last executing test programs: 13.024493519s ago: executing program 2 (id=1456): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x3ff}, &(0x7f00000001c0)=0x8) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) keyctl$unlink(0x9, r3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r6, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES8, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000008870f7c1c0433f52da954b24eb1e1200"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="605f17cb6ea7067f2d825427e9adbd51580d64f96dec468b63fddc39fdc7a58f40d105016f2cc3f00397c1cf5813afd972b4c6316b9f3ea22c1bb1a0a13e", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000110000070c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x5}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 12.938151571s ago: executing program 2 (id=1458): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, 0x0, 0x4000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0xf73dd09feade3241, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000e4}, 0x20000000) 12.895853032s ago: executing program 2 (id=1460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x840) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = epoll_create1(0x80000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r10, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000000)) 12.008657569s ago: executing program 2 (id=1466): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(0x0, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)={[], [{@uid_lt={'uid<', r1}}, {@measure}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_init1(0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) 11.833299682s ago: executing program 2 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fe00003, 0x0, 0x0, 0x0, 0x102}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11.733079725s ago: executing program 2 (id=1475): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x28, 0xe000}, 0x5}], 0x1, 0x0) 11.732576475s ago: executing program 32 (id=1475): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x28, 0xe000}, 0x5}], 0x1, 0x0) 4.854113327s ago: executing program 4 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x3, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x4, 0x0, 0x3, 0x18, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000300)=""/105, 0x41000, 0x69, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0x7cea, 0xd9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000500)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x5, 0x5, 0x2}, {0x0, 0x5, 0x2, 0x2}, {0x0, 0x5, 0xf, 0x3}, {0x4, 0x2, 0x10, 0x821ded79a12fe93a}, {0x2, 0x3, 0xe, 0xb}, {0x2, 0x5, 0x9, 0xb}], 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000006080003400000000314"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 4.821970377s ago: executing program 4 (id=1585): r0 = open(0x0, 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrlimit(0x9, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") unshare(0x2040400) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d2ea8c9f1c2ebc6fd6b82c495cd9b45da892c9236f0133ce7b4"], 0x4) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x80000000}, 0xcf, 0x4, 0x100, 0x4, 0x7, 'syz0\x00', "7149224c9d2bcd60c2c54c6ff93b8e38ff28fecb989dbcbcb774e990723811c9", "b26bd82b23e357455244c0086d6638ae3e6f1f89371664036e4ab63fd53e8662", [{0x7, 0x400, {0x2, 0x10}}, {0x9, 0x3, {0x2, 0x1000}}, {0x1, 0x5, {0x2, 0x7}}, {0x81, 0x8}, {0x400, 0xd82a, {0x1, 0x3}}, {0x0, 0x551, {0x0, 0xffff}}, {0xf, 0x7, {0x3, 0x4}}, {0x7fff, 0x8, {0x2, 0x4ba}}, {0x1, 0x86, {0x0, 0x59f}}, {0x9, 0x7, {0x3, 0x8d7}}, {0x4, 0x1, {0x0, 0x5}}, {0x276, 0x80, {0x3, 0x7}}, {0xd, 0x101, {0x3, 0xf79f}}, {0x200, 0x0, {0x1, 0x101}}, {0x8, 0x8000, {0x2, 0x5}}, {0x8, 0x7, {0x2, 0x7}}, {0x6, 0x0, {0x0, 0x2}}, {0x4, 0x6, {0x0, 0x5}}, {0x8000, 0x6, {0x3, 0x1}}, {0x4, 0x439, {0x1, 0x9}}, {0x1ff, 0x7f, {0x0, 0xffffff01}}, {0x7, 0xffff, {0x2, 0x400}}, {0xeb60, 0x3, {0x3, 0xad}}, {0x3, 0x67, {0x3, 0xdd}}, {0x7, 0x4, {0x2, 0x9059}}, {0x1, 0xdc92, {0x3, 0x7ff}}, {0x8, 0x380, {0x1, 0x1}}, {0x2, 0x6, {0x2, 0x492}}, {0x9, 0x0, {0x2, 0x10000}}, {0x9, 0xff, {0xa2402d029a4575bc, 0x1}}, {0x1, 0x2, {0x0, 0x10000}}, {0x8, 0x1, {0x2, 0x3}}, {0x2, 0x7, {0x1, 0xfffffede}}, {0x4, 0x2, {0x2, 0x8}}, {0x3, 0x3, {0x0, 0x5}}, {0x81, 0x81, {0x1, 0x7}}, {0x16d2, 0x218, {0x3, 0xe}}, {0x2, 0x5, {0x1, 0x8}}, {0x7f, 0x8afc, {0x1, 0x7fffffff}}, {0x7, 0x7, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x3, 0x6, 0x4, 0x0, 0x10, 'syz1\x00', "f83e54d784f59bdb0254124d20e340cfd9ad4cfc3f815a99ee6b9c6e66876f72", "559c85c0a77f3c60f0adaa527d7ef33763ff754115ceae272d0da3b6cb07b9bf", [{0x81, 0x7}, {0x7, 0x3, {0x1, 0x7}}, {0x50, 0x8, {0x0, 0x40c1}}, {0xc000, 0x8, {0x3, 0xfff}}, {0xf93b, 0xc5f7, {0x0, 0x8}}, {0x86, 0x7f, {0x2, 0x9}}, {0x42, 0x3, {0x0, 0xff}}, {0x2, 0x3, {0x1}}, {0x8, 0xf, {0x0, 0x9}}, {0x2, 0x8, {0x3, 0x200}}, {0x6, 0xa, {0x2, 0x9}}, {0xfff9, 0x4, {0x2, 0xffffffd9}}, {0xd, 0x7, {0x3, 0xf2eb}}, {0x2, 0x6, {0x0, 0x180000}}, {0x7, 0x2, {0x2, 0x1}}, {0x9, 0x200, {0x2, 0x7c2d}}, {0xd2, 0x8, {0x2, 0x7fff}}, {0x4, 0xf, {0x2, 0x1}}, {0x80, 0x3, {0x3}}, {0x3, 0x5, {0x0, 0x5}}, {0x7fff, 0x2, {0x3, 0x65c}}, {0x4, 0x6, {0x0, 0x3}}, {0x9e57, 0x8, {0x0, 0x1}}, {0x8, 0x5, {0x0, 0x200}}, {0x49, 0x7, {0x1, 0x600}}, {0x6, 0x5, {0x2, 0x6}}, {0x0, 0x5, {0x1}}, {0x6, 0x780, {0x3, 0x2}}, {0x4, 0x6, {0x3, 0xfffff6e4}}, {0x7fff, 0x1, {0x1, 0xed9}}, {0x100, 0xdd7a, {0x0, 0x9}}, {0x2, 0xc, {0x1, 0x4}}, {0x9, 0x0, {0x0, 0x2f6}}, {0xffff, 0xfff9, {0x1, 0x200}}, {0x8, 0x7, {0x3}}, {0x1, 0x7ff, {0x3, 0x2}}, {0x80, 0x101, {0x1}}, {0x1ff, 0x6, {0x3, 0x11}}, {0x4, 0x3, {0x0, 0x2}}, {0x8, 0x7ff, {0x1, 0xa}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x60088d4}, 0x40000) r5 = timerfd_create(0x8, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000180)) timerfd_settime(r5, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000090601080000000000000000070000000900020073797a31000000000500010007000000280007801800018014000240fe8000000000000000000000000000bb0c001b4000000000000000060a62b78355acb320b9eeafb56264ff9f5dee5aa5d056e6aaed55ab2f43c12b9d531cad738dff8130783fec9fe66ee0af83baeb7fb782531daf4e4acc5f11cb648edfc866430544d1f8d787d940512af9da1a02a9db285cb3e35926566bd966640916dfd2876571b59e950243182aef00fe0cf229"], 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4.723813739s ago: executing program 5 (id=1589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x840) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = epoll_create1(0x80000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r10, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000000)) 3.694937219s ago: executing program 1 (id=1593): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1) 3.62589702s ago: executing program 3 (id=1595): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954b", 0xca}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x400}, 0x100b28, 0x6, 0x3, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @remote, @initdev}, &(0x7f00000004c0)=0xc) bind$xdp(r2, &(0x7f0000000500)={0x2c, 0xa, r5, 0xa, r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.62570531s ago: executing program 1 (id=1596): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) 3.605052271s ago: executing program 1 (id=1597): socket(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x28, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x8]}, 0x8, 0x80000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x44000, 0x1a, 0x21}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xdf]}, 0x8, 0xc0000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000004cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="000000000400"/28, @ANYRES32=r2, @ANYBLOB="000000000200"/28, @ANYRES32=r3, @ANYBLOB="000000008100"/28, @ANYRES32=r4, @ANYBLOB="0000000002000000000000000000000000000000000000000000000093c999d5d2aae56544e0cf09effaba17e27e294c277af6f85de8", @ANYRES32=r5, @ANYBLOB='\x00'/28, @ANYRES32=r6, @ANYBLOB='\x00'/28, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r9, @ANYBLOB="00000000010100"/28]) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000300)="763e0377c75ae26298df15ea972b863d4a24ebf4a433259bedbd08a353bb8dfc6ade705b7d8aaf9b62", 0x29) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "bbfa8a7384b8fa4e", "47ca708aa9bcba2634cfbcefae022c90", "bff1894b", "38b7a23352c4ae59"}, 0x28) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @loopback, 0x8}, 0x1c) writev(r8, &(0x7f0000000880)=[{&(0x7f0000000540)="7c7ba77a0b799b07e91896bdb028a2db639d0471915ef83d3013a21bdd0d32", 0x1f}, {&(0x7f0000000580)="1974154a948fca43b2280c46bd257f9416f458d180808c300995f9b5c01ccd630632e97dbf879733d91b850970266654c7297d7a4a7a21b27b0f9838944b61449eda7d44cd152c6823e3cbdc16f96e8ac6d42b285fe73b75a99348991cd22e25b941a930ed7d4ce9f1c05e6ef38f4c858774a0f66a55d15b80217332572d1b0856d95331530085d753029dd4545ed33f01cc878b07e626d2920a22fa3399d4794860353ccde61435d6c12207b2caafc9788a9af1f14de12350c371beaadf78873a3d", 0xc2}, {&(0x7f0000000680)="39bdb21ad46fcfd62ec2791e73cf86838f293b679fd885964c00b4dff49a09901b39b54bf34a121419ac79e7e2fca327518fda43423e52e422dedfd2a7628ba63c2e63251d33fc190aee2bd0b9e1fbeff1b123fc17c1097e63624332c7be8c8a6a512a069bd59629c4a6e9726b4b8d6babf38182d1841edb4f984b4541ee29225da058d9c6056bf6c6c2", 0x8a}, {&(0x7f0000000740)="c05de1c1ef81f2a916ee21fc602e82c16c7f654244d57bb91ccc0dcddd97df12b369", 0x22}, {&(0x7f0000000780)="9f60b70487e43192c34de157028f4a6abbf3aba8b07c7c1910ad8afeee1e1108282a0f90993f33ce2ebc8b7b23ed364920e9f4cbbdbe658bf45cddacf778a0a1cf2f6135a7c0ac19ec0ea1d165627bf79edd77f8407b998e7bb3cb5029c3492b46fe98a34e088dd0f5cbe32128daf784aa3232f47d297e6eebbc7feb0695b894aaf2f953c988643f455afc4eaa7c1764033f3dc6ce5a3710acc2d10cf906aa11ae46f56e126076551698587dfb", 0xad}, {&(0x7f0000000840)="d73e87709ee021a7a0ffc845c24273a35af513fa0eb6a53f4d647de4e7", 0x1d}], 0x6) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000900)=0x0) timer_create(0x5, &(0x7f0000000940)={0x0, 0x1a, 0x4, @tid=r10}, &(0x7f0000000980)) recvmmsg(r9, &(0x7f00000049c0)=[{{&(0x7f00000009c0)=@can, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/193, 0xc1}], 0x1, &(0x7f0000000b80)=""/134, 0x86}, 0x2}, {{&(0x7f0000000c40)=@hci, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/227, 0xe3}], 0x1, &(0x7f0000000e00)=""/4096, 0x1000}, 0x800}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/235, 0xeb}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/3, 0x3}, {&(0x7f0000001f80)=""/219, 0xdb}, {&(0x7f0000002080)=""/172, 0xac}, {&(0x7f0000002140)=""/50, 0x32}, {&(0x7f0000002180)=""/144, 0x90}, {&(0x7f0000002240)=""/69, 0x45}, {&(0x7f00000022c0)=""/13, 0xd}], 0x9, &(0x7f00000023c0)=""/137, 0x89}, 0xa3}, {{&(0x7f0000002480)=@can, 0x80, &(0x7f0000003640)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/119, 0x77}, {&(0x7f0000003580)=""/169, 0xa9}], 0x3, &(0x7f0000003680)=""/162, 0xa2}, 0xc}, {{&(0x7f0000003740)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003980)=[{&(0x7f00000037c0)=""/204, 0xcc}, {&(0x7f00000038c0)=""/82, 0x52}, {&(0x7f0000003940)=""/15, 0xf}], 0x3, &(0x7f00000039c0)=""/4096, 0x1000}, 0x3}], 0x5, 0x40002041, &(0x7f0000004b00)={0x77359400}) quotactl$Q_GETQUOTA(0x3, &(0x7f0000004b40)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000004c40)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r14, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r14], 0xffe) 3.221987008s ago: executing program 1 (id=1599): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0xa4830880, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x100000, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r3 = dup(r2) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, 0x0) r4 = shmat(0xffffffffffffffff, &(0x7f0000869000/0x4000)=nil, 0x2000) shmdt(r4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x2, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x4800) 2.822936796s ago: executing program 0 (id=1601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) mount$nfs(&(0x7f0000000080)='GPL\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x840001, &(0x7f00000002c0)={[{'\xbb['}], [{@subj_user={'subj_user', 0x3d, '@-,('}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '#!@'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise_type}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.653424949s ago: executing program 3 (id=1602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 2.652944859s ago: executing program 3 (id=1603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r9 = dup(r8) r10 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x1b) 2.59180657s ago: executing program 5 (id=1604): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) 2.549932801s ago: executing program 4 (id=1605): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x1, 0xb, 0x7}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x8000}, &(0x7f0000000140)=0x8) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a3409"], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvfrom(r9, 0x0, 0xffffffffffffff03, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000340)={r11, 0x3}, 0x8) 2.461022452s ago: executing program 4 (id=1606): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa640) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xa8d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) close(r0) 2.374272604s ago: executing program 1 (id=1607): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x58) 2.373880405s ago: executing program 5 (id=1608): syz_read_part_table(0x5bd, &(0x7f0000000000)="$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") r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000005c0)={{0x1d, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x1, 'dh\x00', 0x4, 0xfffff71d, 0x51}, {@multicast1, 0x4e20, 0x3, 0x8, 0x6}}, 0x44) 2.226197777s ago: executing program 5 (id=1609): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x4, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) 2.225650177s ago: executing program 1 (id=1610): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0xdaf3}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYRES64=r5, @ANYRES16, @ANYRES16=r0, @ANYRES16=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0xa0000001}) recvmmsg(0xffffffffffffffff, &(0x7f0000008180)=[{{&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @remote, @rose, @remote, @default, @netrom]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/235, 0xeb}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0xffff7fff}, {{&(0x7f00000004c0)=@llc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/98, 0x62}], 0x1, &(0x7f00000006c0)=""/143, 0x8f}}, {{&(0x7f0000000780)=@rc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/225, 0xe1}, {&(0x7f0000000800)=""/8, 0x8}, {&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/178, 0xb2}, {&(0x7f0000001f40)=""/234, 0xea}, {&(0x7f0000002040)=""/99, 0x63}, {&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/126, 0x7e}], 0x9, &(0x7f0000002240)=""/147, 0x93}, 0x7fff}, {{&(0x7f0000002300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002380)=""/80, 0x50}, {&(0x7f0000002400)=""/24, 0x18}, {&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/21, 0x15}], 0x4, &(0x7f0000002540)=""/58, 0x3a}}, {{&(0x7f0000002580)=@caif, 0x80, &(0x7f0000002880)=[{&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000002600)=""/10, 0xa}, {&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/95, 0x5f}, {&(0x7f0000002740)=""/211, 0xd3}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000002840)=""/36, 0x24}], 0x8}, 0x791c}, {{&(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002980)=""/53, 0x35}], 0x1, &(0x7f0000006180)=""/4096, 0x1000}, 0x10}, {{&(0x7f0000002a00)=@alg, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002a80)=""/222, 0xde}, {&(0x7f0000002b80)=""/115, 0x73}, {&(0x7f0000002c00)=""/149, 0x95}], 0x3, &(0x7f0000002d00)=""/212, 0xd4}, 0x4}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000007180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/233, 0xe9}], 0x2}, 0x3}], 0x8, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000cc0)=ANY=[@ANYBLOB="757466383d302c757466383d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c757466383d312c73686f72746e616d653d6d69786564030000000000000073686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d6163726f6d616e2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c73686f72746e146d653d6d697865642c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c00"], 0x25, 0x351, &(0x7f0000000840)="$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") connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x4) 2.0694023s ago: executing program 5 (id=1611): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x400, &(0x7f0000000040)="3f623b28a10fcf1a4b3dba7f9aea57520fd4782fb33968", 0x17, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="1fa6eea3ee618b3955ef1993612f14818bc713a118488e4ccaa1e2dfdc5d2c21b770af467ae8e36c56433cb91959cbb59e94327fa07ebb22b2a746e85a003e6a4d8fb3e5abdbcd6e85c04714ac8213c9d9346b156415d312b02e4898d529103297f1db64ebc53461c36bd3c3324da9aa620b6ff2e02db88c8f38ecd49b1713568c84de4fdfa79a549c9d8f6082227a50a42c677f54c33e5d7683f784f67cbd42cc9357d8fced8fadf0c65aa33ac51bea000171f517ff598c766babd8ae554525767a894133577c8f9778b0cebb9bbb75330e825e0a1e571a4e0d0c8f581198b606c8595a698aa86b6793997e51fb") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800000, 0x0, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 1.941881633s ago: executing program 0 (id=1612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1395e64052942506deeace40af9b94c869d080f94828839da18e7d0c1ca279175d0b365ce5ac9159105cd5f3e5a29d5f6f53585f17cb1198ed3a98581a18ad339163d9873271bbef444c2882dc9ba87e8327e524b02bc8ad379a6f8c38b969ff7523419a2601eba7c09d30418f48e53841e909730d3cab88ef14c707617c07c4664b36c1a38a4dcc71496c24bd8749073fff3f88c60f2398f8950be031d9ef394f240bf17ec0f32a917d77cd0b63572f920b3b4deaff8dab50119b3bcd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0x89f8}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="170e000000000000000001000060050006df00000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000fefc00000000000000000000000000aa"], 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c850}, 0x38fda16a388193bf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) 1.897933043s ago: executing program 4 (id=1613): r0 = socket$inet6(0xa, 0x2, 0xfffe0000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000001100)={0x4, 0xabaa, 0xfffffffe, 0x401, 0x4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_NAME(0xf, &(0x7f0000001140)='{\xec!\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r6 = io_uring_setup(0x7, &(0x7f00000003c0)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f00000010c0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='cdev_update\x00', r7}, 0x18) r8 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r8, r8, 0x21) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.897310904s ago: executing program 0 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x3, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x4, 0x0, 0x3, 0x18, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000300)=""/105, 0x41000, 0x69, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0x7cea, 0xd9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000500)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x5, 0x5, 0x2}, {0x0, 0x5, 0x2, 0x2}, {0x0, 0x5, 0xf, 0x3}, {0x4, 0x2, 0x10, 0x821ded79a12fe93a}, {0x2, 0x3, 0xe, 0xb}, {0x2, 0x5, 0x9, 0xb}], 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000006080003400000000314"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.678644838s ago: executing program 0 (id=1615): r0 = open(0x0, 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrlimit(0x9, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") unshare(0x2040400) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="2d2ea8c9f1c2ebc6fd6b82c495cd9b45da892c9236f0133ce7b4"], 0x4) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x80000000}, 0xcf, 0x4, 0x100, 0x4, 0x7, 'syz0\x00', "7149224c9d2bcd60c2c54c6ff93b8e38ff28fecb989dbcbcb774e990723811c9", "b26bd82b23e357455244c0086d6638ae3e6f1f89371664036e4ab63fd53e8662", [{0x7, 0x400, {0x2, 0x10}}, {0x9, 0x3, {0x2, 0x1000}}, {0x1, 0x5, {0x2, 0x7}}, {0x81, 0x8}, {0x400, 0xd82a, {0x1, 0x3}}, {0x0, 0x551, {0x0, 0xffff}}, {0xf, 0x7, {0x3, 0x4}}, {0x7fff, 0x8, {0x2, 0x4ba}}, {0x1, 0x86, {0x0, 0x59f}}, {0x9, 0x7, {0x3, 0x8d7}}, {0x4, 0x1, {0x0, 0x5}}, {0x276, 0x80, {0x3, 0x7}}, {0xd, 0x101, {0x3, 0xf79f}}, {0x200, 0x0, {0x1, 0x101}}, {0x8, 0x8000, {0x2, 0x5}}, {0x8, 0x7, {0x2, 0x7}}, {0x6, 0x0, {0x0, 0x2}}, {0x4, 0x6, {0x0, 0x5}}, {0x8000, 0x6, {0x3, 0x1}}, {0x4, 0x439, {0x1, 0x9}}, {0x1ff, 0x7f, {0x0, 0xffffff01}}, {0x7, 0xffff, {0x2, 0x400}}, {0xeb60, 0x3, {0x3, 0xad}}, {0x3, 0x67, {0x3, 0xdd}}, {0x7, 0x4, {0x2, 0x9059}}, {0x1, 0xdc92, {0x3, 0x7ff}}, {0x8, 0x380, {0x1, 0x1}}, {0x2, 0x6, {0x2, 0x492}}, {0x9, 0x0, {0x2, 0x10000}}, {0x9, 0xff, {0xa2402d029a4575bc, 0x1}}, {0x1, 0x2, {0x0, 0x10000}}, {0x8, 0x1, {0x2, 0x3}}, {0x2, 0x7, {0x1, 0xfffffede}}, {0x4, 0x2, {0x2, 0x8}}, {0x3, 0x3, {0x0, 0x5}}, {0x81, 0x81, {0x1, 0x7}}, {0x16d2, 0x218, {0x3, 0xe}}, {0x2, 0x5, {0x1, 0x8}}, {0x7f, 0x8afc, {0x1, 0x7fffffff}}, {0x7, 0x7, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x3, 0x6, 0x4, 0x0, 0x10, 'syz1\x00', "f83e54d784f59bdb0254124d20e340cfd9ad4cfc3f815a99ee6b9c6e66876f72", "559c85c0a77f3c60f0adaa527d7ef33763ff754115ceae272d0da3b6cb07b9bf", [{0x81, 0x7}, {0x7, 0x3, {0x1, 0x7}}, {0x50, 0x8, {0x0, 0x40c1}}, {0xc000, 0x8, {0x3, 0xfff}}, {0xf93b, 0xc5f7, {0x0, 0x8}}, {0x86, 0x7f, {0x2, 0x9}}, {0x42, 0x3, {0x0, 0xff}}, {0x2, 0x3, {0x1}}, {0x8, 0xf, {0x0, 0x9}}, {0x2, 0x8, {0x3, 0x200}}, {0x6, 0xa, {0x2, 0x9}}, {0xfff9, 0x4, {0x2, 0xffffffd9}}, {0xd, 0x7, {0x3, 0xf2eb}}, {0x2, 0x6, {0x0, 0x180000}}, {0x7, 0x2, {0x2, 0x1}}, {0x9, 0x200, {0x2, 0x7c2d}}, {0xd2, 0x8, {0x2, 0x7fff}}, {0x4, 0xf, {0x2, 0x1}}, {0x80, 0x3, {0x3}}, {0x3, 0x5, {0x0, 0x5}}, {0x7fff, 0x2, {0x3, 0x65c}}, {0x4, 0x6, {0x0, 0x3}}, {0x9e57, 0x8, {0x0, 0x1}}, {0x8, 0x5, {0x0, 0x200}}, {0x49, 0x7, {0x1, 0x600}}, {0x6, 0x5, {0x2, 0x6}}, {0x0, 0x5, {0x1}}, {0x6, 0x780, {0x3, 0x2}}, {0x4, 0x6, {0x3, 0xfffff6e4}}, {0x7fff, 0x1, {0x1, 0xed9}}, {0x100, 0xdd7a, {0x0, 0x9}}, {0x2, 0xc, {0x1, 0x4}}, {0x9, 0x0, {0x0, 0x2f6}}, {0xffff, 0xfff9, {0x1, 0x200}}, {0x8, 0x7, {0x3}}, {0x1, 0x7ff, {0x3, 0x2}}, {0x80, 0x101, {0x1}}, {0x1ff, 0x6, {0x3, 0x11}}, {0x4, 0x3, {0x0, 0x2}}, {0x8, 0x7ff, {0x1, 0xa}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x60088d4}, 0x40000) r5 = timerfd_create(0x8, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000180)) timerfd_settime(r5, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000090601080000000000000000070000000900020073797a31000000000500010007000000280007801800018014000240fe8000000000000000000000000000bb0c001b4000000000000000060a62b78355acb320b9eeafb56264ff9f5dee5aa5d056e6aaed55ab2f43c12b9d531cad738dff8130783fec9fe66ee0af83baeb7fb782531daf4e4acc5f11cb648edfc866430544d1f8d787d940512af9da1a02a9db285cb3e35926566bd966640916dfd2876571b59e950243182aef00fe0cf229"], 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.57080383s ago: executing program 3 (id=1616): r0 = eventfd2(0xce77, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0xb}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0xc2f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0xd12, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x74) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000400)=r5}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xf, 0x20, 0x6, 0x4}, &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000640)={r8, 0x2}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x100, 0x70bd28, 0x25dfdbfb, 0x7, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) r10 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r10, 0x0, 0x0) semop(r10, &(0x7f0000000000)=[{0x2, 0x1ff, 0x1000}, {0x3, 0xfffb, 0x1000}, {0x2, 0x4, 0x3c00}, {0x3, 0xffff, 0x1000}, {0x3, 0xff, 0x800}, {0x3, 0x4, 0x1000}, {0x4, 0xff, 0x800}, {0x3, 0x401, 0x1000}], 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100c75, 0x7fff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 1.350085044s ago: executing program 3 (id=1617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x840) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = epoll_create1(0x80000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r10, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000000)) 653.842407ms ago: executing program 5 (id=1618): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 340.030433ms ago: executing program 3 (id=1619): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x10}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x40000400}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001200190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) utimes(0x0, &(0x7f0000000080)={{}, {0x0, 0xfffffffffffffffd}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 29.979769ms ago: executing program 0 (id=1621): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private0}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private0}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 0s ago: executing program 4 (id=1622): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x4, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) kernel console output (not intermixed with test programs): .2.1095'. [ 112.156934][ T6805] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1095'. [ 112.166172][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1095'. [ 112.202108][ T6812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6812 comm=syz.3.1105 [ 112.249439][ T6816] loop4: detected capacity change from 0 to 512 [ 112.256042][ T6816] EXT4-fs: Ignoring removed nobh option [ 112.293963][ T6816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1107: corrupted inode contents [ 112.326525][ T6816] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1107: mark_inode_dirty error [ 112.366556][ T6816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1107: corrupted inode contents [ 112.379621][ T6816] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1107: mark_inode_dirty error [ 112.419234][ T6816] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1107: Failed to acquire dquot type 0 [ 112.431651][ T6816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1107: corrupted inode contents [ 112.451849][ T6816] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1107: mark_inode_dirty error [ 112.464249][ T6816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1107: corrupted inode contents [ 112.477732][ T6816] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1107: mark_inode_dirty error [ 112.499702][ T6816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1107: corrupted inode contents [ 112.511929][ T6816] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 112.520809][ T6816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1107: corrupted inode contents [ 112.536989][ T6816] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1107: mark_inode_dirty error [ 112.551141][ T6816] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 112.561311][ T6836] netlink: 'syz.1.1111': attribute type 4 has an invalid length. [ 112.569133][ T6836] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1111'. [ 112.590489][ T6816] EXT4-fs (loop4): 1 truncate cleaned up [ 112.605735][ T6816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.619740][ T6816] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.635165][ T6841] loop2: detected capacity change from 0 to 1024 [ 112.643133][ T6841] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.654097][ T6841] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.664819][ T6816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.676980][ T6841] JBD2: no valid journal superblock found [ 112.682743][ T6841] EXT4-fs (loop2): Could not load journal inode [ 112.691865][ T6841] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 112.748269][ T6850] loop2: detected capacity change from 0 to 256 [ 112.831019][ T6864] FAULT_INJECTION: forcing a failure. [ 112.831019][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 112.843761][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.4.1121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.843797][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.843821][ T6864] Call Trace: [ 112.843827][ T6864] [ 112.843835][ T6864] __dump_stack+0x1d/0x30 [ 112.843855][ T6864] dump_stack_lvl+0xe8/0x140 [ 112.843874][ T6864] dump_stack+0x15/0x1b [ 112.843893][ T6864] should_fail_ex+0x265/0x280 [ 112.843977][ T6864] should_failslab+0x8c/0xb0 [ 112.844003][ T6864] __kmalloc_noprof+0xa5/0x3e0 [ 112.844036][ T6864] ? ip_options_get+0x52/0x350 [ 112.844076][ T6864] ip_options_get+0x52/0x350 [ 112.844191][ T6864] ? tcp_release_cb+0xf1/0x370 [ 112.844222][ T6864] do_ip_setsockopt+0x19d4/0x2240 [ 112.844247][ T6864] ip_setsockopt+0x58/0x110 [ 112.844303][ T6864] tcp_setsockopt+0x98/0xb0 [ 112.844415][ T6864] sock_common_setsockopt+0x69/0x80 [ 112.844459][ T6864] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.844609][ T6864] __sys_setsockopt+0x181/0x200 [ 112.844635][ T6864] __x64_sys_setsockopt+0x64/0x80 [ 112.844663][ T6864] x64_sys_call+0x20ec/0x2ff0 [ 112.844771][ T6864] do_syscall_64+0xd2/0x200 [ 112.844814][ T6864] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.844921][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.844951][ T6864] RIP: 0033:0x7f71432feec9 [ 112.844971][ T6864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.844994][ T6864] RSP: 002b:00007f7141d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.845015][ T6864] RAX: ffffffffffffffda RBX: 00007f7143555fa0 RCX: 00007f71432feec9 [ 112.845029][ T6864] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 112.845044][ T6864] RBP: 00007f7141d67090 R08: 0000000000000000 R09: 0000000000000000 [ 112.845060][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.845091][ T6864] R13: 00007f7143556038 R14: 00007f7143555fa0 R15: 00007ffd1f282458 [ 112.845117][ T6864] [ 113.208904][ T6874] loop3: detected capacity change from 0 to 1024 [ 113.224556][ T6874] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 113.235509][ T6874] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 113.268030][ T6874] JBD2: no valid journal superblock found [ 113.273811][ T6874] EXT4-fs (loop3): Could not load journal inode [ 113.322671][ T6874] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 113.337176][ T6879] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=6879 comm=syz.1.1126 [ 113.588593][ T6895] loop3: detected capacity change from 0 to 512 [ 113.622993][ T6895] EXT4-fs: Ignoring removed nobh option [ 113.646346][ T6897] FAULT_INJECTION: forcing a failure. [ 113.646346][ T6897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.659712][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.0.1134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.659744][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.659831][ T6897] Call Trace: [ 113.659839][ T6897] [ 113.659849][ T6897] __dump_stack+0x1d/0x30 [ 113.659875][ T6897] dump_stack_lvl+0xe8/0x140 [ 113.659894][ T6897] dump_stack+0x15/0x1b [ 113.659965][ T6897] should_fail_ex+0x265/0x280 [ 113.659999][ T6897] should_fail+0xb/0x20 [ 113.660022][ T6897] should_fail_usercopy+0x1a/0x20 [ 113.660053][ T6897] _copy_to_user+0x20/0xa0 [ 113.660298][ T6897] simple_read_from_buffer+0xb5/0x130 [ 113.660368][ T6897] proc_fail_nth_read+0x10e/0x150 [ 113.660406][ T6897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.660440][ T6897] vfs_read+0x1a5/0x770 [ 113.660464][ T6897] ? __rcu_read_unlock+0x4f/0x70 [ 113.660493][ T6897] ? __fget_files+0x184/0x1c0 [ 113.660525][ T6897] ksys_read+0xda/0x1a0 [ 113.660592][ T6897] __x64_sys_read+0x40/0x50 [ 113.660620][ T6897] x64_sys_call+0x27bc/0x2ff0 [ 113.660652][ T6897] do_syscall_64+0xd2/0x200 [ 113.660693][ T6897] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.660727][ T6897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.660825][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.660852][ T6897] RIP: 0033:0x7f2033f6d8dc [ 113.660867][ T6897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.660884][ T6897] RSP: 002b:00007f20329d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.660903][ T6897] RAX: ffffffffffffffda RBX: 00007f20341c5fa0 RCX: 00007f2033f6d8dc [ 113.660931][ T6897] RDX: 000000000000000f RSI: 00007f20329d70a0 RDI: 0000000000000007 [ 113.660944][ T6897] RBP: 00007f20329d7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.660956][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.660968][ T6897] R13: 00007f20341c6038 R14: 00007f20341c5fa0 R15: 00007ffc1a7b7438 [ 113.660993][ T6897] [ 113.917608][ T6895] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1131: corrupted inode contents [ 113.996069][ T6895] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1131: mark_inode_dirty error [ 114.056098][ T6895] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1131: corrupted inode contents [ 114.091503][ T6895] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1131: mark_inode_dirty error [ 114.135499][ T6895] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1131: Failed to acquire dquot type 0 [ 114.189595][ T6895] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1131: corrupted inode contents [ 114.271913][ T6917] FAULT_INJECTION: forcing a failure. [ 114.271913][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 114.276330][ T6895] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1131: mark_inode_dirty error [ 114.284593][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.4.1141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.284631][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.284648][ T6917] Call Trace: [ 114.284659][ T6917] [ 114.284669][ T6917] __dump_stack+0x1d/0x30 [ 114.284698][ T6917] dump_stack_lvl+0xe8/0x140 [ 114.284727][ T6917] dump_stack+0x15/0x1b [ 114.284750][ T6917] should_fail_ex+0x265/0x280 [ 114.284784][ T6917] should_failslab+0x8c/0xb0 [ 114.284818][ T6917] kmem_cache_alloc_noprof+0x50/0x310 [ 114.284858][ T6917] ? vm_area_dup+0x33/0x2c0 [ 114.284902][ T6917] vm_area_dup+0x33/0x2c0 [ 114.284943][ T6917] dup_mmap+0x501/0xf20 [ 114.284983][ T6917] copy_mm+0x11a/0x370 [ 114.285020][ T6917] copy_process+0xd08/0x2000 [ 114.285065][ T6917] kernel_clone+0x16c/0x5c0 [ 114.285106][ T6917] __x64_sys_clone+0xe6/0x120 [ 114.285153][ T6917] x64_sys_call+0x119c/0x2ff0 [ 114.285183][ T6917] do_syscall_64+0xd2/0x200 [ 114.285227][ T6917] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.285261][ T6917] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.285302][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.285339][ T6917] RIP: 0033:0x7f71432feec9 [ 114.285361][ T6917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.285386][ T6917] RSP: 002b:00007f7141d66fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 114.285412][ T6917] RAX: ffffffffffffffda RBX: 00007f7143555fa0 RCX: 00007f71432feec9 [ 114.285428][ T6917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 114.285445][ T6917] RBP: 00007f7141d67090 R08: 0000000000000000 R09: 0000000000000000 [ 114.285461][ T6917] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 114.285478][ T6917] R13: 00007f7143556038 R14: 00007f7143555fa0 R15: 00007ffd1f282458 [ 114.285505][ T6917] [ 114.491965][ T6895] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1131: corrupted inode contents [ 114.535563][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 114.577542][ T6923] netlink: 'syz.0.1143': attribute type 27 has an invalid length. [ 114.597473][ T6895] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1131: mark_inode_dirty error [ 114.686059][ T6895] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1131: corrupted inode contents [ 114.699743][ T6895] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 114.704733][ T6927] FAULT_INJECTION: forcing a failure. [ 114.704733][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 114.713168][ T6895] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1131: corrupted inode contents [ 114.720945][ T6927] CPU: 1 UID: 0 PID: 6927 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.720976][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.721049][ T6927] Call Trace: [ 114.721056][ T6927] [ 114.721119][ T6927] __dump_stack+0x1d/0x30 [ 114.721150][ T6927] dump_stack_lvl+0xe8/0x140 [ 114.721311][ T6927] dump_stack+0x15/0x1b [ 114.721333][ T6927] should_fail_ex+0x265/0x280 [ 114.721367][ T6927] should_failslab+0x8c/0xb0 [ 114.721403][ T6927] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 114.721554][ T6927] ? sidtab_sid2str_get+0xa0/0x130 [ 114.721588][ T6927] kmemdup_noprof+0x2b/0x70 [ 114.721625][ T6927] sidtab_sid2str_get+0xa0/0x130 [ 114.721714][ T6927] security_sid_to_context_core+0x1eb/0x2e0 [ 114.721752][ T6927] security_sid_to_context+0x27/0x40 [ 114.721862][ T6927] selinux_lsmprop_to_secctx+0x67/0xf0 [ 114.721895][ T6927] security_lsmprop_to_secctx+0x43/0x80 [ 114.721935][ T6927] audit_log_task_context+0x77/0x190 [ 114.722007][ T6927] audit_log_task+0xf4/0x250 [ 114.722057][ T6927] audit_seccomp+0x61/0x100 [ 114.722092][ T6927] ? __seccomp_filter+0x68c/0x10d0 [ 114.722129][ T6927] __seccomp_filter+0x69d/0x10d0 [ 114.722160][ T6927] ? free_msg+0x64/0x70 [ 114.722183][ T6927] ? __pfx_do_msg_fill+0x10/0x10 [ 114.722212][ T6927] ? do_msgrcv+0x998/0xa00 [ 114.722240][ T6927] ? __pfx_do_msg_fill+0x10/0x10 [ 114.722279][ T6927] __secure_computing+0x82/0x150 [ 114.722308][ T6927] syscall_trace_enter+0xcf/0x1e0 [ 114.722375][ T6927] do_syscall_64+0xac/0x200 [ 114.722420][ T6927] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.722482][ T6927] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.722525][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.722556][ T6927] RIP: 0033:0x7fc4df9cd8dc [ 114.722580][ T6927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.722650][ T6927] RSP: 002b:00007fc4de437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.722676][ T6927] RAX: ffffffffffffffda RBX: 00007fc4dfc25fa0 RCX: 00007fc4df9cd8dc [ 114.722694][ T6927] RDX: 000000000000000f RSI: 00007fc4de4370a0 RDI: 0000000000000007 [ 114.722709][ T6927] RBP: 00007fc4de437090 R08: 0000000000000000 R09: 0000000000000000 [ 114.722726][ T6927] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 114.722754][ T6927] R13: 00007fc4dfc26038 R14: 00007fc4dfc25fa0 R15: 00007ffdeeff84a8 [ 114.722780][ T6927] [ 114.984074][ T6895] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1131: mark_inode_dirty error [ 114.995808][ T6895] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 115.006312][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.013627][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.022707][ T6895] EXT4-fs (loop3): 1 truncate cleaned up [ 115.031719][ T6895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.081020][ T6895] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.113906][ T6895] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.159444][ T6923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.170354][ T6923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.214277][ T6923] veth0_vlan: left allmulticast mode [ 115.257773][ T6923] veth3: left allmulticast mode [ 115.271452][ T6944] loop2: detected capacity change from 0 to 1024 [ 115.288988][ T6944] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.299982][ T6944] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.331654][ T6944] JBD2: no valid journal superblock found [ 115.337519][ T6944] EXT4-fs (loop2): Could not load journal inode [ 115.574556][ T6962] loop0: detected capacity change from 0 to 1024 [ 115.583794][ T6963] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1159'. [ 115.605708][ T6963] loop4: detected capacity change from 0 to 164 [ 115.618017][ T6963] Unable to read rock-ridge attributes [ 115.762036][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.827226][ T6963] veth0: entered promiscuous mode [ 115.832441][ T6944] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 115.870998][ T6961] veth0: left promiscuous mode [ 115.994984][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.995145][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.995191][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.100910][ T6971] __nla_validate_parse: 1 callbacks suppressed [ 116.100930][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'. [ 116.134054][ T6986] FAULT_INJECTION: forcing a failure. [ 116.134054][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 116.146789][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.1.1168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.146820][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.146833][ T6986] Call Trace: [ 116.146841][ T6986] [ 116.146850][ T6986] __dump_stack+0x1d/0x30 [ 116.146875][ T6986] dump_stack_lvl+0xe8/0x140 [ 116.146956][ T6986] dump_stack+0x15/0x1b [ 116.146977][ T6986] should_fail_ex+0x265/0x280 [ 116.147075][ T6986] should_failslab+0x8c/0xb0 [ 116.147135][ T6986] kmem_cache_alloc_noprof+0x50/0x310 [ 116.147189][ T6986] ? skb_clone+0x151/0x1f0 [ 116.147225][ T6986] skb_clone+0x151/0x1f0 [ 116.147292][ T6986] __netlink_deliver_tap+0x2c9/0x500 [ 116.147331][ T6986] netlink_unicast+0x66b/0x690 [ 116.147409][ T6986] netlink_sendmsg+0x58b/0x6b0 [ 116.147490][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.147601][ T6986] __sock_sendmsg+0x142/0x180 [ 116.147636][ T6986] ____sys_sendmsg+0x31e/0x4e0 [ 116.147665][ T6986] ___sys_sendmsg+0x17b/0x1d0 [ 116.147768][ T6986] __x64_sys_sendmsg+0xd4/0x160 [ 116.147809][ T6986] x64_sys_call+0x191e/0x2ff0 [ 116.147930][ T6986] do_syscall_64+0xd2/0x200 [ 116.147963][ T6986] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.148006][ T6986] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.148044][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.148104][ T6986] RIP: 0033:0x7fc4df9ceec9 [ 116.148204][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.148227][ T6986] RSP: 002b:00007fc4de437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.148252][ T6986] RAX: ffffffffffffffda RBX: 00007fc4dfc25fa0 RCX: 00007fc4df9ceec9 [ 116.148267][ T6986] RDX: 0000000000048084 RSI: 0000200000000440 RDI: 0000000000000003 [ 116.148282][ T6986] RBP: 00007fc4de437090 R08: 0000000000000000 R09: 0000000000000000 [ 116.148297][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.148311][ T6986] R13: 00007fc4dfc26038 R14: 00007fc4dfc25fa0 R15: 00007ffdeeff84a8 [ 116.148377][ T6986] [ 116.457223][ T6996] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 116.487408][ T7000] loop0: detected capacity change from 0 to 1024 [ 116.494333][ T7000] EXT4-fs: Ignoring removed bh option [ 116.508676][ T7000] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.528930][ T7000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.545164][ T7000] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1173: bg 0: block 248: padding at end of block bitmap is not set [ 116.569802][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 116.569820][ T29] audit: type=1400 audit(2000000071.324:9499): avc: denied { map } for pid=7002 comm="syz.1.1174" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.601000][ T7003] vhci_hcd: invalid port number 96 [ 116.606179][ T7003] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 116.647236][ T7000] EXT4-fs (loop0): Remounting filesystem read-only [ 116.707937][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.895987][ T29] audit: type=1326 audit(2000000071.594:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 116.919795][ T29] audit: type=1326 audit(2000000071.594:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 116.943356][ T29] audit: type=1400 audit(2000000071.594:9502): avc: denied { getattr } for pid=7020 comm="syz.3.1182" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.966204][ T29] audit: type=1326 audit(2000000071.594:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 116.989713][ T29] audit: type=1326 audit(2000000071.594:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 117.013331][ T29] audit: type=1326 audit(2000000071.594:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 117.036787][ T29] audit: type=1400 audit(2000000071.604:9506): avc: denied { write } for pid=7018 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.056144][ T29] audit: type=1326 audit(2000000071.604:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 117.079616][ T29] audit: type=1326 audit(2000000071.604:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3d70eec9 code=0x7ffc0000 [ 117.313489][ T7033] loop3: detected capacity change from 0 to 2048 [ 117.348717][ T7033] Alternate GPT is invalid, using primary GPT. [ 117.355109][ T7033] loop3: p2 p3 p7 [ 117.364506][ T7033] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 117.365172][ T7042] loop4: detected capacity change from 0 to 1764 [ 117.370171][ T7033] hsr_slave_0: left promiscuous mode [ 117.391931][ T7042] netlink: 'syz.4.1184': attribute type 4 has an invalid length. [ 117.399852][ T7042] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1184'. [ 117.411973][ T7033] hsr_slave_1: left promiscuous mode [ 117.584501][ T7071] loop0: detected capacity change from 0 to 512 [ 117.600870][ T7071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.617473][ T7071] ext4 filesystem being mounted at /229/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.643893][ T7071] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.1190: corrupted inode contents [ 117.666225][ T7071] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.1190: mark_inode_dirty error [ 117.678425][ T7071] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.1190: corrupted inode contents [ 117.691441][ T7071] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1190: mark_inode_dirty error [ 117.703237][ T7071] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1190: Failed to acquire dquot type 1 [ 117.807375][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1193'. [ 118.130935][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.202068][ T7098] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 118.400538][ T7103] 9pnet_fd: Insufficient options for proto=fd [ 118.491676][ T7109] loop0: detected capacity change from 0 to 128 [ 118.536686][ T7109] EXT4-fs: Ignoring removed nobh option [ 118.560548][ T7109] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.598440][ T7109] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.626403][ T7109] FAULT_INJECTION: forcing a failure. [ 118.626403][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.639680][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.1202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.639792][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.639805][ T7109] Call Trace: [ 118.639811][ T7109] [ 118.639831][ T7109] __dump_stack+0x1d/0x30 [ 118.639856][ T7109] dump_stack_lvl+0xe8/0x140 [ 118.639880][ T7109] dump_stack+0x15/0x1b [ 118.639900][ T7109] should_fail_ex+0x265/0x280 [ 118.639929][ T7109] should_fail+0xb/0x20 [ 118.639980][ T7109] should_fail_usercopy+0x1a/0x20 [ 118.640012][ T7109] _copy_from_user+0x1c/0xb0 [ 118.640118][ T7109] vmemdup_user+0x59/0xd0 [ 118.640150][ T7109] path_setxattrat+0x1b6/0x310 [ 118.640221][ T7109] __x64_sys_lsetxattr+0x71/0x90 [ 118.640247][ T7109] x64_sys_call+0x2877/0x2ff0 [ 118.640268][ T7109] do_syscall_64+0xd2/0x200 [ 118.640306][ T7109] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.640338][ T7109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 118.640371][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.640550][ T7109] RIP: 0033:0x7f2033f6eec9 [ 118.640564][ T7109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.640582][ T7109] RSP: 002b:00007f20329d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 118.640600][ T7109] RAX: ffffffffffffffda RBX: 00007f20341c5fa0 RCX: 00007f2033f6eec9 [ 118.640614][ T7109] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 00002000000001c0 [ 118.640629][ T7109] RBP: 00007f20329d7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.640664][ T7109] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 118.640680][ T7109] R13: 00007f20341c6038 R14: 00007f20341c5fa0 R15: 00007ffc1a7b7438 [ 118.640731][ T7109] [ 118.840180][ T7089] syz.3.1193 (7089) used greatest stack depth: 7120 bytes left [ 118.872237][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.897544][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 118.919143][ T7115] loop3: detected capacity change from 0 to 512 [ 118.925605][ T7115] EXT4-fs: Ignoring removed nobh option [ 118.981693][ T7119] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.045651][ T7130] loop4: detected capacity change from 0 to 512 [ 119.052593][ T7130] EXT4-fs: dax option not supported [ 119.096304][ T7129] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 119.104132][ T7129] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1207'. [ 119.115921][ T7115] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1204: corrupted inode contents [ 119.129448][ T7115] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1204: mark_inode_dirty error [ 119.141516][ T7115] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1204: corrupted inode contents [ 119.155484][ T7115] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1204: mark_inode_dirty error [ 119.171042][ T7115] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1204: Failed to acquire dquot type 0 [ 119.184222][ T7115] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1204: corrupted inode contents [ 119.199986][ T7115] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1204: mark_inode_dirty error [ 119.234803][ T7115] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1204: corrupted inode contents [ 119.247071][ T7115] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1204: mark_inode_dirty error [ 119.259441][ T7115] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1204: corrupted inode contents [ 119.275609][ T7115] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 119.284590][ T7115] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1204: corrupted inode contents [ 119.298024][ T7115] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1204: mark_inode_dirty error [ 119.310060][ T7115] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 119.325392][ T7115] EXT4-fs (loop3): 1 truncate cleaned up [ 119.334738][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.361511][ T7144] FAULT_INJECTION: forcing a failure. [ 119.361511][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.363980][ T7142] loop4: detected capacity change from 0 to 164 [ 119.374737][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.0.1213 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.374835][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.374854][ T7144] Call Trace: [ 119.374863][ T7144] [ 119.374873][ T7144] __dump_stack+0x1d/0x30 [ 119.374913][ T7144] dump_stack_lvl+0xe8/0x140 [ 119.374940][ T7144] dump_stack+0x15/0x1b [ 119.375024][ T7144] should_fail_ex+0x265/0x280 [ 119.375057][ T7144] should_fail+0xb/0x20 [ 119.375087][ T7144] should_fail_usercopy+0x1a/0x20 [ 119.375166][ T7144] _copy_to_user+0x20/0xa0 [ 119.375211][ T7144] simple_read_from_buffer+0xb5/0x130 [ 119.375245][ T7144] proc_fail_nth_read+0x10e/0x150 [ 119.375283][ T7144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.375367][ T7144] vfs_read+0x1a5/0x770 [ 119.375396][ T7144] ? __rcu_read_unlock+0x4f/0x70 [ 119.375431][ T7144] ? __fget_files+0x184/0x1c0 [ 119.375470][ T7144] ksys_read+0xda/0x1a0 [ 119.375522][ T7144] __x64_sys_read+0x40/0x50 [ 119.375552][ T7144] x64_sys_call+0x27bc/0x2ff0 [ 119.375583][ T7144] do_syscall_64+0xd2/0x200 [ 119.375635][ T7144] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.375741][ T7144] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.375783][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.375882][ T7144] RIP: 0033:0x7f2033f6d8dc [ 119.375907][ T7144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.375933][ T7144] RSP: 002b:00007f20329d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.375963][ T7144] RAX: ffffffffffffffda RBX: 00007f20341c5fa0 RCX: 00007f2033f6d8dc [ 119.375980][ T7144] RDX: 000000000000000f RSI: 00007f20329d70a0 RDI: 0000000000000007 [ 119.375998][ T7144] RBP: 00007f20329d7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.376015][ T7144] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 119.376076][ T7144] R13: 00007f20341c6038 R14: 00007f20341c5fa0 R15: 00007ffc1a7b7438 [ 119.376104][ T7144] [ 119.583357][ T7115] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.595484][ T7142] ISOFS: unable to read i-node block [ 119.600872][ T7142] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 119.614537][ T7115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.865196][ T7159] loop3: detected capacity change from 0 to 1024 [ 119.920680][ T7159] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.931799][ T7159] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.091517][ T7159] JBD2: no valid journal superblock found [ 120.097327][ T7159] EXT4-fs (loop3): Could not load journal inode [ 120.120181][ T7163] loop0: detected capacity change from 0 to 1024 [ 120.168156][ T7163] EXT4-fs: dax option not supported [ 120.198826][ T7159] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 120.238142][ T7163] loop0: detected capacity change from 0 to 512 [ 120.281540][ T7163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.336818][ T7163] EXT4-fs (loop0): 1 truncate cleaned up [ 120.342993][ T7163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.410586][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1218'. [ 120.419740][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.436017][ T150] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.446399][ T150] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.464153][ T7184] random: crng reseeded on system resumption [ 120.477597][ T150] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.637397][ T7191] SELinux: Context system_u:object is not valid (left unmapped). [ 120.694967][ T7193] loop4: detected capacity change from 0 to 1764 [ 120.703611][ T7193] netlink: 'syz.4.1228': attribute type 4 has an invalid length. [ 120.711548][ T7193] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1228'. [ 120.763434][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1231'. [ 120.783917][ T7197] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 121.009338][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.411883][ T7220] loop4: detected capacity change from 0 to 128 [ 121.421371][ T7220] vfat filesystem being mounted at /255/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 121.434444][ T7220] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 121.442450][ T7220] FAT-fs (loop4): Filesystem has been set read-only [ 121.450815][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.450815][ T7220] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 121.536316][ T7220] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 121.544310][ T7220] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 121.565864][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.565864][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.605975][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.605975][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.621675][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.621675][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.635215][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.635215][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.650725][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.650725][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.668038][ T7229] loop3: detected capacity change from 0 to 512 [ 121.678816][ T7229] EXT4-fs: Ignoring removed nobh option [ 121.685227][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.685227][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.718968][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.718968][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.744902][ T7229] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1242: corrupted inode contents [ 121.761060][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.761060][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.782377][ T7229] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1242: mark_inode_dirty error [ 121.813605][ T7220] syz.4.1238: attempt to access beyond end of device [ 121.813605][ T7220] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.835064][ T7229] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1242: corrupted inode contents [ 121.878673][ T7229] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1242: mark_inode_dirty error [ 121.915295][ T7229] __quota_error: 194 callbacks suppressed [ 121.915313][ T7229] Quota error (device loop3): write_blk: dquota write failed [ 121.963135][ T7229] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 121.976632][ T7241] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 121.989235][ T29] audit: type=1400 audit(6000000222.731:9696): avc: denied { relabelfrom } for pid=7240 comm="syz.2.1247" name="NETLINK" dev="sockfs" ino=16255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 122.013548][ T29] audit: type=1400 audit(6000000222.741:9697): avc: denied { relabelto } for pid=7240 comm="syz.2.1247" name="NETLINK" dev="sockfs" ino=16255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 122.045595][ T7243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7243 comm=syz.0.1248 [ 122.060254][ T7243] 9pnet: p9_errstr2errno: server reported unknown error [ 122.109815][ T29] audit: type=1400 audit(6000000222.861:9698): avc: denied { bind } for pid=7242 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.129342][ T29] audit: type=1400 audit(6000000222.861:9699): avc: denied { name_bind } for pid=7242 comm="syz.0.1248" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 122.151462][ T29] audit: type=1400 audit(6000000222.861:9700): avc: denied { node_bind } for pid=7242 comm="syz.0.1248" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 122.195855][ T7229] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1242: Failed to acquire dquot type 0 [ 122.229474][ T7229] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1242: corrupted inode contents [ 122.316761][ T7229] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1242: mark_inode_dirty error [ 122.342239][ T7229] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1242: corrupted inode contents [ 122.374218][ T29] audit: type=1326 audit(6000000223.121:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71432feec9 code=0x7ffc0000 [ 122.397794][ T29] audit: type=1326 audit(6000000223.121:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71432feec9 code=0x7ffc0000 [ 122.421558][ T29] audit: type=1326 audit(6000000223.121:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f71432feec9 code=0x7ffc0000 [ 122.528032][ T7229] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1242: mark_inode_dirty error [ 122.563039][ T7229] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1242: corrupted inode contents [ 122.576461][ T7229] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 122.595822][ T7229] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1242: corrupted inode contents [ 122.635866][ T7229] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1242: mark_inode_dirty error [ 122.654824][ T7229] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 122.667686][ T7229] EXT4-fs (loop3): 1 truncate cleaned up [ 122.675135][ T7229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.689438][ T7229] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.701151][ T7229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.876604][ T7258] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 122.888249][ T7258] FAULT_INJECTION: forcing a failure. [ 122.888249][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 122.901620][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.0.1251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.901701][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.901718][ T7258] Call Trace: [ 122.901724][ T7258] [ 122.901750][ T7258] __dump_stack+0x1d/0x30 [ 122.901776][ T7258] dump_stack_lvl+0xe8/0x140 [ 122.901801][ T7258] dump_stack+0x15/0x1b [ 122.901862][ T7258] should_fail_ex+0x265/0x280 [ 122.901982][ T7258] should_failslab+0x8c/0xb0 [ 122.902013][ T7258] __kmalloc_noprof+0xa5/0x3e0 [ 122.902052][ T7258] ? fib_create_info+0xbb1/0x1980 [ 122.902153][ T7258] fib_create_info+0xbb1/0x1980 [ 122.902185][ T7258] fib_table_insert+0x60/0xeb0 [ 122.902258][ T7258] ? fib_trie_table+0xd0/0xf0 [ 122.902290][ T7258] ? fib_new_table+0x1ac/0x1c0 [ 122.902330][ T7258] inet_rtm_newroute+0xab/0x140 [ 122.902359][ T7258] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 122.902389][ T7258] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 122.902474][ T7258] ? avc_has_perm_noaudit+0x1b1/0x200 [ 122.902511][ T7258] netlink_rcv_skb+0x123/0x220 [ 122.902550][ T7258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.902664][ T7258] rtnetlink_rcv+0x1c/0x30 [ 122.902693][ T7258] netlink_unicast+0x5bd/0x690 [ 122.902720][ T7258] netlink_sendmsg+0x58b/0x6b0 [ 122.902829][ T7258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.902864][ T7258] __sock_sendmsg+0x142/0x180 [ 122.902904][ T7258] ____sys_sendmsg+0x31e/0x4e0 [ 122.902976][ T7258] ___sys_sendmsg+0x17b/0x1d0 [ 122.903026][ T7258] __x64_sys_sendmsg+0xd4/0x160 [ 122.903083][ T7258] x64_sys_call+0x191e/0x2ff0 [ 122.903108][ T7258] do_syscall_64+0xd2/0x200 [ 122.903199][ T7258] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.903228][ T7258] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.903267][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.903324][ T7258] RIP: 0033:0x7f2033f6eec9 [ 122.903340][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.903422][ T7258] RSP: 002b:00007f20329d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.903445][ T7258] RAX: ffffffffffffffda RBX: 00007f20341c5fa0 RCX: 00007f2033f6eec9 [ 122.903461][ T7258] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 122.903476][ T7258] RBP: 00007f20329d7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.903503][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.903515][ T7258] R13: 00007f20341c6038 R14: 00007f20341c5fa0 R15: 00007ffc1a7b7438 [ 122.903540][ T7258] [ 123.282826][ T7264] loop2: detected capacity change from 0 to 512 [ 123.314201][ T7264] msdos filesystem being mounted at /270/file0/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 123.496258][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 123.506008][ T7280] loop3: detected capacity change from 0 to 512 [ 123.519935][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 123.540238][ T7280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.540441][ T7280] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.785547][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.173448][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'. [ 124.215960][ T7316] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 124.342264][ T7322] loop4: detected capacity change from 0 to 2048 [ 124.358321][ T7322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.456779][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.810113][ T7338] loop4: detected capacity change from 0 to 1764 [ 124.822593][ T7338] netlink: 'syz.4.1276': attribute type 4 has an invalid length. [ 124.830509][ T7338] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1276'. [ 125.236365][ T7351] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1283'. [ 125.298315][ T7354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.308795][ T7354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.161615][ T7377] FAULT_INJECTION: forcing a failure. [ 126.161615][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.174921][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.1.1290 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.174999][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.175014][ T7377] Call Trace: [ 126.175022][ T7377] [ 126.175030][ T7377] __dump_stack+0x1d/0x30 [ 126.175052][ T7377] dump_stack_lvl+0xe8/0x140 [ 126.175072][ T7377] dump_stack+0x15/0x1b [ 126.175100][ T7377] should_fail_ex+0x265/0x280 [ 126.175132][ T7377] should_fail+0xb/0x20 [ 126.175164][ T7377] should_fail_usercopy+0x1a/0x20 [ 126.175195][ T7377] _copy_to_user+0x20/0xa0 [ 126.175232][ T7377] simple_read_from_buffer+0xb5/0x130 [ 126.175329][ T7377] proc_fail_nth_read+0x10e/0x150 [ 126.175360][ T7377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.175395][ T7377] vfs_read+0x1a5/0x770 [ 126.175468][ T7377] ? __rcu_read_unlock+0x4f/0x70 [ 126.175489][ T7377] ? __fget_files+0x184/0x1c0 [ 126.175522][ T7377] ? finish_task_switch+0xad/0x2b0 [ 126.175549][ T7377] ksys_read+0xda/0x1a0 [ 126.175572][ T7377] __x64_sys_read+0x40/0x50 [ 126.175648][ T7377] x64_sys_call+0x27bc/0x2ff0 [ 126.175676][ T7377] do_syscall_64+0xd2/0x200 [ 126.175710][ T7377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.175769][ T7377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.175837][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.175938][ T7377] RIP: 0033:0x7fc4df9cd8dc [ 126.175958][ T7377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.175980][ T7377] RSP: 002b:00007fc4de437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.176004][ T7377] RAX: ffffffffffffffda RBX: 00007fc4dfc25fa0 RCX: 00007fc4df9cd8dc [ 126.176020][ T7377] RDX: 000000000000000f RSI: 00007fc4de4370a0 RDI: 0000000000000006 [ 126.176091][ T7377] RBP: 00007fc4de437090 R08: 0000000000000000 R09: 0000000000000000 [ 126.176103][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.176115][ T7377] R13: 00007fc4dfc26038 R14: 00007fc4dfc25fa0 R15: 00007ffdeeff84a8 [ 126.176135][ T7377] [ 126.483135][ T7385] loop0: detected capacity change from 0 to 512 [ 126.503408][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 126.524681][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 126.545098][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 126.566737][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 126.610181][ T7385] loop0: detected capacity change from 0 to 512 [ 126.628681][ T7385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.644192][ T7385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1294: bg 0: block 248: padding at end of block bitmap is not set [ 126.675721][ T7385] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1294: Failed to acquire dquot type 1 [ 126.768919][ T7385] EXT4-fs (loop0): 1 truncate cleaned up [ 126.805234][ T7385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.919545][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 126.928564][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 126.928581][ T29] audit: type=1400 audit(6000000227.661:9784): avc: denied { connect } for pid=7405 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.954187][ T29] audit: type=1400 audit(6000000227.671:9785): avc: denied { write } for pid=7405 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.058290][ T7408] netlink: 'syz.4.1301': attribute type 21 has an invalid length. [ 127.094716][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.242224][ T29] audit: type=1326 audit(6000000227.991:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 127.265919][ T29] audit: type=1326 audit(6000000227.991:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 127.289526][ T29] audit: type=1326 audit(6000000227.991:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 127.313216][ T29] audit: type=1326 audit(6000000227.991:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 127.336645][ T29] audit: type=1326 audit(6000000227.991:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 127.360150][ T29] audit: type=1326 audit(6000000227.991:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 127.383681][ T29] audit: type=1326 audit(6000000227.991:9792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff375490de7 code=0x7ffc0000 [ 127.407145][ T29] audit: type=1326 audit(6000000227.991:9793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff375490d5c code=0x7ffc0000 [ 127.447853][ T7419] loop0: detected capacity change from 0 to 1024 [ 127.457612][ T7419] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.468628][ T7419] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 127.480212][ T7419] JBD2: no valid journal superblock found [ 127.486130][ T7419] EXT4-fs (loop0): Could not load journal inode [ 127.528729][ T7419] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 127.837105][ T7438] FAULT_INJECTION: forcing a failure. [ 127.837105][ T7438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.850853][ T7438] CPU: 1 UID: 0 PID: 7438 Comm: syz.1.1312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.850887][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.850904][ T7438] Call Trace: [ 127.850913][ T7438] [ 127.850981][ T7438] __dump_stack+0x1d/0x30 [ 127.851006][ T7438] dump_stack_lvl+0xe8/0x140 [ 127.851031][ T7438] dump_stack+0x15/0x1b [ 127.851052][ T7438] should_fail_ex+0x265/0x280 [ 127.851086][ T7438] should_fail_alloc_page+0xf2/0x100 [ 127.851137][ T7438] __alloc_frozen_pages_noprof+0xff/0x360 [ 127.851259][ T7438] alloc_pages_mpol+0xb3/0x250 [ 127.851302][ T7438] alloc_pages_noprof+0x90/0x130 [ 127.851405][ T7438] get_zeroed_page_noprof+0x1a/0x40 [ 127.851429][ T7438] simple_transaction_get+0x4c/0x130 [ 127.851457][ T7438] selinux_transaction_write+0x9d/0x110 [ 127.851495][ T7438] ? __pfx_selinux_transaction_write+0x10/0x10 [ 127.851557][ T7438] vfs_write+0x266/0x960 [ 127.851578][ T7438] ? __rcu_read_unlock+0x4f/0x70 [ 127.851653][ T7438] ? __fget_files+0x184/0x1c0 [ 127.851687][ T7438] ksys_write+0xda/0x1a0 [ 127.851763][ T7438] __x64_sys_write+0x40/0x50 [ 127.851785][ T7438] x64_sys_call+0x27fe/0x2ff0 [ 127.851881][ T7438] do_syscall_64+0xd2/0x200 [ 127.851918][ T7438] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.851942][ T7438] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.851976][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.852004][ T7438] RIP: 0033:0x7fc4df9ceec9 [ 127.852064][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.852086][ T7438] RSP: 002b:00007fc4de437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.852110][ T7438] RAX: ffffffffffffffda RBX: 00007fc4dfc25fa0 RCX: 00007fc4df9ceec9 [ 127.852126][ T7438] RDX: 0000000000000041 RSI: 0000200000000040 RDI: 0000000000000005 [ 127.852149][ T7438] RBP: 00007fc4de437090 R08: 0000000000000000 R09: 0000000000000000 [ 127.852165][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.852250][ T7438] R13: 00007fc4dfc26038 R14: 00007fc4dfc25fa0 R15: 00007ffdeeff84a8 [ 127.852273][ T7438] [ 128.288398][ T7448] loop4: detected capacity change from 0 to 2048 [ 128.432804][ T7448] Alternate GPT is invalid, using primary GPT. [ 128.439226][ T7448] loop4: p1 p2 p3 [ 128.724082][ T7476] FAULT_INJECTION: forcing a failure. [ 128.724082][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 128.738088][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.2.1326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.738122][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.738139][ T7476] Call Trace: [ 128.738147][ T7476] [ 128.738155][ T7476] __dump_stack+0x1d/0x30 [ 128.738212][ T7476] dump_stack_lvl+0xe8/0x140 [ 128.738317][ T7476] dump_stack+0x15/0x1b [ 128.738334][ T7476] should_fail_ex+0x265/0x280 [ 128.738358][ T7476] should_failslab+0x8c/0xb0 [ 128.738385][ T7476] kmem_cache_alloc_noprof+0x50/0x310 [ 128.738421][ T7476] ? xfrm_state_alloc+0x2c/0x190 [ 128.738464][ T7476] xfrm_state_alloc+0x2c/0x190 [ 128.738490][ T7476] __find_acq_core+0x4ca/0xca0 [ 128.738581][ T7476] ? __rcu_read_unlock+0x4f/0x70 [ 128.738609][ T7476] xfrm_find_acq+0x78/0xa0 [ 128.738636][ T7476] xfrm_alloc_userspi+0x426/0x700 [ 128.738672][ T7476] ? __nla_parse+0x40/0x60 [ 128.738782][ T7476] xfrm_user_rcv_msg+0x566/0x660 [ 128.738831][ T7476] netlink_rcv_skb+0x123/0x220 [ 128.738855][ T7476] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 128.739023][ T7476] xfrm_netlink_rcv+0x48/0x60 [ 128.739055][ T7476] netlink_unicast+0x5bd/0x690 [ 128.739140][ T7476] netlink_sendmsg+0x58b/0x6b0 [ 128.739180][ T7476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.739213][ T7476] __sock_sendmsg+0x142/0x180 [ 128.739255][ T7476] ____sys_sendmsg+0x31e/0x4e0 [ 128.739357][ T7476] ___sys_sendmsg+0x17b/0x1d0 [ 128.739470][ T7476] __x64_sys_sendmsg+0xd4/0x160 [ 128.739509][ T7476] x64_sys_call+0x191e/0x2ff0 [ 128.739531][ T7476] do_syscall_64+0xd2/0x200 [ 128.739641][ T7476] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.739727][ T7476] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.739776][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.739798][ T7476] RIP: 0033:0x7ff37548eec9 [ 128.739813][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.739910][ T7476] RSP: 002b:00007ff373ef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.740019][ T7476] RAX: ffffffffffffffda RBX: 00007ff3756e5fa0 RCX: 00007ff37548eec9 [ 128.740031][ T7476] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 128.740042][ T7476] RBP: 00007ff373ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.740089][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.740105][ T7476] R13: 00007ff3756e6038 R14: 00007ff3756e5fa0 R15: 00007ffd3dd69398 [ 128.740130][ T7476] [ 129.024372][ T7481] __nla_validate_parse: 3 callbacks suppressed [ 129.024386][ T7481] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1327'. [ 129.280442][ T7492] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 129.621006][ T7500] loop3: detected capacity change from 0 to 512 [ 129.643375][ T7500] EXT4-fs: Ignoring removed nobh option [ 129.688781][ T7500] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1334: corrupted inode contents [ 129.715086][ T7500] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1334: mark_inode_dirty error [ 129.752672][ T7500] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1334: corrupted inode contents [ 129.792316][ T7500] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1334: mark_inode_dirty error [ 129.832085][ T7500] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1334: Failed to acquire dquot type 0 [ 129.871086][ T7500] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1334: corrupted inode contents [ 129.930195][ T7500] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1334: mark_inode_dirty error [ 129.983364][ T7500] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1334: corrupted inode contents [ 130.069214][ T7500] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1334: mark_inode_dirty error [ 130.112117][ T7500] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1334: corrupted inode contents [ 130.168238][ T7500] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 130.207709][ T7500] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1334: corrupted inode contents [ 130.261220][ T7500] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1334: mark_inode_dirty error [ 130.278296][ T7500] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 130.303880][ T7500] EXT4-fs (loop3): 1 truncate cleaned up [ 130.338606][ T7515] loop0: detected capacity change from 0 to 764 [ 130.340286][ T7500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.357515][ T7500] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.379584][ T7500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.473478][ T7524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.530890][ T7524] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1343'. [ 130.624137][ T7537] usb usb8: usbfs: process 7537 (syz.1.1347) did not claim interface 0 before use [ 130.645935][ T7537] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.884772][ T7560] loop0: detected capacity change from 0 to 764 [ 130.900546][ T7560] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 130.982042][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 131.068853][ T7570] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 131.100262][ T7566] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 131.136887][ T7565] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 131.139462][ T7563] macvlan1: entered promiscuous mode [ 131.168828][ T7563] ipvlan0: entered promiscuous mode [ 131.188840][ T7563] ipvlan0: left promiscuous mode [ 131.215226][ T7573] loop4: detected capacity change from 0 to 512 [ 131.235033][ T7563] macvlan1: left promiscuous mode [ 131.252435][ T7573] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.305246][ T7573] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 131.322964][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.339894][ T7570] batadv0: entered promiscuous mode [ 131.345916][ T7570] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 131.369290][ T7573] EXT4-fs (loop4): 1 truncate cleaned up [ 131.375338][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.401432][ T7579] sch_fq: defrate 0 ignored. [ 131.409409][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 131.419383][ T7579] team0 (unregistering): Port device dummy0 removed [ 131.497758][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.533657][ T7591] IPv6: Can't replace route, no match found [ 131.698649][ T7598] loop4: detected capacity change from 0 to 2048 [ 131.823597][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 131.837599][ T7611] FAULT_INJECTION: forcing a failure. [ 131.837599][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.850899][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.3.1373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.850935][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.850948][ T7611] Call Trace: [ 131.850953][ T7611] [ 131.850959][ T7611] __dump_stack+0x1d/0x30 [ 131.850977][ T7611] dump_stack_lvl+0xe8/0x140 [ 131.851006][ T7611] dump_stack+0x15/0x1b [ 131.851020][ T7611] should_fail_ex+0x265/0x280 [ 131.851042][ T7611] should_fail+0xb/0x20 [ 131.851070][ T7611] should_fail_usercopy+0x1a/0x20 [ 131.851100][ T7611] _copy_from_user+0x1c/0xb0 [ 131.851127][ T7611] sg_write+0x610/0x750 [ 131.851209][ T7611] vfs_writev+0x406/0x8b0 [ 131.851234][ T7611] ? __pfx_sg_write+0x10/0x10 [ 131.851257][ T7611] do_writev+0xe7/0x210 [ 131.851353][ T7611] __x64_sys_writev+0x45/0x50 [ 131.851422][ T7611] x64_sys_call+0x1e9a/0x2ff0 [ 131.851470][ T7611] do_syscall_64+0xd2/0x200 [ 131.851498][ T7611] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.851519][ T7611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.851624][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.851643][ T7611] RIP: 0033:0x7f0e3d70eec9 [ 131.851656][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.851672][ T7611] RSP: 002b:00007f0e3c177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 131.851688][ T7611] RAX: ffffffffffffffda RBX: 00007f0e3d965fa0 RCX: 00007f0e3d70eec9 [ 131.851741][ T7611] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 131.851753][ T7611] RBP: 00007f0e3c177090 R08: 0000000000000000 R09: 0000000000000000 [ 131.851764][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.851781][ T7611] R13: 00007f0e3d966038 R14: 00007f0e3d965fa0 R15: 00007ffdff16ece8 [ 131.851798][ T7611] [ 132.038069][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 132.038084][ T29] audit: type=1326 audit(6000000232.791:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.2.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.088156][ T29] audit: type=1326 audit(6000000232.841:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.2.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.111736][ T29] audit: type=1326 audit(6000000232.841:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.2.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.169668][ T7623] loop2: detected capacity change from 0 to 512 [ 132.176853][ T7623] vfat: Bad value for 'shortname' [ 132.238858][ T29] audit: type=1326 audit(6000000232.941:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.262372][ T29] audit: type=1326 audit(6000000232.941:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.286045][ T29] audit: type=1326 audit(6000000232.941:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.309652][ T29] audit: type=1326 audit(6000000232.941:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.333224][ T29] audit: type=1326 audit(6000000232.941:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.356746][ T29] audit: type=1326 audit(6000000232.941:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.380424][ T29] audit: type=1326 audit(6000000232.941:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.2.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 132.431097][ T7629] 9pnet: Could not find request transport: fd0x0000000000000003 [ 132.440618][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 132.959604][ T7628] loop3: detected capacity change from 0 to 1764 [ 133.039152][ T7628] netlink: 'syz.3.1380': attribute type 4 has an invalid length. [ 133.047359][ T7628] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1380'. [ 133.095140][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 133.321529][ T7647] loop4: detected capacity change from 0 to 512 [ 133.357606][ T7647] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.382313][ T7647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.425688][ T7647] EXT4-fs (loop4): 1 truncate cleaned up [ 133.455311][ T7647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.484792][ T7659] 9pnet: Could not find request transport: 0xffffffffffffffff [ 133.712758][ T7669] loop3: detected capacity change from 0 to 512 [ 133.741706][ T7669] EXT4-fs: Ignoring removed nobh option [ 133.769577][ T7669] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1392: corrupted inode contents [ 133.819404][ T7669] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1392: mark_inode_dirty error [ 133.868492][ T7669] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1392: corrupted inode contents [ 133.912499][ T7669] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1392: mark_inode_dirty error [ 133.937437][ T7669] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1392: Failed to acquire dquot type 0 [ 133.965859][ T7669] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1392: corrupted inode contents [ 133.978956][ T7669] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1392: mark_inode_dirty error [ 134.009660][ T7669] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1392: corrupted inode contents [ 134.024472][ T7669] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1392: mark_inode_dirty error [ 134.037375][ T7669] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1392: corrupted inode contents [ 134.049626][ T7669] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 134.059638][ T7669] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1392: corrupted inode contents [ 134.071916][ T7669] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1392: mark_inode_dirty error [ 134.084641][ T7669] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 134.094304][ T7669] EXT4-fs (loop3): 1 truncate cleaned up [ 134.101825][ T7669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.127950][ T7669] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.156790][ T7669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.252071][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.333187][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 134.597865][ T7699] loop4: detected capacity change from 0 to 1764 [ 134.612385][ T7699] netlink: 'syz.4.1398': attribute type 4 has an invalid length. [ 134.620196][ T7699] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1398'. [ 135.346537][ T7705] FAULT_INJECTION: forcing a failure. [ 135.346537][ T7705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.359801][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.1.1404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.359936][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.359949][ T7705] Call Trace: [ 135.359957][ T7705] [ 135.359966][ T7705] __dump_stack+0x1d/0x30 [ 135.359987][ T7705] dump_stack_lvl+0xe8/0x140 [ 135.360007][ T7705] dump_stack+0x15/0x1b [ 135.360028][ T7705] should_fail_ex+0x265/0x280 [ 135.360096][ T7705] should_fail+0xb/0x20 [ 135.360122][ T7705] should_fail_usercopy+0x1a/0x20 [ 135.360155][ T7705] _copy_to_user+0x20/0xa0 [ 135.360294][ T7705] simple_read_from_buffer+0xb5/0x130 [ 135.360324][ T7705] proc_fail_nth_read+0x10e/0x150 [ 135.360361][ T7705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.360432][ T7705] vfs_read+0x1a5/0x770 [ 135.360462][ T7705] ? __cond_resched+0x4e/0x90 [ 135.360488][ T7705] ksys_read+0xda/0x1a0 [ 135.360543][ T7705] __x64_sys_read+0x40/0x50 [ 135.360572][ T7705] x64_sys_call+0x27bc/0x2ff0 [ 135.360596][ T7705] do_syscall_64+0xd2/0x200 [ 135.360701][ T7705] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.360733][ T7705] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.360768][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.360789][ T7705] RIP: 0033:0x7fc4df9cd8dc [ 135.360807][ T7705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.360837][ T7705] RSP: 002b:00007fc4de437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.360860][ T7705] RAX: ffffffffffffffda RBX: 00007fc4dfc25fa0 RCX: 00007fc4df9cd8dc [ 135.360872][ T7705] RDX: 000000000000000f RSI: 00007fc4de4370a0 RDI: 0000000000000004 [ 135.360883][ T7705] RBP: 00007fc4de437090 R08: 0000000000000000 R09: 0000000000000000 [ 135.360894][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.360952][ T7705] R13: 00007fc4dfc26038 R14: 00007fc4dfc25fa0 R15: 00007ffdeeff84a8 [ 135.360972][ T7705] [ 135.788804][ T7722] loop3: detected capacity change from 0 to 512 [ 136.168638][ T7722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.190846][ T7722] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.219428][ T7733] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1413'. [ 136.235543][ T7722] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.1406: Directory hole found for htree leaf block 0 [ 136.249272][ T7722] EXT4-fs (loop3): Remounting filesystem read-only [ 136.258156][ T7733] pimreg: entered allmulticast mode [ 136.303850][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 136.313025][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'. [ 136.318840][ T7733] pimreg: left allmulticast mode [ 136.387803][ T7741] netlink: 'syz.4.1413': attribute type 2 has an invalid length. [ 136.396005][ T7741] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1413'. [ 136.437503][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.448139][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.462449][ T7741] netlink: 'syz.4.1413': attribute type 2 has an invalid length. [ 136.470416][ T7741] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1413'. [ 136.662832][ T7754] loop2: detected capacity change from 0 to 512 [ 136.680624][ T7754] EXT4-fs: Ignoring removed nobh option [ 136.718328][ T7754] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1420: corrupted inode contents [ 136.731341][ T7754] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1420: mark_inode_dirty error [ 136.745437][ T7754] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1420: corrupted inode contents [ 136.774325][ T7754] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1420: mark_inode_dirty error [ 136.849440][ T7754] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1420: Failed to acquire dquot type 0 [ 136.861261][ T7754] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1420: corrupted inode contents [ 136.874612][ T7754] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1420: mark_inode_dirty error [ 136.886630][ T7754] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1420: corrupted inode contents [ 136.899016][ T7754] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1420: mark_inode_dirty error [ 136.923870][ T7754] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1420: corrupted inode contents [ 136.943875][ T7754] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 136.952830][ T7754] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1420: corrupted inode contents [ 136.975592][ T7754] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1420: mark_inode_dirty error [ 136.988442][ T7754] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 137.011098][ T7754] EXT4-fs (loop2): 1 truncate cleaned up [ 137.017441][ T7767] FAULT_INJECTION: forcing a failure. [ 137.017441][ T7767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.018370][ T7754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.030731][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.4.1424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.030764][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.030777][ T7767] Call Trace: [ 137.030782][ T7767] [ 137.030790][ T7767] __dump_stack+0x1d/0x30 [ 137.030815][ T7767] dump_stack_lvl+0xe8/0x140 [ 137.030879][ T7767] dump_stack+0x15/0x1b [ 137.030903][ T7767] should_fail_ex+0x265/0x280 [ 137.030984][ T7767] should_fail+0xb/0x20 [ 137.031013][ T7767] should_fail_usercopy+0x1a/0x20 [ 137.031096][ T7767] _copy_from_iter+0xd2/0xe80 [ 137.031143][ T7767] ? __build_skb_around+0x1a0/0x200 [ 137.031223][ T7767] ? __alloc_skb+0x223/0x320 [ 137.031257][ T7767] netlink_sendmsg+0x471/0x6b0 [ 137.031298][ T7767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.031335][ T7767] __sock_sendmsg+0x142/0x180 [ 137.031395][ T7767] ____sys_sendmsg+0x31e/0x4e0 [ 137.031436][ T7767] ___sys_sendmsg+0x17b/0x1d0 [ 137.031521][ T7767] __x64_sys_sendmsg+0xd4/0x160 [ 137.031563][ T7767] x64_sys_call+0x191e/0x2ff0 [ 137.031595][ T7767] do_syscall_64+0xd2/0x200 [ 137.031638][ T7767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.031771][ T7767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.031813][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.031842][ T7767] RIP: 0033:0x7f71432feec9 [ 137.031931][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.031956][ T7767] RSP: 002b:00007f7141d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.031981][ T7767] RAX: ffffffffffffffda RBX: 00007f7143555fa0 RCX: 00007f71432feec9 [ 137.031998][ T7767] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 137.032015][ T7767] RBP: 00007f7141d67090 R08: 0000000000000000 R09: 0000000000000000 [ 137.032032][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.032049][ T7767] R13: 00007f7143556038 R14: 00007f7143555fa0 R15: 00007ffd1f282458 [ 137.032092][ T7767] [ 137.244543][ T7754] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.272539][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.412557][ T7781] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.438572][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 137.438590][ T29] audit: type=1400 audit(6000000238.191:10033): avc: denied { create } for pid=7779 comm="syz.2.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.472178][ T7785] netlink: 352 bytes leftover after parsing attributes in process `syz.2.1430'. [ 137.481392][ T7785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1430'. [ 137.561925][ T7790] loop3: detected capacity change from 0 to 512 [ 137.589262][ T7790] EXT4-fs: Ignoring removed nobh option [ 137.648255][ T7790] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1432: corrupted inode contents [ 137.737196][ T7790] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1432: mark_inode_dirty error [ 137.784743][ T7790] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1432: corrupted inode contents [ 137.832716][ T7790] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1432: mark_inode_dirty error [ 137.878548][ T7790] Quota error (device loop3): write_blk: dquota write failed [ 137.895811][ T7790] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 137.905971][ T7790] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1432: Failed to acquire dquot type 0 [ 137.923003][ T7790] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1432: corrupted inode contents [ 137.951811][ T7790] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1432: mark_inode_dirty error [ 137.983294][ T7790] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1432: corrupted inode contents [ 138.012101][ T7790] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1432: mark_inode_dirty error [ 138.024360][ T7790] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1432: corrupted inode contents [ 138.038699][ T7790] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 138.061581][ T7790] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1432: corrupted inode contents [ 138.075465][ T7790] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1432: mark_inode_dirty error [ 138.089406][ T7790] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 138.099614][ T7790] EXT4-fs (loop3): 1 truncate cleaned up [ 138.107037][ T7790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.119977][ T7790] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.138639][ T7790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.281048][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1441'. [ 138.294885][ T7822] loop3: detected capacity change from 0 to 1764 [ 138.331172][ T7824] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7824 comm=syz.0.1444 [ 138.421890][ T7834] loop3: detected capacity change from 0 to 2048 [ 138.457763][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.588147][ T29] audit: type=1400 audit(6000000239.341:10034): avc: denied { mounton } for pid=7833 comm="syz.3.1447" path="/243/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.621589][ T7849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7849 comm=syz.0.1452 [ 138.710498][ T3306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 138.749157][ T7852] 9pnet: p9_errstr2errno: server reported unknown error [ 138.761032][ T3306] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 138.860141][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.025825][ T29] audit: type=1400 audit(6000000239.551:10035): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 139.048789][ T29] audit: type=1400 audit(6000000239.561:10036): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 139.066286][ T7855] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 139.068904][ T29] audit: type=1400 audit(6000000239.611:10037): avc: denied { unlink } for pid=3306 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.099783][ T29] audit: type=1326 audit(6000000239.861:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.2.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 139.123567][ T29] audit: type=1326 audit(6000000239.861:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.2.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 139.147386][ T29] audit: type=1326 audit(6000000239.861:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.2.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff37548eec9 code=0x7ffc0000 [ 139.182951][ T7864] loop3: detected capacity change from 0 to 128 [ 139.200504][ T7864] vfat filesystem being mounted at /245/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 139.289405][ T7870] loop3: detected capacity change from 0 to 512 [ 139.308807][ T7870] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 139.387302][ T7870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840e01c, mo2=0002] [ 139.395448][ T7870] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.401927][ T7870] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1459: bad orphan inode 267 [ 139.440662][ T7870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 139.619672][ T7886] loop2: detected capacity change from 0 to 1764 [ 139.631518][ T7870] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1459: dx entry: limit 0 != root limit 125 [ 139.643330][ T7870] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1459: Corrupt directory, running e2fsck is recommended [ 139.662064][ T7886] netlink: 'syz.2.1460': attribute type 4 has an invalid length. [ 139.669889][ T7886] __nla_validate_parse: 2 callbacks suppressed [ 139.669970][ T7886] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1460'. [ 139.706018][ T7888] netem: change failed [ 139.907749][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 140.201315][ T7897] loop2: detected capacity change from 0 to 128 [ 140.208038][ T7897] ext4: Unknown parameter 'uid<00000000000000000000' [ 140.217537][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 140.233100][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 140.681612][ T7932] loop4: detected capacity change from 0 to 1764 [ 140.698164][ T7932] netlink: 'syz.4.1476': attribute type 4 has an invalid length. [ 140.706033][ T7932] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1476'. [ 140.750621][ T7920] lo speed is unknown, defaulting to 1000 [ 140.952602][ T51] bridge_slave_1: left allmulticast mode [ 140.958387][ T51] bridge_slave_1: left promiscuous mode [ 140.964109][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.045324][ T51] bridge_slave_0: left allmulticast mode [ 141.051359][ T51] bridge_slave_0: left promiscuous mode [ 141.057174][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.129891][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.139418][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.148643][ T51] bond0 (unregistering): Released all slaves [ 141.159198][ T7920] chnl_net:caif_netlink_parms(): no params data found [ 141.187481][ T7942] wireguard0: entered promiscuous mode [ 141.193061][ T7942] wireguard0: entered allmulticast mode [ 141.206315][ T51] tipc: Disabling bearer [ 141.211341][ T51] tipc: Left network mode [ 141.218851][ T51] IPVS: stopping backup sync thread 7316 ... [ 141.235203][ T51] hsr_slave_0: left promiscuous mode [ 141.241690][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.250386][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.334133][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.341351][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.362877][ T7920] bridge_slave_0: entered allmulticast mode [ 141.378594][ T7920] bridge_slave_0: entered promiscuous mode [ 141.396398][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.397201][ T7956] loop3: detected capacity change from 0 to 128 [ 141.403592][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.426329][ T7920] bridge_slave_1: entered allmulticast mode [ 141.432924][ T7920] bridge_slave_1: entered promiscuous mode [ 141.437318][ T7956] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.454787][ T7956] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.466753][ T7920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.467472][ T7956] vfat filesystem being mounted at /252/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 141.492481][ T7920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.510103][ T7956] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 141.516751][ T7956] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.524541][ T7956] vhci_hcd vhci_hcd.0: Device attached [ 141.547608][ T7961] vhci_hcd: connection closed [ 141.547885][ T1566] vhci_hcd: stop threads [ 141.556979][ T1566] vhci_hcd: release socket [ 141.561572][ T1566] vhci_hcd: disconnect device [ 141.570530][ T7920] team0: Port device team_slave_0 added [ 141.582887][ T7920] team0: Port device team_slave_1 added [ 141.606212][ T7972] FAULT_INJECTION: forcing a failure. [ 141.606212][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 141.619015][ T7972] CPU: 1 UID: 0 PID: 7972 Comm: syz.4.1491 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.619051][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.619068][ T7972] Call Trace: [ 141.619076][ T7972] [ 141.619085][ T7972] __dump_stack+0x1d/0x30 [ 141.619112][ T7972] dump_stack_lvl+0xe8/0x140 [ 141.619217][ T7972] dump_stack+0x15/0x1b [ 141.619238][ T7972] should_fail_ex+0x265/0x280 [ 141.619269][ T7972] ? __se_sys_memfd_create+0x1cc/0x590 [ 141.619327][ T7972] should_failslab+0x8c/0xb0 [ 141.619355][ T7972] __kmalloc_cache_noprof+0x4c/0x320 [ 141.619385][ T7972] ? fput+0x8f/0xc0 [ 141.619426][ T7972] __se_sys_memfd_create+0x1cc/0x590 [ 141.619451][ T7972] __x64_sys_memfd_create+0x31/0x40 [ 141.619476][ T7972] x64_sys_call+0x2abe/0x2ff0 [ 141.619529][ T7972] do_syscall_64+0xd2/0x200 [ 141.619568][ T7972] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.619648][ T7972] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.619689][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.619718][ T7972] RIP: 0033:0x7f71432feec9 [ 141.619770][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.619792][ T7972] RSP: 002b:00007f7141d66e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 141.619814][ T7972] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f71432feec9 [ 141.619829][ T7972] RDX: 00007f7141d66ef0 RSI: 0000000000000000 RDI: 00007f7143382960 [ 141.619844][ T7972] RBP: 0000200000000700 R08: 00007f7141d66bb7 R09: 00007f7141d66e40 [ 141.619859][ T7972] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 141.619940][ T7972] R13: 00007f7141d66ef0 R14: 00007f7141d66eb0 R15: 00002000000006c0 [ 141.619992][ T7972] [ 141.807007][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.814143][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.840380][ T7920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.852267][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.859246][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.885234][ T7920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.928950][ T7920] hsr_slave_0: entered promiscuous mode [ 141.935258][ T7920] hsr_slave_1: entered promiscuous mode [ 142.073306][ T7974] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 142.081216][ T7974] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1492'. [ 142.113894][ T7920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.123476][ T7920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.138480][ T7983] loop0: detected capacity change from 0 to 512 [ 142.150056][ T7920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.158285][ T7983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.170721][ T7920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.187527][ T7983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.200963][ T7983] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.268148][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.315829][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.337093][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.349304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.356476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.437511][ T8006] 9pnet: p9_errstr2errno: server reported unknown error [ 142.439642][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.445109][ T8007] 9pnet_fd: Insufficient options for proto=fd [ 142.451866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.474152][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 142.474167][ T29] audit: type=1326 audit(6000000243.221:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f71432feec9 code=0x7ffc0000 [ 142.511271][ T7920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.521701][ T7920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.544798][ T29] audit: type=1326 audit(6000000243.291:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71432feec9 code=0x7ffc0000 [ 142.568400][ T29] audit: type=1326 audit(6000000243.291:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71432feec9 code=0x7ffc0000 [ 142.620791][ T8013] 9pnet: p9_errstr2errno: server reported unknown error [ 142.684326][ T8019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8019 comm=syz.1.1504 [ 142.694799][ T8012] smc: net device bond0 applied user defined pnetid SYZ0 [ 142.718124][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.723794][ T8022] smc: net device bond0 erased user defined pnetid SYZ0 [ 142.761172][ T29] audit: type=1400 audit(6000000243.511:10088): avc: denied { setopt } for pid=8028 comm="syz.1.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.786567][ T8029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1507'. [ 142.895684][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1511'. [ 142.905092][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1511'. [ 142.908616][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.923907][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.948718][ T8058] 9p filesystem being mounted at /297/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 142.961667][ T29] audit: type=1400 audit(6000000243.721:10089): avc: denied { setattr } for pid=8046 comm="syz.0.1512" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.986947][ T8062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8062 comm=syz.1.1514 [ 143.002329][ T7920] veth0_vlan: entered promiscuous mode [ 143.011551][ T7920] veth1_vlan: entered promiscuous mode [ 143.032453][ T7920] veth0_macvtap: entered promiscuous mode [ 143.042389][ T7920] veth1_macvtap: entered promiscuous mode [ 143.059052][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.070697][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.084402][ T1566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.094225][ T1566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.105201][ T1566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.114745][ T1566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.137437][ T29] audit: type=1400 audit(6000000243.891:10090): avc: denied { mounton } for pid=7920 comm="syz-executor" path="/root/syzkaller.1oLLq1/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 143.138553][ T8052] netlink: 'syz.4.1513': attribute type 13 has an invalid length. [ 143.168986][ T29] audit: type=1400 audit(6000000243.921:10091): avc: denied { mount } for pid=7920 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.170018][ T8052] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1513'. [ 143.192146][ T29] audit: type=1400 audit(6000000243.921:10092): avc: denied { mounton } for pid=7920 comm="syz-executor" path="/root/syzkaller.1oLLq1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 143.228071][ T29] audit: type=1400 audit(6000000243.921:10093): avc: denied { mounton } for pid=7920 comm="syz-executor" path="/root/syzkaller.1oLLq1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 143.258331][ T8052] syz_tun: refused to change device tx_queue_len [ 143.280515][ T29] audit: type=1400 audit(6000000244.011:10094): avc: denied { mounton } for pid=7920 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 143.481852][ T8082] 9pnet_fd: Insufficient options for proto=fd [ 143.664801][ T8084] loop3: detected capacity change from 0 to 1024 [ 143.733372][ T8084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.780397][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.805644][ T8093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8093 comm=syz.0.1524 [ 143.844213][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 143.866920][ T8095] veth1_macvtap: left promiscuous mode [ 144.105516][ T8121] 0ªX¹¦D: renamed from gretap0 (while UP) [ 144.117388][ T8121] 0ªX¹¦D: entered allmulticast mode [ 144.123790][ T8121] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 144.143818][ T8121] loop3: detected capacity change from 0 to 512 [ 144.161337][ T8121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.179614][ T8121] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.181075][ T3382] hid_parser_main: 41 callbacks suppressed [ 144.181098][ T3382] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.206041][ T3382] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.230461][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.252074][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.259607][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.267128][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.276234][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.283875][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.291326][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.298793][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.306436][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.313848][ T3382] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.322404][ T3382] hid-generic 0000:0000:0000.0009: hidraw1: HID v8.00 Device [syz0] on syz0 [ 144.401266][ T8134] lo speed is unknown, defaulting to 1000 [ 144.407184][ T8134] lo speed is unknown, defaulting to 1000 [ 144.413236][ T8134] lo speed is unknown, defaulting to 1000 [ 144.420647][ T8134] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.432164][ T8134] lo speed is unknown, defaulting to 1000 [ 144.438596][ T8134] lo speed is unknown, defaulting to 1000 [ 144.444989][ T8134] lo speed is unknown, defaulting to 1000 [ 144.451698][ T8134] lo speed is unknown, defaulting to 1000 [ 144.472876][ T8134] lo speed is unknown, defaulting to 1000 [ 144.555295][ T8153] bridge0: entered promiscuous mode [ 144.560611][ T8153] macsec1: entered promiscuous mode [ 144.595579][ T8158] loop5: detected capacity change from 0 to 512 [ 144.605165][ T8158] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 144.643530][ T8158] loop5: detected capacity change from 0 to 2048 [ 144.731533][ T8168] 9pnet: p9_errstr2errno: server reported unknown error [ 144.828051][ T8171] __nla_validate_parse: 4 callbacks suppressed [ 144.828067][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 144.871575][ T8189] netlink: 'syz.3.1559': attribute type 12 has an invalid length. [ 144.951121][ T8201] FAULT_INJECTION: forcing a failure. [ 144.951121][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 144.963991][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.0.1563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.964026][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.964123][ T8201] Call Trace: [ 144.964130][ T8201] [ 144.964137][ T8201] __dump_stack+0x1d/0x30 [ 144.964164][ T8201] dump_stack_lvl+0xe8/0x140 [ 144.964191][ T8201] dump_stack+0x15/0x1b [ 144.964272][ T8201] should_fail_ex+0x265/0x280 [ 144.964298][ T8201] should_failslab+0x8c/0xb0 [ 144.964324][ T8201] __kmalloc_noprof+0xa5/0x3e0 [ 144.964409][ T8201] ? tcf_idr_create+0x41/0x4a0 [ 144.964444][ T8201] tcf_idr_create+0x41/0x4a0 [ 144.964486][ T8201] tcf_idr_create_from_flags+0x60/0x80 [ 144.964607][ T8201] tcf_pedit_init+0x27b/0x9a0 [ 144.964641][ T8201] ? should_fail_ex+0xdb/0x280 [ 144.964676][ T8201] tcf_action_init_1+0x367/0x4a0 [ 144.964822][ T8201] tcf_action_init+0x267/0x6d0 [ 144.964978][ T8201] ? mark_reg_read+0x233/0x340 [ 144.965048][ T8201] tc_ctl_action+0x291/0x830 [ 144.965096][ T8201] ? __pfx_tc_ctl_action+0x10/0x10 [ 144.965124][ T8201] rtnetlink_rcv_msg+0x657/0x6d0 [ 144.965228][ T8201] ? avc_has_perm_noaudit+0x1b1/0x200 [ 144.965264][ T8201] netlink_rcv_skb+0x123/0x220 [ 144.965284][ T8201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.965342][ T8201] rtnetlink_rcv+0x1c/0x30 [ 144.965406][ T8201] netlink_unicast+0x5bd/0x690 [ 144.965428][ T8201] netlink_sendmsg+0x58b/0x6b0 [ 144.965453][ T8201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.965540][ T8201] __sock_sendmsg+0x142/0x180 [ 144.965650][ T8201] ____sys_sendmsg+0x31e/0x4e0 [ 144.965678][ T8201] ___sys_sendmsg+0x17b/0x1d0 [ 144.965715][ T8201] __x64_sys_sendmsg+0xd4/0x160 [ 144.965757][ T8201] x64_sys_call+0x191e/0x2ff0 [ 144.965842][ T8201] do_syscall_64+0xd2/0x200 [ 144.965879][ T8201] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.965908][ T8201] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.965944][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.966038][ T8201] RIP: 0033:0x7f2033f6eec9 [ 144.966052][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.966067][ T8201] RSP: 002b:00007f20329d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.966140][ T8201] RAX: ffffffffffffffda RBX: 00007f20341c5fa0 RCX: 00007f2033f6eec9 [ 144.966151][ T8201] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 144.966161][ T8201] RBP: 00007f20329d7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.966172][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.966183][ T8201] R13: 00007f20341c6038 R14: 00007f20341c5fa0 R15: 00007ffc1a7b7438 [ 144.966200][ T8201] [ 145.261760][ T8205] loop5: detected capacity change from 0 to 512 [ 145.268784][ T8205] EXT4-fs: Ignoring removed nobh option [ 145.277597][ T8208] FAULT_INJECTION: forcing a failure. [ 145.277597][ T8208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.290879][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.3.1566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.290976][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.291038][ T8208] Call Trace: [ 145.291044][ T8208] [ 145.291053][ T8208] __dump_stack+0x1d/0x30 [ 145.291074][ T8208] dump_stack_lvl+0xe8/0x140 [ 145.291100][ T8208] dump_stack+0x15/0x1b [ 145.291162][ T8208] should_fail_ex+0x265/0x280 [ 145.291217][ T8208] should_fail+0xb/0x20 [ 145.291243][ T8208] should_fail_usercopy+0x1a/0x20 [ 145.291276][ T8208] _copy_from_user+0x1c/0xb0 [ 145.291311][ T8208] __sys_bpf+0x178/0x7b0 [ 145.291415][ T8208] __x64_sys_bpf+0x41/0x50 [ 145.291448][ T8208] x64_sys_call+0x2aea/0x2ff0 [ 145.291515][ T8208] do_syscall_64+0xd2/0x200 [ 145.291556][ T8208] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.291587][ T8208] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.291663][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.291690][ T8208] RIP: 0033:0x7f0e3d70eec9 [ 145.291710][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.291733][ T8208] RSP: 002b:00007f0e3c177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.291758][ T8208] RAX: ffffffffffffffda RBX: 00007f0e3d965fa0 RCX: 00007f0e3d70eec9 [ 145.291774][ T8208] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 145.291856][ T8208] RBP: 00007f0e3c177090 R08: 0000000000000000 R09: 0000000000000000 [ 145.291918][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.291932][ T8208] R13: 00007f0e3d966038 R14: 00007f0e3d965fa0 R15: 00007ffdff16ece8 [ 145.291957][ T8208] [ 145.293135][ T8205] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1562: corrupted inode contents [ 145.475479][ T8205] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1562: mark_inode_dirty error [ 145.488648][ T8205] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1562: corrupted inode contents [ 145.500923][ T8205] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1562: mark_inode_dirty error [ 145.502624][ T8218] lo speed is unknown, defaulting to 1000 [ 145.512920][ T8205] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1562: Failed to acquire dquot type 0 [ 145.518640][ T8218] lo speed is unknown, defaulting to 1000 [ 145.533162][ T8205] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1562: corrupted inode contents [ 145.548177][ T8205] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1562: mark_inode_dirty error [ 145.560308][ T8205] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1562: corrupted inode contents [ 145.578579][ T8205] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1562: mark_inode_dirty error [ 145.609511][ T8205] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1562: corrupted inode contents [ 145.627023][ T8205] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 145.635911][ T8205] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1562: corrupted inode contents [ 145.651540][ T8205] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1562: mark_inode_dirty error [ 145.663097][ T8205] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 145.675621][ T8205] EXT4-fs (loop5): 1 truncate cleaned up [ 145.682741][ T8205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.696755][ T8205] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.719584][ T8205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.729053][ T8228] loop3: detected capacity change from 0 to 512 [ 145.752860][ T8228] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.788288][ T8228] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.834304][ T8235] loop0: detected capacity change from 0 to 1764 [ 145.852411][ T8235] netlink: 'syz.0.1571': attribute type 4 has an invalid length. [ 145.860207][ T8235] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1571'. [ 145.910231][ T8228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1572: corrupted inode contents [ 146.016691][ T8228] EXT4-fs (loop3): Remounting filesystem read-only [ 146.027361][ T8228] EXT4-fs (loop3): 1 truncate cleaned up [ 146.142063][ T8246] loop5: detected capacity change from 0 to 512 [ 146.200762][ T8246] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1576: bg 0: block 393: padding at end of block bitmap is not set [ 146.268120][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.278738][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.280319][ T8246] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 146.298466][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 146.309137][ T8246] EXT4-fs (loop5): 2 truncates cleaned up [ 146.315587][ T8246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.329453][ T8228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.564149][ T8237] $Hÿ: left promiscuous mode [ 146.569242][ T8237] bond_slave_0: left promiscuous mode [ 146.574735][ T8237] bond_slave_1: left promiscuous mode [ 146.581240][ T8237] dummy0: left promiscuous mode [ 146.586647][ T8237] batadv0: left promiscuous mode [ 146.924681][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.968985][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.188368][ T23] lo speed is unknown, defaulting to 1000 [ 147.194260][ T23] syz2: Port: 1 Link DOWN [ 147.218311][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.269114][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.275243][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.319834][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.337497][ T7920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.354777][ T51] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.468700][ T8309] loop4: detected capacity change from 0 to 512 [ 147.475608][ T8290] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 147.475955][ T8309] EXT4-fs: Ignoring removed nobh option [ 147.609779][ T8324] loop3: detected capacity change from 0 to 1764 [ 147.622573][ T8324] iso9660: Bad value for 'uid' [ 147.627414][ T8324] iso9660: Bad value for 'uid' [ 147.651383][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 147.651403][ T29] audit: type=1326 audit(6000000248.371:10460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc4df9ceec9 code=0x7ffc0000 [ 147.681734][ T29] audit: type=1326 audit(6000000248.381:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8314 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4df9ceec9 code=0x7ffc0000 [ 147.705390][ T29] audit: type=1326 audit(6000000248.381:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8314 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4df9ceec9 code=0x7ffc0000 [ 147.771487][ T8332] loop5: detected capacity change from 0 to 1764 [ 147.792003][ T8332] netlink: 'syz.5.1589': attribute type 4 has an invalid length. [ 147.799805][ T8332] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1589'. [ 148.512381][ T8309] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1585: corrupted inode contents [ 148.534079][ T8309] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1585: mark_inode_dirty error [ 148.547144][ T8309] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1585: corrupted inode contents [ 148.562099][ T8309] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1585: mark_inode_dirty error [ 148.577901][ T8309] Quota error (device loop4): write_blk: dquota write failed [ 148.585421][ T8309] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.597754][ T8309] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1585: Failed to acquire dquot type 0 [ 148.636165][ T8309] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1585: corrupted inode contents [ 148.649527][ T8309] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1585: mark_inode_dirty error [ 148.662195][ T8309] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1585: corrupted inode contents [ 148.675357][ T8309] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1585: mark_inode_dirty error [ 148.708126][ T8309] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1585: corrupted inode contents [ 148.727102][ T8344] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1597'. [ 148.745558][ T29] audit: type=1400 audit(6000000249.481:10463): avc: denied { create } for pid=8343 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.785282][ T8345] lo speed is unknown, defaulting to 1000 [ 148.794458][ T8345] lo speed is unknown, defaulting to 1000 [ 148.905571][ T8309] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 148.919395][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1598'. [ 148.936065][ T8309] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1585: corrupted inode contents [ 148.951619][ T29] audit: type=1326 audit(6000000249.561:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2033f6eec9 code=0x7ffc0000 [ 148.975824][ T29] audit: type=1326 audit(6000000249.651:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2033f6eec9 code=0x7ffc0000 [ 148.999588][ T29] audit: type=1326 audit(6000000249.651:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2033f6eec9 code=0x7ffc0000 [ 149.023580][ T29] audit: type=1326 audit(6000000249.651:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2033f6eec9 code=0x7ffc0000 [ 149.106023][ T8309] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1585: mark_inode_dirty error [ 149.156287][ T8354] FAULT_INJECTION: forcing a failure. [ 149.156287][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.169571][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.0.1600 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.169636][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.169650][ T8354] Call Trace: [ 149.169657][ T8354] [ 149.169666][ T8354] __dump_stack+0x1d/0x30 [ 149.169691][ T8354] dump_stack_lvl+0xe8/0x140 [ 149.169721][ T8354] dump_stack+0x15/0x1b [ 149.169742][ T8354] should_fail_ex+0x265/0x280 [ 149.169803][ T8354] should_fail+0xb/0x20 [ 149.169823][ T8354] should_fail_usercopy+0x1a/0x20 [ 149.169861][ T8354] strncpy_from_user+0x25/0x230 [ 149.169935][ T8354] ? __kmalloc_cache_noprof+0x189/0x320 [ 149.170043][ T8354] __se_sys_memfd_create+0x1ff/0x590 [ 149.170070][ T8354] __x64_sys_memfd_create+0x31/0x40 [ 149.170091][ T8354] x64_sys_call+0x2abe/0x2ff0 [ 149.170153][ T8354] do_syscall_64+0xd2/0x200 [ 149.170233][ T8354] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.170264][ T8354] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.170378][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.170402][ T8354] RIP: 0033:0x7f2033f6eec9 [ 149.170422][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.170444][ T8354] RSP: 002b:00007f20329d6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 149.170468][ T8354] RAX: ffffffffffffffda RBX: 00000000000005bd RCX: 00007f2033f6eec9 [ 149.170488][ T8354] RDX: 00007f20329d6dec RSI: 0000000000000000 RDI: 00007f2033ff2960 [ 149.170503][ T8354] RBP: 0000200000000000 R08: 00007f20329d6b07 R09: 0000000000000000 [ 149.170590][ T8354] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 149.170601][ T8354] R13: 00007f20329d6dec R14: 00007f20329d6df0 R15: 00007ffc1a7b7438 [ 149.170690][ T8354] [ 149.353906][ T8309] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 149.389737][ T8357] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 149.402552][ T8309] EXT4-fs (loop4): 1 truncate cleaned up [ 149.409719][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.422817][ T8309] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.549213][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.671524][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 149.841364][ T8379] loop5: detected capacity change from 0 to 2048 [ 149.887851][ T8379] GPT:first_usable_lbas don't match. [ 149.893222][ T8379] GPT:34 != 290 [ 149.896742][ T8379] GPT: Use GNU Parted to correct GPT errors. [ 149.902866][ T8379] loop5: p1 p2 p3 [ 149.989113][ T8383] loop5: detected capacity change from 0 to 512 [ 150.046880][ T8383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.061576][ T8383] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.132140][ T7920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.267035][ T8394] 9p filesystem being mounted at /317/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 150.570643][ T8402] loop0: detected capacity change from 0 to 512 [ 150.577339][ T8402] EXT4-fs: Ignoring removed nobh option [ 150.600412][ T8402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1615: corrupted inode contents [ 150.651316][ T8402] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1615: mark_inode_dirty error [ 150.683609][ T8402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1615: corrupted inode contents [ 150.695904][ T8402] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1615: mark_inode_dirty error [ 150.708024][ T8402] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1615: Failed to acquire dquot type 0 [ 150.719968][ T8402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1615: corrupted inode contents [ 150.732133][ T8402] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1615: mark_inode_dirty error [ 150.743978][ T8402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1615: corrupted inode contents [ 150.756235][ T8402] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1615: mark_inode_dirty error [ 150.778367][ T8402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1615: corrupted inode contents [ 150.804067][ T8402] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 150.831417][ T8402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1615: corrupted inode contents [ 151.103575][ T8413] loop3: detected capacity change from 0 to 1764 [ 151.594746][ T8412] netlink: 'syz.3.1617': attribute type 4 has an invalid length. [ 151.602660][ T8412] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1617'. [ 151.637929][ T8402] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1615: mark_inode_dirty error [ 151.670558][ T8402] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 151.683438][ T8415] lo speed is unknown, defaulting to 1000 [ 151.690261][ T8402] EXT4-fs (loop0): 1 truncate cleaned up [ 151.709884][ T8396] netlink: 12 bytes leftover after parsing attributes in process `{ì!'. [ 151.719055][ T8402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.731888][ T8415] lo speed is unknown, defaulting to 1000 [ 151.765830][ T8402] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.866338][ T8402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.908394][ T8420] bond0: (slave team0): Releasing backup interface [ 151.975434][ T8415] netlink: 'syz.5.1618': attribute type 13 has an invalid length. [ 152.000145][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1620'. [ 152.026161][ T8415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.043565][ T8255] lo speed is unknown, defaulting to 1000 [ 152.069765][ T8424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8424 comm=syz.0.1620 [ 152.102399][ T8420] loop3: detected capacity change from 0 to 164 [ 152.133272][ T8426] loop0: detected capacity change from 0 to 512 [ 152.146208][ T8426] EXT4-fs: Ignoring removed nobh option [ 152.163860][ T8420] bio_check_eod: 8942 callbacks suppressed [ 152.163875][ T8420] syz.3.1619: attempt to access beyond end of device [ 152.163875][ T8420] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 152.199734][ T8426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1621: corrupted inode contents [ 152.223211][ T8430] loop4: detected capacity change from 0 to 512 [ 152.235867][ T8419] ================================================================== [ 152.244152][ T8419] BUG: KCSAN: data-race in memcpy_and_pad / trc_wait_for_one_reader [ 152.252166][ T8419] [ 152.254507][ T8419] write to 0xffff88810ac2465c of 4 bytes by task 28 on cpu 1: [ 152.259153][ T8426] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1621: mark_inode_dirty error [ 152.261977][ T8419] trc_wait_for_one_reader+0x283/0x3c0 [ 152.274014][ T8420] syz.3.1619: attempt to access beyond end of device [ 152.274014][ T8420] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.278717][ T8419] check_all_holdout_tasks_trace+0xcb/0x4b0 [ 152.278754][ T8419] rcu_tasks_wait_gp+0x3fa/0x530 [ 152.278778][ T8419] rcu_tasks_one_gp+0x7f3/0x8e0 [ 152.307837][ T8419] rcu_tasks_kthread+0xf7/0x110 [ 152.312807][ T8419] kthread+0x489/0x510 [ 152.314462][ T8426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1621: corrupted inode contents [ 152.316895][ T8419] ret_from_fork+0x11f/0x1b0 [ 152.316922][ T8419] ret_from_fork_asm+0x1a/0x30 [ 152.316949][ T8419] [ 152.340313][ T8419] read to 0xffff88810ac24200 of 3264 bytes by task 8419 on cpu 0: [ 152.348117][ T8419] memcpy_and_pad+0x48/0x80 [ 152.352628][ T8419] arch_dup_task_struct+0x2c/0x40 [ 152.357659][ T8419] dup_task_struct+0x83/0x6a0 [ 152.362356][ T8419] copy_process+0x399/0x2000 [ 152.366970][ T8419] kernel_clone+0x16c/0x5c0 [ 152.371501][ T8419] __se_sys_clone3+0x1c2/0x200 [ 152.376278][ T8419] __x64_sys_clone3+0x31/0x40 [ 152.380974][ T8419] x64_sys_call+0x1fc9/0x2ff0 [ 152.385668][ T8419] do_syscall_64+0xd2/0x200 [ 152.390198][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.396115][ T8419] [ 152.398436][ T8419] Reported by Kernel Concurrency Sanitizer on: [ 152.404587][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.3.1619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.414313][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.424385][ T8419] ================================================================== [ 152.441182][ T8433] loop5: detected capacity change from 0 to 512 [ 152.446889][ T8426] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1621: mark_inode_dirty error [ 152.467440][ T8430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.476274][ T8426] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1621: Failed to acquire dquot type 0 [ 152.480321][ T8430] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.514510][ T8420] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 152.522453][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1619'. [ 152.532212][ T8426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1621: corrupted inode contents [ 152.533526][ T8420] batman_adv: batadv0: Adding interface: veth1_vlan [ 152.550913][ T8420] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.574878][ T8426] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1621: mark_inode_dirty error [ 152.577227][ T8420] batman_adv: batadv0: Interface activated: veth1_vlan [ 152.589881][ T8433] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 152.626847][ T8433] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.648177][ T8426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1621: corrupted inode contents [ 152.665380][ T8433] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1623: corrupted inode contents [ 152.689007][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.707147][ T8433] EXT4-fs (loop5): Remounting filesystem read-only [ 152.713931][ T8426] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1621: mark_inode_dirty error [ 152.744086][ T8433] EXT4-fs (loop5): 1 truncate cleaned up [ 152.750186][ T268] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 152.760750][ T268] __quota_error: 141 callbacks suppressed [ 152.760767][ T268] Quota error (device loop5): write_blk: dquota write failed [ 152.774028][ T268] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 152.784099][ T268] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 152.794635][ T268] Quota error (device loop5): write_blk: dquota write failed [ 152.802045][ T268] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 152.821778][ T8426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1621: corrupted inode contents [ 152.835379][ T268] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 152.845662][ T268] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 152.854858][ T268] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 152.864833][ T8426] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 152.865256][ T8433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.874920][ T8426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1621: corrupted inode contents [ 152.897881][ T8426] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1621: mark_inode_dirty error [ 152.915835][ T8426] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 152.937360][ T8426] EXT4-fs (loop0): 1 truncate cleaned up [ 152.943505][ T8426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.957093][ T8426] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.984298][ T29] audit: type=1400 audit(6000000253.731:10605): avc: denied { remount } for pid=8425 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.984407][ T8426] EXT4-fs: Ignoring removed orlov option [ 153.011062][ T8426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.019960][ T8426] EXT4-fs (loop0): can't enable nombcache during remount [ 153.048108][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.126291][ T7920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.