last executing test programs: 2.159578588s ago: executing program 2 (id=922): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) write$P9_RREMOVE(r1, &(0x7f0000000f00)={0x7, 0x7b, 0x2}, 0x7) sendfile(r1, r1, 0x0, 0x800000009) 2.122642639s ago: executing program 1 (id=923): socket(0xa, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.929082453s ago: executing program 2 (id=924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0xe10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000580)="415a0cbe08d8cbae62358991e8ff9e0b34de9c6e3750ab716df78d7f4df25ba6651812e56de97f84446cc0419e696f46078c2ce793b7baa196b09ebe513e6052fa554584574345eeaf2229c3a20b6db42aecaf7cea85d781ca9f65023a66f5cb7450901ec6af4c493770ed6c8ca02608b804f8f099af177ff137961fdee3ca6bb87bcffa71cec827f086c8cf3882513ae3430c8797175bd2d1919a541e5231e39b1d4295be76d4", 0xa7}, {&(0x7f0000000100)="0f67e4e26443a86b37d9c15d85d1e666833bf4ba1d60354ad10b8ef27d434921fa", 0x21}], 0x2, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0x8001, 0xabf, 0x5, r9}}], 0x20, 0x20048800}, 0x4008090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x129c81, 0x0) write$binfmt_aout(r10, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r10, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) syz_open_pts(r10, 0x103100) splice(r10, 0x0, r2, 0x0, 0x7ffff000, 0x0) 1.752817397s ago: executing program 3 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="a2e3ccdfdcfdfa741a6eec61622aa2b5a06ac87a515226fdca91245e71159cfb174c842af84336acb4cab84b02e5ea0319640b19c13425562847f1749becdb7d9ba560467e45c4a4e7c3d23c118685250c65b4f2940821effe472bc0219b5ccdfe0c07db9aa426b36bafae5281533bc470796618ba15d500730cf486ac", 0x7d, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = dup(r2) sendto$inet6(r3, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) 1.633681958s ago: executing program 3 (id=930): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 1.520454201s ago: executing program 3 (id=932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x4259, &(0x7f0000000600)={0x0, 0x7736, 0x2, 0x2, 0x349}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000002cc75ed77e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f00000005c0)="ca91099f6a81fcdf7fd59fb8548dda7c99086cc47f1a797357c3caa38e5f2036d4", &(0x7f0000000d80)=""/199}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES32=r7, @ANYRES8=r3, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r11}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.371692984s ago: executing program 3 (id=936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0xffffffff}, 0x118920, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x4000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.211463647s ago: executing program 1 (id=938): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) write$P9_RREMOVE(r0, &(0x7f0000000f00)={0x7, 0x7b, 0x2}, 0x7) sendfile(r0, r0, 0x0, 0x800000009) 1.081520619s ago: executing program 3 (id=939): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) 958.581362ms ago: executing program 2 (id=940): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getuid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@barrier}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b70000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000200)=0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 833.192914ms ago: executing program 1 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = dup(r2) sendto$inet6(r3, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) 794.970035ms ago: executing program 2 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 739.838996ms ago: executing program 2 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000f00)={0x7, 0x7b, 0x2}, 0x7) sendfile(r0, r0, 0x0, 0x800000009) 659.706047ms ago: executing program 2 (id=944): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x103100) dup3(r3, r2, 0x0) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x0) 614.784328ms ago: executing program 1 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 564.615879ms ago: executing program 0 (id=946): r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) 513.19994ms ago: executing program 0 (id=947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x4259, &(0x7f0000000600)={0x0, 0x7736, 0x2, 0x2, 0x349}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000002cc75ed77e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f00000005c0)="ca91099f6a81fcdf7fd59fb8548dda7c99086cc47f1a797357c3caa38e5f2036d4", &(0x7f0000000d80)=""/199}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES32=r7, @ANYRES8=r3, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r11}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 504.698301ms ago: executing program 4 (id=948): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) write$P9_RREMOVE(r0, &(0x7f0000000f00)={0x7, 0x7b, 0x2}, 0x7) sendfile(r0, r0, 0x0, 0x800000009) 500.79376ms ago: executing program 1 (id=949): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYBLOB], 0x1, 0x574, &(0x7f0000000c00)="$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") 413.370322ms ago: executing program 1 (id=950): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000380)={0x3, 0x20000000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 383.643273ms ago: executing program 4 (id=951): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000840)={[{@abort}]}, 0x1, 0x71c, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3mb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7mQmfZtJpppkIPP7wZ15zr03ec6ZCeeBnGFOAAPrZPmQRjwfEdNJxFjrfBIRlWY0FHFp+747t2/OlUcSW1tX/kia95TtuO9nSiciYjMinouInyoRp9NH89bWN5Zn8zxba7Un6iurE7X1jTNLK7OL2WJ27eK5c1PnLpy/eHH/xvrG+x88Wz3/zuj30wszpyZ//S6JSzHaunb/OPbT9mtSKV/CB7x7EMn6KOl3B/hXhiLiWOv5mRiLY80IADjKtoYjtgCAAZOo/wAwYNr/B2iv7R3UOlg3v78dESOd8g+11sxGmuuQx+8kD6xMJBExfpgd5UjavBURV8dPPvr3lzyyZvu4zu5HBzlQP5bzz6VO80+6M/9Eh/lnpP3Zif+o+/x3L/+xLvPfdI853nuxUXTNfyvihaFO+ZOd/EmX/Fd7zP/D3fm/u13b+jbitY71J3kgV/fPh0wsLOXZ2e3HzjlONm5+uNv4j3fJv7nH+Fd7HP/oZy//vLlL/tdf2f3975S/rImf9pj/k8pbX3S7Vuaf7zL+vd7/b3rMf+GljzZ6vBUAAAAAAAAAAAAAAAAAAAAAAAAAAACOhDQiRiNJqztxmlar23t4Px3H07yo1U8vFI1r89HcK3s8Kmn7q5bHtttJ2Z5sfR9/uz31UPvNiHgqIj4f/n+zXZ0r8vl+Dx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWk48tP//X8Pb+/8DAEfcSL87AAAcOvUfAAaP+g8Ag0f9B4DBo/4DwOBR/wFg8Kj/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByy6cuXy2Przu2bc2V7/vp6Y7m4fmY+qy1XVxpz1blibbW6WBSLeVadK1b2+n15UaxOTUXjxkQ9q9UnausbMytF41p9ZmlldjGbySqHMioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDyjzSNJqxGRNuM0rVYjnoiI8agkC0t5djYinoyIX4Yrw2V7st+dBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9VlvfWJ7N82xNIBAIdoJ+z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+O5t+t3vngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP6W/JRFRHqfGXh19+Or/krvDzeeI+PjrK1/emK3X1ybL83/unK9/1To/1Y/+AwB7adfpdh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE5q6xvLs3merR1g0O8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwf/4JAAD//68fzsc=") sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x3}, {0x8, 0xe}, {0x6, 0xb}}, [{0x8}, {0x8, 0xb, 0x26}, {0x8, 0xb, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000015}, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000881) 273.588365ms ago: executing program 4 (id=952): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) write$P9_RREMOVE(r1, &(0x7f0000000f00)={0x7, 0x7b, 0x2}, 0x7) sendfile(r1, r1, 0x0, 0x800000009) 272.632415ms ago: executing program 0 (id=962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000002cc0)={0xa, 0x4e20, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002d00)="f0e9277fd2f81628", 0x8}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="fbb894", 0x3}, {&(0x7f0000002dc0)="fff057a2735848cd7a82f83138406fff6cdd0b1c04ff07ed1c5e08b98c64229eafa8455a370d8deeec01da1a7dfefe85ecfe702e0daff5a3849c2be1528850133c23d00ec1cc4939c48ce97118b1d0f6602b0adc5f8d7300574a00c43f570f2e33d140122c662325e845465a58d994d84e44ecd6b6e98859c6aa2afe821735e1bccd0e49717a9453dcc426057c655c975521d55489f48abb7a91fe1accada217a8f057719ecc03251f51150dfb2c81a596b3e2c7f392a9ce4ef1d609ca134798d7904c5373b0b79936976d57c6ca1475acc4", 0xd2}, {&(0x7f0000002ec0)="9813bc6e3cd26a048ecc11dd2b5a21b7a329014ebd3bfaa2e87a35fab73cea9750ce96fb4417a53a0135983f7e96b32c280733066297feabf525822acd40b551167d1ca5403743116243ca9bfbabf7a9497d5e218aa0c8b2366c9a855b952200d717533ad664a851893dc471fd298b4fa28e0c742ebba15d69a64170a9dfd4045b19f8d3406ff01c427ddb056a947fb233f1196e9e49b4f2c8b39d90acc0430b82b6bb41cdd1c7c72007c4248810267006c9d269b752ff6eb14b74083344d38966cc2edb2ba6fdba04d968446c320b6f110b5ea71e17d39c7dba2fc7440a4a56", 0xe0}, {&(0x7f0000002fc0)="e33f63f801427f120b0a991b1c33cf0e2687e89435570de92e3866a4750e8f5f000f821206b7f39e631f8e33f25cb230bef51c0b709bbc562d12a98bd2a93f328e9267964a4765db9cb2999daa85149d7da8259b7c02214170d2d2da218ab2d201b6121871bca36f274cff99c72c359e6f3851befd62ca72dd9f992ef97c876e9d6791d65261b1c4fe52ba61113c27abb9f1df5592790910bd88267b4a5006da1070e64f45163ba531c74c522d4c29937acb", 0xb2}, {&(0x7f0000003080)="8c41e9b81087997eb9210e777657d61914666346d506f7509971a3bc1be84ec5c6a6f4c294b61ed666a94e6f9599a588", 0x30}, {&(0x7f00000030c0)="97d84105a0d2a091bac59cbfaf8afb3a944e489198e31162a8a7e3572bababee00085637b179ad1ff72a99bcd1951acd56f8e04f04a58c95b850856aab6b38c9b73d82d81e0a616c232615fe77624e48c0387317287d172cc1bd0fe9b912b2644784834758d5ce5f83a4a062c2cbedfc8f7f7a8c305453638f54b1f0afc49bf8d2bc25458bd924e8", 0x88}], 0x8}}, {{0x0, 0x0, &(0x7f0000005480)=[{0x0}], 0x1, &(0x7f00000055c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x19}}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x16}]}}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x6, 0x1a, '\x00', [@ra={0x5, 0x2, 0x9}, @generic={0x40, 0xd1, "a6f677ad6e2e592b9cea2799e411bac09ef74a4c3935f4f2807cae87c6caba726db75b316b4ee4e5d39b274e0491bca64c98dfc36f35b10468b21d283cf0cfe578169c968283ce7f5ec81cdb21b2e55dac9f206d6638d34ca929a9b5fe8d7dfe427d5211c4a2bc0d859336d7756c71503bb0997964b505a6633cada875bd3961ad81a8a6561b459de73e9df74bd5ba68b8e9d6501d82508704fef645de953088577744e5bcbbe5ce9680cd2be7924a0d4c32077edce61147645b4f2e468c8189c02986c212d84e5daaf4376d2335059135"}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x33, 0x10, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x66f}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x0, 0x61, "ba615a99614d543bfa8e4a927f668cfab649d2f33436c5cbf28e520ced0bf7c4d47669419ebfe723b0217ba3611876f1b3b4af3674fdac422d0c287f2b2cf1b913c81a6f26830e0bfc469358f3998d7b4572813ef13ea3ad70e95b50c0ffcacb36"}, @hao={0xc9, 0x10, @local}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0xc, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xa}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x1020, 0x29, 0x37, {0x0, 0x200, '\x00', [@generic={0xaa, 0x1000, "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"}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x1278}}], 0x2, 0x4014) 251.309485ms ago: executing program 4 (id=953): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) write$binfmt_script(r0, &(0x7f0000001880)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 248.640335ms ago: executing program 0 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 226.604096ms ago: executing program 0 (id=955): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000f00)={0x7, 0x7b, 0x2}, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 213.025306ms ago: executing program 3 (id=956): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x15, &(0x7f0000000880)=@raw=[@ldst={0x2, 0x76bcee8343bc1ace, 0x6, 0x6, 0x8, 0x1, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) open(&(0x7f0000000400)='./file1\x00', 0x64842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100), 0x0) fsetxattr$trusted_overlay_redirect(r5, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r4, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) chmod(&(0x7f0000000540)='./file0\x00', 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000008000000000000000000000000062b650174eb642c3dfbaf75ac1b95896aff060a1f1f2263dfc1b80c9584f439cee4263c9ecd5804500937dfa79a8de3d5114eb2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x800454e0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000580)=0xc) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f00000000c0)=@filename='./file1\x00', r10, &(0x7f00000005c0)) 195.485296ms ago: executing program 4 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0xffffffff}, 0x118920, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 26.70463ms ago: executing program 0 (id=958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001380)) syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp\x00') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f00000005c0)="ca91099f6a81fcdf7fd59fb8548dda7c99086cc47f1a797357c3caa38e5f2036", &(0x7f0000000d80)=""/199}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=959): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x103100) dup3(r3, r2, 0x0) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x0) kernel console output (not intermixed with test programs): pid=3299 comm="syz-executor" path="/root/syzkaller.Nrb7AB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.261842][ T3308] veth0_vlan: entered promiscuous mode [ 32.277342][ T29] audit: type=1400 audit(1759164041.868:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.Nrb7AB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.310017][ T29] audit: type=1400 audit(1759164041.868:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.332296][ T29] audit: type=1400 audit(1759164041.898:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.355165][ T29] audit: type=1400 audit(1759164041.898:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.380702][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.400984][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.411909][ T29] audit: type=1400 audit(1759164042.148:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.446473][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.459136][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.472999][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.481497][ T3308] veth1_vlan: entered promiscuous mode [ 32.497707][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.522487][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.541157][ T3470] lo speed is unknown, defaulting to 1000 [ 32.559868][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.571267][ T3308] veth0_macvtap: entered promiscuous mode [ 32.578465][ T3470] lo speed is unknown, defaulting to 1000 [ 32.582176][ T3308] veth1_macvtap: entered promiscuous mode [ 32.593581][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602402][ T3470] lo speed is unknown, defaulting to 1000 [ 32.608835][ T3470] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.621764][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.632634][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.634361][ T3470] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.663375][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.673524][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.684503][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.702850][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.724336][ T3470] lo speed is unknown, defaulting to 1000 [ 32.739439][ T3470] lo speed is unknown, defaulting to 1000 [ 32.746427][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.752131][ T3478] loop0: detected capacity change from 0 to 2048 [ 32.757284][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.771637][ T3470] lo speed is unknown, defaulting to 1000 [ 32.779836][ T3470] lo speed is unknown, defaulting to 1000 [ 32.786591][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.807998][ T3470] lo speed is unknown, defaulting to 1000 [ 32.842400][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.858943][ T3482] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7'. [ 32.872258][ T3478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.878596][ T3470] syz.4.5 (3470) used greatest stack depth: 10712 bytes left [ 32.923146][ C0] hrtimer: interrupt took 36653 ns [ 33.017941][ T3496] process 'syz.0.10' launched '/dev/fd/4' with NULL argv: empty string added [ 33.090475][ T3501] syz.3.12 (3501) used greatest stack depth: 10200 bytes left [ 33.121471][ T3505] loop3: detected capacity change from 0 to 1024 [ 33.145511][ T3505] EXT4-fs: Ignoring removed orlov option [ 33.179929][ T3505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.252789][ T3516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.273424][ T3517] loop0: detected capacity change from 0 to 512 [ 33.285422][ T3514] loop2: detected capacity change from 0 to 1024 [ 33.286481][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.291861][ T3517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.313869][ T3517] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.332513][ T3514] EXT4-fs: Ignoring removed orlov option [ 33.351676][ T3517] EXT4-fs (loop0): 1 truncate cleaned up [ 33.368783][ T3517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.390713][ T3517] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #15: comm syz.0.16: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 33.428875][ T3520] loop1: detected capacity change from 0 to 1024 [ 33.436134][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.439242][ T3520] EXT4-fs: Ignoring removed orlov option [ 33.456871][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.537276][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.696810][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.769945][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.901092][ T3547] netlink: 256 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.961364][ T3545] netlink: 256 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.389527][ T3567] netlink: 256 bytes leftover after parsing attributes in process `syz.2.25'. [ 34.438999][ T3581] netlink: 256 bytes leftover after parsing attributes in process `syz.4.29'. [ 34.554057][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 34.567634][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 34.583493][ T3602] loop2: detected capacity change from 0 to 512 [ 34.590187][ T3601] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 34.662971][ T3609] siw: device registration error -23 [ 34.682228][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.742565][ T3602] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.808304][ T3602] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.32: corrupted inode contents [ 34.822184][ T3602] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.32: mark_inode_dirty error [ 34.843506][ T3602] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.32: corrupted inode contents [ 34.856627][ T3602] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.32: mark_inode_dirty error [ 34.868767][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 34.884549][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 34.898854][ T3627] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 34.976022][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.021126][ T3636] loop4: detected capacity change from 0 to 2048 [ 35.172130][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.196860][ T3636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.250781][ T3657] lo speed is unknown, defaulting to 1000 [ 35.530119][ T3700] loop3: detected capacity change from 0 to 2048 [ 35.560786][ T3700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.575131][ T3700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.592839][ T3704] netlink: 256 bytes leftover after parsing attributes in process `syz.4.43'. [ 35.613696][ T3717] siw: device registration error -23 [ 36.031465][ T3748] siw: device registration error -23 [ 36.060525][ T3749] siw: device registration error -23 [ 36.177840][ T3758] loop1: detected capacity change from 0 to 2048 [ 36.216640][ T3758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.233299][ T3758] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.448684][ T3794] loop0: detected capacity change from 0 to 2048 [ 36.520144][ T3794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.542493][ T3794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.564810][ T3810] loop1: detected capacity change from 0 to 512 [ 36.594382][ T3810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.614234][ T3810] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.630365][ T3815] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 36.653254][ T3810] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.73: corrupted inode contents [ 36.707558][ T3810] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.73: mark_inode_dirty error [ 36.745469][ T3828] loop4: detected capacity change from 0 to 512 [ 36.771090][ T3828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.775439][ T3810] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.73: corrupted inode contents [ 36.807601][ T3828] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.820181][ T3810] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.73: mark_inode_dirty error [ 36.827894][ T3837] loop0: detected capacity change from 0 to 512 [ 36.839555][ T3828] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.78: corrupted inode contents [ 36.851973][ T3828] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.78: mark_inode_dirty error [ 36.883198][ T3828] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.78: corrupted inode contents [ 36.907884][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.925730][ T3828] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.78: mark_inode_dirty error [ 36.940532][ T3837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.964226][ T3837] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.990061][ T3837] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.80: corrupted inode contents [ 37.026322][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.046497][ T3837] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.80: mark_inode_dirty error [ 37.115346][ T3837] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.80: corrupted inode contents [ 37.144834][ T3871] loop4: detected capacity change from 0 to 512 [ 37.152529][ T3837] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.80: mark_inode_dirty error [ 37.170586][ T3874] loop3: detected capacity change from 0 to 512 [ 37.196062][ T3874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.212768][ T3874] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.224702][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.237867][ T3871] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.244145][ T3874] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.89: corrupted inode contents [ 37.263587][ T3871] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.86: corrupted inode contents [ 37.292517][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.297909][ T3874] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.89: mark_inode_dirty error [ 37.312659][ T3871] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.86: mark_inode_dirty error [ 37.312869][ T3871] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.86: corrupted inode contents [ 37.313084][ T3871] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.86: mark_inode_dirty error [ 37.347798][ T3874] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.89: corrupted inode contents [ 37.359808][ T3874] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.89: mark_inode_dirty error [ 37.408788][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.566596][ T3930] loop0: detected capacity change from 0 to 512 [ 37.725307][ T3937] loop4: detected capacity change from 0 to 512 [ 37.736677][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.764955][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.765129][ T3930] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.799737][ T3937] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.804739][ T3939] lo speed is unknown, defaulting to 1000 [ 37.824356][ T3930] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.95: corrupted inode contents [ 37.836730][ T3930] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.95: mark_inode_dirty error [ 37.855299][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.857781][ T3930] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.95: corrupted inode contents [ 37.877302][ T3937] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.97: corrupted inode contents [ 37.892733][ T3930] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.95: mark_inode_dirty error [ 37.902197][ T3937] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.97: mark_inode_dirty error [ 37.951977][ T3937] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.97: corrupted inode contents [ 38.017308][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.017810][ T3956] loop1: detected capacity change from 0 to 512 [ 38.026992][ T3937] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.97: mark_inode_dirty error [ 38.054123][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 38.054211][ T29] audit: type=1400 audit(1759164047.788:597): avc: denied { create } for pid=3955 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.128333][ T29] audit: type=1400 audit(1759164047.868:598): avc: denied { setopt } for pid=3955 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.147892][ T29] audit: type=1400 audit(1759164047.878:599): avc: denied { write } for pid=3955 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.175095][ T3965] __nla_validate_parse: 20 callbacks suppressed [ 38.175110][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 38.198276][ T3965] netlink: 312 bytes leftover after parsing attributes in process `syz.3.105'. [ 38.208549][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 38.223039][ T3964] loop0: detected capacity change from 0 to 512 [ 38.237391][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.254411][ T3964] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.267008][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.276881][ T3964] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.104: corrupted inode contents [ 38.289436][ T3964] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.104: mark_inode_dirty error [ 38.311156][ T3964] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.104: corrupted inode contents [ 38.355006][ T3964] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.104: mark_inode_dirty error [ 38.415635][ T29] audit: type=1326 audit(1759164048.148:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 38.439026][ T29] audit: type=1326 audit(1759164048.148:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 38.462538][ T29] audit: type=1326 audit(1759164048.148:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 38.485836][ T29] audit: type=1326 audit(1759164048.148:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 38.509224][ T29] audit: type=1326 audit(1759164048.148:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 38.569587][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.619846][ T3987] siw: device registration error -23 [ 38.655043][ T29] audit: type=1326 audit(1759164048.388:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 38.678464][ T29] audit: type=1326 audit(1759164048.388:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 38.790866][ T3990] loop3: detected capacity change from 0 to 512 [ 38.803440][ T3990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.842561][ T3990] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.866608][ T3990] EXT4-fs (loop3): 1 truncate cleaned up [ 38.872743][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.894046][ T3990] 9pnet_fd: Insufficient options for proto=fd [ 38.959414][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.017601][ T4003] loop4: detected capacity change from 0 to 2048 [ 39.038926][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 39.061855][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 39.074375][ T4003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.092550][ T4003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.119502][ T4012] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 39.366599][ T4040] siw: device registration error -23 [ 39.503929][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 39.513436][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 39.544653][ T4055] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 39.732959][ T4070] infiniband syz!: set active [ 39.737768][ T4070] infiniband syz!: added team_slave_0 [ 39.773006][ T4079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.803474][ T4070] RDS/IB: syz!: added [ 39.808651][ T4070] smc: adding ib device syz! with port count 1 [ 39.816251][ T4070] smc: ib device syz! port 1 has pnetid [ 39.952689][ T4079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.995552][ T4117] netlink: 256 bytes leftover after parsing attributes in process `syz.3.127'. [ 40.043054][ T4079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.195100][ T4079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.326386][ T3916] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.341825][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.381019][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.399622][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497077][ T4144] syzkaller0: entered promiscuous mode [ 40.502635][ T4144] syzkaller0: entered allmulticast mode [ 40.516020][ T4144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 40.578385][ T4146] rdma_rxe: rxe_newlink: failed to add bond0 [ 41.063327][ T4151] netlink: 256 bytes leftover after parsing attributes in process `syz.0.139'. [ 41.192324][ T4156] loop0: detected capacity change from 0 to 1024 [ 41.203082][ T4156] EXT4-fs: Ignoring removed orlov option [ 41.215042][ T4158] siw: device registration error -23 [ 41.228995][ T4156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.270769][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.368885][ T4178] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 41.382917][ T4178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.466708][ T4178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.506900][ T4178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.566693][ T4178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.620906][ T3681] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.632932][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.643723][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.655679][ T3681] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.181465][ T4195] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 42.193021][ T4195] team0: Port device dummy0 added [ 42.201891][ T4195] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 42.213677][ T4195] team0: Port device dummy0 removed [ 42.221750][ T4195] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.275820][ T4199] loop0: detected capacity change from 0 to 1024 [ 42.287319][ T4199] EXT4-fs: Ignoring removed orlov option [ 42.314379][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.342950][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.416818][ T4206] siw: device registration error -23 [ 42.465279][ T4210] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.485408][ T4210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.527119][ T4210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.567271][ T4210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.628768][ T4210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.722750][ T3681] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.743172][ T3681] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.754137][ T3681] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.774647][ T3681] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.839270][ T4236] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.881085][ T4239] siw: device registration error -23 [ 43.139621][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 43.139638][ T29] audit: type=1326 audit(1759164052.878:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.169406][ T29] audit: type=1326 audit(1759164052.878:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.192728][ T29] audit: type=1326 audit(1759164052.878:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.216230][ T29] audit: type=1326 audit(1759164052.878:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.240338][ T29] audit: type=1326 audit(1759164052.878:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.263704][ T29] audit: type=1326 audit(1759164052.878:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.287383][ T29] audit: type=1326 audit(1759164052.878:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.310800][ T29] audit: type=1326 audit(1759164052.878:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.334118][ T29] audit: type=1326 audit(1759164052.878:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.357476][ T29] audit: type=1326 audit(1759164052.878:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8217eec9 code=0x7ffc0000 [ 43.411758][ T4266] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.446329][ T4266] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.488074][ T4266] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.549645][ T4266] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.656362][ T4276] __nla_validate_parse: 8 callbacks suppressed [ 43.656392][ T4276] netlink: 256 bytes leftover after parsing attributes in process `syz.4.186'. [ 43.889355][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 43.898752][ T4291] netlink: 324 bytes leftover after parsing attributes in process `syz.4.192'. [ 44.097031][ T4303] lo speed is unknown, defaulting to 1000 [ 44.330815][ T4316] netlink: 256 bytes leftover after parsing attributes in process `syz.4.199'. [ 45.016765][ T4350] siw: device registration error -23 [ 45.053701][ T4352] netlink: 256 bytes leftover after parsing attributes in process `syz.2.213'. [ 45.384954][ T4374] lo speed is unknown, defaulting to 1000 [ 45.624899][ T3683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.647065][ T3683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.676822][ T3683] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.702357][ T4395] netlink: 256 bytes leftover after parsing attributes in process `syz.0.230'. [ 45.717220][ T3683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.902830][ T4421] 9pnet_fd: Insufficient options for proto=fd [ 45.956792][ T4423] netlink: 256 bytes leftover after parsing attributes in process `syz.2.240'. [ 46.105294][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 46.114377][ T4433] netlink: 324 bytes leftover after parsing attributes in process `syz.1.243'. [ 46.212811][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 46.472322][ T4481] siw: device registration error -23 [ 46.845331][ T4522] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.845405][ T4524] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.164988][ T4572] siw: device registration error -23 [ 47.260428][ T4579] loop0: detected capacity change from 0 to 1024 [ 47.285486][ T4579] EXT4-fs: Ignoring removed orlov option [ 47.330712][ T4579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.404602][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.428954][ T4598] FAULT_INJECTION: forcing a failure. [ 47.428954][ T4598] name failslab, interval 1, probability 0, space 0, times 1 [ 47.442038][ T4598] CPU: 1 UID: 0 PID: 4598 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.442117][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.442132][ T4598] Call Trace: [ 47.442147][ T4598] [ 47.442155][ T4598] __dump_stack+0x1d/0x30 [ 47.442206][ T4598] dump_stack_lvl+0xe8/0x140 [ 47.442232][ T4598] dump_stack+0x15/0x1b [ 47.442254][ T4598] should_fail_ex+0x265/0x280 [ 47.442284][ T4598] should_failslab+0x8c/0xb0 [ 47.442364][ T4598] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 47.442402][ T4598] ? shmem_alloc_inode+0x34/0x50 [ 47.442486][ T4598] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 47.442514][ T4598] shmem_alloc_inode+0x34/0x50 [ 47.442600][ T4598] alloc_inode+0x40/0x170 [ 47.442630][ T4598] new_inode+0x1d/0xe0 [ 47.442657][ T4598] shmem_get_inode+0x244/0x750 [ 47.442715][ T4598] __shmem_file_setup+0x113/0x210 [ 47.442755][ T4598] shmem_file_setup+0x3b/0x50 [ 47.442794][ T4598] __se_sys_memfd_create+0x2c3/0x590 [ 47.442846][ T4598] __x64_sys_memfd_create+0x31/0x40 [ 47.442869][ T4598] x64_sys_call+0x2abe/0x2ff0 [ 47.442896][ T4598] do_syscall_64+0xd2/0x200 [ 47.442946][ T4598] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.442986][ T4598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.443031][ T4598] RIP: 0033:0x7f57c724eec9 [ 47.443050][ T4598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.443073][ T4598] RSP: 002b:00007f57c5c8de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 47.443098][ T4598] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f57c724eec9 [ 47.443168][ T4598] RDX: 00007f57c5c8def0 RSI: 0000000000000000 RDI: 00007f57c72d2960 [ 47.443185][ T4598] RBP: 0000200000000600 R08: 00007f57c5c8dbb7 R09: 00007f57c5c8de40 [ 47.443202][ T4598] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 47.443217][ T4598] R13: 00007f57c5c8def0 R14: 00007f57c5c8deb0 R15: 0000200000000300 [ 47.443241][ T4598] [ 47.799536][ T4610] siw: device registration error -23 [ 48.169049][ T4633] lo speed is unknown, defaulting to 1000 [ 48.243090][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 48.243105][ T29] audit: type=1400 audit(1759164057.978:962): avc: denied { create } for pid=4639 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.285806][ T4640] loop2: detected capacity change from 0 to 164 [ 48.292926][ T4640] ISOFS: unable to read i-node block [ 48.298310][ T4640] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 48.348511][ T29] audit: type=1400 audit(1759164058.018:963): avc: denied { write } for pid=4639 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.367889][ T29] audit: type=1400 audit(1759164058.058:964): avc: denied { mount } for pid=4639 comm="syz.2.289" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.428483][ T4645] siw: device registration error -23 [ 48.520639][ T29] audit: type=1400 audit(1759164058.258:965): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.036659][ T4689] __nla_validate_parse: 12 callbacks suppressed [ 49.036676][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 49.058365][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 49.128257][ T4701] syz!: rxe_newlink: already configured on team_slave_0 [ 49.173381][ T4707] loop2: detected capacity change from 0 to 1024 [ 49.184992][ T4707] EXT4-fs: Ignoring removed orlov option [ 49.197813][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.244964][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.332545][ T29] audit: type=1326 audit(1759164059.068:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 49.360904][ T29] audit: type=1326 audit(1759164059.098:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 49.384300][ T29] audit: type=1326 audit(1759164059.098:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 49.407723][ T29] audit: type=1326 audit(1759164059.098:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 49.431013][ T29] audit: type=1326 audit(1759164059.098:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 49.454403][ T29] audit: type=1326 audit(1759164059.098:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 49.619791][ T4765] netlink: 256 bytes leftover after parsing attributes in process `syz.2.308'. [ 49.756286][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 49.765230][ T4791] netlink: 324 bytes leftover after parsing attributes in process `syz.1.310'. [ 49.837831][ T4793] siw: device registration error -23 [ 49.915584][ T4802] lo speed is unknown, defaulting to 1000 [ 50.106816][ T4831] loop1: detected capacity change from 0 to 1024 [ 50.114362][ T4831] EXT4-fs: Ignoring removed orlov option [ 50.141663][ T4831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.234299][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.310249][ T4835] loop1: detected capacity change from 0 to 1024 [ 50.323770][ T4835] EXT4-fs: Ignoring removed orlov option [ 50.391611][ T4835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.480348][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.519114][ T4846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.323'. [ 50.574947][ T4849] loop0: detected capacity change from 0 to 512 [ 50.635362][ T4855] siw: device registration error -23 [ 50.683610][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 50.722550][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 50.735818][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.749348][ T4849] EXT4-fs (loop0): too many log groups per flexible block group [ 50.759426][ T4849] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 50.761732][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.826758][ T4849] EXT4-fs (loop0): mount failed [ 51.673940][ T4971] lo speed is unknown, defaulting to 1000 [ 51.833917][ T4987] netlink: 256 bytes leftover after parsing attributes in process `syz.4.342'. [ 51.865431][ T4978] netlink: 256 bytes leftover after parsing attributes in process `syz.2.339'. [ 52.032917][ T5007] loop2: detected capacity change from 0 to 1024 [ 52.047129][ T5007] EXT4-fs: Ignoring removed orlov option [ 52.076703][ T5007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.121852][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.151041][ T5019] syz!: rxe_newlink: already configured on team_slave_0 [ 52.442077][ T5045] netlink: 'syz.0.360': attribute type 10 has an invalid length. [ 52.460306][ T5045] team0: Device hsr_slave_0 failed to register rx_handler [ 52.478930][ T2990] udevd[2990]: worker [3283] terminated by signal 33 (Unknown signal 33) [ 52.492475][ T2990] udevd[2990]: worker [3283] failed while handling '/devices/platform/mac802154_hwsim/ieee802154/phy39' [ 52.504527][ T2990] udevd[2990]: worker [3754] terminated by signal 33 (Unknown signal 33) [ 52.513008][ T2990] udevd[2990]: worker [3754] failed while handling '/devices/virtual/block/loop0' [ 52.531234][ T5049] FAULT_INJECTION: forcing a failure. [ 52.531234][ T5049] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.544857][ T5049] CPU: 0 UID: 0 PID: 5049 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.544894][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.544912][ T5049] Call Trace: [ 52.544921][ T5049] [ 52.544931][ T5049] __dump_stack+0x1d/0x30 [ 52.545037][ T5049] dump_stack_lvl+0xe8/0x140 [ 52.545063][ T5049] dump_stack+0x15/0x1b [ 52.545085][ T5049] should_fail_ex+0x265/0x280 [ 52.545124][ T5049] should_fail+0xb/0x20 [ 52.545197][ T5049] should_fail_usercopy+0x1a/0x20 [ 52.545234][ T5049] _copy_to_user+0x20/0xa0 [ 52.545277][ T5049] simple_read_from_buffer+0xb5/0x130 [ 52.545308][ T5049] proc_fail_nth_read+0x10e/0x150 [ 52.545405][ T5049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.545463][ T5049] vfs_read+0x1a5/0x770 [ 52.545491][ T5049] ? __rcu_read_unlock+0x4f/0x70 [ 52.545590][ T5049] ? __fget_files+0x184/0x1c0 [ 52.545624][ T5049] ksys_read+0xda/0x1a0 [ 52.545662][ T5049] __x64_sys_read+0x40/0x50 [ 52.545691][ T5049] x64_sys_call+0x27bc/0x2ff0 [ 52.545742][ T5049] do_syscall_64+0xd2/0x200 [ 52.545782][ T5049] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.545813][ T5049] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.545895][ T5049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.545922][ T5049] RIP: 0033:0x7fdf93bcd8dc [ 52.545941][ T5049] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.546029][ T5049] RSP: 002b:00007fdf9262f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.546052][ T5049] RAX: ffffffffffffffda RBX: 00007fdf93e25fa0 RCX: 00007fdf93bcd8dc [ 52.546068][ T5049] RDX: 000000000000000f RSI: 00007fdf9262f0a0 RDI: 0000000000000006 [ 52.546083][ T5049] RBP: 00007fdf9262f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.546098][ T5049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.546110][ T5049] R13: 00007fdf93e26038 R14: 00007fdf93e25fa0 R15: 00007ffc736ed248 [ 52.546194][ T5049] [ 52.551160][ T5047] loop4: detected capacity change from 0 to 1024 [ 52.682423][ T5055] loop1: detected capacity change from 0 to 128 [ 52.704192][ T5047] EXT4-fs: Ignoring removed orlov option [ 52.873270][ T5047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.947518][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.333038][ T5092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5092 comm=syz.1.378 [ 53.389128][ T5094] loop0: detected capacity change from 0 to 1024 [ 53.406785][ T5094] EXT4-fs: Ignoring removed orlov option [ 53.422280][ T5094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.489414][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.540481][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 53.540497][ T29] audit: type=1326 audit(1759164063.278:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.571874][ T29] audit: type=1326 audit(1759164063.288:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.610915][ T29] audit: type=1326 audit(1759164063.338:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.634415][ T29] audit: type=1326 audit(1759164063.348:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.658292][ T29] audit: type=1326 audit(1759164063.348:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.681807][ T29] audit: type=1326 audit(1759164063.348:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.705343][ T29] audit: type=1326 audit(1759164063.348:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.728693][ T29] audit: type=1326 audit(1759164063.348:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.752041][ T29] audit: type=1326 audit(1759164063.348:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 53.775481][ T29] audit: type=1326 audit(1759164063.348:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 54.083463][ T5126] __nla_validate_parse: 7 callbacks suppressed [ 54.083478][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 54.099840][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 54.146923][ T5126] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 54.205520][ T5135] netlink: 256 bytes leftover after parsing attributes in process `syz.2.390'. [ 54.329935][ T5154] loop1: detected capacity change from 0 to 1024 [ 54.337860][ T5154] EXT4-fs: Ignoring removed orlov option [ 54.356897][ T5154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.410743][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.522426][ T5173] netlink: 256 bytes leftover after parsing attributes in process `syz.2.395'. [ 54.927612][ T5248] netlink: 256 bytes leftover after parsing attributes in process `syz.4.403'. [ 55.020203][ T5254] loop0: detected capacity change from 0 to 1024 [ 55.034685][ T5254] EXT4-fs: Ignoring removed orlov option [ 55.062661][ T5254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.154895][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.167394][ T5267] netlink: 256 bytes leftover after parsing attributes in process `syz.4.409'. [ 55.332761][ T5287] loop3: detected capacity change from 0 to 2048 [ 55.380036][ T5287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 55.406807][ T5293] netlink: 256 bytes leftover after parsing attributes in process `syz.0.417'. [ 55.532404][ T5300] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.547983][ T5300] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1780 with error 28 [ 55.548010][ T5300] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.548010][ T5300] [ 55.548023][ T5300] EXT4-fs (loop3): Total free blocks count 0 [ 55.548100][ T5300] EXT4-fs (loop3): Free/Dirty block details [ 55.548115][ T5300] EXT4-fs (loop3): free_blocks=2415919104 [ 55.548133][ T5300] EXT4-fs (loop3): dirty_blocks=1792 [ 55.548148][ T5300] EXT4-fs (loop3): Block reservation details [ 55.548196][ T5300] EXT4-fs (loop3): i_reserved_data_blocks=112 [ 55.625502][ T5308] loop2: detected capacity change from 0 to 1024 [ 55.676381][ T5308] EXT4-fs: Ignoring removed orlov option [ 55.678974][ T5310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.712518][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.755182][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.789300][ T5310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.795932][ T5320] mmap: syz.2.424 (5320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.887361][ T5310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.927272][ T5324] netlink: 256 bytes leftover after parsing attributes in process `syz.2.426'. [ 55.987016][ T5310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.066265][ T3689] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.118041][ T3689] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.126490][ T3689] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.138843][ T5300] syz.3.415 (5300) used greatest stack depth: 10112 bytes left [ 56.141903][ T3689] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.169710][ T5338] netlink: 256 bytes leftover after parsing attributes in process `syz.2.429'. [ 56.185991][ T1622] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 56.265428][ T5347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.433'. [ 56.308746][ T5351] loop0: detected capacity change from 0 to 1024 [ 56.328480][ T5351] EXT4-fs: Ignoring removed orlov option [ 56.346311][ T5351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.374814][ T5353] loop2: detected capacity change from 0 to 2048 [ 56.417224][ T5353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.440520][ T5353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.453081][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.491432][ T5367] siw: device registration error -23 [ 56.585331][ T5369] loop3: detected capacity change from 0 to 2048 [ 56.624556][ T5369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.650152][ T5369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.701133][ T5386] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 57.199986][ T5439] loop4: detected capacity change from 0 to 1024 [ 57.207158][ T5439] EXT4-fs: Ignoring removed orlov option [ 57.224623][ T5439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.271878][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.363181][ T5460] FAULT_INJECTION: forcing a failure. [ 57.363181][ T5460] name failslab, interval 1, probability 0, space 0, times 0 [ 57.375925][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.4.457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.375959][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.375993][ T5460] Call Trace: [ 57.376003][ T5460] [ 57.376028][ T5460] __dump_stack+0x1d/0x30 [ 57.376056][ T5460] dump_stack_lvl+0xe8/0x140 [ 57.376083][ T5460] dump_stack+0x15/0x1b [ 57.376105][ T5460] should_fail_ex+0x265/0x280 [ 57.376152][ T5460] should_failslab+0x8c/0xb0 [ 57.376186][ T5460] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.376228][ T5460] ? __alloc_skb+0x101/0x320 [ 57.376253][ T5460] __alloc_skb+0x101/0x320 [ 57.376280][ T5460] netlink_alloc_large_skb+0xba/0xf0 [ 57.376382][ T5460] netlink_sendmsg+0x3cf/0x6b0 [ 57.376419][ T5460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.376510][ T5460] __sock_sendmsg+0x145/0x180 [ 57.376554][ T5460] ____sys_sendmsg+0x31e/0x4e0 [ 57.376631][ T5460] ___sys_sendmsg+0x17b/0x1d0 [ 57.376685][ T5460] __x64_sys_sendmsg+0xd4/0x160 [ 57.376730][ T5460] x64_sys_call+0x191e/0x2ff0 [ 57.376759][ T5460] do_syscall_64+0xd2/0x200 [ 57.376800][ T5460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.376833][ T5460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.376939][ T5460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.376969][ T5460] RIP: 0033:0x7fc546b6eec9 [ 57.376990][ T5460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.377014][ T5460] RSP: 002b:00007fc5455cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.377072][ T5460] RAX: ffffffffffffffda RBX: 00007fc546dc5fa0 RCX: 00007fc546b6eec9 [ 57.377090][ T5460] RDX: 0000000020008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 57.377107][ T5460] RBP: 00007fc5455cf090 R08: 0000000000000000 R09: 0000000000000000 [ 57.377123][ T5460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.377136][ T5460] R13: 00007fc546dc6038 R14: 00007fc546dc5fa0 R15: 00007ffecdadb6b8 [ 57.377156][ T5460] [ 57.941448][ T5518] loop1: detected capacity change from 0 to 1024 [ 57.956800][ T5518] EXT4-fs: Ignoring removed orlov option [ 58.016904][ T5518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.093353][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.141587][ T5534] siw: device registration error -23 [ 58.162163][ T5536] siw: device registration error -23 [ 58.171419][ T5538] loop1: detected capacity change from 0 to 512 [ 58.199135][ T5538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.217826][ T5538] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.232290][ T5538] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.473: corrupted inode contents [ 58.244231][ T5546] loop3: detected capacity change from 0 to 512 [ 58.249206][ T5538] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.473: mark_inode_dirty error [ 58.274802][ T5538] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.473: corrupted inode contents [ 58.287087][ T5538] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.473: mark_inode_dirty error [ 58.359104][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.392740][ T5556] siw: device registration error -23 [ 58.595685][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 58.595703][ T29] audit: type=1326 audit(1759164068.338:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.625526][ T29] audit: type=1326 audit(1759164068.338:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.648952][ T29] audit: type=1326 audit(1759164068.338:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.672312][ T29] audit: type=1326 audit(1759164068.338:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.695653][ T29] audit: type=1326 audit(1759164068.338:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.719044][ T29] audit: type=1326 audit(1759164068.338:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.742283][ T29] audit: type=1326 audit(1759164068.338:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.765729][ T29] audit: type=1326 audit(1759164068.338:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.789067][ T29] audit: type=1326 audit(1759164068.338:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 58.812401][ T29] audit: type=1326 audit(1759164068.338:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf93bcd97f code=0x7ffc0000 [ 59.103248][ T5585] loop4: detected capacity change from 0 to 1024 [ 59.110276][ T5585] EXT4-fs: Ignoring removed orlov option [ 59.127245][ T5585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.197825][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.284410][ T5602] __nla_validate_parse: 15 callbacks suppressed [ 59.284427][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 59.305256][ T5602] FAULT_INJECTION: forcing a failure. [ 59.305256][ T5602] name failslab, interval 1, probability 0, space 0, times 0 [ 59.318016][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.318049][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.318065][ T5602] Call Trace: [ 59.318072][ T5602] [ 59.318081][ T5602] __dump_stack+0x1d/0x30 [ 59.318107][ T5602] dump_stack_lvl+0xe8/0x140 [ 59.318201][ T5602] dump_stack+0x15/0x1b [ 59.318222][ T5602] should_fail_ex+0x265/0x280 [ 59.318250][ T5602] should_failslab+0x8c/0xb0 [ 59.318275][ T5602] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 59.318345][ T5602] ? debugfs_alloc_inode+0x34/0x40 [ 59.318444][ T5602] ? lookup_noperm+0xc9/0x180 [ 59.318535][ T5602] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 59.318570][ T5602] debugfs_alloc_inode+0x34/0x40 [ 59.318680][ T5602] alloc_inode+0x40/0x170 [ 59.318709][ T5602] new_inode+0x1d/0xe0 [ 59.318738][ T5602] __debugfs_create_file+0x109/0x330 [ 59.318774][ T5602] debugfs_create_file_full+0x3f/0x60 [ 59.318872][ T5602] ? __pfx_ppp_setup+0x10/0x10 [ 59.318894][ T5602] ref_tracker_dir_debugfs+0x100/0x1e0 [ 59.318956][ T5602] alloc_netdev_mqs+0x1a2/0xa30 [ 59.318985][ T5602] ppp_ioctl+0x4d5/0x11c0 [ 59.319083][ T5602] ? __fget_files+0x184/0x1c0 [ 59.319112][ T5602] ? __pfx_ppp_ioctl+0x10/0x10 [ 59.319134][ T5602] __se_sys_ioctl+0xce/0x140 [ 59.319154][ T5602] __x64_sys_ioctl+0x43/0x50 [ 59.319224][ T5602] x64_sys_call+0x1816/0x2ff0 [ 59.319247][ T5602] do_syscall_64+0xd2/0x200 [ 59.319354][ T5602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.319381][ T5602] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.319412][ T5602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.319435][ T5602] RIP: 0033:0x7f7f8217eec9 [ 59.319454][ T5602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.319488][ T5602] RSP: 002b:00007f7f80be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.319508][ T5602] RAX: ffffffffffffffda RBX: 00007f7f823d5fa0 RCX: 00007f7f8217eec9 [ 59.319522][ T5602] RDX: 0000200000000580 RSI: 00000000c004743e RDI: 0000000000000007 [ 59.319535][ T5602] RBP: 00007f7f80be7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.319548][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.319561][ T5602] R13: 00007f7f823d6038 R14: 00007f7f823d5fa0 R15: 00007fff392db288 [ 59.319589][ T5602] [ 59.319601][ T5602] debugfs: out of free dentries, can not create file 'netdev@ffff8881198f2550' [ 59.575985][ T5608] netlink: 256 bytes leftover after parsing attributes in process `syz.0.498'. [ 59.668352][ T5619] netlink: 256 bytes leftover after parsing attributes in process `syz.2.499'. [ 59.850071][ T5633] loop2: detected capacity change from 0 to 1024 [ 59.872317][ T5633] EXT4-fs: Ignoring removed orlov option [ 59.897433][ T5633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.968651][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.143039][ T5651] ------------[ cut here ]------------ [ 60.148648][ T5651] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 60.172845][ T5651] WARNING: CPU: 0 PID: 5651 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 60.183377][ T5651] Modules linked in: [ 60.187502][ T5651] CPU: 0 UID: 0 PID: 5651 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.197513][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.207675][ T5651] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 60.214028][ T5651] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 82 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 60.233805][ T5651] RSP: 0018:ffffc900107ff440 EFLAGS: 00010292 [ 60.239955][ T5651] RAX: 7c0043182440f500 RBX: ffff8881198479a8 RCX: ffff888109453180 [ 60.248027][ T5651] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 60.256075][ T5651] RBP: fffffffe00000030 R08: 0001c900107ff27f R09: 0000000000000000 [ 60.264103][ T5651] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888119847968 [ 60.266226][ T5657] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 60.272167][ T5651] R13: ffff88810a980000 R14: ffff88810a980000 R15: ffff8881198479a0 [ 60.272224][ T5651] FS: 00007fc5455cf6c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 60.297022][ T5651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.303631][ T5651] CR2: 000000110c2b15b4 CR3: 0000000119dc0000 CR4: 00000000003506f0 [ 60.311668][ T5651] Call Trace: [ 60.315097][ T5651] [ 60.318068][ T5651] reg_set_min_max+0x215/0x260 [ 60.322924][ T5651] check_cond_jmp_op+0x1080/0x16e0 [ 60.328128][ T5651] do_check+0x332a/0x7a10 [ 60.332519][ T5651] do_check_common+0xc3a/0x12a0 [ 60.337456][ T5651] bpf_check+0x942b/0xd9e0 [ 60.341906][ T5651] ? __rcu_read_unlock+0x4f/0x70 [ 60.346970][ T5651] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 60.353118][ T5651] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 60.358870][ T5651] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 60.362624][ T5657] team0: Port device dummy0 added [ 60.365024][ T5651] ? css_rstat_updated+0xb7/0x240 [ 60.375120][ T5651] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 60.381243][ T5651] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 60.387388][ T5651] ? css_rstat_updated+0xb7/0x240 [ 60.392458][ T5651] ? __rcu_read_unlock+0x4f/0x70 [ 60.397468][ T5651] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 60.403306][ T5651] ? should_fail_ex+0x30/0x280 [ 60.408204][ T5651] ? selinux_bpf_prog_load+0x36/0xf0 [ 60.413655][ T5651] ? should_failslab+0x8c/0xb0 [ 60.418592][ T5651] ? __kmalloc_cache_noprof+0x189/0x320 [ 60.424278][ T5651] ? selinux_bpf_prog_load+0xbf/0xf0 [ 60.429608][ T5651] ? security_bpf_prog_load+0x2c/0xa0 [ 60.435062][ T5651] bpf_prog_load+0xedd/0x1070 [ 60.439874][ T5651] ? security_bpf+0x2b/0x90 [ 60.444450][ T5651] __sys_bpf+0x462/0x7b0 [ 60.448782][ T5651] __x64_sys_bpf+0x41/0x50 [ 60.453235][ T5651] x64_sys_call+0x2aea/0x2ff0 [ 60.457984][ T5651] do_syscall_64+0xd2/0x200 [ 60.462573][ T5651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.468706][ T5651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.474542][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.480475][ T5651] RIP: 0033:0x7fc546b6eec9 [ 60.484936][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.505202][ T5651] RSP: 002b:00007fc5455cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.513722][ T5651] RAX: ffffffffffffffda RBX: 00007fc546dc5fa0 RCX: 00007fc546b6eec9 [ 60.521858][ T5651] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 60.529902][ T5651] RBP: 00007fc546bf1f91 R08: 0000000000000000 R09: 0000000000000000 [ 60.537989][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.546022][ T5651] R13: 00007fc546dc6038 R14: 00007fc546dc5fa0 R15: 00007ffecdadb6b8 [ 60.554125][ T5651] [ 60.557191][ T5651] ---[ end trace 0000000000000000 ]--- [ 60.634750][ T5660] netlink: 256 bytes leftover after parsing attributes in process `syz.1.514'. [ 60.825528][ T5669] netlink: 256 bytes leftover after parsing attributes in process `syz.1.515'. [ 61.061673][ T5679] loop1: detected capacity change from 0 to 1024 [ 61.093940][ T5679] EXT4-fs: Ignoring removed orlov option [ 61.124346][ T5679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.193887][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.393886][ T5693] capability: warning: `syz.1.523' uses deprecated v2 capabilities in a way that may be insecure [ 61.707447][ T5700] netlink: 256 bytes leftover after parsing attributes in process `syz.1.526'. [ 61.868627][ T5705] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 61.956634][ T5709] netlink: 256 bytes leftover after parsing attributes in process `syz.3.527'. [ 62.011793][ T5719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.532'. [ 62.021660][ T5718] delete_channel: no stack [ 62.048822][ T5724] loop4: detected capacity change from 0 to 1024 [ 62.055702][ T5724] EXT4-fs: Ignoring removed orlov option [ 62.077860][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.155764][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.439276][ T5743] netlink: 256 bytes leftover after parsing attributes in process `syz.3.539'. [ 62.548296][ T5754] loop0: detected capacity change from 0 to 512 [ 62.556956][ T5754] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 62.572487][ T5754] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.595291][ T5754] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.543: Block bitmap for bg 0 marked uninitialized [ 62.609165][ T5754] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 62.619360][ T5754] EXT4-fs (loop0): 1 orphan inode deleted [ 62.625825][ T5754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.639062][ T5754] openvswitch: netlink: Message has 6 unknown bytes. [ 62.697568][ T5764] netlink: 256 bytes leftover after parsing attributes in process `syz.3.546'. [ 62.741021][ T5768] loop1: detected capacity change from 0 to 1024 [ 62.768110][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.778317][ T5768] EXT4-fs: Ignoring removed orlov option [ 62.835912][ T5768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.905827][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.306983][ T5810] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 63.374281][ T5810] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 63.400042][ T5814] loop3: detected capacity change from 0 to 1024 [ 63.432036][ T5810] team0: Port device dummy0 removed [ 63.455439][ T5814] EXT4-fs: Ignoring removed orlov option [ 63.469437][ T5810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.502105][ T5814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.608799][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 63.608819][ T29] audit: type=1326 audit(1759164073.328:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.638500][ T29] audit: type=1326 audit(1759164073.328:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.661893][ T29] audit: type=1326 audit(1759164073.328:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.685240][ T29] audit: type=1326 audit(1759164073.328:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.709005][ T29] audit: type=1326 audit(1759164073.328:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.732934][ T29] audit: type=1326 audit(1759164073.328:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.756171][ T29] audit: type=1326 audit(1759164073.328:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.779534][ T29] audit: type=1326 audit(1759164073.328:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.802788][ T29] audit: type=1326 audit(1759164073.328:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.826122][ T29] audit: type=1326 audit(1759164073.328:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f156562eec9 code=0x7ffc0000 [ 63.877126][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.981121][ T5836] syz.1.568 uses obsolete (PF_INET,SOCK_PACKET) [ 64.004236][ T5839] loop2: detected capacity change from 0 to 128 [ 64.303581][ T5863] loop3: detected capacity change from 0 to 1024 [ 64.310445][ T5863] EXT4-fs: Ignoring removed orlov option [ 64.326342][ T5863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.377721][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.402991][ T5873] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 64.833143][ T5890] __nla_validate_parse: 4 callbacks suppressed [ 64.833163][ T5890] netlink: 256 bytes leftover after parsing attributes in process `syz.4.586'. [ 64.940410][ T5897] FAULT_INJECTION: forcing a failure. [ 64.940410][ T5897] name failslab, interval 1, probability 0, space 0, times 0 [ 64.953131][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.4.588 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.953172][ T5897] Tainted: [W]=WARN [ 64.953181][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.953197][ T5897] Call Trace: [ 64.953205][ T5897] [ 64.953281][ T5897] __dump_stack+0x1d/0x30 [ 64.953307][ T5897] dump_stack_lvl+0xe8/0x140 [ 64.953332][ T5897] dump_stack+0x15/0x1b [ 64.953353][ T5897] should_fail_ex+0x265/0x280 [ 64.953384][ T5897] should_failslab+0x8c/0xb0 [ 64.953465][ T5897] kmem_cache_alloc_noprof+0x50/0x310 [ 64.953501][ T5897] ? getname_flags+0x80/0x3b0 [ 64.953539][ T5897] getname_flags+0x80/0x3b0 [ 64.953622][ T5897] path_setxattrat+0x223/0x310 [ 64.953677][ T5897] __x64_sys_lsetxattr+0x71/0x90 [ 64.953710][ T5897] x64_sys_call+0x2877/0x2ff0 [ 64.953737][ T5897] do_syscall_64+0xd2/0x200 [ 64.953806][ T5897] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.953895][ T5897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.953929][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.953957][ T5897] RIP: 0033:0x7fc546b6eec9 [ 64.953975][ T5897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.953998][ T5897] RSP: 002b:00007fc5455cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 64.954078][ T5897] RAX: ffffffffffffffda RBX: 00007fc546dc5fa0 RCX: 00007fc546b6eec9 [ 64.954095][ T5897] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400 [ 64.954110][ T5897] RBP: 00007fc5455cf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.954126][ T5897] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 64.954141][ T5897] R13: 00007fc546dc6038 R14: 00007fc546dc5fa0 R15: 00007ffecdadb6b8 [ 64.954166][ T5897] [ 64.956399][ T5894] netlink: 256 bytes leftover after parsing attributes in process `syz.2.587'. [ 65.173002][ T5904] loop4: detected capacity change from 0 to 1024 [ 65.197791][ T5904] EXT4-fs: Ignoring removed orlov option [ 65.218438][ T5904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.228323][ T5910] FAULT_INJECTION: forcing a failure. [ 65.228323][ T5910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.245457][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.0.593 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.245497][ T5910] Tainted: [W]=WARN [ 65.245505][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.245521][ T5910] Call Trace: [ 65.245608][ T5910] [ 65.245663][ T5910] __dump_stack+0x1d/0x30 [ 65.245685][ T5910] dump_stack_lvl+0xe8/0x140 [ 65.245708][ T5910] dump_stack+0x15/0x1b [ 65.245729][ T5910] should_fail_ex+0x265/0x280 [ 65.245761][ T5910] should_fail+0xb/0x20 [ 65.245785][ T5910] should_fail_usercopy+0x1a/0x20 [ 65.245828][ T5910] strncpy_from_user+0x25/0x230 [ 65.245878][ T5910] getname_flags+0xae/0x3b0 [ 65.245908][ T5910] user_path_at+0x28/0x130 [ 65.245975][ T5910] vfs_open_tree+0x198/0x540 [ 65.246099][ T5910] __x64_sys_open_tree+0x45/0xc0 [ 65.246126][ T5910] x64_sys_call+0x2a87/0x2ff0 [ 65.246223][ T5910] do_syscall_64+0xd2/0x200 [ 65.246258][ T5910] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.246288][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.246317][ T5910] RIP: 0033:0x7fdf93bceec9 [ 65.246336][ T5910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.246359][ T5910] RSP: 002b:00007fdf9262f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 65.246425][ T5910] RAX: ffffffffffffffda RBX: 00007fdf93e25fa0 RCX: 00007fdf93bceec9 [ 65.246437][ T5910] RDX: 0000000000089001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 65.246450][ T5910] RBP: 00007fdf9262f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.246461][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.246475][ T5910] R13: 00007fdf93e26038 R14: 00007fdf93e25fa0 R15: 00007ffc736ed248 [ 65.246499][ T5910] [ 65.549290][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.641434][ T5931] netlink: 256 bytes leftover after parsing attributes in process `syz.4.599'. [ 65.795218][ T5941] netlink: 256 bytes leftover after parsing attributes in process `syz.3.604'. [ 65.847194][ T5951] loop4: detected capacity change from 0 to 4096 [ 65.855649][ T5951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.875440][ T5951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.932580][ T5956] loop3: detected capacity change from 0 to 512 [ 65.955936][ T5956] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.608: casefold flag without casefold feature [ 65.960374][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 65.978388][ T5956] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.608: couldn't read orphan inode 15 (err -117) [ 65.980361][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.997782][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.000490][ T5959] netlink: 2 bytes leftover after parsing attributes in process `syz.0.609'. [ 66.016974][ T5956] Zero length message leads to an empty skb [ 66.067234][ T5966] loop0: detected capacity change from 0 to 1024 [ 66.074966][ T5966] EXT4-fs: Ignoring removed orlov option [ 66.310815][ T5988] netlink: 256 bytes leftover after parsing attributes in process `syz.3.618'. [ 66.408405][ T5995] FAULT_INJECTION: forcing a failure. [ 66.408405][ T5995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.408926][ T5992] netlink: 256 bytes leftover after parsing attributes in process `syz.1.619'. [ 66.421636][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.4.620 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.421682][ T5995] Tainted: [W]=WARN [ 66.421691][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.421709][ T5995] Call Trace: [ 66.421720][ T5995] [ 66.421732][ T5995] __dump_stack+0x1d/0x30 [ 66.421827][ T5995] dump_stack_lvl+0xe8/0x140 [ 66.421927][ T5995] dump_stack+0x15/0x1b [ 66.422036][ T5995] should_fail_ex+0x265/0x280 [ 66.422069][ T5995] should_fail+0xb/0x20 [ 66.422118][ T5995] should_fail_usercopy+0x1a/0x20 [ 66.422155][ T5995] _copy_from_user+0x1c/0xb0 [ 66.422199][ T5995] ____sys_sendmsg+0x1c5/0x4e0 [ 66.422250][ T5995] ___sys_sendmsg+0x17b/0x1d0 [ 66.422302][ T5995] __sys_sendmmsg+0x178/0x300 [ 66.422350][ T5995] __x64_sys_sendmmsg+0x57/0x70 [ 66.422385][ T5995] x64_sys_call+0x1c4a/0x2ff0 [ 66.422495][ T5995] do_syscall_64+0xd2/0x200 [ 66.422538][ T5995] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.422573][ T5995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.422613][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.422692][ T5995] RIP: 0033:0x7fc546b6eec9 [ 66.422716][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.422742][ T5995] RSP: 002b:00007fc5455cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.422769][ T5995] RAX: ffffffffffffffda RBX: 00007fc546dc5fa0 RCX: 00007fc546b6eec9 [ 66.422788][ T5995] RDX: 0000000000000001 RSI: 0000200000001000 RDI: 0000000000000003 [ 66.422805][ T5995] RBP: 00007fc5455cf090 R08: 0000000000000000 R09: 0000000000000000 [ 66.422823][ T5995] R10: 0000000000042801 R11: 0000000000000246 R12: 0000000000000001 [ 66.422890][ T5995] R13: 00007fc546dc6038 R14: 00007fc546dc5fa0 R15: 00007ffecdadb6b8 [ 66.422955][ T5995] [ 66.483259][ T5997] loop3: detected capacity change from 0 to 1024 [ 66.773080][ T6019] loop4: detected capacity change from 0 to 1024 [ 66.788350][ T6019] EXT4-fs: Ignoring removed orlov option [ 66.921174][ T6034] netlink: 256 bytes leftover after parsing attributes in process `syz.1.633'. [ 66.974082][ T6040] FAULT_INJECTION: forcing a failure. [ 66.974082][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 66.986876][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.4.634 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.986950][ T6040] Tainted: [W]=WARN [ 66.986958][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.986974][ T6040] Call Trace: [ 66.986987][ T6040] [ 66.987056][ T6040] __dump_stack+0x1d/0x30 [ 66.987086][ T6040] dump_stack_lvl+0xe8/0x140 [ 66.987112][ T6040] dump_stack+0x15/0x1b [ 66.987128][ T6040] should_fail_ex+0x265/0x280 [ 66.987154][ T6040] should_failslab+0x8c/0xb0 [ 66.987188][ T6040] kmem_cache_alloc_noprof+0x50/0x310 [ 66.987226][ T6040] ? alloc_empty_file+0x76/0x200 [ 66.987341][ T6040] alloc_empty_file+0x76/0x200 [ 66.987382][ T6040] path_openat+0x68/0x2170 [ 66.987486][ T6040] ? mntput+0x4b/0x80 [ 66.987525][ T6040] ? terminate_walk+0x27f/0x2a0 [ 66.987596][ T6040] ? path_openat+0x1bf8/0x2170 [ 66.987665][ T6040] ? _parse_integer_limit+0x170/0x190 [ 66.987699][ T6040] do_filp_open+0x109/0x230 [ 66.987738][ T6040] do_open_execat+0xd8/0x260 [ 66.987780][ T6040] alloc_bprm+0x25/0x350 [ 66.987807][ T6040] do_execveat_common+0x12e/0x750 [ 66.987833][ T6040] ? getname_flags+0x154/0x3b0 [ 66.987939][ T6040] __x64_sys_execveat+0x73/0x90 [ 66.987970][ T6040] x64_sys_call+0x1fec/0x2ff0 [ 66.987999][ T6040] do_syscall_64+0xd2/0x200 [ 66.988071][ T6040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.988102][ T6040] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.988211][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.988238][ T6040] RIP: 0033:0x7fc546b6eec9 [ 66.988318][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.988341][ T6040] RSP: 002b:00007fc5455cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 66.988365][ T6040] RAX: ffffffffffffffda RBX: 00007fc546dc5fa0 RCX: 00007fc546b6eec9 [ 66.988380][ T6040] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 66.988396][ T6040] RBP: 00007fc5455cf090 R08: 0000000000001000 R09: 0000000000000000 [ 66.988411][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.988426][ T6040] R13: 00007fc546dc6038 R14: 00007fc546dc5fa0 R15: 00007ffecdadb6b8 [ 66.988451][ T6040] [ 67.366673][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 67.459045][ T6073] loop4: detected capacity change from 0 to 1024 [ 67.466875][ T6073] EXT4-fs: Ignoring removed orlov option [ 67.771242][ T6101] loop2: detected capacity change from 0 to 1024 [ 67.779857][ T6101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.899856][ T6113] loop4: detected capacity change from 0 to 1024 [ 67.906711][ T6113] EXT4-fs: Ignoring removed orlov option [ 67.991271][ T6119] netlink: 'syz.4.660': attribute type 83 has an invalid length. [ 68.068180][ T6104] lo speed is unknown, defaulting to 1000 [ 68.356792][ T6146] FAULT_INJECTION: forcing a failure. [ 68.356792][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 68.369505][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.0.670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.369566][ T6146] Tainted: [W]=WARN [ 68.369573][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.369585][ T6146] Call Trace: [ 68.369592][ T6146] [ 68.369600][ T6146] __dump_stack+0x1d/0x30 [ 68.369652][ T6146] dump_stack_lvl+0xe8/0x140 [ 68.369672][ T6146] dump_stack+0x15/0x1b [ 68.369690][ T6146] should_fail_ex+0x265/0x280 [ 68.369715][ T6146] ? __se_sys_mount+0xef/0x2e0 [ 68.369752][ T6146] should_failslab+0x8c/0xb0 [ 68.369786][ T6146] __kmalloc_cache_noprof+0x4c/0x320 [ 68.369829][ T6146] ? memdup_user+0x99/0xd0 [ 68.369858][ T6146] __se_sys_mount+0xef/0x2e0 [ 68.369883][ T6146] ? trace_sys_enter+0xd0/0xf0 [ 68.369909][ T6146] __x64_sys_mount+0x67/0x80 [ 68.369934][ T6146] x64_sys_call+0x2b4d/0x2ff0 [ 68.369965][ T6146] do_syscall_64+0xd2/0x200 [ 68.370068][ T6146] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.370094][ T6146] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.370124][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.370151][ T6146] RIP: 0033:0x7fdf93bceec9 [ 68.370167][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.370186][ T6146] RSP: 002b:00007fdf9262f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.370206][ T6146] RAX: ffffffffffffffda RBX: 00007fdf93e25fa0 RCX: 00007fdf93bceec9 [ 68.370219][ T6146] RDX: 00002000000002c0 RSI: 0000200000000140 RDI: 0000000000000000 [ 68.370232][ T6146] RBP: 00007fdf9262f090 R08: 00002000000003c0 R09: 0000000000000000 [ 68.370245][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.370292][ T6146] R13: 00007fdf93e26038 R14: 00007fdf93e25fa0 R15: 00007ffc736ed248 [ 68.370312][ T6146] [ 68.698018][ T6150] loop0: detected capacity change from 0 to 1024 [ 68.720820][ T6150] EXT4-fs: Ignoring removed orlov option [ 68.753676][ T6150] EXT4-fs mount: 11 callbacks suppressed [ 68.753701][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.800486][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.857718][ T6166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.925763][ T6166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.946252][ T6174] loop3: detected capacity change from 0 to 1024 [ 68.967538][ T6174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.987616][ T6174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.001770][ T6174] FAULT_INJECTION: forcing a failure. [ 69.001770][ T6174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.014969][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.3.678 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.015003][ T6174] Tainted: [W]=WARN [ 69.015009][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.015022][ T6174] Call Trace: [ 69.015029][ T6174] [ 69.015038][ T6174] __dump_stack+0x1d/0x30 [ 69.015277][ T6174] dump_stack_lvl+0xe8/0x140 [ 69.015298][ T6174] dump_stack+0x15/0x1b [ 69.015319][ T6174] should_fail_ex+0x265/0x280 [ 69.015421][ T6174] should_fail+0xb/0x20 [ 69.015451][ T6174] should_fail_usercopy+0x1a/0x20 [ 69.015485][ T6174] _copy_from_user+0x1c/0xb0 [ 69.015524][ T6174] kstrtouint_from_user+0x69/0xf0 [ 69.015568][ T6174] ? 0xffffffff81000000 [ 69.015584][ T6174] ? selinux_file_permission+0x1e4/0x320 [ 69.015616][ T6174] proc_fail_nth_write+0x50/0x160 [ 69.015652][ T6174] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.015782][ T6174] vfs_write+0x266/0x960 [ 69.015809][ T6174] ? vfs_read+0x4e6/0x770 [ 69.015835][ T6174] ? __rcu_read_unlock+0x4f/0x70 [ 69.015857][ T6174] ? __fget_files+0x184/0x1c0 [ 69.015887][ T6174] ksys_write+0xda/0x1a0 [ 69.015911][ T6174] __x64_sys_write+0x40/0x50 [ 69.015941][ T6174] x64_sys_call+0x27fe/0x2ff0 [ 69.016051][ T6174] do_syscall_64+0xd2/0x200 [ 69.016084][ T6174] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.016115][ T6174] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.016152][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.016179][ T6174] RIP: 0033:0x7f7f8217d97f [ 69.016229][ T6174] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 69.016258][ T6174] RSP: 002b:00007f7f80be7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 69.016281][ T6174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7f8217d97f [ 69.016293][ T6174] RDX: 0000000000000001 RSI: 00007f7f80be70a0 RDI: 0000000000000004 [ 69.016307][ T6174] RBP: 00007f7f80be7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.016323][ T6174] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 69.016336][ T6174] R13: 00007f7f823d6038 R14: 00007f7f823d5fa0 R15: 00007fff392db288 [ 69.016355][ T6174] [ 69.246790][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.299406][ T6166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.390364][ T6191] loop3: detected capacity change from 0 to 1024 [ 69.390616][ T6166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.399623][ T6191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.430845][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.504748][ T6191] vlan0: entered allmulticast mode [ 69.553702][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 69.553716][ T29] audit: type=1400 audit(1759164079.288:1923): avc: denied { write } for pid=6190 comm="syz.3.683" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.580399][ T6191] hub 6-0:1.0: USB hub found [ 69.588724][ T6191] hub 6-0:1.0: 8 ports detected [ 69.695825][ T6200] loop4: detected capacity change from 0 to 1024 [ 69.704763][ T6200] EXT4-fs: Ignoring removed orlov option [ 69.714886][ T3693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.728271][ T3693] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.749363][ T3693] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.772729][ T3693] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.791667][ T6200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.850476][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.938235][ T29] audit: type=1326 audit(1759164079.678:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 69.961835][ T29] audit: type=1326 audit(1759164079.678:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 69.985188][ T29] audit: type=1326 audit(1759164079.678:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.008518][ T29] audit: type=1326 audit(1759164079.678:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.031926][ T29] audit: type=1326 audit(1759164079.678:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.055677][ T29] audit: type=1326 audit(1759164079.738:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.079246][ T29] audit: type=1326 audit(1759164079.738:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.102805][ T29] audit: type=1326 audit(1759164079.738:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.126143][ T29] audit: type=1326 audit(1759164079.738:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf93bceec9 code=0x7ffc0000 [ 70.155513][ T6212] __nla_validate_parse: 9 callbacks suppressed [ 70.155533][ T6212] netlink: 256 bytes leftover after parsing attributes in process `syz.4.687'. [ 70.243451][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.303448][ T6225] loop2: detected capacity change from 0 to 512 [ 70.318491][ T6226] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.347170][ T6225] ======================================================= [ 70.347170][ T6225] WARNING: The mand mount option has been deprecated and [ 70.347170][ T6225] and is ignored by this kernel. Remove the mand [ 70.347170][ T6225] option from the mount to silence this warning. [ 70.347170][ T6225] ======================================================= [ 70.385951][ T6225] EXT4-fs: Ignoring removed bh option [ 70.391553][ T6225] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.431896][ T6225] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 70.468882][ T6229] netlink: 256 bytes leftover after parsing attributes in process `syz.4.694'. [ 70.510534][ T6225] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.520159][ T6225] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.536386][ T6225] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.693: Failed to acquire dquot type 1 [ 70.551580][ T6225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.693: Invalid block bitmap block 0 in block_group 0 [ 70.566798][ T6225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.693: Invalid block bitmap block 0 in block_group 0 [ 70.580554][ T6225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.693: Invalid block bitmap block 0 in block_group 0 [ 70.595907][ T6225] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.693: Failed to acquire dquot type 1 [ 70.608811][ T6225] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.693: Failed to acquire dquot type 1 [ 70.626684][ T6225] EXT4-fs (loop2): 1 orphan inode deleted [ 70.633238][ T6225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.668179][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 70.677165][ T6239] netlink: 312 bytes leftover after parsing attributes in process `syz.3.706'. [ 70.686220][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 70.705581][ T6225] syz.2.693 (6225) used greatest stack depth: 9072 bytes left [ 70.706361][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 70.723376][ T6241] netlink: 312 bytes leftover after parsing attributes in process `syz.4.697'. [ 70.723473][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.732416][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 70.780889][ T6243] loop2: detected capacity change from 0 to 512 [ 70.830657][ T6243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.853687][ T6243] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.887103][ T6251] loop0: detected capacity change from 0 to 512 [ 70.894328][ T6243] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.698: corrupted inode contents [ 70.912874][ T6247] netlink: 256 bytes leftover after parsing attributes in process `syz.3.699'. [ 70.924112][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.944127][ T6251] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.954760][ T6243] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.698: mark_inode_dirty error [ 70.973997][ T6251] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.701: corrupted inode contents [ 71.001005][ T6243] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.698: corrupted inode contents [ 71.013177][ T6251] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.701: mark_inode_dirty error [ 71.025921][ T6243] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.698: mark_inode_dirty error [ 71.037762][ T6251] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.701: corrupted inode contents [ 71.055464][ T6251] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.701: mark_inode_dirty error [ 71.081122][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.160351][ T6270] loop2: detected capacity change from 0 to 512 [ 71.170417][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.185218][ T6272] loop3: detected capacity change from 0 to 512 [ 71.201415][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.208440][ T6276] loop0: detected capacity change from 0 to 1024 [ 71.222152][ T6276] EXT4-fs: Ignoring removed orlov option [ 71.228606][ T6270] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.242858][ T6270] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.707: corrupted inode contents [ 71.254986][ T6270] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.707: mark_inode_dirty error [ 71.267153][ T6276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.267338][ T6270] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.707: corrupted inode contents [ 71.283125][ T6272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.295826][ T6270] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.707: mark_inode_dirty error [ 71.307024][ T6272] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.337575][ T6272] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.708: corrupted inode contents [ 71.349686][ T6272] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.708: mark_inode_dirty error [ 71.362471][ T6272] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.708: corrupted inode contents [ 71.375648][ T6272] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.708: mark_inode_dirty error [ 71.391828][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.423438][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.498832][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.526804][ T6291] loop3: detected capacity change from 0 to 512 [ 71.551110][ T6291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.585409][ T6291] EXT4-fs (loop3): 1 truncate cleaned up [ 71.591597][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.607913][ T6291] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.712: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 71.647186][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.671775][ T6298] loop3: detected capacity change from 0 to 1024 [ 71.680027][ T6298] EXT4-fs: Ignoring removed orlov option [ 71.736240][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.770360][ T6303] loop1: detected capacity change from 0 to 512 [ 71.880898][ T6303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.924175][ T6303] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.957172][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.000407][ T6303] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.716: corrupted inode contents [ 72.019496][ T6303] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.716: mark_inode_dirty error [ 72.038955][ T6303] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.716: corrupted inode contents [ 72.052897][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 72.093130][ T6303] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.716: mark_inode_dirty error [ 72.171060][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.226160][ T6338] siw: device registration error -23 [ 72.298409][ T6346] siw: device registration error -23 [ 72.546003][ T6365] siw: device registration error -23 [ 73.144997][ T6450] loop3: detected capacity change from 0 to 1024 [ 73.151869][ T6450] EXT4-fs: Ignoring removed orlov option [ 73.174645][ T6450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.220263][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.269441][ T6459] loop3: detected capacity change from 0 to 512 [ 73.288919][ T6459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.302320][ T6459] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.315922][ T6459] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.737: corrupted inode contents [ 73.329452][ T6459] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.737: mark_inode_dirty error [ 73.341364][ T6459] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.737: corrupted inode contents [ 73.354911][ T6459] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.737: mark_inode_dirty error [ 73.407671][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.468928][ T6470] FAULT_INJECTION: forcing a failure. [ 73.468928][ T6470] name failslab, interval 1, probability 0, space 0, times 0 [ 73.481742][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.4.741 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.481774][ T6470] Tainted: [W]=WARN [ 73.481781][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.481798][ T6470] Call Trace: [ 73.481806][ T6470] [ 73.481830][ T6470] __dump_stack+0x1d/0x30 [ 73.481857][ T6470] dump_stack_lvl+0xe8/0x140 [ 73.481881][ T6470] dump_stack+0x15/0x1b [ 73.481897][ T6470] should_fail_ex+0x265/0x280 [ 73.481991][ T6470] should_failslab+0x8c/0xb0 [ 73.482105][ T6470] kmem_cache_alloc_noprof+0x50/0x310 [ 73.482134][ T6470] ? radix_tree_node_alloc+0x8a/0x1f0 [ 73.482164][ T6470] radix_tree_node_alloc+0x8a/0x1f0 [ 73.482195][ T6470] idr_get_free+0x1fa/0x550 [ 73.482320][ T6470] idr_alloc_u32+0xca/0x180 [ 73.482366][ T6470] u32_change+0xa84/0x14c0 [ 73.482400][ T6470] ? should_fail_ex+0xdb/0x280 [ 73.482469][ T6470] ? __pfx_u32_change+0x10/0x10 [ 73.482500][ T6470] tc_new_tfilter+0xde1/0x10a0 [ 73.482528][ T6470] ? __rcu_read_unlock+0x4f/0x70 [ 73.482564][ T6470] ? ns_capable+0x7d/0xb0 [ 73.482589][ T6470] ? __pfx_tc_new_tfilter+0x10/0x10 [ 73.482656][ T6470] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 73.482697][ T6470] netlink_rcv_skb+0x123/0x220 [ 73.482724][ T6470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.482899][ T6470] rtnetlink_rcv+0x1c/0x30 [ 73.482941][ T6470] netlink_unicast+0x5bd/0x690 [ 73.482990][ T6470] netlink_sendmsg+0x58b/0x6b0 [ 73.483026][ T6470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.483059][ T6470] __sock_sendmsg+0x145/0x180 [ 73.483146][ T6470] ____sys_sendmsg+0x31e/0x4e0 [ 73.483189][ T6470] ___sys_sendmsg+0x17b/0x1d0 [ 73.483241][ T6470] __x64_sys_sendmsg+0xd4/0x160 [ 73.483296][ T6470] x64_sys_call+0x191e/0x2ff0 [ 73.483323][ T6470] do_syscall_64+0xd2/0x200 [ 73.483355][ T6470] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.483393][ T6470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.483430][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.483518][ T6470] RIP: 0033:0x7fc546b6eec9 [ 73.483535][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.483610][ T6470] RSP: 002b:00007fc5455cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.483636][ T6470] RAX: ffffffffffffffda RBX: 00007fc546dc5fa0 RCX: 00007fc546b6eec9 [ 73.483651][ T6470] RDX: 0000000000004000 RSI: 0000200000006040 RDI: 0000000000000009 [ 73.483663][ T6470] RBP: 00007fc5455cf090 R08: 0000000000000000 R09: 0000000000000000 [ 73.483734][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.483750][ T6470] R13: 00007fc546dc6038 R14: 00007fc546dc5fa0 R15: 00007ffecdadb6b8 [ 73.483781][ T6470] [ 73.814898][ T6476] loop3: detected capacity change from 0 to 1024 [ 73.823765][ T6476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.841405][ T6476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.882847][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.913335][ T6490] loop4: detected capacity change from 0 to 1024 [ 73.920608][ T6490] EXT4-fs: Ignoring removed orlov option [ 73.975794][ T6490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.123273][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.385170][ T6528] lo speed is unknown, defaulting to 1000 [ 74.554525][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 74.554543][ T29] audit: type=1326 audit(1759164084.298:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.584281][ T29] audit: type=1326 audit(1759164084.298:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.617031][ T29] audit: type=1326 audit(1759164084.358:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.656530][ T29] audit: type=1326 audit(1759164084.378:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.680044][ T29] audit: type=1326 audit(1759164084.378:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.703431][ T29] audit: type=1326 audit(1759164084.388:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.726874][ T29] audit: type=1326 audit(1759164084.388:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.750315][ T29] audit: type=1326 audit(1759164084.388:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.773672][ T29] audit: type=1326 audit(1759164084.388:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 74.797038][ T29] audit: type=1326 audit(1759164084.388:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc546b6eec9 code=0x7ffc0000 [ 75.231332][ T6632] __nla_validate_parse: 13 callbacks suppressed [ 75.231348][ T6632] netlink: 256 bytes leftover after parsing attributes in process `syz.0.768'. [ 75.363591][ T6646] siw: device registration error -23 [ 75.492732][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 75.506540][ T6655] netlink: 256 bytes leftover after parsing attributes in process `syz.3.777'. [ 75.516768][ T6659] netlink: 312 bytes leftover after parsing attributes in process `syz.0.779'. [ 75.582879][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 75.724815][ T6687] netlink: 256 bytes leftover after parsing attributes in process `syz.3.784'. [ 75.824586][ T6702] siw: device registration error -23 [ 76.117639][ T6736] loop1: detected capacity change from 0 to 1024 [ 76.144469][ T6736] EXT4-fs: Ignoring removed orlov option [ 76.144756][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 76.163614][ T6743] netlink: 312 bytes leftover after parsing attributes in process `syz.3.791'. [ 76.177716][ T6736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.272268][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.431201][ T6767] netlink: 256 bytes leftover after parsing attributes in process `syz.3.794'. [ 76.488872][ T6803] siw: device registration error -23 [ 76.638831][ T6811] netlink: 256 bytes leftover after parsing attributes in process `syz.1.798'. [ 77.193883][ T6874] lo speed is unknown, defaulting to 1000 [ 77.783210][ T6972] siw: device registration error -23 [ 77.988427][ T6996] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 78.163542][ T7011] loop4: detected capacity change from 0 to 1024 [ 78.171465][ T7011] EXT4-fs: Ignoring removed orlov option [ 78.200555][ T7011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.262900][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.268698][ T7024] loop2: detected capacity change from 0 to 1024 [ 78.283620][ T7024] EXT4-fs: Ignoring removed orlov option [ 78.310900][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.419538][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.555653][ T7065] loop2: detected capacity change from 0 to 512 [ 78.569793][ T7065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.595437][ T7065] EXT4-fs (loop2): 1 truncate cleaned up [ 78.603271][ T7065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.654921][ T7065] 9pnet_fd: Insufficient options for proto=fd [ 78.733072][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.804584][ T7097] siw: device registration error -23 [ 78.856994][ T7103] loop2: detected capacity change from 0 to 1024 [ 78.884352][ T7103] EXT4-fs: Ignoring removed orlov option [ 78.929158][ T7103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.967130][ T7121] loop3: detected capacity change from 0 to 2048 [ 79.007626][ T7121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.026879][ T7121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.061084][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.083197][ T7135] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 79.319549][ T7176] loop3: detected capacity change from 0 to 512 [ 79.342187][ T7176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.358466][ T7176] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.370462][ T7176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.859: corrupted inode contents [ 79.383658][ T7176] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.859: mark_inode_dirty error [ 79.395657][ T7176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.859: corrupted inode contents [ 79.408262][ T7176] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.859: mark_inode_dirty error [ 79.477228][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.989416][ T7271] loop1: detected capacity change from 0 to 1024 [ 79.993676][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 79.993695][ T29] audit: type=1326 audit(1759164089.728:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 79.997669][ T7271] EXT4-fs: Ignoring removed orlov option [ 80.034060][ T29] audit: type=1326 audit(1759164089.738:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.057529][ T29] audit: type=1326 audit(1759164089.738:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.087504][ T29] audit: type=1326 audit(1759164089.798:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.110994][ T29] audit: type=1326 audit(1759164089.798:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.140681][ T29] audit: type=1326 audit(1759164089.848:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.164260][ T29] audit: type=1326 audit(1759164089.848:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.187632][ T29] audit: type=1326 audit(1759164089.848:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.211190][ T29] audit: type=1326 audit(1759164089.878:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.234577][ T29] audit: type=1326 audit(1759164089.878:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c724eec9 code=0x7ffc0000 [ 80.300696][ T7271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.347846][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.430765][ T7287] lo speed is unknown, defaulting to 1000 [ 80.435300][ T7298] __nla_validate_parse: 12 callbacks suppressed [ 80.435321][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 80.512369][ T7302] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 80.590439][ T7307] netlink: 256 bytes leftover after parsing attributes in process `syz.3.874'. [ 80.814238][ T7334] loop4: detected capacity change from 0 to 164 [ 80.832601][ T7334] ISOFS: unable to read i-node block [ 80.837991][ T7334] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.953339][ T7352] loop4: detected capacity change from 0 to 1024 [ 80.962629][ T7352] EXT4-fs: Ignoring removed orlov option [ 80.977082][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 80.994139][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 81.003883][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 81.026046][ T7352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.044816][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 81.109832][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.372051][ T7417] siw: device registration error -23 [ 81.394295][ T7412] netlink: 256 bytes leftover after parsing attributes in process `syz.2.886'. [ 81.629656][ T7435] loop2: detected capacity change from 0 to 1024 [ 81.644331][ T7435] EXT4-fs: Ignoring removed orlov option [ 81.651822][ T7431] lo speed is unknown, defaulting to 1000 [ 81.710321][ T7435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.761680][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.788995][ T2990] udevd[2990]: worker [3487] terminated by signal 33 (Unknown signal 33) [ 81.802876][ T2990] udevd[2990]: worker [3487] failed while handling '/devices/virtual/block/loop2' [ 81.906777][ T7447] siw: device registration error -23 [ 82.032078][ T7456] loop2: detected capacity change from 0 to 512 [ 82.056337][ T7456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.069086][ T7456] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.081300][ T7456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.904: corrupted inode contents [ 82.093672][ T7456] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.904: mark_inode_dirty error [ 82.105795][ T7456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.904: corrupted inode contents [ 82.117851][ T7456] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.904: mark_inode_dirty error [ 82.160246][ T7464] loop3: detected capacity change from 0 to 1024 [ 82.173255][ T7464] EXT4-fs: Ignoring removed orlov option [ 82.188976][ T7464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.194699][ T7467] loop0: detected capacity change from 0 to 1024 [ 82.207641][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.208392][ T7467] EXT4-fs: Ignoring removed orlov option [ 82.249580][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.266588][ T7472] netlink: 256 bytes leftover after parsing attributes in process `syz.2.909'. [ 82.293437][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.368745][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.424901][ T7483] netlink: 256 bytes leftover after parsing attributes in process `syz.1.914'. [ 82.568524][ T7502] loop4: detected capacity change from 0 to 512 [ 82.614797][ T7502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.656215][ T7502] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.657911][ T7509] loop2: detected capacity change from 0 to 1024 [ 82.694859][ T7502] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.920: corrupted inode contents [ 82.697897][ T7509] EXT4-fs: Ignoring removed orlov option [ 82.736241][ T7502] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.920: mark_inode_dirty error [ 82.736605][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.780735][ T7502] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.920: corrupted inode contents [ 82.793542][ T7502] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.920: mark_inode_dirty error [ 82.848024][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.977829][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.084132][ T7521] lo speed is unknown, defaulting to 1000 [ 83.196476][ T7533] netlink: 256 bytes leftover after parsing attributes in process `syz.4.931'. [ 83.223169][ T7538] loop0: detected capacity change from 0 to 1024 [ 83.231704][ T7538] EXT4-fs: Ignoring removed orlov option [ 83.783196][ T7601] loop2: detected capacity change from 0 to 512 [ 83.798736][ T7601] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.830583][ T7601] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.940: corrupted inode contents [ 83.849584][ T7601] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.940: mark_inode_dirty error [ 83.872924][ T7601] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.940: corrupted inode contents [ 83.896666][ T7601] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.940: mark_inode_dirty error [ 84.050808][ T7628] loop2: detected capacity change from 0 to 1024 [ 84.070541][ T7628] EXT4-fs: Ignoring removed orlov option [ 84.299667][ T7673] loop4: detected capacity change from 0 to 1024 [ 84.304767][ T7675] loop1: detected capacity change from 0 to 164 [ 84.311329][ T7673] EXT4-fs: Ignoring removed orlov option [ 84.330469][ T7675] ISOFS: unable to read i-node block [ 84.335883][ T7675] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 84.464763][ T7686] loop4: detected capacity change from 0 to 1024 [ 84.471733][ T7686] EXT4-fs: Ignoring removed orlov option [ 84.568203][ T7696] loop0: detected capacity change from 0 to 1024 [ 84.599881][ T7696] EXT4-fs: Ignoring removed orlov option [ 84.792125][ T7698] ================================================================== [ 84.800234][ T7698] BUG: KCSAN: data-race in setattr_copy / vfs_write [ 84.806838][ T7698] [ 84.809171][ T7698] write to 0xffff888119ca4f08 of 2 bytes by task 7703 on cpu 1: [ 84.816806][ T7698] setattr_copy+0x199/0x4b0 [ 84.821401][ T7698] shmem_setattr+0x566/0x840 [ 84.826026][ T7698] notify_change+0x809/0x890 [ 84.830618][ T7698] chmod_common+0x138/0x270 [ 84.835140][ T7698] do_fchmodat+0xcd/0x180 [ 84.839473][ T7698] __x64_sys_chmod+0x38/0x50 [ 84.844080][ T7698] x64_sys_call+0x291c/0x2ff0 [ 84.848776][ T7698] do_syscall_64+0xd2/0x200 [ 84.853313][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.859213][ T7698] [ 84.861538][ T7698] read to 0xffff888119ca4f08 of 2 bytes by task 7698 on cpu 0: [ 84.869078][ T7698] vfs_write+0x757/0x960 [ 84.873331][ T7698] ksys_write+0xda/0x1a0 [ 84.877579][ T7698] __x64_sys_write+0x40/0x50 [ 84.882178][ T7698] x64_sys_call+0x27fe/0x2ff0 [ 84.886873][ T7698] do_syscall_64+0xd2/0x200 [ 84.891419][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.897319][ T7698] [ 84.899645][ T7698] value changed: 0x8000 -> 0x8120 [ 84.904659][ T7698] [ 84.906989][ T7698] Reported by Kernel Concurrency Sanitizer on: [ 84.913153][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.924375][ T7698] Tainted: [W]=WARN [ 84.928179][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.938237][ T7698] ==================================================================