last executing test programs: 18.763961523s ago: executing program 2 (id=659): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4040040) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc84, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc54, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0x4}}, @TCA_FLOW_POLICE={0xc30, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xbfc, 0x400, 0xa, 0x51a4, 0x3, 0xe, 0x614, 0x8001, 0x4, 0x80000000, 0xfffff801, 0x4ae1, 0x3, 0x7, 0x0, 0x81, 0x2, 0x2, 0xb, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x8, 0x3946, 0x8b, 0xbd35, 0x1, 0x2, 0x8, 0xf930, 0x8, 0xe, 0x3f, 0x1, 0xfffffffe, 0xffff, 0x4, 0x7, 0x7, 0xaa, 0x0, 0x9, 0x100, 0x5f, 0x8, 0x2, 0xfffffffe, 0x81, 0x3, 0x2, 0x6, 0x7, 0x3ff, 0xfff, 0x3, 0x2, 0x0, 0x80, 0xfffffffc, 0xffffffff, 0x7, 0x3ee80ffc, 0x4, 0x4, 0x2, 0x8, 0x59, 0xb, 0x7, 0x0, 0x10001, 0xe4d, 0x5, 0x1, 0xa, 0x100000, 0xd, 0x9, 0x3, 0x2a4f933, 0x2018, 0x1, 0x4, 0x8, 0x1, 0x2, 0x7, 0x5, 0x8, 0xffff, 0x5b7, 0x80000001, 0x4, 0x1, 0xc, 0x6, 0x0, 0x200, 0x5b6afb3d, 0x9, 0xfffffffc, 0x2fdc, 0xc, 0x1, 0x8, 0x81, 0x2, 0x6, 0x1, 0xff, 0x6, 0x200, 0x9, 0x81, 0x0, 0x8b3, 0xf, 0x6, 0x3, 0x1000, 0x559, 0xe, 0xed, 0x5, 0x200, 0x2000000, 0x4, 0x0, 0x9ed2, 0x4a, 0x9, 0x3, 0x7f, 0xa173, 0xfffffffb, 0x1000, 0x0, 0x5, 0x5, 0x8, 0x80000001, 0x11b8, 0x8f13, 0x40, 0x80000000, 0x6, 0x275f, 0x8, 0xf4, 0x5, 0x4, 0x5, 0x4, 0x9, 0x6, 0xfffffffb, 0x2, 0x8, 0x93b, 0x8, 0x80000001, 0x169, 0x8, 0xf1, 0x4, 0x9, 0x33f, 0x0, 0xda, 0x9, 0xffffffff, 0x8, 0x6, 0x3248000, 0xfad7b276, 0x3, 0x8, 0x6, 0x0, 0x7, 0x100, 0xff, 0x5f8e, 0xc1, 0x6, 0x8, 0x80000000, 0x1, 0x0, 0x263b3f71, 0x1ff, 0x2, 0x0, 0x1, 0x81, 0x0, 0x6, 0x6, 0x8, 0x401, 0x401, 0x10, 0x8001, 0xcad1, 0xfffefff7, 0x8, 0x4, 0x8000, 0xd, 0xfa000000, 0x1, 0x3, 0x5, 0x9, 0x5200, 0x6, 0x10, 0xd5, 0x8, 0x401, 0x6, 0x7, 0x7, 0x3, 0x3, 0x0, 0x4, 0x5, 0xff, 0xc, 0x7ff, 0x3, 0x7, 0x1, 0x7, 0x8, 0x7fff, 0x2800, 0x4, 0x3, 0xfffffffc, 0x6, 0x7f, 0x5, 0x9, 0x5, 0x9, 0xfff, 0x72b, 0x80000, 0xfffffff9, 0x2, 0x5, 0xf86c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3ff, 0x4, 0x3, 0x6, 0x80000000, 0x10, 0x9, 0x8, 0x10, 0xd0b3, 0x3, 0x4, 0x6, 0x0, 0x400, 0x6, 0x1, 0x0, 0x7, 0x7, 0x20, 0x100, 0x9, 0x2006, 0x7f, 0x33, 0x0, 0x2, 0x0, 0xd72, 0x1, 0x2, 0x8, 0x3, 0xe6ec, 0x4, 0x6f, 0x8, 0x9, 0x0, 0x36, 0x5, 0x2, 0xe, 0x10, 0xd, 0xfffeffff, 0x10000, 0x4e7324bb, 0x2, 0x6, 0xe5b, 0xec6d, 0x2, 0x6682, 0x8, 0x7fff, 0x8, 0x10001, 0x9, 0x9, 0x9, 0x4, 0x16a, 0x6, 0x9, 0x0, 0xffc, 0xd, 0x1, 0x7, 0xc5d5, 0x101, 0x0, 0x401, 0x7, 0x7342, 0x7ff, 0x910, 0x10000, 0x4, 0x7ff, 0xf78, 0xccae, 0x9, 0xa8, 0x7fffffff, 0xc000000, 0xe566, 0x80, 0x32c, 0x167f, 0x80, 0xf, 0xfffffff5, 0xffffffff, 0x4, 0x7fff, 0x1000, 0x3, 0x0, 0x9, 0x4, 0x7, 0x3, 0x7, 0x7f, 0x2, 0xfffffff8, 0x5, 0x7, 0x9, 0x3443, 0xfffffffe, 0x4980, 0x7fff, 0x200, 0xffff, 0x2, 0xa, 0x4a54, 0x5, 0x3, 0x2, 0x7, 0x9, 0xa, 0xa, 0x2, 0x80000001, 0xffffee42, 0x0, 0x0, 0x2, 0x10002, 0x6, 0xfffffff8, 0x1, 0x100, 0x7, 0x5, 0x383, 0x4, 0x80000001, 0xe, 0x3, 0x7, 0x5, 0x5, 0x0, 0x7fffffff, 0x8, 0x781, 0x8, 0x24d, 0x7, 0xfffffffa, 0x2, 0x2, 0x1c8a, 0x17427cd6, 0x7fff, 0x5, 0x3, 0x2bf, 0x40000, 0x3, 0x8, 0xa857, 0x1, 0x100, 0x1, 0x1, 0x6, 0x1, 0x3, 0x0, 0x6, 0x1, 0x3, 0x2, 0x9, 0x7, 0x101, 0x1, 0x5, 0x44, 0x2, 0x0, 0x6, 0xb, 0x401, 0x7, 0x101, 0x3, 0x5, 0xffff, 0x80000000, 0x3ff, 0x0, 0xc0000000, 0x0, 0xe60, 0x7, 0x2a2, 0x5, 0x8000, 0x3, 0x5, 0x9b1, 0x0, 0x9, 0x7, 0x5, 0x3, 0x8000, 0xc391, 0x2, 0x10000, 0x5, 0x6, 0x3, 0xa, 0x8, 0x3, 0x1, 0x5, 0x3, 0x90, 0xd320, 0x80, 0x1000, 0x7, 0x5, 0x4, 0x7f, 0x4c, 0xc, 0x5, 0x1, 0x20000000, 0x5, 0xa10, 0x0, 0x4, 0x8, 0x80, 0x7ff, 0x5, 0x2, 0x7bbb, 0x0, 0x1, 0xff, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x400, 0x7, 0xfffffff7, 0x80000001, 0x2a, 0xa4, 0x5, 0x7, 0x0, 0x7, 0x400, 0xf, 0x0, 0x338, 0xf, 0x8, 0x32a9, 0x9, 0x1000, 0x7, 0x0, 0x9, 0xfffffff8, 0x8001, 0x6, 0x7, 0xa, 0xf, 0x9, 0x3ff, 0x0, 0x5, 0x6, 0x0, 0x0, 0x3, 0x8, 0x81, 0x0, 0x5, 0x1, 0x8, 0x9, 0xfffffff9, 0xb, 0x10001, 0x190afdfd, 0x4, 0x4, 0x7fff, 0x2, 0x0, 0x8, 0x7, 0x0, 0x3, 0xffff8000, 0x3, 0x3, 0x9, 0x9b2, 0xffff, 0x95a, 0x1, 0x6, 0x5c419dfd, 0x1, 0x101, 0x7, 0x6, 0x2, 0x7fffffff, 0x3, 0x7, 0xef, 0xfffffff7, 0x80000000, 0x7, 0x7, 0x4, 0x80000000, 0x5, 0x8, 0x5, 0x7, 0x7ff, 0x2aa, 0x3, 0xf, 0x3, 0xfc, 0x6, 0x6, 0x400, 0x100, 0x8, 0x4, 0x48, 0x4, 0x86, 0x3, 0x4f, 0x1, 0xe9f, 0xdf, 0x401, 0x7, 0x8, 0x80000000, 0x713, 0xf, 0x10001, 0x1, 0xdb, 0x0, 0x6ff0, 0xe000, 0x5, 0xbc50, 0x5, 0xc6, 0x64, 0x800, 0x2a, 0x4, 0x101, 0x3, 0x1, 0x0, 0x5, 0x6, 0x4, 0x6, 0x73, 0x3, 0x5, 0x0, 0x5, 0xffffffff, 0xf4, 0x0, 0x9, 0x9, 0xfc2, 0x2, 0x3, 0x100, 0x8000, 0x7, 0x7, 0x200, 0xa30, 0x2, 0x23f, 0x2, 0x5, 0x3, 0x0, 0xc, 0x1ff, 0x62a, 0x3, 0x3, 0x8, 0xe, 0x3, 0x4, 0x3, 0x7, 0x7fff, 0xc, 0x1, 0x9, 0x9, 0x3, 0x4, 0x3, 0x4, 0x10, 0x8000000, 0x53, 0x9, 0xb, 0xf18e, 0x7fff, 0x1, 0x1, 0x3, 0x7ff, 0x3, 0x8e, 0x5a, 0x8000, 0x8, 0x7fff, 0x6, 0x3, 0xb3ae, 0x86d7, 0xb, 0xfe9, 0xb, 0x200, 0x1, 0xffff, 0x5, 0x5, 0x71f, 0xe, 0x101, 0x3, 0x6, 0x8, 0x80000000, 0xd8, 0x9, 0x3, 0x0, 0xffff, 0x9, 0xbc, 0x7, 0x8, 0x4, 0x3ff, 0x6, 0x0, 0xfffffffe, 0x8, 0x1cf4, 0x9, 0xfffffffd, 0x2, 0xfffffff9, 0x7, 0x800, 0x0, 0x2, 0x6, 0xfffffff7, 0x2, 0x800, 0xffffffff, 0x9, 0x4, 0x400, 0x5, 0x12000000, 0x3, 0x1, 0x7, 0x0, 0x7ff, 0x10000, 0xf]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x100}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 18.700040014s ago: executing program 2 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 18.645127364s ago: executing program 2 (id=665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18.607124685s ago: executing program 2 (id=667): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$eJzs3ctrXFUYAPDvTpKmTWsTQdC6CggaKJ2YGlsFFxUXIlgo6Np2mExDzSRTMpPShIAWEVwoqLgQdNO1j7pz62Or/4ULsVRNixVBidzJ3HbaTNIknWSi8/vBTc65jznnm/s4Z+Ye7gTQtYbTP7mIQxHxfhIx2JifRERfPdUbcWJlvZtLi8V0SmJ5+ZXfkvo6N5YWi9G0TWp/I/NIRHz3dsTh3Opyq/MLU4VyuTTbyI/Wps+PVucXjpybLkyWJkszx8bGx48ef/r4sfbF+sePCweufvDiE1+e+Outh6+8930SJ+JAY1lzHO0yHMON96QvfQvv8EK7C+uwpNMVYEvSU7Nn5SyPQzEYPfUUAPB/9kZELAMAXSbR/gNAl8m+B7ixtFjMps5+I7Gzrj0fEXtX4s/ub64s6W3cs9tbvw86cCO5485IEhFDbSh/OCI+/fq1z9Mptuk+JEArb16KiDNDw6uv/8mqMQub9eQ6y/Y0/g/fNd/1D3bON2n/55lW/b/crf5PtOj/9Lc4d7finuf/vjYUso60//dc09i2m03xNwz1NHIP1Pt8fcnZc+VSem07GBEj0def5sfWKWPk+j/X756XvXq9//f3Sv/v9w9f/ywtP/3ftOYvvf13bjtRqBXuN+7MtUsRj/a2ij+5tf+TNfq/pzZYxkvPvvPJWsvS+NN4s2l1/NEYnbQ9li9HPN5y/98e0ZasOz5xtH44jGYHRQtf/fTxwFrlN/f/0yktP/sssBPS/T+wfvxDSfN4zermy/jh8uC3ay27d/ytj/89yav1dNaPuFio1WbHIvYkL6+ef/T2tlk+Wz+Nf+Sx1uf/esd/+pnwzAbj77366xfvHtxq/NsrjX9iU/t/84krN6d61ip/Y/t/vJ4aaczZyPVvoxW8n/cOAAAAAAAAAAAAAAAAAAAAAAAAADYqFxEHIsnlb6VzuXx+5Te8H4qBXLlSrR0+W5mbmYj6b2UPRV8ue9TlYNPzUMcaz8PP8kfvyj8VEQ9GxEf9+5LsOYoTHY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL71/j9/9TP/Z2uHQCwbfZ2ugIAwI7T/gNA99H+A0D30f4DQPfR/gNA99H+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM1OnTyZTst/Li0W0/zEhfm5qcqFIxOl6lR+eq6YL1Zmz+cnK5XJcilfrEzf6/XKlcr58ZiZuzhaK1Vro9X5hdPTlbmZ2ulz04XJ0ulS345EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbU51fmCqUy6VZiS0klu9r82SXRNGGRE/jcNot9dnRRLI7qtHmRIcvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Ef8GAAD//+GAI2c=") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r3, 0x0, 0x3) close(0x3) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket(0x2, 0xa, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_int(r1, &(0x7f0000000300)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) accept4$inet(r6, 0x0, &(0x7f0000000000), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid}]}}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r8, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x5c, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x451}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x17b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000001) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f3) fallocate(r1, 0x8, 0x0, 0x10000) 18.443374716s ago: executing program 2 (id=669): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) 18.138983549s ago: executing program 2 (id=674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@empty}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) 18.104224709s ago: executing program 32 (id=674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@empty}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) 4.088156144s ago: executing program 4 (id=810): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 3.39366307s ago: executing program 4 (id=828): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000740)='S\x00<', 0x3, 0x8000, 0x0, 0x0) close(r0) 3.3620447s ago: executing program 4 (id=830): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) write$selinux_context(r0, &(0x7f0000000000)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14040000", @ANYRES16=r4, @ANYBLOB="5f6e25bd7000fcdbdf252b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000011000000500000000000c00"/28], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYRES16=r3, @ANYRES64=r4], &(0x7f0000000140)='syzkaller\x00', 0x39c1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x4b67, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f00000002c0)={0x80}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.310342241s ago: executing program 4 (id=832): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x100074, 0x100000}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e00000010000e2ff0000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000000000002cbd70000035100002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 3.265505051s ago: executing program 4 (id=835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3.103353992s ago: executing program 4 (id=839): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 2.811741535s ago: executing program 0 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) write$P9_RREADLINK(r2, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x14, &(0x7f0000000380)={[{@jqfmt_vfsv0}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@init_itable}, {@lazytime}]}, 0xfe, 0x25f, &(0x7f0000000640)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4040040) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc84, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc54, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0x4}}, @TCA_FLOW_POLICE={0xc30, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xbfc, 0x400, 0xa, 0x51a4, 0x3, 0xe, 0x614, 0x8001, 0x4, 0x80000000, 0xfffff801, 0x4ae1, 0x3, 0x7, 0x0, 0x81, 0x2, 0x2, 0xb, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x8, 0x3946, 0x8b, 0xbd35, 0x1, 0x2, 0x8, 0xf930, 0x8, 0xe, 0x3f, 0x1, 0xfffffffe, 0xffff, 0x4, 0x7, 0x7, 0xaa, 0x0, 0x9, 0x100, 0x5f, 0x8, 0x2, 0xfffffffe, 0x81, 0x3, 0x2, 0x6, 0x7, 0x3ff, 0xfff, 0x3, 0x2, 0x0, 0x80, 0xfffffffc, 0xffffffff, 0x7, 0x3ee80ffc, 0x4, 0x4, 0x2, 0x8, 0x59, 0xb, 0x7, 0x0, 0x10001, 0xe4d, 0x5, 0x1, 0xa, 0x100000, 0xd, 0x9, 0x3, 0x2a4f933, 0x2018, 0x1, 0x4, 0x8, 0x1, 0x2, 0x7, 0x5, 0x8, 0xffff, 0x5b7, 0x80000001, 0x4, 0x1, 0xc, 0x6, 0x0, 0x200, 0x5b6afb3d, 0x9, 0xfffffffc, 0x2fdc, 0xc, 0x1, 0x8, 0x81, 0x2, 0x6, 0x1, 0xff, 0x6, 0x200, 0x9, 0x81, 0x0, 0x8b3, 0xf, 0x6, 0x3, 0x1000, 0x559, 0xe, 0xed, 0x5, 0x200, 0x2000000, 0x4, 0x0, 0x9ed2, 0x4a, 0x9, 0x3, 0x7f, 0xa173, 0xfffffffb, 0x1000, 0x0, 0x5, 0x5, 0x8, 0x80000001, 0x11b8, 0x8f13, 0x40, 0x80000000, 0x6, 0x275f, 0x8, 0xf4, 0x5, 0x4, 0x5, 0x4, 0x9, 0x6, 0xfffffffb, 0x2, 0x8, 0x93b, 0x8, 0x80000001, 0x169, 0x8, 0xf1, 0x4, 0x9, 0x33f, 0x0, 0xda, 0x9, 0xffffffff, 0x8, 0x6, 0x3248000, 0xfad7b276, 0x3, 0x8, 0x6, 0x0, 0x7, 0x100, 0xff, 0x5f8e, 0xc1, 0x6, 0x8, 0x80000000, 0x1, 0x0, 0x263b3f71, 0x1ff, 0x2, 0x0, 0x1, 0x81, 0x0, 0x6, 0x6, 0x8, 0x401, 0x401, 0x10, 0x8001, 0xcad1, 0xfffefff7, 0x8, 0x4, 0x8000, 0xd, 0xfa000000, 0x1, 0x3, 0x5, 0x9, 0x5200, 0x6, 0x10, 0xd5, 0x8, 0x401, 0x6, 0x7, 0x7, 0x3, 0x3, 0x0, 0x4, 0x5, 0xff, 0xc, 0x7ff, 0x3, 0x7, 0x1, 0x7, 0x8, 0x7fff, 0x2800, 0x4, 0x3, 0xfffffffc, 0x6, 0x7f, 0x5, 0x9, 0x5, 0x9, 0xfff, 0x72b, 0x80000, 0xfffffff9, 0x2, 0x5, 0xf86c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3ff, 0x4, 0x3, 0x6, 0x80000000, 0x10, 0x9, 0x8, 0x10, 0xd0b3, 0x3, 0x4, 0x6, 0x0, 0x400, 0x6, 0x1, 0x0, 0x7, 0x7, 0x20, 0x100, 0x9, 0x2006, 0x7f, 0x33, 0x0, 0x2, 0x0, 0xd72, 0x1, 0x2, 0x8, 0x3, 0xe6ec, 0x4, 0x6f, 0x8, 0x9, 0x0, 0x36, 0x5, 0x2, 0xe, 0x10, 0xd, 0xfffeffff, 0x10000, 0x4e7324bb, 0x2, 0x6, 0xe5b, 0xec6d, 0x2, 0x6682, 0x8, 0x7fff, 0x8, 0x10001, 0x9, 0x9, 0x9, 0x4, 0x16a, 0x6, 0x9, 0x0, 0xffc, 0xd, 0x1, 0x7, 0xc5d5, 0x101, 0x0, 0x401, 0x7, 0x7342, 0x7ff, 0x910, 0x10000, 0x4, 0x7ff, 0xf78, 0xccae, 0x9, 0xa8, 0x7fffffff, 0xc000000, 0xe566, 0x80, 0x32c, 0x167f, 0x80, 0xf, 0xfffffff5, 0xffffffff, 0x4, 0x7fff, 0x1000, 0x3, 0x0, 0x9, 0x4, 0x7, 0x3, 0x7, 0x7f, 0x2, 0xfffffff8, 0x5, 0x7, 0x9, 0x3443, 0xfffffffe, 0x4980, 0x7fff, 0x200, 0xffff, 0x2, 0xa, 0x4a54, 0x5, 0x3, 0x2, 0x7, 0x9, 0xa, 0xa, 0x2, 0x80000001, 0xffffee42, 0x0, 0x0, 0x2, 0x10002, 0x6, 0xfffffff8, 0x1, 0x100, 0x7, 0x5, 0x383, 0x4, 0x80000001, 0xe, 0x3, 0x7, 0x5, 0x5, 0x0, 0x7fffffff, 0x8, 0x781, 0x8, 0x24d, 0x7, 0xfffffffa, 0x2, 0x2, 0x1c8a, 0x17427cd6, 0x7fff, 0x5, 0x3, 0x2bf, 0x40000, 0x3, 0x8, 0xa857, 0x1, 0x100, 0x1, 0x1, 0x6, 0x1, 0x3, 0x0, 0x6, 0x1, 0x3, 0x2, 0x9, 0x7, 0x101, 0x1, 0x5, 0x44, 0x2, 0x0, 0x6, 0xb, 0x401, 0x7, 0x101, 0x3, 0x5, 0xffff, 0x80000000, 0x3ff, 0x0, 0xc0000000, 0x0, 0xe60, 0x7, 0x2a2, 0x5, 0x8000, 0x3, 0x5, 0x9b1, 0x0, 0x9, 0x7, 0x5, 0x3, 0x8000, 0xc391, 0x2, 0x10000, 0x5, 0x6, 0x3, 0xa, 0x8, 0x3, 0x1, 0x5, 0x3, 0x90, 0xd320, 0x80, 0x1000, 0x7, 0x5, 0x4, 0x7f, 0x4c, 0xc, 0x5, 0x1, 0x20000000, 0x5, 0xa10, 0x0, 0x4, 0x8, 0x80, 0x7ff, 0x5, 0x2, 0x7bbb, 0x0, 0x1, 0xff, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x400, 0x7, 0xfffffff7, 0x80000001, 0x2a, 0xa4, 0x5, 0x7, 0x0, 0x7, 0x400, 0xf, 0x0, 0x338, 0xf, 0x8, 0x32a9, 0x9, 0x1000, 0x7, 0x0, 0x9, 0xfffffff8, 0x8001, 0x6, 0x7, 0xa, 0xf, 0x9, 0x3ff, 0x0, 0x5, 0x6, 0x0, 0x0, 0x3, 0x8, 0x81, 0x0, 0x5, 0x1, 0x8, 0x9, 0xfffffff9, 0xb, 0x10001, 0x190afdfd, 0x4, 0x4, 0x7fff, 0x2, 0x0, 0x8, 0x7, 0x0, 0x3, 0xffff8000, 0x3, 0x3, 0x9, 0x9b2, 0xffff, 0x95a, 0x1, 0x6, 0x5c419dfd, 0x1, 0x101, 0x7, 0x6, 0x2, 0x7fffffff, 0x3, 0x7, 0xef, 0xfffffff7, 0x80000000, 0x7, 0x7, 0x4, 0x80000000, 0x5, 0x8, 0x5, 0x7, 0x7ff, 0x2aa, 0x3, 0xf, 0x3, 0xfc, 0x6, 0x6, 0x400, 0x100, 0x8, 0x4, 0x48, 0x4, 0x86, 0x3, 0x4f, 0x1, 0xe9f, 0xdf, 0x401, 0x7, 0x8, 0x80000000, 0x713, 0xf, 0x10001, 0x1, 0xdb, 0x0, 0x6ff0, 0xe000, 0x5, 0xbc50, 0x5, 0xc6, 0x64, 0x800, 0x2a, 0x4, 0x101, 0x3, 0x1, 0x0, 0x5, 0x6, 0x4, 0x6, 0x73, 0x3, 0x5, 0x0, 0x5, 0xffffffff, 0xf4, 0x0, 0x9, 0x9, 0xfc2, 0x2, 0x3, 0x100, 0x8000, 0x7, 0x7, 0x200, 0xa30, 0x2, 0x23f, 0x2, 0x5, 0x3, 0x0, 0xc, 0x1ff, 0x62a, 0x3, 0x3, 0x8, 0xe, 0x3, 0x4, 0x3, 0x7, 0x7fff, 0xc, 0x1, 0x9, 0x9, 0x3, 0x4, 0x3, 0x4, 0x10, 0x8000000, 0x53, 0x9, 0xb, 0xf18e, 0x7fff, 0x1, 0x1, 0x3, 0x7ff, 0x3, 0x8e, 0x5a, 0x8000, 0x8, 0x7fff, 0x6, 0x3, 0xb3ae, 0x86d7, 0xb, 0xfe9, 0xb, 0x200, 0x1, 0xffff, 0x5, 0x5, 0x71f, 0xe, 0x101, 0x3, 0x6, 0x8, 0x80000000, 0xd8, 0x9, 0x3, 0x0, 0xffff, 0x9, 0xbc, 0x7, 0x8, 0x4, 0x3ff, 0x6, 0x0, 0xfffffffe, 0x8, 0x1cf4, 0x9, 0xfffffffd, 0x2, 0xfffffff9, 0x7, 0x800, 0x0, 0x2, 0x6, 0xfffffff7, 0x2, 0x800, 0xffffffff, 0x9, 0x4, 0x400, 0x5, 0x12000000, 0x3, 0x1, 0x7, 0x0, 0x7ff, 0x10000, 0xf]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x100}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 2.671567396s ago: executing program 0 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b68500"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) mkdir(&(0x7f00000001c0)='./file0\x00', 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4008804) 2.619954617s ago: executing program 1 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_set_self_attr(0x67, &(0x7f00000000c0)=ANY=[@ANYBLOB="65000000000000000a0000000000f2ff1f000000004cb639ad00"/36], 0x20, 0x0) 2.619104157s ago: executing program 0 (id=849): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000300)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) bind$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 2.505873508s ago: executing program 1 (id=851): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b", 0x14) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 1.760558325s ago: executing program 0 (id=862): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9a2619167aaadc6e, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c8500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ack_update_msk\x00', r5, 0x0, 0x2}, 0x18) mq_open(&(0x7f0000000000), 0x40, 0x2b, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r7, 0x0) r8 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x10001, @mcast2, 0x24f}, 0x1c) 1.644820026s ago: executing program 1 (id=863): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1.631503505s ago: executing program 1 (id=864): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.579917196s ago: executing program 1 (id=865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9a2619167aaadc6e, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c8500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ack_update_msk\x00', r5, 0x0, 0x2}, 0x18) mq_open(&(0x7f0000000000), 0x40, 0x2b, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r7, 0x0) r8 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x10001, @mcast2, 0x24f}, 0x1c) 1.11570165s ago: executing program 5 (id=872): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000300)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) bind$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 1.015918951s ago: executing program 3 (id=876): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r4) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x0, 0x7, 0x2, 0x0, 0x5de}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) r8 = accept$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) getpeername$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) lseek(r0, 0x10001, 0x0) 959.160682ms ago: executing program 3 (id=877): mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10084012}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x410, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x6e, 0x48, 0x18, 0xb, 0xc, 0x48, 0x1, 0x48, 0x18, 0x16, 0x6, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {}, {0x0, 0xa}, {0x5, 0x4}, {0x3}, {0x3, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x7}, {0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x3}, {0x6, 0x8}, {0x7, 0x1}, {0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x6}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x4}, {0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x7, 0x5}, {}, {0x7, 0x9}, {0x5, 0x2}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x30, 0x6, 0x9, 0x16, 0x3, 0x6c, 0x2, 0x1, 0x3, 0x18, 0x9, 0x6c, 0x0, 0x6, 0x2, 0xe, 0x12, 0xb, 0x9, 0x1, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x2, 0x3}, {0x7, 0x6}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x4a, 0x30, 0x4, 0x4, 0xb, 0x16, 0x6c, 0x1, 0x2, 0x9, 0x9, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf001, 0x8, 0x0, 0x6, 0x6d, 0x101, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0xffff, 0x8000, 0x6, 0x8, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x2, 0x3, 0x4, 0x4, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x3}, {0x2, 0x6}, {0x7, 0x2}, {}, {0x4, 0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x7}, {0x7}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x9}, {0x5, 0x2}, {0x5, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x4}, {0x1}, {0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x6, 0x9}, {0x4}, {0x6, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x0, 0xac5, 0x0, 0x7, 0x6, 0x2]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x42, 0x36, 0x3, 0x18, 0xb, 0x30, 0x1b, 0x1, 0xc, 0x60, 0xb, 0x18, 0x12, 0x4, 0x9, 0x36, 0x6]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x5}, {0x5}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x7}, {0x2, 0xa}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x2}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x6, 0x6}, {0x6, 0x6}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x3, 0x401, 0xf, 0x0, 0x32, 0x688]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x6, 0x24, 0x2, 0xb, 0x24, 0x2, 0xc, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x9, 0x1, 0x8, 0x7, 0x6, 0x806e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xa24, 0x5, 0x9, 0x4, 0x40, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe5, 0x9, 0x5, 0x20, 0x8c7a, 0x5, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x97f5, 0x7ff, 0x0, 0xf876, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8d7, 0x101, 0x1, 0x9, 0x2, 0xbf0, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x0, 0x1, 0x8, 0xb, 0x7f, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x7}, {0x6, 0x6}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x24, 0x1, 0x16, 0x9, 0x24, 0x48, 0x24, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x4, 0x2, 0x1ff, 0x0, 0x8af2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xce}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0xffff, 0x9, 0x4, 0x7, 0x2, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xa, 0x4ea0, 0x3, 0x5, 0x7, 0xb, 0x8]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1877, 0x9, 0xd, 0x5bf, 0xba, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x40}, 0x4000805) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8514, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x2, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 902.838522ms ago: executing program 0 (id=878): syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='damon_aggregated\x00', r3, 0x0, 0xffffffffffff0976}, 0x18) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resgid}, {@nolazytime}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x578, &(0x7f0000000940)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f000001a000/0x4000)=nil, 0x4000, 0x0, 0x4, 0x3) flock(0xffffffffffffffff, 0x5) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 877.104122ms ago: executing program 3 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = inotify_init() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) 859.782132ms ago: executing program 3 (id=880): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) 746.757613ms ago: executing program 3 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 689.543714ms ago: executing program 1 (id=882): r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzszzFqAkEABdC/zGSzIQnJEWwsBAsPYut99jz2Nlp6H1tLhXVXvICI8B5TzPz/mwkv9vv5+Opy/ksuSXcck/o1Xr6Hk11zH9d+ti5lkaSpqflJf8uXJZlPo0PalP+PZJWhP+27duo22yd/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADewjUAAP//xWIKDA==") close(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000001080)) 681.715924ms ago: executing program 3 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x100000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) fcntl$setlease(r6, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r8, &(0x7f00000001c0)=""/178, 0xb2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 260.590487ms ago: executing program 5 (id=884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7ff}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x880, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x5c0) listen(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 229.875828ms ago: executing program 5 (id=885): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 205.390968ms ago: executing program 5 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 204.880128ms ago: executing program 5 (id=887): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x82800, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x2d787d18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) read$rfkill(r6, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRESDEC, @ANYRES32], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) 126.277449ms ago: executing program 5 (id=888): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 0s ago: executing program 0 (id=889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffd, @loopback, 0x6}, 0x1c) sendto$inet6(r3, 0x0, 0x2, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.289766][ T4403] RSP: 002b:00007f3a5607f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.289810][ T4403] RAX: ffffffffffffffda RBX: 00007f3a57875fa0 RCX: 00007f3a5761f6c9 [ 54.289825][ T4403] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 54.289840][ T4403] RBP: 00007f3a5607f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.289854][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.289945][ T4403] R13: 00007f3a57876038 R14: 00007f3a57875fa0 R15: 00007ffc2cab4fc8 [ 54.289965][ T4403] [ 54.551621][ T4408] loop4: detected capacity change from 0 to 128 [ 54.644909][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 54.644926][ T29] audit: type=1326 audit(1762285294.321:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.727912][ T29] audit: type=1326 audit(1762285294.391:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.751033][ T29] audit: type=1326 audit(1762285294.391:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.774549][ T29] audit: type=1326 audit(1762285294.391:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.864467][ T4410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.280'. [ 54.913342][ T29] audit: type=1326 audit(1762285294.401:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.936645][ T29] audit: type=1326 audit(1762285294.401:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.959926][ T29] audit: type=1326 audit(1762285294.401:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 54.983175][ T29] audit: type=1326 audit(1762285294.401:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 55.006418][ T29] audit: type=1326 audit(1762285294.401:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 55.029652][ T29] audit: type=1326 audit(1762285294.401:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 55.053113][ T4430] loop1: detected capacity change from 0 to 2048 [ 55.059759][ T4430] EXT4-fs: Ignoring removed bh option [ 55.265917][ T4446] loop2: detected capacity change from 0 to 256 [ 55.291444][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 55.414396][ T4464] loop2: detected capacity change from 0 to 128 [ 55.488567][ T4475] wireguard0: entered promiscuous mode [ 55.494163][ T4475] wireguard0: entered allmulticast mode [ 55.530788][ T4470] loop0: detected capacity change from 0 to 1764 [ 55.553336][ T4482] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.634245][ T4482] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.704192][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 55.715694][ T4499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.293'. [ 55.781406][ T4500] loop4: detected capacity change from 0 to 2048 [ 55.788251][ T4500] EXT4-fs: Ignoring removed bh option [ 55.809075][ T4482] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.057060][ T4502] FAULT_INJECTION: forcing a failure. [ 56.057060][ T4502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.070220][ T4502] CPU: 1 UID: 0 PID: 4502 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.070246][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.070259][ T4502] Call Trace: [ 56.070268][ T4502] [ 56.070277][ T4502] __dump_stack+0x1d/0x30 [ 56.070301][ T4502] dump_stack_lvl+0xe8/0x140 [ 56.070320][ T4502] dump_stack+0x15/0x1b [ 56.070375][ T4502] should_fail_ex+0x265/0x280 [ 56.070394][ T4502] should_fail+0xb/0x20 [ 56.070409][ T4502] should_fail_usercopy+0x1a/0x20 [ 56.070428][ T4502] _copy_from_user+0x1c/0xb0 [ 56.070451][ T4502] ___sys_sendmsg+0xc1/0x1d0 [ 56.070519][ T4502] __x64_sys_sendmsg+0xd4/0x160 [ 56.070545][ T4502] x64_sys_call+0x191e/0x3000 [ 56.070570][ T4502] do_syscall_64+0xd2/0x200 [ 56.070667][ T4502] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.070699][ T4502] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.070727][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.070747][ T4502] RIP: 0033:0x7ff31accf6c9 [ 56.070761][ T4502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.070806][ T4502] RSP: 002b:00007ff31970e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.070825][ T4502] RAX: ffffffffffffffda RBX: 00007ff31af26090 RCX: 00007ff31accf6c9 [ 56.070896][ T4502] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 56.070910][ T4502] RBP: 00007ff31970e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.070924][ T4502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.070935][ T4502] R13: 00007ff31af26128 R14: 00007ff31af26090 R15: 00007ffc6d5997b8 [ 56.070956][ T4502] [ 56.280028][ T4503] loop1: detected capacity change from 0 to 512 [ 56.342778][ T4482] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.412585][ T4503] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.291: EA inode hash validation failed [ 56.481389][ T4503] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.291: corrupted inode contents [ 56.501423][ T124] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.513585][ T124] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.524329][ T4503] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.291: mark_inode_dirty error [ 56.549291][ T124] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.587429][ T124] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.621480][ T4512] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.640433][ T4503] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.291: corrupted inode contents [ 56.655654][ T4514] hub 2-0:1.0: USB hub found [ 56.669488][ T4523] loop0: detected capacity change from 0 to 128 [ 56.671196][ T4514] hub 2-0:1.0: 8 ports detected [ 56.685239][ T4523] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.764961][ T4503] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.291: mark_inode_dirty error [ 56.814948][ T4531] loop2: detected capacity change from 0 to 128 [ 56.882832][ T4532] 9pnet_fd: Insufficient options for proto=fd [ 56.916303][ T4503] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.291: mark inode dirty (error -117) [ 56.951216][ T4503] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 56.960508][ T4503] EXT4-fs (loop1): 1 orphan inode deleted [ 56.973661][ T4542] xt_TCPMSS: Only works on TCP SYN packets [ 57.230054][ T4554] loop2: detected capacity change from 0 to 128 [ 57.544575][ T4560] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.315' sets config #1869768547 [ 57.738284][ T4566] 9pnet_fd: Insufficient options for proto=fd [ 57.767343][ T4570] loop0: detected capacity change from 0 to 128 [ 57.854609][ T4565] loop2: detected capacity change from 0 to 1764 [ 57.902226][ T4574] loop4: detected capacity change from 0 to 1764 [ 58.050946][ T4588] bridge0: port 3(gretap0) entered blocking state [ 58.057455][ T4588] bridge0: port 3(gretap0) entered disabled state [ 58.071934][ T4588] gretap0: entered allmulticast mode [ 58.084411][ T4591] loop0: detected capacity change from 0 to 512 [ 58.101659][ T4588] gretap0: entered promiscuous mode [ 58.107146][ T4588] bridge0: port 3(gretap0) entered blocking state [ 58.113625][ T4588] bridge0: port 3(gretap0) entered forwarding state [ 58.132530][ T4591] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.328: inode has both inline data and extents flags [ 58.152240][ T4599] gretap0: left allmulticast mode [ 58.157307][ T4599] gretap0: left promiscuous mode [ 58.162447][ T4599] bridge0: port 3(gretap0) entered disabled state [ 58.171039][ T4591] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 58.329939][ T4584] loop2: detected capacity change from 0 to 512 [ 58.346910][ T4584] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.324: EA inode hash validation failed [ 58.378130][ T4584] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.324: corrupted inode contents [ 58.408788][ T4584] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.324: mark_inode_dirty error [ 58.494237][ T4584] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.324: corrupted inode contents [ 58.513345][ T4584] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.324: mark_inode_dirty error [ 58.525437][ T4584] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.324: mark inode dirty (error -117) [ 58.538155][ T4584] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 58.547280][ T4584] EXT4-fs (loop2): 1 orphan inode deleted [ 58.616531][ T4611] loop4: detected capacity change from 0 to 128 [ 58.689202][ T4613] bridge_slave_0: left allmulticast mode [ 58.695123][ T4613] bridge_slave_0: left promiscuous mode [ 58.700883][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.748887][ T4613] bridge_slave_1: left allmulticast mode [ 58.754597][ T4613] bridge_slave_1: left promiscuous mode [ 58.760469][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.877787][ T4613] bond0: (slave bond_slave_0): Releasing backup interface [ 58.885246][ T4620] loop1: detected capacity change from 0 to 1764 [ 58.892110][ T4613] bond0: (slave bond_slave_1): Releasing backup interface [ 58.912133][ T4613] team0: Port device team_slave_0 removed [ 58.922921][ T4613] team0: Port device team_slave_1 removed [ 58.929769][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.937423][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.948399][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.956011][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.968036][ T4613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.168308][ T4625] xt_hashlimit: max too large, truncated to 1048576 [ 59.358416][ T4635] loop1: detected capacity change from 0 to 512 [ 59.373034][ T4635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.341: bg 0: block 248: padding at end of block bitmap is not set [ 59.404746][ T4635] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.341: Failed to acquire dquot type 1 [ 59.416638][ T4635] EXT4-fs (loop1): 1 truncate cleaned up [ 59.427601][ T4635] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.458952][ T4635] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.467894][ T4635] netlink: 48 bytes leftover after parsing attributes in process `syz.1.341'. [ 59.470347][ T4648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 59.489024][ T4645] hub 2-0:1.0: USB hub found [ 59.494085][ T4635] syz.1.341 (4635) used greatest stack depth: 9120 bytes left [ 59.494142][ T4645] hub 2-0:1.0: 8 ports detected [ 59.529579][ T124] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1 [ 59.587857][ T4652] hub 2-0:1.0: USB hub found [ 59.599509][ T4652] hub 2-0:1.0: 8 ports detected [ 59.883039][ T4668] loop3: detected capacity change from 0 to 2048 [ 59.889832][ T4668] EXT4-fs: Ignoring removed bh option [ 59.918718][ T4670] capability: warning: `syz.4.354' uses 32-bit capabilities (legacy support in use) [ 60.102097][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 60.102146][ T29] audit: type=1326 audit(1762285299.781:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.270628][ T29] audit: type=1326 audit(1762285299.811:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.294040][ T29] audit: type=1326 audit(1762285299.811:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.317398][ T29] audit: type=1326 audit(1762285299.811:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.340913][ T29] audit: type=1326 audit(1762285299.811:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.364293][ T29] audit: type=1326 audit(1762285299.811:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.387611][ T29] audit: type=1326 audit(1762285299.811:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.389776][ T4683] hub 2-0:1.0: USB hub found [ 60.410970][ T29] audit: type=1326 audit(1762285299.811:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.439263][ T29] audit: type=1326 audit(1762285299.811:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 60.446038][ T4683] hub 2-0:1.0: 8 ports detected [ 60.462971][ T29] audit: type=1326 audit(1762285299.931:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 60.604478][ T4697] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 60.723154][ T4708] 9pnet_fd: Insufficient options for proto=fd [ 60.753783][ T4699] loop3: detected capacity change from 0 to 512 [ 60.764868][ T4711] bridge0: port 3(gretap0) entered blocking state [ 60.771585][ T4711] bridge0: port 3(gretap0) entered disabled state [ 60.780186][ T4699] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.793387][ T4699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.803776][ T4711] gretap0: entered allmulticast mode [ 60.809668][ T4711] gretap0: entered promiscuous mode [ 60.817619][ T4711] bridge0: port 3(gretap0) entered blocking state [ 60.824103][ T4711] bridge0: port 3(gretap0) entered forwarding state [ 60.832882][ T4699] EXT4-fs (loop3): 1 truncate cleaned up [ 60.845218][ T4713] wireguard0: entered promiscuous mode [ 60.850845][ T4713] wireguard0: entered allmulticast mode [ 60.881537][ T4714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.921054][ T4715] gretap0: left allmulticast mode [ 60.926269][ T4715] gretap0: left promiscuous mode [ 60.931459][ T4715] bridge0: port 3(gretap0) entered disabled state [ 60.940805][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 60.984632][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.992102][ T4721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.008002][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.015492][ T4721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.062363][ T4726] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 61.105402][ T4719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.369'. [ 61.186555][ T4714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.250441][ T4714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.264083][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 61.372882][ T4714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.566109][ T4749] loop1: detected capacity change from 0 to 2048 [ 61.572998][ T4749] EXT4-fs: Ignoring removed bh option [ 61.740331][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.779269][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.883164][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.978163][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.048535][ T4755] hub 2-0:1.0: USB hub found [ 62.061885][ T4755] hub 2-0:1.0: 8 ports detected [ 62.085419][ T4757] bridge0: port 3(gretap0) entered blocking state [ 62.092046][ T4757] bridge0: port 3(gretap0) entered disabled state [ 62.099202][ T4757] gretap0: entered allmulticast mode [ 62.107939][ T4757] gretap0: entered promiscuous mode [ 62.113965][ T4757] bridge0: port 3(gretap0) entered blocking state [ 62.120451][ T4757] bridge0: port 3(gretap0) entered forwarding state [ 62.225258][ T4757] gretap0: left allmulticast mode [ 62.230476][ T4757] gretap0: left promiscuous mode [ 62.235767][ T4757] bridge0: port 3(gretap0) entered disabled state [ 62.533954][ T4783] loop4: detected capacity change from 0 to 2048 [ 62.540861][ T4783] EXT4-fs: Ignoring removed bh option [ 63.009626][ T4793] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.029986][ T4791] loop0: detected capacity change from 0 to 512 [ 63.056347][ T4791] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.391: EA inode hash validation failed [ 63.080250][ T4791] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.391: corrupted inode contents [ 63.092292][ T4791] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.391: mark_inode_dirty error [ 63.103733][ T4791] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.391: corrupted inode contents [ 63.115902][ T4791] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.391: mark_inode_dirty error [ 63.128058][ T4791] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.391: mark inode dirty (error -117) [ 63.140962][ T4791] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 63.150281][ T4791] EXT4-fs (loop0): 1 orphan inode deleted [ 63.187386][ T4802] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.210183][ T4800] hub 2-0:1.0: USB hub found [ 63.234728][ T4800] hub 2-0:1.0: 8 ports detected [ 63.474466][ T4814] loop4: detected capacity change from 0 to 2048 [ 63.481492][ T4814] EXT4-fs: Ignoring removed bh option [ 63.877461][ T4818] wireguard0: entered promiscuous mode [ 63.883112][ T4818] wireguard0: entered allmulticast mode [ 63.923207][ T4823] wireguard0: entered promiscuous mode [ 63.928804][ T4823] wireguard0: entered allmulticast mode [ 63.951919][ T4826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.980073][ T4828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.992995][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 63.994085][ T4835] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.002134][ T4833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.017902][ T4833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.026361][ T4833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.033805][ T4833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.124139][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 64.148517][ T4828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.176356][ T4826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.178768][ T4844] hub 2-0:1.0: USB hub found [ 64.193640][ T4844] hub 2-0:1.0: 8 ports detected [ 64.217405][ T4818] netlink: 56 bytes leftover after parsing attributes in process `syz.0.403'. [ 64.226552][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.233968][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.241787][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.249461][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.260275][ T4854] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.267661][ T4854] vhci_hcd: invalid port number 96 [ 64.272963][ T4854] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 64.297244][ T4836] netlink: 56 bytes leftover after parsing attributes in process `syz.1.402'. [ 64.308006][ T4853] veth2: entered promiscuous mode [ 64.313073][ T4853] veth2: entered allmulticast mode [ 64.322874][ T4828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.391705][ T4864] FAULT_INJECTION: forcing a failure. [ 64.391705][ T4864] name failslab, interval 1, probability 0, space 0, times 0 [ 64.404463][ T4864] CPU: 1 UID: 0 PID: 4864 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.404545][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.404558][ T4864] Call Trace: [ 64.404565][ T4864] [ 64.404572][ T4864] __dump_stack+0x1d/0x30 [ 64.404594][ T4864] dump_stack_lvl+0xe8/0x140 [ 64.404663][ T4864] dump_stack+0x15/0x1b [ 64.404683][ T4864] should_fail_ex+0x265/0x280 [ 64.404736][ T4864] should_failslab+0x8c/0xb0 [ 64.404766][ T4864] kmem_cache_alloc_noprof+0x50/0x480 [ 64.404797][ T4864] ? skb_clone+0x151/0x1f0 [ 64.404878][ T4864] skb_clone+0x151/0x1f0 [ 64.404894][ T4864] __netlink_deliver_tap+0x2c9/0x500 [ 64.404992][ T4864] netlink_unicast+0x66b/0x690 [ 64.405026][ T4864] netlink_sendmsg+0x58b/0x6b0 [ 64.405050][ T4864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.405070][ T4864] __sock_sendmsg+0x145/0x180 [ 64.405229][ T4864] ____sys_sendmsg+0x31e/0x4e0 [ 64.405270][ T4864] ___sys_sendmsg+0x17b/0x1d0 [ 64.405298][ T4864] __x64_sys_sendmsg+0xd4/0x160 [ 64.405326][ T4864] x64_sys_call+0x191e/0x3000 [ 64.405419][ T4864] do_syscall_64+0xd2/0x200 [ 64.405442][ T4864] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.405468][ T4864] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.405496][ T4864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.405532][ T4864] RIP: 0033:0x7f3a5761f6c9 [ 64.405549][ T4864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.405567][ T4864] RSP: 002b:00007f3a5607f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.405660][ T4864] RAX: ffffffffffffffda RBX: 00007f3a57875fa0 RCX: 00007f3a5761f6c9 [ 64.405673][ T4864] RDX: 0000000004040004 RSI: 0000200000000140 RDI: 0000000000000006 [ 64.405687][ T4864] RBP: 00007f3a5607f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.405701][ T4864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.405714][ T4864] R13: 00007f3a57876038 R14: 00007f3a57875fa0 R15: 00007ffc2cab4fc8 [ 64.405733][ T4864] [ 64.407278][ T4826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.432937][ T4866] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.642205][ T4828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.655756][ T4868] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.674155][ T4864] veth2: entered promiscuous mode [ 64.679265][ T4864] veth2: entered allmulticast mode [ 64.693468][ T4871] netlink: 256 bytes leftover after parsing attributes in process `syz.2.422'. [ 64.723040][ T4826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.742975][ T4879] FAULT_INJECTION: forcing a failure. [ 64.742975][ T4879] name failslab, interval 1, probability 0, space 0, times 0 [ 64.755685][ T4879] CPU: 1 UID: 0 PID: 4879 Comm: syz.3.423 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.755715][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.755727][ T4879] Call Trace: [ 64.755734][ T4879] [ 64.755741][ T4879] __dump_stack+0x1d/0x30 [ 64.755847][ T4879] dump_stack_lvl+0xe8/0x140 [ 64.755886][ T4879] dump_stack+0x15/0x1b [ 64.755903][ T4879] should_fail_ex+0x265/0x280 [ 64.755945][ T4879] should_failslab+0x8c/0xb0 [ 64.755971][ T4879] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 64.755999][ T4879] ? __alloc_skb+0x101/0x320 [ 64.756111][ T4879] __alloc_skb+0x101/0x320 [ 64.756138][ T4879] skb_copy_expand+0xfb/0x560 [ 64.756197][ T4879] uevent_net_rcv_skb+0x1c7/0x2a0 [ 64.756232][ T4879] netlink_rcv_skb+0x123/0x220 [ 64.756266][ T4879] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 64.756302][ T4879] uevent_net_rcv+0x1c/0x30 [ 64.756438][ T4879] netlink_unicast+0x5c0/0x690 [ 64.756473][ T4879] netlink_sendmsg+0x58b/0x6b0 [ 64.756495][ T4879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.756517][ T4879] __sock_sendmsg+0x145/0x180 [ 64.756547][ T4879] ____sys_sendmsg+0x31e/0x4e0 [ 64.756623][ T4879] ___sys_sendmsg+0x17b/0x1d0 [ 64.756701][ T4879] __x64_sys_sendmsg+0xd4/0x160 [ 64.756726][ T4879] x64_sys_call+0x191e/0x3000 [ 64.756753][ T4879] do_syscall_64+0xd2/0x200 [ 64.756775][ T4879] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.756802][ T4879] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.756855][ T4879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.756876][ T4879] RIP: 0033:0x7f5a3b06f6c9 [ 64.756891][ T4879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.756907][ T4879] RSP: 002b:00007f5a39aae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.756927][ T4879] RAX: ffffffffffffffda RBX: 00007f5a3b2c6090 RCX: 00007f5a3b06f6c9 [ 64.756942][ T4879] RDX: 0000000000000040 RSI: 0000200000000500 RDI: 0000000000000003 [ 64.756956][ T4879] RBP: 00007f5a39aae090 R08: 0000000000000000 R09: 0000000000000000 [ 64.757037][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.757091][ T4879] R13: 00007f5a3b2c6128 R14: 00007f5a3b2c6090 R15: 00007ffceb409618 [ 64.757109][ T4879] [ 64.988204][ T4874] veth2: entered promiscuous mode [ 64.993351][ T4874] veth2: entered allmulticast mode [ 65.032253][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.044840][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.077354][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.096152][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.127110][ T4894] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 65.136381][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.137802][ T4895] loop4: detected capacity change from 0 to 1764 [ 65.145154][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.165763][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.185456][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 65.194586][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.240427][ T4900] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.307613][ T4911] loop0: detected capacity change from 0 to 512 [ 65.319167][ T4911] EXT4-fs: Ignoring removed orlov option [ 65.325730][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 65.325745][ T29] audit: type=1326 audit(1762285305.011:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.361174][ T29] audit: type=1326 audit(1762285305.041:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.384609][ T29] audit: type=1326 audit(1762285305.041:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.407855][ T29] audit: type=1326 audit(1762285305.041:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.410990][ T4911] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 65.431201][ T29] audit: type=1326 audit(1762285305.041:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.431238][ T29] audit: type=1326 audit(1762285305.041:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.486027][ T29] audit: type=1326 audit(1762285305.041:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.509384][ T29] audit: type=1326 audit(1762285305.041:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.532854][ T29] audit: type=1326 audit(1762285305.041:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.556121][ T29] audit: type=1326 audit(1762285305.041:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 65.582015][ T4911] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.436: corrupted in-inode xattr: e_value size too large [ 65.598625][ T4911] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.436: couldn't read orphan inode 15 (err -117) [ 65.610787][ T4918] loop2: detected capacity change from 0 to 2048 [ 65.611625][ T4911] EXT4-fs mount: 39 callbacks suppressed [ 65.611640][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.654229][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.673929][ T4918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.751522][ T4935] veth4: entered promiscuous mode [ 65.756602][ T4935] veth4: entered allmulticast mode [ 65.781037][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.803005][ T4942] FAULT_INJECTION: forcing a failure. [ 65.803005][ T4942] name failslab, interval 1, probability 0, space 0, times 0 [ 65.815713][ T4942] CPU: 1 UID: 0 PID: 4942 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.815810][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.815823][ T4942] Call Trace: [ 65.815829][ T4942] [ 65.815857][ T4942] __dump_stack+0x1d/0x30 [ 65.815880][ T4942] dump_stack_lvl+0xe8/0x140 [ 65.815903][ T4942] dump_stack+0x15/0x1b [ 65.815923][ T4942] should_fail_ex+0x265/0x280 [ 65.815996][ T4942] should_failslab+0x8c/0xb0 [ 65.816023][ T4942] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 65.816053][ T4942] ? v9fs_session_init+0x4b/0xde0 [ 65.816100][ T4942] kstrdup+0x3e/0xd0 [ 65.816206][ T4942] v9fs_session_init+0x4b/0xde0 [ 65.816280][ T4942] ? __rcu_read_unlock+0x4f/0x70 [ 65.816309][ T4942] ? avc_has_perm_noaudit+0x1b1/0x200 [ 65.816332][ T4942] ? should_fail_ex+0xdb/0x280 [ 65.816360][ T4942] ? v9fs_mount+0x51/0x5c0 [ 65.816459][ T4942] ? should_failslab+0x8c/0xb0 [ 65.816546][ T4942] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 65.816578][ T4942] v9fs_mount+0x67/0x5c0 [ 65.816599][ T4942] ? selinux_capable+0x31/0x40 [ 65.816676][ T4942] ? __pfx_v9fs_mount+0x10/0x10 [ 65.816701][ T4942] legacy_get_tree+0x78/0xd0 [ 65.816814][ T4942] vfs_get_tree+0x57/0x1d0 [ 65.816841][ T4942] do_new_mount+0x24d/0x660 [ 65.816946][ T4942] ? security_capable+0x83/0x90 [ 65.816979][ T4942] path_mount+0x4a5/0xb70 [ 65.817004][ T4942] ? user_path_at+0x109/0x130 [ 65.817028][ T4942] __se_sys_mount+0x28c/0x2e0 [ 65.817099][ T4942] ? fput+0x8f/0xc0 [ 65.817118][ T4942] __x64_sys_mount+0x67/0x80 [ 65.817200][ T4942] x64_sys_call+0x2b51/0x3000 [ 65.817278][ T4942] do_syscall_64+0xd2/0x200 [ 65.817300][ T4942] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.817330][ T4942] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.817370][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.817484][ T4942] RIP: 0033:0x7f81fd3cf6c9 [ 65.817500][ T4942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.817516][ T4942] RSP: 002b:00007f81fbe37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.817536][ T4942] RAX: ffffffffffffffda RBX: 00007f81fd625fa0 RCX: 00007f81fd3cf6c9 [ 65.817548][ T4942] RDX: 0000200000002540 RSI: 0000200000002500 RDI: 0000000000000000 [ 65.817560][ T4942] RBP: 00007f81fbe37090 R08: 0000200000000200 R09: 0000000000000000 [ 65.817574][ T4942] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 65.817648][ T4942] R13: 00007f81fd626038 R14: 00007f81fd625fa0 R15: 00007fff46bd4b78 [ 65.817669][ T4942] [ 66.103214][ T4947] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 66.112279][ T4945] loop3: detected capacity change from 0 to 1764 [ 66.118801][ T4943] loop1: detected capacity change from 0 to 512 [ 66.142709][ T4940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'. [ 66.182208][ T4943] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.439: EA inode hash validation failed [ 66.200951][ T4943] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.439: corrupted inode contents [ 66.246355][ T4943] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.439: mark_inode_dirty error [ 66.258054][ T4943] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.439: corrupted inode contents [ 66.270330][ T4943] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.439: mark_inode_dirty error [ 66.282696][ T4943] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.439: mark inode dirty (error -117) [ 66.295654][ T4943] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 66.311034][ T4960] veth6: entered promiscuous mode [ 66.316200][ T4960] veth6: entered allmulticast mode [ 66.333546][ T4943] EXT4-fs (loop1): 1 orphan inode deleted [ 66.362378][ T4943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.444549][ T4968] loop4: detected capacity change from 0 to 2048 [ 66.451356][ T4968] EXT4-fs: Ignoring removed bh option [ 66.473483][ T4943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.554959][ T4968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.814973][ T4978] netlink: 'syz.0.458': attribute type 13 has an invalid length. [ 66.859790][ T4979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 66.875264][ T4977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.457'. [ 66.904787][ T4977] netlink: 'syz.3.457': attribute type 3 has an invalid length. [ 66.931862][ T4981] loop1: detected capacity change from 0 to 1764 [ 67.044955][ T4990] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.093893][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.160185][ T5000] bridge0: port 1(gretap0) entered blocking state [ 67.166886][ T5000] bridge0: port 1(gretap0) entered disabled state [ 67.182954][ T5000] gretap0: entered allmulticast mode [ 67.190693][ T5001] FAULT_INJECTION: forcing a failure. [ 67.190693][ T5001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.203906][ T5001] CPU: 0 UID: 0 PID: 5001 Comm: syz.1.466 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.203937][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.203951][ T5001] Call Trace: [ 67.203959][ T5001] [ 67.203967][ T5001] __dump_stack+0x1d/0x30 [ 67.203991][ T5001] dump_stack_lvl+0xe8/0x140 [ 67.204010][ T5001] dump_stack+0x15/0x1b [ 67.204027][ T5001] should_fail_ex+0x265/0x280 [ 67.204077][ T5001] should_fail+0xb/0x20 [ 67.204093][ T5001] should_fail_usercopy+0x1a/0x20 [ 67.204118][ T5001] _copy_from_user+0x1c/0xb0 [ 67.204146][ T5001] __sys_sendto+0x19e/0x330 [ 67.204187][ T5001] __x64_sys_sendto+0x76/0x90 [ 67.204262][ T5001] x64_sys_call+0x2d14/0x3000 [ 67.204284][ T5001] do_syscall_64+0xd2/0x200 [ 67.204318][ T5001] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.204348][ T5001] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.204390][ T5001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.204409][ T5001] RIP: 0033:0x7f20c98f155c [ 67.204425][ T5001] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 67.204488][ T5000] gretap0: entered promiscuous mode [ 67.204501][ T5001] RSP: 002b:00007f20c832cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 67.204525][ T5001] RAX: ffffffffffffffda RBX: 00007f20c832cfc0 RCX: 00007f20c98f155c [ 67.204537][ T5001] RDX: 0000000000000020 RSI: 00007f20c832d010 RDI: 0000000000000003 [ 67.204579][ T5001] RBP: 0000000000000000 R08: 00007f20c832cf14 R09: 000000000000000c [ 67.204592][ T5001] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 67.204605][ T5001] R13: 00007f20c832cf68 R14: 00007f20c832d010 R15: 0000000000000000 [ 67.204624][ T5001] [ 67.380411][ T5000] bridge0: port 1(gretap0) entered blocking state [ 67.380844][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 67.386885][ T5000] bridge0: port 1(gretap0) entered forwarding state [ 67.425101][ T5006] veth2: entered promiscuous mode [ 67.430185][ T5006] veth2: entered allmulticast mode [ 67.582074][ T5009] loop4: detected capacity change from 0 to 512 [ 67.593938][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.471'. [ 67.602920][ T5013] IPVS: Error connecting to the multicast addr [ 67.610882][ T5009] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.470: EA inode hash validation failed [ 67.656542][ T5023] loop1: detected capacity change from 0 to 1764 [ 67.688047][ T5009] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.470: corrupted inode contents [ 67.704912][ T5009] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.470: mark_inode_dirty error [ 67.716690][ T5009] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.470: corrupted inode contents [ 67.729268][ T5009] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.470: mark_inode_dirty error [ 67.742311][ T5009] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.470: mark inode dirty (error -117) [ 67.793774][ T5009] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 67.802946][ T5009] EXT4-fs (loop4): 1 orphan inode deleted [ 67.809177][ T5009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.887376][ T5009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.008441][ T5037] loop1: detected capacity change from 0 to 2048 [ 68.015388][ T5037] EXT4-fs: Ignoring removed bh option [ 68.105819][ T5040] netlink: 'syz.3.480': attribute type 13 has an invalid length. [ 68.124074][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.175496][ T5036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 68.185312][ T5040] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 68.242974][ T5040] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 68.347739][ T5040] gretap1: entered promiscuous mode [ 68.353174][ T5040] gretap1: entered allmulticast mode [ 68.369298][ T5036] IPVS: Error connecting to the multicast addr [ 68.437854][ T5050] netlink: 68 bytes leftover after parsing attributes in process `syz.0.483'. [ 68.462132][ T5054] loop2: detected capacity change from 0 to 128 [ 68.531546][ T5061] loop3: detected capacity change from 0 to 1024 [ 68.538308][ T5061] EXT4-fs: dax option not supported [ 68.551600][ T5057] loop0: detected capacity change from 0 to 1764 [ 68.571501][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 68.629819][ T5059] bond1 (unregistering): Released all slaves [ 68.664384][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.060077][ T5079] loop2: detected capacity change from 0 to 2048 [ 69.067007][ T5079] EXT4-fs: Ignoring removed bh option [ 69.222802][ T5079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.520239][ T5086] netlink: 5064 bytes leftover after parsing attributes in process `syz.4.494'. [ 69.529356][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 69.621794][ T5092] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.745737][ T5098] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.771860][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.816111][ T5103] wireguard0: entered promiscuous mode [ 69.821766][ T5103] wireguard0: entered allmulticast mode [ 69.880226][ T5111] FAULT_INJECTION: forcing a failure. [ 69.880226][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 69.892980][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.0.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.893012][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.893023][ T5111] Call Trace: [ 69.893100][ T5111] [ 69.893109][ T5111] __dump_stack+0x1d/0x30 [ 69.893135][ T5111] dump_stack_lvl+0xe8/0x140 [ 69.893156][ T5111] dump_stack+0x15/0x1b [ 69.893250][ T5111] should_fail_ex+0x265/0x280 [ 69.893274][ T5111] should_failslab+0x8c/0xb0 [ 69.893302][ T5111] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 69.893329][ T5111] ? __d_alloc+0x3d/0x340 [ 69.893412][ T5111] __d_alloc+0x3d/0x340 [ 69.893446][ T5111] ? mpol_shared_policy_init+0xbd/0x4c0 [ 69.893477][ T5111] d_alloc_pseudo+0x1e/0x80 [ 69.893510][ T5111] alloc_file_pseudo+0x71/0x160 [ 69.893531][ T5111] __shmem_file_setup+0x1de/0x210 [ 69.893555][ T5111] shmem_file_setup+0x3b/0x50 [ 69.893687][ T5111] __se_sys_memfd_create+0x2c3/0x590 [ 69.893771][ T5111] __x64_sys_memfd_create+0x31/0x40 [ 69.893876][ T5111] x64_sys_call+0x2ac2/0x3000 [ 69.893897][ T5111] do_syscall_64+0xd2/0x200 [ 69.893915][ T5111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.893947][ T5111] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.894032][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.894064][ T5111] RIP: 0033:0x7ff31accf6c9 [ 69.894084][ T5111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.894102][ T5111] RSP: 002b:00007ff3196ece18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 69.894121][ T5111] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007ff31accf6c9 [ 69.894166][ T5111] RDX: 00007ff3196ecef0 RSI: 0000000000000000 RDI: 00007ff31ad52960 [ 69.894179][ T5111] RBP: 0000200000000940 R08: 00007ff3196ecbb7 R09: 00007ff3196ece40 [ 69.894194][ T5111] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 69.894207][ T5111] R13: 00007ff3196ecef0 R14: 00007ff3196eceb0 R15: 00002000000003c0 [ 69.894227][ T5111] [ 69.900255][ T5110] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.210708][ T5113] loop2: detected capacity change from 0 to 512 [ 70.294071][ T5113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.312660][ T5113] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.440484][ T5113] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.504: iget: bad i_size value: 2533274857506816 [ 70.453210][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 70.453223][ T29] audit: type=1400 audit(1762285310.111:1467): avc: denied { append } for pid=5112 comm="syz.2.504" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.481726][ T29] audit: type=1400 audit(1762285310.111:1468): avc: denied { execute_no_trans } for pid=5112 comm="syz.2.504" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.615700][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.697385][ T29] audit: type=1326 audit(1762285310.371:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 70.744787][ T29] audit: type=1326 audit(1762285310.391:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 70.768216][ T29] audit: type=1326 audit(1762285310.391:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 70.791586][ T29] audit: type=1326 audit(1762285310.401:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3b06f6c9 code=0x7ffc0000 [ 70.846224][ T5129] hub 2-0:1.0: USB hub found [ 70.859765][ T5129] hub 2-0:1.0: 8 ports detected [ 70.868569][ T5110] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.955976][ T5131] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 71.003150][ T5110] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.052899][ T5110] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.358207][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.396621][ T3466] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.407402][ T3466] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.430814][ T3466] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.520615][ T5148] loop3: detected capacity change from 0 to 1764 [ 71.560905][ T5149] loop1: detected capacity change from 0 to 2048 [ 71.567868][ T5149] EXT4-fs: Ignoring removed bh option [ 71.579430][ T5134] loop2: detected capacity change from 0 to 512 [ 71.590874][ T29] audit: type=1400 audit(1762285311.261:1473): avc: denied { mounton } for pid=5132 comm="syz.2.509" path="/122/file0" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.640955][ T5134] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.509: EA inode hash validation failed [ 71.662782][ T5149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.800465][ T5157] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 71.851182][ T5134] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.509: corrupted inode contents [ 71.895765][ T29] audit: type=1326 audit(1762285311.311:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 71.919186][ T29] audit: type=1326 audit(1762285311.311:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 71.942554][ T29] audit: type=1326 audit(1762285311.371:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 72.047332][ T5164] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.056143][ T5134] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.509: mark_inode_dirty error [ 72.070807][ T5134] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.509: corrupted inode contents [ 72.083374][ T5134] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.509: mark_inode_dirty error [ 72.097823][ T5134] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.509: mark inode dirty (error -117) [ 72.110494][ T5134] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 72.119845][ T5134] EXT4-fs (loop2): 1 orphan inode deleted [ 72.126311][ T5134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.128933][ T5167] loop3: detected capacity change from 0 to 512 [ 72.139456][ T5134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.228181][ T5168] loop0: detected capacity change from 0 to 2048 [ 72.234990][ T5168] EXT4-fs: Ignoring removed bh option [ 72.253403][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.300449][ T5167] EXT4-fs: Ignoring removed nobh option [ 72.327662][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.383887][ T5167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.520: corrupted inode contents [ 72.396084][ T5167] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.520: mark_inode_dirty error [ 72.408670][ T5167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.520: corrupted inode contents [ 72.420903][ T5167] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.520: mark_inode_dirty error [ 72.433245][ T5167] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.520: Failed to acquire dquot type 0 [ 72.445098][ T5167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.520: corrupted inode contents [ 72.457774][ T5167] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.520: mark_inode_dirty error [ 72.469471][ T5167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.520: corrupted inode contents [ 72.541544][ T5167] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.520: mark_inode_dirty error [ 72.598956][ T5167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.520: corrupted inode contents [ 72.660498][ T5167] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 72.697153][ T5167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.520: corrupted inode contents [ 72.720573][ T5167] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.520: mark_inode_dirty error [ 72.732399][ T5167] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 72.742726][ T5167] EXT4-fs (loop3): 1 truncate cleaned up [ 72.749272][ T5167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.776273][ T5167] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.986467][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.020711][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.202703][ T5193] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 73.213881][ T5193] team0: Port device dummy0 added [ 73.306929][ T5200] loop1: detected capacity change from 0 to 2048 [ 73.313895][ T5200] EXT4-fs: Ignoring removed bh option [ 73.326884][ T5193] loop0: detected capacity change from 0 to 128 [ 73.414770][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.567271][ T5204] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 73.743230][ T5206] wireguard0: entered promiscuous mode [ 73.748930][ T5206] wireguard0: entered allmulticast mode [ 73.795003][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.795003][ T124] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 73.808526][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.808526][ T124] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 73.822339][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.822339][ T124] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 73.838729][ T5211] 9pnet_fd: Insufficient options for proto=fd [ 73.845193][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.845193][ T124] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 73.858874][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.858874][ T124] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 73.872959][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.872959][ T124] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 73.887304][ T5210] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.893061][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.893061][ T124] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 73.910414][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.910414][ T124] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 73.926721][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.926721][ T124] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 73.965255][ T5215] __nla_validate_parse: 5 callbacks suppressed [ 73.965284][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 73.981498][ T5215] netlink: 56 bytes leftover after parsing attributes in process `syz.4.531'. [ 73.990386][ T124] kworker/u8:5: attempt to access beyond end of device [ 73.990386][ T124] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 74.014470][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.039526][ T5210] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.146694][ T5229] bridge0: port 3(gretap0) entered blocking state [ 74.154202][ T5229] bridge0: port 3(gretap0) entered disabled state [ 74.175469][ T5229] gretap0: entered allmulticast mode [ 74.192358][ T5229] gretap0: entered promiscuous mode [ 74.198210][ T5229] bridge0: port 3(gretap0) entered blocking state [ 74.204720][ T5229] bridge0: port 3(gretap0) entered forwarding state [ 74.212934][ T5234] gretap0: left allmulticast mode [ 74.218032][ T5234] gretap0: left promiscuous mode [ 74.223249][ T5234] bridge0: port 3(gretap0) entered disabled state [ 74.262333][ T5210] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.310435][ T5236] gretap0: left allmulticast mode [ 74.315550][ T5236] gretap0: left promiscuous mode [ 74.320622][ T5236] bridge0: port 1(gretap0) entered disabled state [ 74.345552][ T5210] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.443350][ T5246] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 74.485724][ T4920] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.501934][ T4920] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.519072][ T4920] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.534109][ T5249] loop2: detected capacity change from 0 to 128 [ 74.551014][ T5249] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.569308][ T3466] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.631774][ T5249] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.641658][ T5254] 9pnet_fd: Insufficient options for proto=fd [ 74.786594][ T124] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.792455][ T5272] FAULT_INJECTION: forcing a failure. [ 74.792455][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 74.808487][ T5272] CPU: 0 UID: 0 PID: 5272 Comm: syz.4.552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.808517][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.808530][ T5272] Call Trace: [ 74.808539][ T5272] [ 74.808548][ T5272] __dump_stack+0x1d/0x30 [ 74.808630][ T5272] dump_stack_lvl+0xe8/0x140 [ 74.808649][ T5272] dump_stack+0x15/0x1b [ 74.808668][ T5272] should_fail_ex+0x265/0x280 [ 74.808689][ T5272] should_failslab+0x8c/0xb0 [ 74.808724][ T5272] __kmalloc_noprof+0xa5/0x570 [ 74.808862][ T5272] ? security_inode_init_security+0xc5/0x330 [ 74.808891][ T5272] ? current_umask+0x2f/0x40 [ 74.808974][ T5272] security_inode_init_security+0xc5/0x330 [ 74.808997][ T5272] ? __pfx_shmem_initxattrs+0x10/0x10 [ 74.809024][ T5272] shmem_mknod+0xad/0x180 [ 74.809070][ T5272] shmem_create+0x34/0x50 [ 74.809100][ T5272] ? __pfx_shmem_create+0x10/0x10 [ 74.809130][ T5272] path_openat+0x1105/0x2170 [ 74.809224][ T5272] do_filp_open+0x109/0x230 [ 74.809261][ T5272] do_sys_openat2+0xa6/0x110 [ 74.809342][ T5272] __x64_sys_openat+0xf2/0x120 [ 74.809362][ T5272] x64_sys_call+0x2eab/0x3000 [ 74.809384][ T5272] do_syscall_64+0xd2/0x200 [ 74.809407][ T5272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.809512][ T5272] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.809551][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.809577][ T5272] RIP: 0033:0x7f3a5761f6c9 [ 74.809604][ T5272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.809623][ T5272] RSP: 002b:00007f3a5607f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.809643][ T5272] RAX: ffffffffffffffda RBX: 00007f3a57875fa0 RCX: 00007f3a5761f6c9 [ 74.809660][ T5272] RDX: 0000000000103042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 74.809672][ T5272] RBP: 00007f3a5607f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.809684][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.809697][ T5272] R13: 00007f3a57876038 R14: 00007f3a57875fa0 R15: 00007ffc2cab4fc8 [ 74.809719][ T5272] [ 75.048923][ T5277] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.174082][ T5269] loop3: detected capacity change from 0 to 512 [ 75.205118][ T5269] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.549: EA inode hash validation failed [ 75.227545][ T5269] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.549: corrupted inode contents [ 75.246022][ T5280] loop2: detected capacity change from 0 to 8192 [ 75.275591][ T5269] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.549: mark_inode_dirty error [ 75.287381][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 75.293363][ T5269] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.549: corrupted inode contents [ 75.321758][ T5269] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.549: mark_inode_dirty error [ 75.361443][ T5269] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.549: mark inode dirty (error -117) [ 75.377244][ T5269] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 75.391272][ T5269] EXT4-fs (loop3): 1 orphan inode deleted [ 75.402935][ T5269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.419911][ T5269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.491716][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 75.491733][ T29] audit: type=1326 audit(1762285315.171:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.521284][ T29] audit: type=1326 audit(1762285315.171:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.569004][ T29] audit: type=1326 audit(1762285315.221:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.592326][ T29] audit: type=1326 audit(1762285315.221:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.615777][ T29] audit: type=1326 audit(1762285315.221:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.644989][ T5295] 9pnet_fd: Insufficient options for proto=fd [ 75.651517][ T29] audit: type=1326 audit(1762285315.311:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.674839][ T29] audit: type=1326 audit(1762285315.311:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.698232][ T29] audit: type=1326 audit(1762285315.311:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.721814][ T29] audit: type=1326 audit(1762285315.311:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.745101][ T29] audit: type=1326 audit(1762285315.311:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 75.798632][ T5306] loop1: detected capacity change from 0 to 512 [ 75.807600][ T5306] ext4: Unknown parameter 'smackfsdef' [ 75.963777][ T5311] loop0: detected capacity change from 0 to 2048 [ 75.970589][ T5311] EXT4-fs: Ignoring removed bh option [ 76.907832][ T5311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.089835][ T5322] loop1: detected capacity change from 0 to 512 [ 77.111738][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.124942][ T5322] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.564: EA inode hash validation failed [ 77.148915][ T5322] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.564: corrupted inode contents [ 77.170261][ T5322] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.564: mark_inode_dirty error [ 77.188657][ T5322] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.564: corrupted inode contents [ 77.221160][ T5322] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.564: mark_inode_dirty error [ 77.249459][ T5322] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.564: mark inode dirty (error -117) [ 77.271477][ T5322] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 77.294089][ T5322] EXT4-fs (loop1): 1 orphan inode deleted [ 77.301731][ T5322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.315033][ T5322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.328337][ T5339] hub 2-0:1.0: USB hub found [ 77.333426][ T5339] hub 2-0:1.0: 8 ports detected [ 77.438161][ T5341] loop0: detected capacity change from 0 to 128 [ 77.513809][ T5348] loop1: detected capacity change from 0 to 512 [ 77.544580][ T5350] loop0: detected capacity change from 0 to 2048 [ 77.552046][ T5348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.567387][ T5348] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.639582][ T5350] loop0: unable to read partition table [ 77.648679][ T5350] loop0: partition table beyond EOD, truncated [ 77.654957][ T5350] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 77.734944][ T3003] loop0: unable to read partition table [ 77.760709][ T3003] loop0: partition table beyond EOD, truncated [ 77.774466][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.798406][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.867997][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.971993][ T5370] bridge0: port 3(gretap0) entered blocking state [ 77.978596][ T5370] bridge0: port 3(gretap0) entered disabled state [ 77.987059][ T5370] gretap0: entered allmulticast mode [ 77.993106][ T5370] gretap0: entered promiscuous mode [ 77.998629][ T5370] bridge0: port 3(gretap0) entered blocking state [ 78.005111][ T5370] bridge0: port 3(gretap0) entered forwarding state [ 78.015829][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.021847][ T5370] gretap0: left allmulticast mode [ 78.024532][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.029266][ T5370] gretap0: left promiscuous mode [ 78.042099][ T5370] bridge0: port 3(gretap0) entered disabled state [ 78.135597][ T5368] loop1: detected capacity change from 0 to 512 [ 78.178522][ T5368] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.581: bad orphan inode 11862016 [ 78.189796][ T5368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.202577][ T5368] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.241802][ T5378] loop2: detected capacity change from 0 to 512 [ 78.251906][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.272955][ T5378] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.583: EA inode hash validation failed [ 78.286590][ T5378] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.583: corrupted inode contents [ 78.300791][ T5382] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 78.306764][ T5378] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.583: mark_inode_dirty error [ 78.321030][ T5378] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.583: corrupted inode contents [ 78.340484][ T5378] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.583: mark_inode_dirty error [ 78.362495][ T5378] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.583: mark inode dirty (error -117) [ 78.375879][ T5378] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 78.388657][ T5378] EXT4-fs (loop2): 1 orphan inode deleted [ 78.396586][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.409784][ T5378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.645164][ T5402] pimreg: entered allmulticast mode [ 78.653903][ T5402] pimreg: left allmulticast mode [ 79.218205][ T5420] hub 2-0:1.0: USB hub found [ 79.259923][ T5420] hub 2-0:1.0: 8 ports detected [ 79.296080][ T5422] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 79.427659][ T5426] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 79.711076][ T5445] loop1: detected capacity change from 0 to 2048 [ 79.718103][ T5445] EXT4-fs: Ignoring removed bh option [ 79.739006][ T5445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.819500][ T5444] loop3: detected capacity change from 0 to 256 [ 79.951360][ T5318] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.374099][ T5461] xt_hashlimit: max too large, truncated to 1048576 [ 80.384616][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.139607][ T5506] dummy0: entered promiscuous mode [ 81.158935][ T5506] macsec1: entered promiscuous mode [ 81.191304][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 81.230981][ T5506] dummy0: left promiscuous mode [ 81.269112][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 81.269131][ T29] audit: type=1326 audit(1762285320.941:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.322348][ T5528] xt_hashlimit: max too large, truncated to 1048576 [ 81.350114][ T5528] xt_bpf: check failed: parse error [ 81.370431][ T5527] bridge0: port 3(gretap0) entered blocking state [ 81.377003][ T5527] bridge0: port 3(gretap0) entered disabled state [ 81.384021][ T29] audit: type=1326 audit(1762285320.971:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.407413][ T29] audit: type=1326 audit(1762285320.971:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.430786][ T29] audit: type=1326 audit(1762285320.971:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.454256][ T29] audit: type=1326 audit(1762285320.971:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.477648][ T29] audit: type=1326 audit(1762285320.971:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.500956][ T29] audit: type=1326 audit(1762285320.971:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.524384][ T29] audit: type=1326 audit(1762285320.971:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.547901][ T29] audit: type=1326 audit(1762285320.971:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 81.575085][ T5527] gretap0: entered allmulticast mode [ 81.601062][ T5527] gretap0: entered promiscuous mode [ 81.621059][ T5527] bridge0: port 3(gretap0) entered blocking state [ 81.627593][ T5527] bridge0: port 3(gretap0) entered forwarding state [ 81.930924][ T29] audit: type=1326 audit(1762285321.601:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 81.957865][ T5552] loop1: detected capacity change from 0 to 128 [ 82.006793][ T5552] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.030145][ T5552] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.182709][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.354102][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 82.710070][ T5577] bridge0: port 3(gretap0) entered blocking state [ 82.716626][ T5577] bridge0: port 3(gretap0) entered disabled state [ 82.723676][ T5577] gretap0: entered allmulticast mode [ 82.729441][ T5577] gretap0: entered promiscuous mode [ 82.734991][ T5577] bridge0: port 3(gretap0) entered blocking state [ 82.741464][ T5577] bridge0: port 3(gretap0) entered forwarding state [ 82.783062][ T5577] gretap0: left allmulticast mode [ 82.788336][ T5577] gretap0: left promiscuous mode [ 82.793740][ T5577] bridge0: port 3(gretap0) entered disabled state [ 83.080620][ T5615] loop2: detected capacity change from 0 to 512 [ 83.109486][ T5615] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.644: EA inode hash validation failed [ 83.130707][ T5615] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.644: corrupted inode contents [ 83.143065][ T5615] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.644: mark_inode_dirty error [ 83.154773][ T5615] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.644: corrupted inode contents [ 83.166987][ T5615] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.644: mark_inode_dirty error [ 83.179136][ T5615] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.644: mark inode dirty (error -117) [ 83.192112][ T5615] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 83.201215][ T5615] EXT4-fs (loop2): 1 orphan inode deleted [ 83.207412][ T5615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.227381][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.233332][ T5621] loop3: detected capacity change from 0 to 1764 [ 83.249679][ T5623] FAULT_INJECTION: forcing a failure. [ 83.249679][ T5623] name failslab, interval 1, probability 0, space 0, times 0 [ 83.262414][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz.0.651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.262443][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.262458][ T5623] Call Trace: [ 83.262464][ T5623] [ 83.262472][ T5623] __dump_stack+0x1d/0x30 [ 83.262495][ T5623] dump_stack_lvl+0xe8/0x140 [ 83.262514][ T5623] dump_stack+0x15/0x1b [ 83.262538][ T5623] should_fail_ex+0x265/0x280 [ 83.262648][ T5623] ? tcf_block_get_ext+0x19e/0xb30 [ 83.262697][ T5623] should_failslab+0x8c/0xb0 [ 83.262723][ T5623] __kmalloc_cache_noprof+0x4c/0x4a0 [ 83.262759][ T5623] tcf_block_get_ext+0x19e/0xb30 [ 83.262790][ T5623] ? tc_modify_qdisc+0xf2e/0x1420 [ 83.262880][ T5623] ? rtnetlink_rcv+0x1c/0x30 [ 83.262905][ T5623] ? netlink_unicast+0x5c0/0x690 [ 83.262938][ T5623] ? __sock_sendmsg+0x145/0x180 [ 83.263041][ T5623] ? __pfx_multiq_init+0x10/0x10 [ 83.263063][ T5623] tcf_block_get+0x67/0xa0 [ 83.263090][ T5623] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 83.263121][ T5623] multiq_init+0x58/0x1a0 [ 83.263148][ T5623] ? nla_strcmp+0xc3/0xe0 [ 83.263167][ T5623] ? __pfx_multiq_init+0x10/0x10 [ 83.263188][ T5623] qdisc_create+0x591/0x9e0 [ 83.263289][ T5623] tc_modify_qdisc+0xf2e/0x1420 [ 83.263342][ T5623] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 83.263368][ T5623] rtnetlink_rcv_msg+0x65a/0x6d0 [ 83.263398][ T5623] netlink_rcv_skb+0x123/0x220 [ 83.263431][ T5623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.263510][ T5623] rtnetlink_rcv+0x1c/0x30 [ 83.263532][ T5623] netlink_unicast+0x5c0/0x690 [ 83.263562][ T5623] netlink_sendmsg+0x58b/0x6b0 [ 83.263586][ T5623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.263657][ T5623] __sock_sendmsg+0x145/0x180 [ 83.263680][ T5623] ____sys_sendmsg+0x31e/0x4e0 [ 83.263716][ T5623] ___sys_sendmsg+0x17b/0x1d0 [ 83.263752][ T5623] __x64_sys_sendmsg+0xd4/0x160 [ 83.263777][ T5623] x64_sys_call+0x191e/0x3000 [ 83.263844][ T5623] do_syscall_64+0xd2/0x200 [ 83.263866][ T5623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.263899][ T5623] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.263931][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.264013][ T5623] RIP: 0033:0x7ff31accf6c9 [ 83.264029][ T5623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.264059][ T5623] RSP: 002b:00007ff31972f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.264081][ T5623] RAX: ffffffffffffffda RBX: 00007ff31af25fa0 RCX: 00007ff31accf6c9 [ 83.264135][ T5623] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 83.264149][ T5623] RBP: 00007ff31972f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.264209][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.264222][ T5623] R13: 00007ff31af26038 R14: 00007ff31af25fa0 R15: 00007ffc6d5997b8 [ 83.264239][ T5623] [ 83.577429][ T5625] loop3: detected capacity change from 0 to 2048 [ 83.597394][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.884120][ T5657] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 83.979015][ T5667] loop2: detected capacity change from 0 to 2048 [ 84.012441][ T5667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.125927][ T3312] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad extended attribute block 3724 [ 84.139938][ T3312] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad extended attribute block 3724 [ 84.170874][ T5675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.191426][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.266251][ T5679] hub 2-0:1.0: USB hub found [ 84.271073][ T5679] hub 2-0:1.0: 8 ports detected [ 84.403965][ T4920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.453209][ T4920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.478532][ T5694] loop0: detected capacity change from 0 to 764 [ 84.488747][ T5694] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.503493][ T4920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.554098][ T4920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.580260][ T5699] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.645543][ T5710] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.668206][ T5707] loop3: detected capacity change from 0 to 2048 [ 84.676081][ T4920] bridge_slave_1: left allmulticast mode [ 84.681780][ T4920] bridge_slave_1: left promiscuous mode [ 84.687575][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.711761][ T4920] bridge_slave_0: left allmulticast mode [ 84.717518][ T4920] bridge_slave_0: left promiscuous mode [ 84.723331][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.739677][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.835851][ T5723] loop0: detected capacity change from 0 to 128 [ 84.848366][ T5723] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.869240][ T4920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.891386][ T5723] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.912351][ T4920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.936154][ T4920] bond0 (unregistering): Released all slaves [ 84.975390][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.991731][ T3407] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.094289][ T4920] hsr_slave_0: left promiscuous mode [ 85.103539][ T4920] hsr_slave_1: left promiscuous mode [ 85.118678][ T4920] veth1_vlan: left promiscuous mode [ 85.126819][ T4920] veth0_vlan: left promiscuous mode [ 85.262542][ T4920] team0 (unregistering): Port device team_slave_1 removed [ 85.291539][ T4920] team0 (unregistering): Port device team_slave_0 removed [ 85.325642][ T5747] loop1: detected capacity change from 0 to 128 [ 85.414586][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.434263][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.484851][ T5757] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 85.499928][ T5695] chnl_net:caif_netlink_parms(): no params data found [ 85.612612][ T5768] loop3: detected capacity change from 0 to 1764 [ 85.657195][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.664442][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.678774][ T5695] bridge_slave_0: entered allmulticast mode [ 85.685381][ T5695] bridge_slave_0: entered promiscuous mode [ 85.701402][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.708489][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.715780][ T5695] bridge_slave_1: entered allmulticast mode [ 85.722393][ T5695] bridge_slave_1: entered promiscuous mode [ 85.858411][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.880823][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.960208][ T5788] loop3: detected capacity change from 0 to 2048 [ 85.967179][ T5788] EXT4-fs: Ignoring removed bh option [ 86.069164][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.471989][ T5695] team0: Port device team_slave_0 added [ 86.480500][ T5695] team0: Port device team_slave_1 added [ 86.488115][ T5775] loop0: detected capacity change from 0 to 512 [ 86.509046][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.516238][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.542389][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.574665][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.581700][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.595016][ T5775] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.691: EA inode hash validation failed [ 86.607757][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.620712][ T5775] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.691: corrupted inode contents [ 86.641389][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 86.641404][ T29] audit: type=1326 audit(1762285326.311:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.672208][ T29] audit: type=1326 audit(1762285326.311:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.672588][ T5775] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.691: mark_inode_dirty error [ 86.695859][ T29] audit: type=1326 audit(1762285326.311:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.695958][ T29] audit: type=1326 audit(1762285326.311:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.695989][ T29] audit: type=1326 audit(1762285326.311:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.696020][ T29] audit: type=1326 audit(1762285326.311:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.709347][ T5775] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.691: corrupted inode contents [ 86.730559][ T29] audit: type=1326 audit(1762285326.311:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.730594][ T29] audit: type=1326 audit(1762285326.311:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 86.754445][ T5775] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.691: mark_inode_dirty error [ 86.874076][ T5775] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.691: mark inode dirty (error -117) [ 86.886714][ T5819] loop1: detected capacity change from 0 to 128 [ 86.887516][ T5775] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 86.902444][ T5775] EXT4-fs (loop0): 1 orphan inode deleted [ 86.903438][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.908557][ T5775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.934916][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.946426][ T5819] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.963888][ T5695] hsr_slave_0: entered promiscuous mode [ 86.973726][ T5695] hsr_slave_1: entered promiscuous mode [ 87.009389][ T5819] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.020559][ T5826] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 87.181801][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.235056][ T5695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.248269][ T5842] loop1: detected capacity change from 0 to 128 [ 87.375249][ T5695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.478363][ T5695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.555395][ T5695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.777569][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.821813][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.912569][ T5865] loop0: detected capacity change from 0 to 2048 [ 87.919305][ T5865] EXT4-fs: Ignoring removed bh option [ 88.125040][ T5870] hub 2-0:1.0: USB hub found [ 88.130107][ T5870] hub 2-0:1.0: 8 ports detected [ 88.139225][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.288837][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.296056][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.312759][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.319927][ T4920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.365014][ T29] audit: type=1326 audit(1762285328.031:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 88.388550][ T29] audit: type=1326 audit(1762285328.031:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5761f6c9 code=0x7ffc0000 [ 88.392150][ T5880] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 88.424597][ T5878] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 88.508049][ T5891] loop3: detected capacity change from 0 to 128 [ 88.540870][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.569288][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.633505][ T5897] bridge0: port 3(gretap0) entered blocking state [ 88.640009][ T5897] bridge0: port 3(gretap0) entered disabled state [ 88.663913][ T5897] gretap0: entered allmulticast mode [ 88.670583][ T5897] gretap0: entered promiscuous mode [ 88.676372][ T5897] bridge0: port 3(gretap0) entered blocking state [ 88.682864][ T5897] bridge0: port 3(gretap0) entered forwarding state [ 88.710541][ T5904] gretap0: left allmulticast mode [ 88.715679][ T5904] gretap0: left promiscuous mode [ 88.720796][ T5904] bridge0: port 3(gretap0) entered disabled state [ 88.962953][ T5920] loop0: detected capacity change from 0 to 256 [ 88.967553][ T5695] veth0_vlan: entered promiscuous mode [ 88.984418][ T5695] veth1_vlan: entered promiscuous mode [ 89.007405][ T5695] veth0_macvtap: entered promiscuous mode [ 89.063356][ T5695] veth1_macvtap: entered promiscuous mode [ 89.097380][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.171936][ T5928] loop1: detected capacity change from 0 to 512 [ 89.202095][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.206540][ T5928] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.721: EA inode hash validation failed [ 89.232438][ T4920] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.242079][ T4920] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.251635][ T5928] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.721: corrupted inode contents [ 89.262290][ T5891] bio_check_eod: 102 callbacks suppressed [ 89.262307][ T5891] syz.3.716: attempt to access beyond end of device [ 89.262307][ T5891] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.263842][ T5928] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.721: mark_inode_dirty error [ 89.269133][ T5891] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 89.304607][ T5899] syz.3.716: attempt to access beyond end of device [ 89.304607][ T5899] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.306371][ T5928] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.721: corrupted inode contents [ 89.317986][ T5899] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 89.330169][ T5928] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.721: mark_inode_dirty error [ 89.350549][ T4920] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.373675][ T4920] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.382643][ T5928] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.721: mark inode dirty (error -117) [ 89.405609][ T5928] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 89.419990][ T5933] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.421758][ T5899] syz.3.716: attempt to access beyond end of device [ 89.421758][ T5899] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.441884][ T5899] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 89.450711][ T5928] EXT4-fs (loop1): 1 orphan inode deleted [ 89.456907][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.470232][ T5928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.500992][ T5935] loop5: detected capacity change from 0 to 256 [ 89.524538][ T5935] FAT-fs (loop5): bogus number of FAT sectors [ 89.530664][ T5935] FAT-fs (loop5): Can't find a valid FAT filesystem [ 89.592322][ T5938] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.861971][ T5949] loop3: detected capacity change from 0 to 2048 [ 89.868895][ T5949] EXT4-fs: Ignoring removed bh option [ 89.978832][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.056590][ T5951] bridge0: port 3(gretap0) entered blocking state [ 90.063226][ T5951] bridge0: port 3(gretap0) entered disabled state [ 90.183159][ T5951] gretap0: entered allmulticast mode [ 90.327057][ T5951] gretap0: entered promiscuous mode [ 90.332646][ T5951] bridge0: port 3(gretap0) entered blocking state [ 90.339129][ T5951] bridge0: port 3(gretap0) entered forwarding state [ 90.361352][ T3373] kernel read not supported for file /380/net/netstat (pid: 3373 comm: kworker/1:2) [ 90.434868][ T5972] 9pnet_fd: Insufficient options for proto=fd [ 90.438450][ T5971] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.542455][ T5977] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.551860][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.565028][ T5966] loop1: detected capacity change from 0 to 512 [ 90.575036][ T5966] EXT4-fs: Ignoring removed nobh option [ 90.638730][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.732: corrupted inode contents [ 90.664508][ T5966] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.732: mark_inode_dirty error [ 90.677924][ T5983] netlink: 144 bytes leftover after parsing attributes in process `syz.4.739'. [ 90.749337][ T5987] loop5: detected capacity change from 0 to 2048 [ 90.756320][ T5987] EXT4-fs: Ignoring removed bh option [ 90.922150][ T5994] FAULT_INJECTION: forcing a failure. [ 90.922150][ T5994] name failslab, interval 1, probability 0, space 0, times 0 [ 90.934885][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.741 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.934911][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.934923][ T5994] Call Trace: [ 90.934928][ T5994] [ 90.934935][ T5994] __dump_stack+0x1d/0x30 [ 90.934958][ T5994] dump_stack_lvl+0xe8/0x140 [ 90.934990][ T5994] dump_stack+0x15/0x1b [ 90.935019][ T5994] should_fail_ex+0x265/0x280 [ 90.935042][ T5994] ? qdisc_get_rtab+0x1a5/0x2d0 [ 90.935082][ T5994] should_failslab+0x8c/0xb0 [ 90.935164][ T5994] __kmalloc_cache_noprof+0x4c/0x4a0 [ 90.935200][ T5994] qdisc_get_rtab+0x1a5/0x2d0 [ 90.935243][ T5994] tbf_change+0x125/0xcd0 [ 90.935275][ T5994] ? stack_trace_save+0x5e/0x90 [ 90.935296][ T5994] ? __list_add_valid_or_report+0x38/0xe0 [ 90.935376][ T5994] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 90.935409][ T5994] ? rtnetlink_rcv+0x1c/0x30 [ 90.935447][ T5994] ? netlink_unicast+0x5c0/0x690 [ 90.935478][ T5994] ? netlink_sendmsg+0x58b/0x6b0 [ 90.935498][ T5994] ? __sock_sendmsg+0x145/0x180 [ 90.935620][ T5994] ? read_tsc+0x9/0x20 [ 90.935695][ T5994] ? __pfx_tbf_init+0x10/0x10 [ 90.935735][ T5994] tbf_init+0x72/0x90 [ 90.935826][ T5994] qdisc_create+0x591/0x9e0 [ 90.935895][ T5994] tc_modify_qdisc+0xf2e/0x1420 [ 90.935992][ T5994] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 90.936027][ T5994] rtnetlink_rcv_msg+0x65a/0x6d0 [ 90.936107][ T5994] netlink_rcv_skb+0x123/0x220 [ 90.936197][ T5994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.936229][ T5994] rtnetlink_rcv+0x1c/0x30 [ 90.936253][ T5994] netlink_unicast+0x5c0/0x690 [ 90.936287][ T5994] netlink_sendmsg+0x58b/0x6b0 [ 90.936390][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.936413][ T5994] __sock_sendmsg+0x145/0x180 [ 90.936460][ T5994] ____sys_sendmsg+0x31e/0x4e0 [ 90.936499][ T5994] ___sys_sendmsg+0x17b/0x1d0 [ 90.936533][ T5994] __x64_sys_sendmsg+0xd4/0x160 [ 90.936559][ T5994] x64_sys_call+0x191e/0x3000 [ 90.936592][ T5994] do_syscall_64+0xd2/0x200 [ 90.936609][ T5994] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.936640][ T5994] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.936737][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.936757][ T5994] RIP: 0033:0x7ff31accf6c9 [ 90.936776][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.936836][ T5994] RSP: 002b:00007ff31972f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.936858][ T5994] RAX: ffffffffffffffda RBX: 00007ff31af25fa0 RCX: 00007ff31accf6c9 [ 90.936870][ T5994] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 90.936884][ T5994] RBP: 00007ff31972f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.936898][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.936912][ T5994] R13: 00007ff31af26038 R14: 00007ff31af25fa0 R15: 00007ffc6d5997b8 [ 90.936930][ T5994] [ 90.936952][ T5994] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.469511][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.732: corrupted inode contents [ 91.512432][ T5966] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.732: mark_inode_dirty error [ 91.529584][ T5966] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.732: Failed to acquire dquot type 0 [ 91.550193][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.732: corrupted inode contents [ 91.562566][ T5966] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.732: mark_inode_dirty error [ 91.574451][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.732: corrupted inode contents [ 91.587050][ T5966] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.732: mark_inode_dirty error [ 91.600578][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.732: corrupted inode contents [ 91.613026][ T5966] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 91.623204][ T5966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.732: corrupted inode contents [ 91.635482][ T5966] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.732: mark_inode_dirty error [ 91.646845][ T5966] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 91.650521][ T6003] bridge0: port 1(gretap0) entered blocking state [ 91.656446][ T5966] EXT4-fs (loop1): 1 truncate cleaned up [ 91.662250][ T6003] bridge0: port 1(gretap0) entered disabled state [ 91.668300][ T5966] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.697353][ T6008] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.711763][ T6003] gretap0: entered allmulticast mode [ 91.735130][ T6003] gretap0: entered promiscuous mode [ 91.751148][ T6003] bridge0: port 1(gretap0) entered blocking state [ 91.757732][ T6003] bridge0: port 1(gretap0) entered forwarding state [ 91.946974][ T6015] loop5: detected capacity change from 0 to 2048 [ 91.953966][ T6015] EXT4-fs: Ignoring removed bh option [ 92.279367][ T6019] hub 2-0:1.0: USB hub found [ 92.292123][ T6019] hub 2-0:1.0: 8 ports detected [ 92.473370][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 92.473386][ T29] audit: type=1326 audit(1762285332.151:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.503048][ T29] audit: type=1326 audit(1762285332.151:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.528716][ T29] audit: type=1326 audit(1762285332.211:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.552186][ T29] audit: type=1326 audit(1762285332.211:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.575601][ T29] audit: type=1326 audit(1762285332.211:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.655921][ T6027] 9pnet_fd: Insufficient options for proto=fd [ 92.671831][ T29] audit: type=1326 audit(1762285332.301:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.695123][ T29] audit: type=1326 audit(1762285332.301:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.718619][ T29] audit: type=1326 audit(1762285332.301:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.742008][ T29] audit: type=1326 audit(1762285332.301:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.765285][ T29] audit: type=1326 audit(1762285332.301:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31accf6c9 code=0x7ffc0000 [ 92.917598][ T6040] loop3: detected capacity change from 0 to 2048 [ 92.924447][ T6040] EXT4-fs: Ignoring removed bh option [ 93.095973][ T6030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.753'. [ 94.303722][ T6073] FAULT_INJECTION: forcing a failure. [ 94.303722][ T6073] name failslab, interval 1, probability 0, space 0, times 0 [ 94.316427][ T6073] CPU: 1 UID: 0 PID: 6073 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.316452][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.316465][ T6073] Call Trace: [ 94.316478][ T6073] [ 94.316488][ T6073] __dump_stack+0x1d/0x30 [ 94.316550][ T6073] dump_stack_lvl+0xe8/0x140 [ 94.316591][ T6073] dump_stack+0x15/0x1b [ 94.316613][ T6073] should_fail_ex+0x265/0x280 [ 94.316632][ T6073] ? io_drain_req+0x67/0x350 [ 94.316655][ T6073] should_failslab+0x8c/0xb0 [ 94.316766][ T6073] __kmalloc_cache_noprof+0x4c/0x4a0 [ 94.316795][ T6073] io_drain_req+0x67/0x350 [ 94.316817][ T6073] ? io_queue_sqe_fallback+0x12a/0x140 [ 94.316839][ T6073] io_queue_sqe_fallback+0x132/0x140 [ 94.316893][ T6073] io_submit_sqes+0xc2e/0x1060 [ 94.316950][ T6073] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 94.316984][ T6073] ? 0xffffffff81000000 [ 94.316996][ T6073] ? __rcu_read_unlock+0x4f/0x70 [ 94.317027][ T6073] ? get_pid_task+0x96/0xd0 [ 94.317093][ T6073] ? proc_fail_nth_write+0x13b/0x160 [ 94.317121][ T6073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.317179][ T6073] ? vfs_write+0x7e8/0x960 [ 94.317229][ T6073] ? __rcu_read_unlock+0x4f/0x70 [ 94.317255][ T6073] ? __fget_files+0x184/0x1c0 [ 94.317306][ T6073] ? fput+0x8f/0xc0 [ 94.317326][ T6073] __x64_sys_io_uring_enter+0x78/0x90 [ 94.317356][ T6073] x64_sys_call+0x2df0/0x3000 [ 94.317377][ T6073] do_syscall_64+0xd2/0x200 [ 94.317394][ T6073] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.317460][ T6073] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.317497][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.317522][ T6073] RIP: 0033:0x7f20c98ef6c9 [ 94.317551][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.317568][ T6073] RSP: 002b:00007f20c834f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 94.317587][ T6073] RAX: ffffffffffffffda RBX: 00007f20c9b45fa0 RCX: 00007f20c98ef6c9 [ 94.317676][ T6073] RDX: 0000000000003acd RSI: 0000000000005535 RDI: 0000000000000003 [ 94.317688][ T6073] RBP: 00007f20c834f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.317700][ T6073] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 94.317712][ T6073] R13: 00007f20c9b46038 R14: 00007f20c9b45fa0 R15: 00007fffd2c61328 [ 94.317733][ T6073] [ 94.869139][ T6086] loop1: detected capacity change from 0 to 2048 [ 94.876035][ T6086] EXT4-fs: Ignoring removed bh option [ 95.469423][ T6097] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.594048][ T6100] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.619301][ T6102] loop1: detected capacity change from 0 to 1764 [ 95.691849][ T6106] bridge0: port 3(gretap0) entered blocking state [ 95.698411][ T6106] bridge0: port 3(gretap0) entered disabled state [ 95.723952][ T6106] gretap0: entered allmulticast mode [ 95.729888][ T6106] gretap0: entered promiscuous mode [ 95.735660][ T6106] bridge0: port 3(gretap0) entered blocking state [ 95.742153][ T6106] bridge0: port 3(gretap0) entered forwarding state [ 95.757480][ T6112] loop5: detected capacity change from 0 to 512 [ 95.801319][ T6112] syz.5.778 (6112): attempted to duplicate a private mapping with mremap. This is not supported. [ 95.817826][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.827409][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.840829][ T6115] loop3: detected capacity change from 0 to 512 [ 95.859161][ T6115] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.776: EA inode hash validation failed [ 95.874194][ T6115] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.776: corrupted inode contents [ 95.886325][ T6115] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.776: mark_inode_dirty error [ 95.897850][ T6115] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.776: corrupted inode contents [ 95.910224][ T6115] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.776: mark_inode_dirty error [ 95.922273][ T6115] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.776: mark inode dirty (error -117) [ 95.934874][ T6115] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 95.944123][ T6115] EXT4-fs (loop3): 1 orphan inode deleted [ 95.950175][ T6115] EXT4-fs mount: 10 callbacks suppressed [ 95.950183][ T6115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.968688][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.370626][ T6130] loop5: detected capacity change from 0 to 2048 [ 96.382655][ T6130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.436326][ T5695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.726946][ T6137] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 96.804056][ T6139] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 96.948493][ T9] kernel read not supported for file /453/net/netstat (pid: 9 comm: kworker/0:0) [ 97.047036][ T6152] loop5: detected capacity change from 0 to 2048 [ 97.054428][ T6152] EXT4-fs: Ignoring removed bh option [ 97.143745][ T6152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.207904][ T6156] loop3: detected capacity change from 0 to 512 [ 97.270620][ T6156] EXT4-fs: Ignoring removed nobh option [ 97.339000][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.789: corrupted inode contents [ 97.427992][ T6156] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.789: mark_inode_dirty error [ 97.509474][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.789: corrupted inode contents [ 97.523891][ T6167] loop1: detected capacity change from 0 to 2048 [ 97.575881][ T6167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.608148][ T6156] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.789: mark_inode_dirty error [ 97.713468][ T6156] __quota_error: 77 callbacks suppressed [ 97.713487][ T6156] Quota error (device loop3): write_blk: dquota write failed [ 97.740775][ T6156] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 97.762042][ T6156] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.789: Failed to acquire dquot type 0 [ 97.774313][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.789: corrupted inode contents [ 97.789237][ T6156] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.789: mark_inode_dirty error [ 97.817233][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.789: corrupted inode contents [ 97.843628][ T6156] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.789: mark_inode_dirty error [ 97.857098][ T5695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.871829][ T29] audit: type=1326 audit(1762285337.461:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 97.895258][ T29] audit: type=1326 audit(1762285337.461:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 97.896196][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.789: corrupted inode contents [ 97.918590][ T29] audit: type=1326 audit(1762285337.461:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 97.953714][ T29] audit: type=1326 audit(1762285337.461:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 97.953928][ T29] audit: type=1326 audit(1762285337.461:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 97.953970][ T29] audit: type=1326 audit(1762285337.461:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 98.003596][ T6181] loop5: detected capacity change from 0 to 128 [ 98.023763][ T29] audit: type=1326 audit(1762285337.461:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 98.053277][ T29] audit: type=1326 audit(1762285337.461:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c98ef6c9 code=0x7ffc0000 [ 98.077192][ T6156] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 98.099451][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.789: corrupted inode contents [ 98.119418][ T6156] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.789: mark_inode_dirty error [ 98.121717][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.157129][ T6156] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 98.168251][ T6156] EXT4-fs (loop3): 1 truncate cleaned up [ 98.175313][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.201684][ T6156] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.262536][ T6189] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 98.403275][ T6181] syz.5.797: attempt to access beyond end of device [ 98.403275][ T6181] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 98.416739][ T6181] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 98.426457][ T6181] syz.5.797: attempt to access beyond end of device [ 98.426457][ T6181] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 98.439899][ T6181] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 98.443031][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.508209][ T6208] wireguard0: entered promiscuous mode [ 98.513751][ T6208] wireguard0: entered allmulticast mode [ 98.570773][ T6213] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.600759][ T6217] loop3: detected capacity change from 0 to 256 [ 98.626333][ T6220] 9pnet_fd: Insufficient options for proto=fd [ 98.634065][ T6215] netlink: 144 bytes leftover after parsing attributes in process `syz.0.812'. [ 98.659842][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 98.688299][ T6213] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.751885][ T6227] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 98.783201][ T6213] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.833016][ T6213] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.925262][ T4908] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.944937][ T6252] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 98.972389][ T4908] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.107314][ T4915] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.131060][ T4915] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.217822][ T6272] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 99.235471][ T6277] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 99.288240][ T6284] loop3: detected capacity change from 0 to 256 [ 99.480218][ T6303] loop5: detected capacity change from 0 to 128 [ 99.522648][ T6303] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.540333][ T6306] wireguard0: entered promiscuous mode [ 99.545915][ T6306] wireguard0: entered allmulticast mode [ 99.555049][ T6303] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.732059][ T6311] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.770419][ T4920] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.775211][ T6314] hub 2-0:1.0: USB hub found [ 99.785435][ T6314] hub 2-0:1.0: 8 ports detected [ 99.803357][ T6311] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.856752][ T6323] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 99.867282][ T6311] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.907637][ T6329] loop3: detected capacity change from 0 to 128 [ 99.935532][ T6311] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.952095][ T6329] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.038632][ T6329] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.165366][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.424107][ T6379] hub 2-0:1.0: USB hub found [ 100.432094][ T6379] hub 2-0:1.0: 8 ports detected [ 100.552556][ T6396] loop3: detected capacity change from 0 to 512 [ 100.563328][ T6396] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.861: inode has both inline data and extents flags [ 100.580760][ T6396] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.861: couldn't read orphan inode 15 (err -117) [ 100.603394][ T6396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.329401][ T6415] loop5: detected capacity change from 0 to 1764 [ 101.395445][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.564482][ T6434] netlink: 144 bytes leftover after parsing attributes in process `syz.3.876'. [ 101.590553][ T6432] loop5: detected capacity change from 0 to 2048 [ 101.597247][ T6432] EXT4-fs: Ignoring removed bh option [ 101.617478][ T6432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.643474][ T6438] hub 2-0:1.0: USB hub found [ 101.648140][ T6438] hub 2-0:1.0: 8 ports detected [ 101.844991][ T6450] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 101.853810][ T6445] mmap: syz.0.878 (6445) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.000105][ T6457] loop3: detected capacity change from 0 to 512 [ 102.010461][ T6457] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.883: EA inode hash validation failed [ 102.023965][ T6457] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.883: corrupted inode contents [ 102.035929][ T6457] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.883: mark_inode_dirty error [ 102.047456][ T6457] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.883: corrupted inode contents [ 102.059341][ T6457] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.883: mark_inode_dirty error [ 102.071844][ T6457] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.883: mark inode dirty (error -117) [ 102.084516][ T6457] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 102.093706][ T6457] EXT4-fs (loop3): 1 orphan inode deleted [ 102.099641][ T6457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.112594][ T6457] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.305254][ T5695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.448014][ T6470] loop5: detected capacity change from 0 to 128 [ 102.530806][ T6470] ================================================================== [ 102.538942][ T6470] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 102.547231][ T6470] [ 102.549568][ T6470] write to 0xffff88811a0f7d28 of 4 bytes by task 6471 on cpu 0: [ 102.557210][ T6470] writeback_single_inode+0x150/0x3f0 [ 102.562610][ T6470] sync_inode_metadata+0x5b/0x90 [ 102.567571][ T6470] __generic_file_fsync+0xf8/0x140 [ 102.572715][ T6470] fat_file_fsync+0x49/0x100 [ 102.577324][ T6470] vfs_fsync_range+0x10d/0x130 [ 102.582111][ T6470] generic_file_write_iter+0x1b8/0x2f0 [ 102.587592][ T6470] iter_file_splice_write+0x666/0xa60 [ 102.592975][ T6470] direct_splice_actor+0x156/0x2a0 [ 102.598107][ T6470] splice_direct_to_actor+0x312/0x680 [ 102.603505][ T6470] do_splice_direct+0xda/0x150 [ 102.608285][ T6470] do_sendfile+0x380/0x650 [ 102.612736][ T6470] __x64_sys_sendfile64+0x105/0x150 [ 102.617964][ T6470] x64_sys_call+0x2bb4/0x3000 [ 102.622663][ T6470] do_syscall_64+0xd2/0x200 [ 102.627186][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.633106][ T6470] [ 102.635439][ T6470] read to 0xffff88811a0f7d28 of 4 bytes by task 6470 on cpu 1: [ 102.643000][ T6470] __mark_inode_dirty+0x55/0x750 [ 102.647976][ T6470] fat_update_time+0x1ec/0x200 [ 102.652766][ T6470] touch_atime+0x148/0x340 [ 102.657223][ T6470] filemap_splice_read+0x6ba/0x740 [ 102.662358][ T6470] splice_direct_to_actor+0x26f/0x680 [ 102.667758][ T6470] do_splice_direct+0xda/0x150 [ 102.672548][ T6470] do_sendfile+0x380/0x650 [ 102.676994][ T6470] __x64_sys_sendfile64+0x105/0x150 [ 102.682209][ T6470] x64_sys_call+0x2bb4/0x3000 [ 102.686902][ T6470] do_syscall_64+0xd2/0x200 [ 102.691423][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.697325][ T6470] [ 102.699677][ T6470] value changed: 0x00000070 -> 0x00000002 [ 102.705402][ T6470] [ 102.707726][ T6470] Reported by Kernel Concurrency Sanitizer on: [ 102.713893][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.5.888 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.723540][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.733605][ T6470] ================================================================== [ 102.753376][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 102.753392][ T29] audit: type=1400 audit(1762285342.421:2565): avc: denied { bind } for pid=6472 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.778872][ T29] audit: type=1400 audit(1762285342.421:2566): avc: denied { setopt } for pid=6472 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.874601][ T6470] syz.5.888: attempt to access beyond end of device [ 102.874601][ T6470] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.887951][ T6470] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 102.897149][ T6470] syz.5.888: attempt to access beyond end of device [ 102.897149][ T6470] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.910528][ T6470] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 103.426009][ T4908] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.437059][ T4908] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.447606][ T4908] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.458640][ T4908] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0