.613310][ T3907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.117749][ T4592] SELinux: failed to load policy [ 62.130527][ T4595] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 62.141005][ T4595] SELinux: failed to load policy [ 62.181766][ T4592] __nla_validate_parse: 8 callbacks suppressed [ 62.181786][ T4592] netlink: 388 bytes leftover after parsing attributes in process `syz.5.348'. [ 62.215392][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 62.215459][ T29] audit: type=1326 audit(1760821327.039:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33db71efc9 code=0x0 [ 62.246248][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.350025][ T4603] loop5: detected capacity change from 0 to 512 [ 62.369850][ T4603] EXT4-fs (loop5): too many log groups per flexible block group [ 62.377719][ T4603] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 62.384712][ T4603] EXT4-fs (loop5): mount failed [ 62.470104][ T29] audit: type=1400 audit(1760821327.299:1723): avc: denied { bind } for pid=4610 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.491724][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 62.616589][ T4621] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.361'. [ 62.658996][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 62.668018][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 62.677800][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 62.686956][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 62.710856][ T4630] loop2: detected capacity change from 0 to 512 [ 62.740533][ T4630] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.364: EA inode hash validation failed [ 62.753729][ T4630] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.364: corrupted inode contents [ 62.767281][ T4633] SELinux: failed to load policy [ 62.767966][ T4630] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.364: mark_inode_dirty error [ 62.784736][ T4630] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.364: corrupted inode contents [ 62.786345][ T4633] netlink: 388 bytes leftover after parsing attributes in process `syz.3.365'. [ 62.798985][ T4630] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.364: mark_inode_dirty error [ 62.854339][ T4641] netlink: 56 bytes leftover after parsing attributes in process `syz.3.367'. [ 62.881786][ T4630] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.364: mark inode dirty (error -117) [ 62.898996][ T4641] netlink: 56 bytes leftover after parsing attributes in process `syz.3.367'. [ 62.909541][ T4630] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 62.940429][ T29] audit: type=1326 audit(1760821327.769:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 62.964044][ T29] audit: type=1326 audit(1760821327.769:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 62.964583][ T4630] EXT4-fs (loop2): 1 orphan inode deleted [ 62.994428][ T29] audit: type=1326 audit(1760821327.769:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 63.004433][ T4639] SELinux: failed to load policy [ 63.018176][ T29] audit: type=1326 audit(1760821327.769:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 63.046889][ T29] audit: type=1326 audit(1760821327.769:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 63.070519][ T29] audit: type=1326 audit(1760821327.769:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 63.093917][ T29] audit: type=1326 audit(1760821327.769:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 63.117418][ T29] audit: type=1326 audit(1760821327.769:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 63.142302][ T4630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.164899][ T4657] loop3: detected capacity change from 0 to 512 [ 63.242787][ T4664] loop0: detected capacity change from 0 to 512 [ 63.283857][ T4670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4670 comm=syz.2.364 [ 63.293541][ T4666] loop4: detected capacity change from 0 to 2048 [ 63.306168][ T4661] loop5: detected capacity change from 0 to 2048 [ 63.308787][ T4657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.333955][ T4657] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.336748][ T4666] EXT4-fs: Ignoring removed bh option [ 63.371329][ T4664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.401450][ T3304] Alternate GPT is invalid, using primary GPT. [ 63.407924][ T3304] loop5: p1 p2 p3 [ 63.411785][ T3304] loop5: partition table partially beyond EOD, truncated [ 63.443077][ T4664] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.457188][ T4666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.475551][ T4661] Alternate GPT is invalid, using primary GPT. [ 63.481922][ T4661] loop5: p1 p2 p3 [ 63.485716][ T4661] loop5: partition table partially beyond EOD, truncated [ 63.511161][ T4664] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.371: bg 0: block 64: padding at end of block bitmap is not set [ 63.547476][ T4666] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.563586][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.583111][ T4666] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 63.595450][ T4666] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.595450][ T4666] [ 63.605168][ T4666] EXT4-fs (loop4): Total free blocks count 0 [ 63.611336][ T4666] EXT4-fs (loop4): Free/Dirty block details [ 63.617275][ T4666] EXT4-fs (loop4): free_blocks=2415919104 [ 63.623215][ T4666] EXT4-fs (loop4): dirty_blocks=64 [ 63.628355][ T4666] EXT4-fs (loop4): Block reservation details [ 63.634413][ T4666] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 63.745646][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 63.800487][ T4695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4695 comm=syz.3.374 [ 63.817092][ T3803] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 63.907550][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.026101][ T4708] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 64.492107][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.620435][ T4738] loop2: detected capacity change from 0 to 512 [ 64.627290][ T4738] EXT4-fs: Ignoring removed oldalloc option [ 64.648982][ T4741] process 'syz.4.376' launched '/dev/fd/8' with NULL argv: empty string added [ 64.663094][ T4738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.697150][ T4738] EXT4-fs (loop2): 1 truncate cleaned up [ 64.728098][ T4748] loop5: detected capacity change from 0 to 512 [ 64.735215][ T4738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.748356][ T4748] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.766212][ T4748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.808893][ T4748] EXT4-fs (loop5): 1 truncate cleaned up [ 64.825257][ T4738] 9pnet_fd: Insufficient options for proto=fd [ 64.847622][ T4748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.934289][ T4746] loop3: detected capacity change from 0 to 32768 [ 64.945108][ T4748] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.389: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 64.968289][ T4748] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 64.994718][ T3907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.111388][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.210835][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.227321][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.236016][ T4758] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 65.400281][ T4764] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.392' sets config #-1 [ 65.421236][ T4764] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.392' sets config #1 [ 65.462220][ T4766] loop4: detected capacity change from 0 to 2048 [ 65.487888][ T4766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.551652][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.656921][ T4786] loop0: detected capacity change from 0 to 1024 [ 65.706346][ T4786] loop0: detected capacity change from 0 to 128 [ 65.808960][ T4798] SELinux: ebitmap: truncated map [ 65.838150][ T4798] SELinux: failed to load policy [ 66.017594][ T4817] IPVS: Error connecting to the multicast addr [ 66.253586][ T4834] veth1_to_batadv: entered promiscuous mode [ 66.351435][ T4832] veth1_virt_wifi: entered promiscuous mode [ 66.365839][ T4837] IPVS: Unknown mcast interface: [ 66.501307][ T4853] syz.5.427 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.582850][ T4856] loop5: detected capacity change from 0 to 1024 [ 66.601066][ T4856] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.604668][ T4858] loop3: detected capacity change from 0 to 2048 [ 66.612325][ T4856] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.629569][ T4856] JBD2: no valid journal superblock found [ 66.635370][ T4856] EXT4-fs (loop5): Could not load journal inode [ 66.646735][ T4856] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 66.661041][ T3527] Alternate GPT is invalid, using primary GPT. [ 66.667403][ T3527] loop3: p1 p2 p3 [ 66.671206][ T3527] loop3: partition table partially beyond EOD, truncated [ 66.687091][ T4858] Alternate GPT is invalid, using primary GPT. [ 66.693497][ T4858] loop3: p1 p2 p3 [ 66.697264][ T4858] loop3: partition table partially beyond EOD, truncated [ 66.854255][ T4872] SELinux: failed to load policy [ 66.897252][ T4878] loop0: detected capacity change from 0 to 512 [ 66.906664][ T4878] EXT4-fs: Ignoring removed oldalloc option [ 66.926022][ T4878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.937544][ T4878] EXT4-fs (loop0): 1 truncate cleaned up [ 66.943925][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.962923][ T4878] 9pnet_fd: Insufficient options for proto=fd [ 66.971934][ T4882] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 67.016062][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.063612][ T4891] @0Ù: renamed from bond_slave_1 (while UP) [ 67.211306][ T4902] __nla_validate_parse: 10 callbacks suppressed [ 67.211326][ T4902] netlink: 19 bytes leftover after parsing attributes in process `syz.0.444'. [ 67.282662][ T4904] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 67.294168][ T4904] SELinux: failed to load policy [ 67.368001][ T4908] netlink: 5464 bytes leftover after parsing attributes in process `syz.0.447'. [ 67.592964][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 67.592983][ T29] audit: type=1326 audit(1760821332.419:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.632438][ T4919] loop0: detected capacity change from 0 to 2048 [ 67.639517][ T4918] netlink: 19 bytes leftover after parsing attributes in process `syz.5.452'. [ 67.664253][ T29] audit: type=1326 audit(1760821332.419:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.688420][ T29] audit: type=1326 audit(1760821332.419:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.712187][ T29] audit: type=1326 audit(1760821332.419:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.735768][ T29] audit: type=1326 audit(1760821332.419:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.759406][ T29] audit: type=1326 audit(1760821332.419:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.783154][ T29] audit: type=1326 audit(1760821332.419:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.806565][ T29] audit: type=1326 audit(1760821332.419:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.829926][ T29] audit: type=1326 audit(1760821332.419:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.853351][ T29] audit: type=1326 audit(1760821332.419:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5445efc9 code=0x7ffc0000 [ 67.881177][ T4918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.890165][ T4918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.909923][ T4919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.008158][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.037214][ T4929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 68.043796][ T4929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.051281][ T4929] vhci_hcd vhci_hcd.0: Device attached [ 68.080140][ T4930] usbip_core: unknown command [ 68.084889][ T4930] vhci_hcd: unknown pdu 2844066640 [ 68.090134][ T4930] usbip_core: unknown command [ 68.099751][ T3803] vhci_hcd: stop threads [ 68.104045][ T3803] vhci_hcd: release socket [ 68.108534][ T3803] vhci_hcd: disconnect device [ 68.193378][ T4941] SELinux: failed to load policy [ 68.210767][ T4943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'. [ 68.219765][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 68.239583][ T4943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'. [ 68.248639][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 68.268428][ T4945] loop4: detected capacity change from 0 to 2048 [ 68.284207][ T4943] loop0: detected capacity change from 0 to 512 [ 68.294447][ T4943] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.461: EA inode hash validation failed [ 68.307626][ T4943] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.461: corrupted inode contents [ 68.322771][ T4945] Alternate GPT is invalid, using primary GPT. [ 68.329138][ T4945] loop4: p1 p2 p3 [ 68.332949][ T4945] loop4: partition table partially beyond EOD, truncated [ 68.340726][ T4943] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.461: mark_inode_dirty error [ 68.352603][ T4943] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.461: corrupted inode contents [ 68.365152][ T4943] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.461: mark_inode_dirty error [ 68.377628][ T4943] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.461: mark inode dirty (error -117) [ 68.409557][ T4943] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 68.447820][ T4943] EXT4-fs (loop0): 1 orphan inode deleted [ 68.459397][ T4950] loop4: detected capacity change from 0 to 256 [ 68.466857][ T4943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.482142][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.495626][ T4950] sd 0:0:1:0: device reset [ 68.530002][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 68.550559][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.578773][ T4952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4952 comm=syz.0.461 [ 68.647074][ T4954] loop4: detected capacity change from 0 to 2048 [ 68.660927][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.691978][ T4954] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 68.707351][ T4954] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 68.719758][ T4954] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.719758][ T4954] [ 68.729780][ T4954] EXT4-fs (loop4): Total free blocks count 0 [ 68.735833][ T4954] EXT4-fs (loop4): Free/Dirty block details [ 68.741997][ T4954] EXT4-fs (loop4): free_blocks=2415919504 [ 68.748013][ T4954] EXT4-fs (loop4): dirty_blocks=64 [ 68.753180][ T4954] EXT4-fs (loop4): Block reservation details [ 68.759226][ T4954] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 68.761307][ T4961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.777410][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.866223][ T4954] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 68.887552][ T4954] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 68.910139][ T4969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.471'. [ 68.940296][ T4971] SELinux: failed to load policy [ 68.971044][ T4969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4969 comm=syz.3.471 [ 69.046239][ T4977] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 69.050765][ T4979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.475'. [ 69.063079][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 69.089728][ T4981] syz_tun: entered allmulticast mode [ 69.114068][ T4979] loop3: detected capacity change from 0 to 512 [ 69.123913][ T4980] syz_tun: left allmulticast mode [ 69.130825][ T4979] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.475: EA inode hash validation failed [ 69.148953][ T4979] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.475: corrupted inode contents [ 69.167652][ T4979] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.475: mark_inode_dirty error [ 69.181532][ T4979] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.475: corrupted inode contents [ 69.209042][ T4979] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.475: mark_inode_dirty error [ 69.235931][ T4979] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.475: mark inode dirty (error -117) [ 69.265129][ T4979] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 69.274625][ T4979] EXT4-fs (loop3): 1 orphan inode deleted [ 69.281261][ T4979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.289569][ T4990] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 69.367918][ T4998] loop5: detected capacity change from 0 to 2048 [ 69.392350][ T4998] EXT4-fs: Ignoring removed bh option [ 69.411452][ T5006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5006 comm=syz.3.475 [ 69.430742][ T4998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.479176][ T4998] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.572800][ T5017] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 69.617359][ T5021] IPv6: Can't replace route, no match found [ 70.116242][ T5064] loop3: detected capacity change from 0 to 8192 [ 70.318122][ T5068] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 70.318148][ T5068] FAT-fs (loop3): Filesystem has been set read-only [ 70.319540][ T5064] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 70.319671][ T5064] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 70.412132][ T5076] loop3: detected capacity change from 0 to 512 [ 70.429269][ T5073] random: crng reseeded on system resumption [ 70.498756][ T5079] netlink: 'syz.4.504': attribute type 11 has an invalid length. [ 70.561608][ T5082] loop3: detected capacity change from 0 to 2048 [ 70.562278][ T5082] EXT4-fs: Ignoring removed bh option [ 70.677610][ T5094] loop5: detected capacity change from 0 to 256 [ 70.940792][ T5119] loop0: detected capacity change from 0 to 512 [ 70.961816][ T5119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.992277][ T5119] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.029109][ T5127] SELinux: policydb magic number 0x6d650001 does not match expected magic number 0xf97cff8c [ 71.040496][ T5127] SELinux: failed to load policy [ 71.048079][ T5119] EXT4-fs (loop0): 1 truncate cleaned up [ 71.273324][ T5108] infiniband syû: set active [ 71.278013][ T5108] infiniband syû: added bond_slave_0 [ 71.298138][ T5108] RDS/IB: syû: added [ 71.387758][ T5152] loop5: detected capacity change from 0 to 2048 [ 71.411040][ T5152] EXT4-fs: Ignoring removed bh option [ 71.460522][ T5152] EXT4-fs mount: 5 callbacks suppressed [ 71.460544][ T5152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.584315][ T5160] netlink: 'syz.3.522': attribute type 4 has an invalid length. [ 71.601633][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.651807][ T5158] loop4: detected capacity change from 0 to 4096 [ 71.706355][ T5167] pimreg: entered allmulticast mode [ 71.712757][ T5167] pimreg: left allmulticast mode [ 71.719159][ T3907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.733610][ T5158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.939093][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.979213][ T5196] tipc: Invalid UDP bearer configuration [ 71.979231][ T5196] tipc: Enabling of bearer rejected, failed to enable media [ 71.998859][ T5195] loop5: detected capacity change from 0 to 2048 [ 72.006307][ T5198] 9pnet_fd: Insufficient options for proto=fd [ 72.014458][ T5195] EXT4-fs: Ignoring removed bh option [ 72.037349][ T5195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.110963][ T5195] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.147403][ T5195] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.160179][ T5195] EXT4-fs (loop5): This should not happen!! Data will be lost [ 72.160179][ T5195] [ 72.170411][ T5195] EXT4-fs (loop5): Total free blocks count 0 [ 72.176457][ T5195] EXT4-fs (loop5): Free/Dirty block details [ 72.182531][ T5195] EXT4-fs (loop5): free_blocks=2415919104 [ 72.188304][ T5195] EXT4-fs (loop5): dirty_blocks=64 [ 72.193504][ T5195] EXT4-fs (loop5): Block reservation details [ 72.199558][ T5195] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 72.264408][ T5209] loop0: detected capacity change from 0 to 4096 [ 72.278321][ T5209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.317819][ T3799] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 72.355590][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.668216][ T5232] loop5: detected capacity change from 0 to 1024 [ 72.676248][ T5232] EXT4-fs: Ignoring removed orlov option [ 72.700161][ T5232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.731266][ T5234] loop0: detected capacity change from 0 to 2048 [ 72.738192][ T5234] EXT4-fs: Ignoring removed bh option [ 72.738691][ T5238] netlink: 'syz.2.551': attribute type 4 has an invalid length. [ 72.762968][ T5232] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 72.789838][ T5234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.840411][ T3907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.861055][ T5242] Driver unsupported XDP return value 0 on prog (id 449) dev N/A, expect packet loss! [ 72.875810][ T5234] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.907463][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 72.907481][ T29] audit: type=1400 audit(1760821337.729:2630): avc: denied { create } for pid=5241 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.921279][ T5244] program syz.2.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.942800][ T5234] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.955442][ T5234] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.955442][ T5234] [ 72.965172][ T5234] EXT4-fs (loop0): Total free blocks count 0 [ 72.971329][ T5234] EXT4-fs (loop0): Free/Dirty block details [ 72.977329][ T5234] EXT4-fs (loop0): free_blocks=2415919104 [ 72.983242][ T5234] EXT4-fs (loop0): dirty_blocks=64 [ 72.988391][ T5234] EXT4-fs (loop0): Block reservation details [ 72.994488][ T5234] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 73.019045][ T29] audit: type=1400 audit(1760821337.749:2631): avc: denied { append } for pid=5243 comm="syz.2.554" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.044629][ T29] audit: type=1400 audit(1760821337.869:2632): avc: denied { shutdown } for pid=5243 comm="syz.2.554" lport=50207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.101729][ T3806] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 73.147593][ T5245] __nla_validate_parse: 5 callbacks suppressed [ 73.147609][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 73.260576][ T5257] netlink: 'syz.0.558': attribute type 3 has an invalid length. [ 73.269955][ T5250] SELinux: ebitmap: truncated map [ 73.298866][ T5250] SELinux: failed to load policy [ 73.356817][ T5254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.429384][ T5255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.557'. [ 73.438783][ T5255] netlink: 7 bytes leftover after parsing attributes in process `syz.4.557'. [ 73.534842][ T5268] ªªªªªª: renamed from vlan0 (while UP) [ 73.648823][ T5266] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 73.655404][ T5266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.662923][ T5266] vhci_hcd vhci_hcd.0: Device attached [ 73.705519][ T29] audit: type=1326 audit(1760821338.529:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.716140][ T5267] vhci_hcd: connection closed [ 73.729003][ T29] audit: type=1326 audit(1760821338.529:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.757240][ T29] audit: type=1326 audit(1760821338.529:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.780609][ T29] audit: type=1326 audit(1760821338.529:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.780691][ T5254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.804129][ T29] audit: type=1326 audit(1760821338.529:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.820813][ T3800] vhci_hcd: stop threads [ 73.837757][ T29] audit: type=1326 audit(1760821338.529:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.842168][ T3800] vhci_hcd: release socket [ 73.865331][ T29] audit: type=1326 audit(1760821338.529:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33db71efc9 code=0x7ffc0000 [ 73.869756][ T3800] vhci_hcd: disconnect device [ 73.913433][ T9] vhci_hcd: vhci_device speed not set [ 74.073217][ T5279] netlink: 'syz.0.564': attribute type 4 has an invalid length. [ 74.145249][ T5254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.218606][ T5254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.316459][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.345465][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.368255][ T5293] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 74.376254][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.387960][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.508388][ T5297] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 74.514972][ T5297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.522471][ T5297] vhci_hcd vhci_hcd.0: Device attached [ 74.580606][ T5299] vhci_hcd: connection closed [ 74.581937][ T37] vhci_hcd: stop threads [ 74.591175][ T37] vhci_hcd: release socket [ 74.595653][ T37] vhci_hcd: disconnect device [ 74.652287][ T5309] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 74.693208][ T5311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.576'. [ 74.797894][ T5314] loop2: detected capacity change from 0 to 512 [ 74.878567][ T5321] loop4: detected capacity change from 0 to 2048 [ 74.899789][ T3527] Alternate GPT is invalid, using primary GPT. [ 74.906229][ T3527] loop4: p1 p2 p3 [ 74.906238][ T3527] loop4: partition table partially beyond EOD, truncated [ 74.915514][ T5321] Alternate GPT is invalid, using primary GPT. [ 74.925162][ T5321] loop4: p1 p2 p3 [ 74.925174][ T5321] loop4: partition table partially beyond EOD, truncated [ 75.021265][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.021931][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 75.023554][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 75.132153][ T5325] loop5: detected capacity change from 0 to 1024 [ 75.138329][ T5325] EXT4-fs: Ignoring removed nobh option [ 75.145838][ T5325] EXT4-fs: inline encryption not supported [ 75.180481][ T5325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.181122][ T5325] FAULT_INJECTION: forcing a failure. [ 75.181122][ T5325] name failslab, interval 1, probability 0, space 0, times 1 [ 75.181149][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.5.581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.181175][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.181191][ T5325] Call Trace: [ 75.181201][ T5325] [ 75.181267][ T5325] __dump_stack+0x1d/0x30 [ 75.181298][ T5325] dump_stack_lvl+0xe8/0x140 [ 75.181325][ T5325] dump_stack+0x15/0x1b [ 75.181351][ T5325] should_fail_ex+0x265/0x280 [ 75.181400][ T5325] should_failslab+0x8c/0xb0 [ 75.181439][ T5325] kmem_cache_alloc_noprof+0x50/0x480 [ 75.181554][ T5325] ? getname_flags+0x80/0x3b0 [ 75.181597][ T5325] getname_flags+0x80/0x3b0 [ 75.181670][ T5325] user_path_at+0x28/0x130 [ 75.181719][ T5325] do_sys_truncate+0x5c/0x130 [ 75.181755][ T5325] __x64_sys_truncate+0x31/0x40 [ 75.181790][ T5325] x64_sys_call+0x1a2f/0x3000 [ 75.181870][ T5325] do_syscall_64+0xd2/0x200 [ 75.181906][ T5325] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.181944][ T5325] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.181977][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.182106][ T5325] RIP: 0033:0x7f4c5445efc9 [ 75.182126][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.182152][ T5325] RSP: 002b:00007f4c52ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 75.182179][ T5325] RAX: ffffffffffffffda RBX: 00007f4c546b5fa0 RCX: 00007f4c5445efc9 [ 75.182197][ T5325] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000200000000ac0 [ 75.182215][ T5325] RBP: 00007f4c52ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.182233][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.182322][ T5325] R13: 00007f4c546b6038 R14: 00007f4c546b5fa0 R15: 00007ffd89592828 [ 75.182349][ T5325] [ 75.231504][ T3907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.414936][ T5337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.586'. [ 75.474987][ T5346] capability: warning: `syz.4.587' uses 32-bit capabilities (legacy support in use) [ 75.526128][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'. [ 75.557675][ T5352] loop5: detected capacity change from 0 to 2048 [ 75.580555][ T5352] Alternate GPT is invalid, using primary GPT. [ 75.586887][ T5352] loop5: p1 p2 p3 [ 75.586897][ T5352] loop5: partition table partially beyond EOD, truncated [ 75.607155][ T3527] ================================================================== [ 75.607198][ T3527] BUG: KCSAN: data-race in touch_atime / touch_atime [ 75.607248][ T3527] [ 75.607254][ T3527] write to 0xffff88811ecb2c88 of 4 bytes by task 3304 on cpu 1: [ 75.607274][ T3527] touch_atime+0x1e8/0x340 [ 75.607307][ T3527] shmem_file_read_iter+0x477/0x540 [ 75.607334][ T3527] vfs_read+0x64c/0x770 [ 75.607355][ T3527] ksys_read+0xda/0x1a0 [ 75.607375][ T3527] __x64_sys_read+0x40/0x50 [ 75.607395][ T3527] x64_sys_call+0x27c0/0x3000 [ 75.607419][ T3527] do_syscall_64+0xd2/0x200 [ 75.607448][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.607474][ T3527] [ 75.607479][ T3527] read to 0xffff88811ecb2c88 of 4 bytes by task 3527 on cpu 0: [ 75.607494][ T3527] touch_atime+0x194/0x340 [ 75.607521][ T3527] shmem_file_read_iter+0x477/0x540 [ 75.607544][ T3527] vfs_read+0x64c/0x770 [ 75.607565][ T3527] ksys_read+0xda/0x1a0 [ 75.607585][ T3527] __x64_sys_read+0x40/0x50 [ 75.607605][ T3527] x64_sys_call+0x27c0/0x3000 [ 75.607630][ T3527] do_syscall_64+0xd2/0x200 [ 75.607660][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.607687][ T3527] [ 75.607692][ T3527] value changed: 0x1a854089 -> 0x1aa91065 [ 75.607705][ T3527] [ 75.607710][ T3527] Reported by Kernel Concurrency Sanitizer on: [ 75.607725][ T3527] CPU: 0 UID: 0 PID: 3527 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.607753][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.607765][ T3527] ================================================================== [ 75.647791][ T5353] netlink: 'syz.4.590': attribute type 10 has an invalid length. [ 75.651715][ T5353] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.655390][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'.